Loading…
11
My work laptop got crypto'd after I clicked a fake Zoom invite last Tuesday
IT said the email passed their filter because it came from a compromised vendor account, but the real kicker was that the ransomware spread through our shared drive in under 40 minutes, so has anyone else seen those 'meeting rescheduled' links that look too clean to spot?
3 comments
Log in to join the discussion
Log In3 Comments
richard_young801d ago
Yikes, I don't buy the "too clean to spot" angle, those invites almost always have a weird sender domain if you hover over the link first. The shared drive blowing up in 40 minutes is the real problem, that's a permissions issue, not a phishing one.
8
wren_mitchell1d ago
The shared drive thing is not just permissions though, that is how fast it spreads.
4
phoenix_brown851d ago
Watched a friend lose her whole drive in a day, so domains aren't the only tell.
1