Twilio employees aren\u2019t the only individuals recently targeted by a sophisticated phishing attack.<\/p>\n
Cloudflare on Tuesday said three employees fell for a phishing attack with very similar characteristics but, unlike Twilio, the content delivery network was able to thwart intrusion.<\/p>\n
\u201cThis was a sophisticated attack targeting employees and systems in such a way that we believe most organizations would likely be breached,\u201d Cloudflare CEO Matthew Prince wrote in a blog post authored alongside engineers Daniel Stinson-Diess and Sourov Zaman.<\/p>\n
Cloudflare employees began receiving phishing text messages pointing to a spoofed Cloudflare Okta login page more than two weeks before Twilio employees were targeted with similar messages. At least 76 Cloudflare employees received text messages on their personal and work phones in less than a minute, the company said.<\/p>\n
Some employees\u2019 family members were targeted as well.<\/p>\n
Cloudflare said it found no sign of compromise when it reviewed access logs to its employee directory, a detail that further illustrates a heightened level of advanced tactics and determination mobilized by the threat actors behind this attack.<\/p>\n
Source: Cybersecurity Dive<\/p>\n