Operation Fake KickOff: Attackers Abuse Recruiters and SaaS to Harvest Work Credentials
Brief
Intel 471 investigated an ongoing, multi-stage phishing operation that systematically abuses legitimate software-as-a-service (SaaS) sales and marketing, and cloud platforms to orchestrate corporate credential theft.