The high-profile breach of Indian IT giant Wipro earlier this year was but one part in a series of campaigns carried out by a set of money-driven hackers over the last three years, researchers said Wednesday. The scheme, as documented by cybersecurity company RiskIQ, covered essentially the whole ecosystem of companies involved in gift-card transactions – from distributors to payment processors to IT providers, with shopping-industry giants Best Buy, Costco, and Sears among the organizations targeted with phishing emails. The hackers employed open-source software whose use is difficult to attribute, and they even turned an anti-phishing training platform on its head to target organizations, the researchers said. “RiskIQ has identified at least five distinct attack campaigns based off analysis of the actor-owned infrastructure,” the San Francisco-based company said in a report. RiskIQ emphasized that the organizations listed were targeted but not necessarily breached, by the hackers. However, the report notes, the hackers’ “operational tempo increased to ramp […]
The post Gift-card scheme went well beyond Wipro hack, RisKIQ reports appeared first on CyberScoop.
Continue reading Gift-card scheme went well beyond Wipro hack, RisKIQ reports→