In 2020 Toll Group went twice through a ransomware attack, now Sophos which acted as a response and investigation team for the events, announces that the entry point was an account of an employee who died but remained active in the system.

Nefilim Ransomware Attack Used “Ghost” Credentials.

According to the report by Sophos, the Nefilim group responsible for the infidelity attack that was on the company’s network for about a month without the defense systems identifying suspicious activity, the user used by the attack group belonged to a deceased employee but his account was locked/deleted due to being integrated into various services. 

Read more about Examples and Numbers of Social Engineering attacks  ›

Save Your Company from Social Engineering Attacks Like that

 

Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers

Recently Published on our Blog

What is double extortion ransomware?

Double extortion attacks are a type of ransomware attack with higher stakes. In a regular ransomware attack, a hacker will infiltrate a company’s network, encrypt the data and demand a ransom to release it. This causes disruption as, whilst their systems and data are...

read more

Why phishing is becoming a growing threat

Phishing attacks are nothing new, in fact they’re one of the most typical social engineering techniques cyber criminals use to get confidential information from people. And these types of attacks have been on the rise. In Q3 2023, more than 493.2m phishing emails were...

read more

Deepfakes: A threat to democracy?

2024 is a record year for elections, with more than 40 countries, representing more than 40% of the world’s population (and a much higher proportion of global GDP), going to vote. At any time, elections can be at risk of interference - either from internal malicious...

read more