CyberWire Daily
Phishing threats unleashed.
Feb 13, 2024
Andrew Scott, Associate Director of China Operations at CISA, and Brett Leatherman, Section Chief for Cyber at the FBI, discuss Chinese threat actor Volt Typhoon and living off the land techniques. Topics include phishing attacks on Azure accounts, healthcare cybersecurity bill, industrial vulnerabilities, gender parity in tech, and online obituary spam.
36:19
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Attackers are targeting Microsoft Azure accounts with sophisticated phishing techniques, compromising data and financial assets.
- Bank of America warns customers of a data breach caused by the LockBit ransomware gang, affecting a service provider and exposing personal information of thousands of individuals.
Deep dives
Sophisticated Phishing Attacks Target Azure Accounts
A recent campaign is targeting Microsoft Azure accounts, using sophisticated phishing techniques to compromise the accounts and gain access to data and financial assets. The attackers secure the compromised accounts with multi-factor authentication, hindering victims' ability to change passwords or review access. They engage in data exfiltration, internal and external phishing, financial fraud attempts, and create mailbox rules to hide their activities. The attackers leverage proxies, compromised domains, and data hosting services to obfuscate their operations. Organizations are advised to monitor user agents and source domains for signs of compromise and employ security defenses against initial and post-compromised activities.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
