The roundup describes real social-engineering incidents: a phishing email that led an employee to enter credentials on a fake Microsoft 365 login page, and a wave of voice-phishing attempts against major hedge funds using voice-mimicking technology. Both incidents show practical lures that can be recreated for security awareness simulations.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: one click on a “new business contact” email, and your entire mailbox is wide open. That’s what hit IEH Corporation: a phishing email posing as a prospective business contact, leading to a fake Microsoft 365 login where the user typed their password, letting someone quietly read emails, purchase orders, even engineering files. Now add this twist: funds like Two Sigma and Point72 are getting phone calls where the voice sounds exactly like a senior leader, because it’s being mimicked, to pressure staff into granting access or sharing data. The voice sounds right, but the caller isn’t. Your move: if a new contact email or a phone request sends you to a login or asks for access, stop and use your own route, type our Microsoft 365 or SSO URL yourself or call back on a known number before you do anything.
A phone-first extortion campaign targeted dozens of major U.S. financial firms by calling employees and posing as corporate help-desk staff. Victims were pushed to “update” passkeys/MFA and sent to fake login pages; attackers captured passwords and MFA codes in real time to take over accounts and…
A criminal group tracked as UNC6671 called employees while pretending to be their company IT helpdesk, creating urgency around “mandatory” security changes. Victims were directed to lookalike login pages to “enable passkeys” or “update MFA,” allowing attackers to steal passwords and capture…
A ransom-focused hacking group targeted major U.S. financial and other firms by calling employees on their personal phones while impersonating the company help desk. Victims were pushed to “update passkeys or multifactor authentication” and sent to look‑alike websites designed to steal passwords…
This roundup describes real-world social engineering, including phishing emails that impersonate ChatGPT billing to steal payment card data and a convicted attacker who posed as Snapchat support to trick people into handing over login codes. The common theme is impersonation of trusted brands to…
North Korea-linked BlueNoroff is using fake Zoom and Microsoft Teams meeting pages shared from hijacked trusted contacts (often via Telegram) to trick victims into “updating” Zoom/Teams and running malicious commands. The phishing kit also fingerprints the victim’s browser to identify installed…
The article reports real-world social engineering operations, including a hotel Wi‑Fi campaign that pushed fake updates and device-code phishing to steal Microsoft 365 access. It also describes an alleged Microsoft Entra vishing campaign tied to data theft claims at Brinks Home, reinforcing the…
