Researchers studying cybersecurity are drawing attention to a novel kind of credential phishing attempt that makes sure the stolen data is linked to legitimate online accounts.
Cofense has dubbed the approach precision-validating phishing, claiming that it uses real-time email validation to ensure that the phony login screens are only shown to a limited number of high-value targets.
Since the threat actors simply interact with a pre-harvested list of legitimate email accounts, this strategy not only increases their chances of gaining useable credentials, according to the business.
In contrast to “spray-and-pray” credential harvesting attacks, which usually entail sending out large quantities of spam emails in an attempt to indiscriminately capture victims’ login credentials read more about Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.