In 2020 Toll Group went twice through a ransomware attack, now Sophos which acted as a response and investigation team for the events, announces that the entry point was an account of an employee who died but remained active in the system.
Nefilim Ransomware Attack Used “Ghost” Credentials.
According to the report by Sophos, the Nefilim group responsible for the infidelity attack that was on the company’s network for about a month without the defense systems identifying suspicious activity, the user used by the attack group belonged to a deceased employee but his account was locked/deleted due to being integrated into various services.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
Should your business be using a VPN?
Virtual Private Networks (VPN) have been used by big international companies for years. But, as VPN services become more affordable and easy to use, businesses of all sizes can now use them to enhance online security. What is a VPN? A VPN is an advanced...
How to protect yourself from evil twin attacks
Evil twin attacks usually occur when using public WiFi. With more people working remotely - perhaps at cafes or libraries - the chances of it happening increase. However, it’s not only public WiFi that can be duplicated, your company's guest network can too. This...
How can businesses tackle the spread of misinformation?
The effects of fake news aren’t limited to politics. Disinformation from rumours and coordinated campaigns can threaten companies' reputations and profitability, and even influence financial markets. For example, conspiracy theories around the effects of 5G led...