Home > slashdot > New “Spear Phishing” Attacks Target IT Admins

New “Spear Phishing” Attacks Target IT Admins

March 2nd, 2010 03:18 admin Leave a comment Go to comments

snydeq writes “A new breed of ‘spear phishing’ aimed at IT admins is making the rounds. The emails, containing no obvious malicious links, are fooling even the savviest of users into opening up holes in their company’s network defenses. The authentic-looking emails, which often include the admin’s complete name or refer to a real project they are working on, are the product of tactical research or database hacks and appear as if having been sent by the company’s hosting provider. ‘In each case, the victim remembered getting a similar sort of email message when they first signed on with a service and, thus, thought the bogus message was legitimate — especially because their cloud/hosting providers keep bragging about all the new data centers they’re continuing to bring online.’ The phishing messages often include instructions for opening up mail servers to enable spam relaying, to disable their host-based firewalls, and to open up unprotected network shares. Certainly fodder for some bone-headed mistakes on the part of admins, the new attack ‘makes the old days of hoax messages that caused users to delete legitimate operating system files seem relatively harmless.’”

Source: New “Spear Phishing” Attacks Target IT Admins

Related Articles:

  1. Mobile Users More Vulnerable To Phishing Attacks
  2. Spear Phishing Campaign Hits Dozens of Chemical, Defense Firms
  3. The Golden Hour of Phishing Attacks
  4. Twitter Hit By BZPharma LOL Phishing Attack
  5. Google Goes On Offensive vs. JavaScript Attacks
blog comments powered by Disqus