Phishers who hit Twilio and Cloudflare stole 10k credentials from 136 others

Found 95 days ago at Arstechnica

Two weeks ago, Twilio and Cloudflare detailed a phishing attack so methodical and well orchestrated that it tricked employees from both companies into revealing their account credentials. In the case of Twilio, the attack overrode its 2FA protection and gave the threat actors access to its internal systems. Now, researchers have unearthed evidence the attacks were part of a massive phishing...

Read the article at Arstechnica

More Developer News