The FBI alerted American retail organizations to the fact that, since at least January 2024, a financially motivated hacking group has been using phishing attempts to target personnel in their gift card departments.
Tracked as Storm-0539, this hacker organization uses a sophisticated phishing kit to get around multi-factor authentication on the personal and work mobile devices of retail department staff.
Once an employee’s account has been accessed, the attackers pivot towards compromised accounts associated with this particular portfolio and travel laterally through the network, attempting to locate the gift card business process.
Apart from purloining the login credentials of employees in the gift card department, their activities also involve obtaining secure shell (SSH) passwords and keys read more FBI warns of gift card fraud ring targeting retail companies.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.