Spear phishing attack targets HR and payroll systems

Payday should be a pleasurable time of the month, but thanks to a new spear phishing campaign, some employees are losing their pay checks to cybercriminals. Email defense specialist Vade Secure uncovered the attack in which criminals initiate an email conversation with HR staff to get them to change bank details for receiving direct payroll payments. Early versions of these attacks used emails to employees requesting that they log in to the HR portal to either view a private email or view/make changes to their account. The links, of course, led to phishing sites where employees inadvertently disclosed their login… [Continue Reading]