A new wave of social media phishing attacks are now using scare tactics to lure victims into sending their logins.
First, a Twitter phishing attack was reported earlier last week. Threat actors would send direct messages to the victims, flagging the account for use of hate speech. They would then be redirected to a fake Twitter Help Center to input their login credentials.
Then, a Discord phishing campaign was discovered by sending user a message from friends and/or strangers accusing the user of sending explicit photos on a server. The message also included a link, and if clicked would then lead to a QR code. This resulted in the account being taken over by the cybercriminals.
These types of attacks are not going away anytime soon. And with the continual remote workforce, there is a higher risk of being targeted through your social networks without the word-of-mouth method you would get at the office from other employees. Get ahead of the curve now with your employees by implementing new-school security awareness training.
Dark Reading has the full story.
Here's how the Social Media Phishing Test works:
