Skip to content

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

It has recently been discovered that over 130 companies have been victims of a phishing campaign that spoofed a multi-factor authentication system. This type of attack is a major security threat, as it can potentially access the data and information of hundreds of companies and individuals.

The campaign was launched in May of this year and targeted a number of different companies and industries, including finance, media, and technology firms. It was discovered that the attackers were using a phishing technique known as “domain shadowing” to spoof the multi-factor authentication system. This involves using a legitimate domain name to send emails to users and then redirecting them to a malicious website.

The attackers used a variety of tactics to make the emails appear legitimate. They used the same email addresses and domain names as the companies they were targeting, and they also included company logos and other images in the emails to make them look more official. Additionally, they used language similar to that used by the companies in order to make the emails seem more authentic.

The attackers were able to gain access to the victim’s data and information by sending emails with malicious links. These links were able to bypass the multi-factor authentication system and allowed the attackers to gain access to the data and information of the victims.

Fortunately, the attack was quickly detected and stopped. However, the attackers were able to get away with a large amount of data and information, and it is possible that the victims may still be at risk. To prevent this type of attack from happening again, companies should ensure that their multi-factor authentication systems are secure and up-to-date.

Key Points:

• Over 130 companies have been victims of a phishing campaign that spoofed a multi-factor authentication system.
• The attackers used a variety of tactics to make the emails appear legitimate.
• The attackers were able to gain access to the victim’s data and information by sending emails with malicious links.
• The attack was quickly detected and stopped, however, the attackers were able to get away with a large amount of data and information.
• Companies should ensure that their multi-factor authentication systems are secure and up-to-date in order to prevent this type of attack from happening again.

Leave a Reply

Your email address will not be published. Required fields are marked *