Hacking email accounts doesn't have sex family video clipto be a sophisticated affair.
We are reminded once again of this fact thanks to a report released Friday by the Microsoft Threat Intelligence Center detailing how a group of hackers targeted the email accounts of journalists, government officials, and the campaign of a U.S. presidential candidate. And here's the thing, the bad actors didn't use some fancy 1337computer skills, but rather employed the oldest trick in the book: the password reset.
According to Microsoft, over a 30-day period in August and September of this year, hackers likely affiliated with the Iranian government went after 241 email accounts and successfully compromised four. The MTIC dubbed the group Phosphorous, and explained how the team operated.
"Phosphorous used information gathered from researching their targets or other means to game password reset or account recovery features and attempt to take over some targeted accounts," reads the blog post. "For example, they would seek access to a secondary email account linked to a user’s Microsoft account, then attempt to gain access to a user’s Microsoft account through verification sent to the secondary account."
Importantly, MTIC writes that the four compromised accounts were not tied to the U.S. presidential campaign. But, still, this isn't good.
Password-reset features come in many forms, from questions about where you went to high school or your mother's maiden name to sending a link or code to a secondary email address or phone number. The former opens victims up to attack by anyone who knows how Google works, while the latter makes your primary email only as secure as your linked secondary email or cell phone.
A prominent abuse of this feature came in 2008, when a 20-year-old college student accessed Sarah Palin's Yahoo email account. He used information like Palin's ZIP code and birthday to reset her account password and gain access to the email account.
"While the attacks we’re disclosing today were not technically sophisticated," explain MTIC, "they attempted to use a significant amount of personal information both to identify the accounts belonging to their intended targets and in a few cases to attempt attacks."
SEE ALSO: How to find stalkerware on your smartphoneThis warning from Microsoft should serve as a reminder to everyone online that a password alone isn't enough to protect your email — especially if someone is motivated to hack the account. Instead, use multi-factor authentication and for the love of god create a unique password.
Oh, and consider ditching those password-reset questions altogether.
Topics Cybersecurity
White House Holds 4th Annual Vesak Celebration; BCA Participates
No, Mike Pence’s website has not been hacked. Please take a deep breath.
'Instaception' is the coolest new makeup trend on Instagram
Parrot tells firefighter to 'f*ck off' during rescue attempt
JANM to Present Traveling Exhibition devoted to Miki Hayakawa, Hisako Hibi, Miné Okubo
How Donald Trump drained the fun out of online conspiracy theories
All the best queer memes inspired by Nintendo
Hey, Trump golf club, what's this cursed vegetable tube on your menu?
SORA Card Goes Live
These hardwerkin' crows are being trained to pick up your trash
RETIREMENT TIPS: Déjà Vu Government Shutdown
Omarosa's new White House recording sounds alarm bells across Twitter
Parrot tells firefighter to 'f*ck off' during rescue attempt
No, Mike Pence’s website has not been hacked. Please take a deep breath.
Transformation Workshop at Far East Lounge
Dr. Pimple Popper on the one thing even she finds disgusting
Trump once referred to Nepal as 'nipple' during a meeting
'Truth isn't truth': Giuliani perfectly sums up 2018
A Starry Night
How one woman learned that her grandpa had become a meme
Apple launches Final Cut Pro and Logic Pro on iPadGoogle Bard announcement: TextWordle today: Here's the answer and hints for May 12All 12 Star Wars movies ranked, from 'A New Hope' to 'Rise of Skywalker'Meta warns Facebook users about malware disguised as ChatGPTWordle today: Here's the answer and hints for May 11'Quordle' today: See each 'Quordle' answer and hints for May 9'The Muppets Mayhem' reveals Animal's origin storyWordle today: Here's the answer and hints for May 10Google Bard announcement: Text The new Mac Mini will also feature Apple's in How to change your background on Google Meet, and why you should Why you shouldn’t buy Apple’s new MagSafe Duo charger How to eat sustainably: Foods that damage our climate the most Virgin Hyperloop passes first test with human passengers Save 20% on the Vuori sweatpants you will live in Got a PlayStation 5? Here are the first settings you need to tweak. 'Bugsnax' is more perfectly timed for 2020 than anyone realized What 'The Crown' Season 4 gets wrong about the Troubles in Northern Ireland PS5 'Spider
0.1459s , 14301.109375 kb
Copyright © 2025 Powered by 【sex family video clip】Report: Hackers use simple trick to target U.S. presidential campaign and government officials,Global Hot Topic Analysis
