In 2020 Toll Group went twice through a ransomware attack, now Sophos which acted as a response and investigation team for the events, announces that the entry point was an account of an employee who died but remained active in the system.
Nefilim Ransomware Attack Used “Ghost” Credentials.
According to the report by Sophos, the Nefilim group responsible for the infidelity attack that was on the company’s network for about a month without the defense systems identifying suspicious activity, the user used by the attack group belonged to a deceased employee but his account was locked/deleted due to being integrated into various services.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
The Human Factor in Cybersecurity 2025 – Why People Are the Weakest Link
🛡 Human Error: Cybersecurity’s Biggest Threat
Humans are the weakest link in 2025 cybersecurity. 😱
Cybercriminals exploit trust, urgency, and authority to bypass technical defenses. 💡
Generative AI has made attacks ultra convincing. Emails, messages, and even voice calls now mimic executives or familiar contacts perfectly. 🧠
Phishing and vishing campaigns trick employees into revealing credentials or approving fraudulent transfers. 💸
Even trained teams can fall victim because attackers combine psychology and tech to create believable scenarios. ⚠️
Organizations must focus on human-centric security. Multi-factor authentication, verification processes, and simulated social engineering exercises are essential. ✅
AUMINT.io helps businesses identify human vulnerabilities and strengthen defenses. Learn how to protect your teams and sensitive data by scheduling a session today here
.
#CISO #HR #ITSecurity #FraudPrevention #SocialEngineering #AUMINT #CyberAwareness #ExecutiveSecurity
The Subtle Snail Recruitment Trap – How Attackers Use Fake HR to Steal Credentials and Persist
🚨 Recruitment-Style Phishing Is the New Front Line
😱 Researchers link an Iran-nexus group to recruitment lures that infected 34 devices across 11 organizations, using fake HR profiles to bait targets.
🧩 The bait looks real: tailored outreach, plausible interviews, and job documents that contain weaponized ZIPs or signed binaries which deploy loaders.
🧠 The payload family MINIBIKE steals credentials, logs keystrokes, and creates persistent backdoors for long-term espionage.
⚠️ These campaigns hide traffic in Azure-hosted C2 and abuse DLL sideloading to evade detection, so standard AV often misses them.
✅ Quick actions: treat unsolicited job attachments as untrusted; verify recruiter emails and LinkedIn profiles; sandbox any job-related archive before opening.
🔁 For security teams – simulate recruitment lures, tighten endpoint rules against DLL sideloading, and monitor cloud egress for anomalous C2.
🔎 SEO note: use keywords like job, recruiter, LinkedIn, credential theft, MINIBIKE to surface this threat to practitioners and hiring teams.
🔒 AUMINT.io helps design simulations and detection playbooks that mirror this recruitment workflow. Book a 15-minute intro and get a tailored risk checklist: https://calendly.com/aumint/aumint-intro
#JobSeekers #CISO #HR #ITSecurity #AUMINT #ThreatIntel #RecruitingSecurity
Job Seekers Beware: LinkedIn Scams Are More Sophisticated Than Ever
🚨 Scammers Are Hunting Job Seekers in 2025
The job market is booming, but scammers are evolving faster. 💥 Losses from employment fraud have skyrocketed, hitting thousands per victim.
💡 Amisha Datta thought she got a transcription job on LinkedIn. A check arrived to buy equipment. She wired the money. The check was fake. Her laptop never arrived.
💡 Brenda Smith, a 56-year-old educator, was promised crypto earnings. She deposited funds to unlock her pay. The scammer disappeared. She lost $15,000.
⚡ Scammers now use AI-generated messages and fake websites, making detection incredibly difficult.
✅ Protect yourself: verify recruiters, treat unsolicited offers cautiously, avoid wiring money, and report suspicious activity immediately.
🔒 AUMINT.io offers resources to help job seekers stay safe, spot scams, and secure their careers. Learn how you can protect yourself and your job search with AUMINT.io by scheduling a session here
.
#JobSeekers #CareerSafety #CyberSecurity #FraudPrevention #LinkedInTips #AUMINT #CISO #HR #ITSecurity