In 2020 Toll Group went twice through a ransomware attack, now Sophos which acted as a response and investigation team for the events, announces that the entry point was an account of an employee who died but remained active in the system.
Nefilim Ransomware Attack Used “Ghost” Credentials.
According to the report by Sophos, the Nefilim group responsible for the infidelity attack that was on the company’s network for about a month without the defense systems identifying suspicious activity, the user used by the attack group belonged to a deceased employee but his account was locked/deleted due to being integrated into various services.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
Top World Cup-related phishing attacks
Big events are always a target for phishing attacks, as it means there will be lots of people willing to pay a high price to ensure they don’t miss out on a ticket. This year’s football World Cup in Qatar is no different. In the run-up to and during the...
Mitigating the impact of fake social media accounts
Whilst social media is a vital tool for brands to communicate with customers, companies need to consider the impact these platforms can have on their business. They hold the power to change the rules of engagement without warning, which can lead to unintended...
Could cybersecurity complacency be costing you?
Everyone knows that cybersecurity is important, particularly as cyber criminals are using increasingly sophisticated methods to hack into large company networks. But it can be frustrating when you can’t use a certain app that would make team communication easier, and...