Scarinci Hollenbeck, LLC
The Firm
201-896-4100 info@sh-law.comFirm Insights
Author: Scarinci Hollenbeck, LLC
Date: September 10, 2020
The Firm
201-896-4100 info@sh-law.comHackers continue to target teleworking employees, trying to capitalize on cyber weaknesses that may arise from companies having a large and relatively untested remote workforce. According to the Federal Bureau of Investigation (FBI) and U.S. Cybersecurity and Infrastructure Security Agency (CISA), the latest COVID-19-related cyber threat comes from voice phishing or “vishing” attacks.
According to the FBI/CISA Alert, hackers, who have been perpetrating the schemes since July, have registered domains and created phishing pages duplicating a company’s internal VPN login page, also capturing two-factor authentication (2FA) or one-time passwords (OTP). They have also obtained certificates for the domains they registered and used a variety of domain naming schemes, including Secure Sockets Layer (SSL).
To help carry out the attacks, cybercriminals have then compiled dossiers on the employees at the specific companies using mass scraping of public profiles on social media platforms, recruiter and marketing tools, publicly available background check services, and open-source research. The information collected about the employees includes: name, home address, personal cell/phone number, position at company, and duration at company.
According to the FBI, the first iteration of the cyber scheme involved using Voice Over Internet Protocol (VoIP) numbers to call employees on their personal cellphones. Cybercriminal then started incorporating spoofed numbers of other offices and employees in the victim company. The actors used social engineering techniques and, in some cases, posed as members of the victim company’s IT help desk, using their knowledge of the employee’s personally identifiable information—including name, position, duration at company, and home address—to gain the trust of the targeted employee. The targeted employee is then told that a new VPN link would be sent and required their login, including any 2FA or OTP. The cybercriminals then logged the information provided by the employee and used it in real-time to gain access to corporate tools using the employee’s account.
The FBI identifies several steps that businesses can take to avoid falling victim to a vishing attack. They include:
Employees can also play a significant role in thwarting vishing attacks. The FBI recommends that employees:
As we have discussed in prior articles, employees are often a company’s largest cyber risk. With an increasing number of employees now working from home, the threat is even greater. We encourage businesses to thoroughly review their policies and procedures to determine what changes may be needed to strengthen your defenses in light of the influx of cyberattacks targeting remote workers.
If you have any questions or if you would like to discuss the matter further, please contact me, Maryam Meseha, or the Scarinci Hollenbeck attorney with whom you work, at 201-896-4100.
No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.
Corporate transactions can have significant implications for a corporation and its stakeholders. For deals to be successful, companies must act strategically to maximize value and minimize risk. It is also important to fully understand the legal and financial ramifications of corporate transactions, both in the near and long term. Understanding Corporate Transactions The term “corporate […]
Author: Dan Brecher
Ongoing economic uncertainty is forcing many companies to make tough decisions, which includes lowering staff levels. The legal landscape on both the state and federal level also continues to evolve, especially with significant changes to the priorities of the Equal Employment Opportunity Commission (“EEOC”) under the Trump Administration. Terminating an employee is one of the […]
Author: Angela A. Turiano
While filing annual reports may seem like a nuisance, failing to do so can have significant ramifications. These include fines, reputational harm, and interruption of your business operations. In basic terms, “admin dissolution for annual report” means that a company is dissolved by the government. This happens because it failed to submit its annual report […]
Author: Dan Brecher
Antitrust laws are designed to ensure that businesses compete fairly. There are three federal antitrust laws that businesses must navigate. These include the Sherman Act, the Federal Trade Commission Act, and the Clayton Act. States also have their own antitrust regimes. These may vary from federal regulations. Understanding antitrust litigation helps businesses navigate these complex […]
Author: Robert E. Levy
If you’re considering closing your business, it’s crucial to understand that simply shutting your doors does not end your legal obligations. Unless you formally dissolve your business, it continues to exist in the eyes of the law—leaving you exposed to ongoing liabilities such as taxes, compliance violations, and potential lawsuits. Dissolving a business can seem […]
Author: Christopher D. Warren
Contrary to what many people think, corporate restructuring isn’t all doom and gloom. Revamping a company’s organizational structure, corporate hierarchy, or operations procedures can help keep your business competitive. This is particularly true during challenging times. Corporate restructuring plays a critical role in modern business strategy. It helps companies adapt quickly to market changes. Following […]
Author: Dan Brecher
No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.
Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.
Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.
Let`s get in touch!
Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!