Threat Intelligence Brief
Curated summary with source attribution
Source: rescana.com
Threat Risk: Medium
Victim: Levi Strauss & Co.
Incident: A social engineering attack led to the compromise of three employee computers and the theft of corporate data.
Impact: Unspecified corporate data was exfiltrated, though no consumer data was compromised and operations remained stable.
Attacker: Unidentified threat actors (potential link to UNC6671)
Analysis: Attackers bypassed technical controls by manipulating three employees into granting access to their corporate computers. Although corporate data was exfiltrated, the breach was contained before impacting consumer data or business operations. The incident reflects a broader trend of identity-based attacks targeting the retail sector through vishing and AiTM phishing.
Recommendations: Deploy phishing-resistant MFA, such as FIDO2 security keys, to thwart credential harvesting.; Enhance employee security awareness training specifically focused on vishing and social engineering tactics.; Implement stricter identity verification protocols for IT help desk and support interactions.
Source: Rescana
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source