ZipLine attack uses 'Contact Us' forms, White House butler pic to invade sensitive industries Cybercriminals are targeting critical US manufacturers and supply-chain companies, looking to steal sensitive IP and other data while deploying ransomware. Their attack involves a novel twist on phishing — and a photo of White House butlers. Instead of emailing a malicious link in an unsolicited email, the miscreants initiate …
Once again, the problem is humans. It doesn't matter how many tricky emails get through to me, I'm not going to bite. I don't "trust" things just because they come through my contact forms (whitelisted, local) v.s. sneaking through my spam filters.
Sure, you have meeting details in a password protected zip file... that's legit ( /sarcasm )
Fix your employees.
But if someone has been mailing a company for months, going back and forwards and the says we wish to do business, were going to send over some confidential files and we'll send the password later. Do you not open it? Or do you only send highly confidential documents unencrypted so the other party doesn't have to unlock them?
My last company had over 500 people that dealt with these sort of enquiries day in day , each sales person may be dealing with multiple potential new clients each week.
Do you refuse to open ANY files?
Or do you right click, scan the file, seems ok then open it?
There's your small world, then the bigger real world.
>> But if someone has been mailing a company for months
Agreed. This is very sneaky and nasty, akin to a long firm fraud. Bob builds up the trust, then in comes a supposed invoice or purchase order or whatever in a zip file from Bob.
What is the solution? Sandboxes for every incoming file?
