Cisco stated that one in all its representatives fell sufferer to a voice phishing assault that allowed menace actors to obtain profile info belonging to customers of a third-party buyer relationship administration system.
“Our investigation has decided that the exported information primarily consisted of fundamental account profile info of people who registered for a consumer account on Cisco.com,” the corporate disclosed. Info included names, group names, addresses, Cisco assigned consumer IDs, electronic mail addresses, cellphone numbers, and account-related metadata corresponding to creation date.
Et tu, Cisco?
Cisco stated that the breach didn’t expose prospects’ confidential or proprietary info, password information, or different delicate info. The corporate went on to say that investigators discovered no proof that different CRM cases have been compromised or that any of its services or products have been affected.
Phishing assaults, notably these counting on voice calls, have emerged as a key technique for ransomware teams and different kinds of menace actors to breach defenses of a number of the world’s most fortified organizations. In some instances, the menace actors behind these assaults used a number of types of communication, together with electronic mail, voice calls, push notifications, and textual content messages. They usually dedicate appreciable analysis to the assaults to make them in line with authentic authentication strategies used internally by the goal. A number of the firms efficiently compromised in such assaults embody Microsoft, Okta, Nvidia, Globant, Twilio, and Twitter.
Cisco stated that one in all its representatives fell sufferer to a voice phishing assault that allowed menace actors to obtain profile info belonging to customers of a third-party buyer relationship administration system.
“Our investigation has decided that the exported information primarily consisted of fundamental account profile info of people who registered for a consumer account on Cisco.com,” the corporate disclosed. Info included names, group names, addresses, Cisco assigned consumer IDs, electronic mail addresses, cellphone numbers, and account-related metadata corresponding to creation date.
Et tu, Cisco?
Cisco stated that the breach didn’t expose prospects’ confidential or proprietary info, password information, or different delicate info. The corporate went on to say that investigators discovered no proof that different CRM cases have been compromised or that any of its services or products have been affected.
Phishing assaults, notably these counting on voice calls, have emerged as a key technique for ransomware teams and different kinds of menace actors to breach defenses of a number of the world’s most fortified organizations. In some instances, the menace actors behind these assaults used a number of types of communication, together with electronic mail, voice calls, push notifications, and textual content messages. They usually dedicate appreciable analysis to the assaults to make them in line with authentic authentication strategies used internally by the goal. A number of the firms efficiently compromised in such assaults embody Microsoft, Okta, Nvidia, Globant, Twilio, and Twitter.
