Two-Factor Authentication Phishing From Iran
https://citizenlab.org/2015/08/iran_two_factor_phishing/
This report describes an elaborate phishing campaign
against targets in Iran's diaspora, and at least one Western
activist. The ongoing attacks attempt to circumvent the extra
protections conferred by two-factor authentication in Gmail, and
rely heavily on phone-call based phishing and "real time" login
attempts by the attackers. Most of the attacks begin with a
phone call from a UK phone number, with attackers speaking in
either English or Farsi. The attacks point to extensive
knowledge of the targets' activities, and share infrastructure
and tactics with campaigns previously linked to Iranian threat
actors. We have documented a growing number of these attacks,
and have received reports that we cannot confirm of targets and
victims of highly similar attacks, including in Iran. The
report includes extra detail to help potential targets recognize
similar attacks. The report closes with some security
suggestions, highlighting the importance of two-factor
authentication.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
