In 2020 Toll Group went twice through a ransomware attack, now Sophos which acted as a response and investigation team for the events, announces that the entry point was an account of an employee who died but remained active in the system.

Nefilim Ransomware Attack Used “Ghost” Credentials.

According to the report by Sophos, the Nefilim group responsible for the infidelity attack that was on the company’s network for about a month without the defense systems identifying suspicious activity, the user used by the attack group belonged to a deceased employee but his account was locked/deleted due to being integrated into various services. 

Read more about Examples and Numbers of Social Engineering attacks  ›

Save Your Company from Social Engineering Attacks Like that

 

Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers

Recently Published on our Blog

WhatsApp payments: How secure are they?

WhatApp recently launched an in-chat payment option in Singapore following successful roll-outs in both India and Brazil. And, given how widely used WhatsApp is, it’s likely that it will be launched in other regions in the future. However, there are security concerns...

read more

3 cybersecurity challenges around hybrid working

Although some companies are requesting their staff to return to the office, it is unlikely that there will be a complete return to full-time office working. Today, in the US around 25% of work is done remotely - a 500% increase compared to 2019. And whilst hybrid...

read more

4 of the most well-known crypto-ransomware

The use of crypto-ransomware - a specific type of malware that encrypts files on the victim’s computer until a ransom is paid - is on the rise. In 2022 alone, ​​organisations globally detected 493.33 million ransomware attacks. Below are some of the most well-known...

read more