Twilio Reveals Further Security Breach

Conversation tool company Twilio has uncovered that the exact destructive actors accountable for a July breach at the agency also managed to compromise an employee a thirty day period prior, exposing shopper info.

The revelation was buried in a prolonged incident report up-to-date and concluded yesterday.

The report focuses largely on the July–August incident in which attackers sent hundreds of “smishing” textual content messages to the mobile telephones of recent and former Twilio workers.

Posing as Twilio or other IT directors, they tricked some recipients into clicking on password reset back links primary to phony Okta login webpages for Twilio.

After harvested, these qualifications were being applied to access inner Twilio administrative instruments and applications and, in convert, client details.

Even so, the exact actors were also liable for an additional phishing attempt, this time carried out above the phone, the report unveiled.

“Our investigation also led us to conclude that the exact destructive actors very likely were being responsible for a brief security incident that happened on June 29, 2022. In the June incident, a Twilio staff was socially engineered by voice phishing (or ‘vishing’) to deliver their qualifications, and the destructive actor was able to accessibility client get hold of information and facts for a constrained number of buyers,” the detect go through.

“The risk actor’s entry was identified and eradicated inside of 12 several hours. Clients whose information was impacted by the June incident were notified on July 2, 2022.”

A whole of 209 prospects and 93 Authy end consumers ended up impacted by the incidents, according to Twilio.

The assaults have been traced by researchers to a wider marketing campaign by menace actor “0ktapus” which utilized similar phishing strategies against staff at other businesses which include Cloudflare.

The incident highlights both the persistent menace of social engineering to company end users and the increasing concentration threat actors are inserting on compromising strategic technology suppliers more up the source chain.

Some parts of this article are sourced from:
www.infosecurity-journal.com