Phishing Example
Infoblox gave an example of a high-profile phishing attack.
The California State Controller’s Office suffered a breach last month after an employee clicked on a suspicious link. As a result, an authorized user gained access to the employee’s email account and sent emails to other employees using the account.
Although the Office responded quickly, it surmised that the threat actor got personal identifiable information (PII) about unclaimed property holders. That includes addresses and social security numbers.
CPO Magazine detailed the event.