this post was submitted on 23 Jul 2025
24 points (100.0% liked)

Cybersecurity

30 readers
37 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Rules

Community Rules

founded 2 years ago
MODERATORS
 

Seriously? WTF?

“Cognizant was not duped by any elaborate ploy or sophisticated hacking techniques,” according to a copy of the lawsuit reviewed by Reuters. “The cybercriminal just called the Cognizant Service Desk, asked for credentials to access Clorox’s network, and Cognizant handed the credentials right over.”

https://www.nbcnews.com/business/business-news/lawsuit-says-clorox-hackers-got-passwords-simply-asking-rcna220313

#CyberSecurity #Ransomware #Hacking #SocialEngineering

you are viewing a single comment's thread
view the rest of the comments
[–] MadMadBunny@lemmy.ca 8 points 3 days ago (1 children)
[–] Tar_alcaran@sh.itjust.works 10 points 3 days ago

It's not even "pretend to be the county password Inspector". It's literally just "hi, can I have access?"