A large-scale phishing campaign is currently targeting organizations in the United States, utilizing fake event invitations to steal credentials, intercept One-Time Passwords (OTPs), and deploy legitimate Remote Monitoring and Management (RMM) tools. According to researchers at ANY.RUN, this campaign presents a significant challenge for security teams because its early stages closely mimic routine user behavior, […]
The post Credential Theft Campaign Uses Fake Invitations To Target U.S. Firms appeared first on Cyber Security News.