In 2020 Toll Group went twice through a ransomware attack, now Sophos which acted as a response and investigation team for the events, announces that the entry point was an account of an employee who died but remained active in the system.
Nefilim Ransomware Attack Used “Ghost” Credentials.
According to the report by Sophos, the Nefilim group responsible for the infidelity attack that was on the company’s network for about a month without the defense systems identifying suspicious activity, the user used by the attack group belonged to a deceased employee but his account was locked/deleted due to being integrated into various services.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
1.7 Billion Passwords Dumped – Why 2025 Just Became a Turning Point for Cybersecurity
🔐 1.7 Billion Passwords Just Got Dumped Online
🚨 One of the largest password leaks in history just hit – and it’s not old data.
🔥 1.7 billion recent, active passwords collected via infostealer malware have been dumped, exposing users and enterprises alike to massive credential-based attacks.
🧠 What’s scarier? These aren’t just usernames and passwords. They’re fully packaged by cybercriminals into AI-powered dashboards ready to launch phishing, credential stuffing, and social engineering attacks in minutes.
📉 Many of these passwords are tied to enterprise logins, SaaS platforms, and cloud tools – meaning one exposed employee account can lead to full-scale breaches.
🛡️ AUMINT.io helps companies get ahead by simulating these attacks internally, training teams, and identifying the exact weak spots infostealers exploit.
💥 This isn’t the time to play defense. It’s time to go proactive.
👉 Book your free strategy session to see how AUMINT.io can secure your most vulnerable access points.
#CyberSecurity #Infostealer #Passwords #Phishing #CISO #ITSecurity #AUMINT #SocialEngineering #DataBreach #HumanFactor
Agentic AI Is Reshaping Cyber Threats – Are You Ready for the 2027 Tipping Point?
🤖 Agentic AI: The New Frontier in Cyber Threats
Cybercriminals are increasingly leveraging AI agents to automate and accelerate cyberattacks. Gartner predicts that by 2027, AI will halve the time it takes to exploit compromised accounts.
These AI-driven agents can scan vast data sets, identify exposed accounts, harvest credentials, and exploit vulnerabilities with unprecedented efficiency. This rapid automation leaves organizations with a shrinking window to detect and respond to threats.
Moreover, attackers are using AI to conduct highly personalized phishing campaigns, utilizing deepfake technology to mimic behaviors and visual identities of trusted individuals. These sophisticated tactics make traditional detection methods obsolete, as malicious communications become increasingly indistinguishable from legitimate ones.
At AUMINT.io, we offer AI-driven solutions to detect and mitigate these evolving threats. Our real-time simulations and training programs are designed to enhance your organization’s resilience.
👉 Book your free strategy session to learn how AUMINT.io can fortify your cybersecurity posture.
#CyberSecurity #AI #AgenticAI #Phishing #Deepfake #AUMINT #FraudPrevention #HumanElement
When Trust Becomes a Trojan Horse: How Cybercriminals Are Weaponizing File-Sharing Platforms
📁 Legitimate File-Sharing Services: The New Frontier for Cyber Threats
Cybercriminals are increasingly leveraging trusted platforms like GetShared to bypass traditional email security measures. A recent incident involved a phishing email that mimicked a GetShared notification, claiming to share a file named “DESIGN LOGO.rar.” The email included a message inquiring about pricing and delivery timelines, creating a facade of legitimacy. However, red flags such as the mismatch between the file name and the message content, and the sender’s email domain linked to known scam activities, revealed its malicious intent.
These attacks exploit the inherent trust in legitimate services, making them less likely to be flagged by security filters. Employees may inadvertently engage with such emails, leading to potential breaches.
At AUMINT.io, we offer AI-driven solutions to detect and mitigate these evolving threats. Our real-time simulations and training programs are designed to enhance your organization’s resilience.
👉 Book your free strategy session to learn how AUMINT.io can fortify your cybersecurity posture.
#CyberSecurity #Phishing #SocialEngineering #AUMINT #FraudPrevention #HumanElement