WiseSec Offense

09/01/2025

01/29/2025

Imagine that Bob, an employee at a mid-sized corporation, receives an unexpected email one morning. The email, which appears to be from the company’s IT department, warns him that his password is due to expire in 24 hours and he must login to his account via the link in the email immediately to avoid any disruption to his access. Concerned about losing access to his emails, Bob clicks on the prominently displayed “Reset Password” link in the email.

The link redirects him to a login page that closely resembles the company’s official login portal. Without hesitation, Bob enters his current username and password, believing he is following standard procedure. After submitting his credentials, the page redirects him to his mailbox.

However, unknown to Bob, the email was a sophisticated phishing attempt, and he has just provided his credentials to an attacker using an phishing attack. The threat actor captures his email address and password, and MFA code, along with the session tokens. With the session tokens, they gain unimpeded access to Bob’s email account, potentially compromising sensitive corporate data and causing significant security breaches.

What should Bob do now?

10/31/2024

Now this would be down right scary! Happy Halloween from the staff at WiseSec Offense!

10/22/2024

This is awesome news for Sophos and Secureworks!

Sophos and Secureworks, two global leaders of innovative security solutions for defeating cyberattacks, today announced a definitive agreement for Sophos to acquire Secureworks.

07/10/2024

I Got Accused of Posting Hate Speech...

Free Security Awareness Training • Simply Explained • Access Anywhere • Follow Progress

07/09/2024

Can you imagine getting a email stating you were being let go from your job due to economic downturn? Watch the below video of how scammers are doing exactly that.

Free Security Awareness Training • Simply Explained • Access Anywhere • Follow Progress

07/04/2024

Happy 4th of July!

01/20/2024

Is your office or IT support using TeamViewer? You may want to consider checking your systems for this compromise reported by Bleeping Computers and Huntress.

https://www.bleepingcomputer.com/news/security/teamviewer-abused-to-breach-networks-in-new-ransomware-attacks/

12/15/2023

Lego's being funny!