Clorox was one of several major companies hit in August 2023 by the hacking group dubbed Scattered Spider, which specializes in tricking IT help desks into handing over credentials.
  • sugar_in_your_tea@sh.itjust.worksEnglish
    11·
    2 months ago

    Exactly. Many breaches follow this pattern:

    1. Learn the name and some basic details about the secretary or something
    2. Call corporate tech support asking for a password reset claiming to be the secretary
    3. Access important stuff since secretaries have a surprising amount of access

    Replace “secretary” with some other relevant individual who has a surprising amount of access and wouldn’t attract attention.