… Recently, Mandiant observed data searches, staging, and theft initiated in under an hour. The threat group frequently initializes campaigns using benign, invoice-themed email lures sent from actor-controlled consumer email accounts. …
… Prevention, Detection, and Remediation GTIG recommends defenders implement the following security measures, across all Cloud enterprise platforms, to mitigate this threat: Secure Admin Accounts : Enforce phishing-resistant 2-Step Verification 2SV for enterprise administrator accounts, including thr… …
… 2 PhaaS 2 Furious: The evolution of Chinese-language phishing services : While Russian-speaking threat actors have historically dominated the phishing-as-a-service PhaaS landscape, a rival ecosystem is rapidly growing within the Chinese-language underground. …