Thad Odido (Dutch ISP) hack seems to be a ScatteredLapsusHunters incident.

[campuscodi@mastodon.social]

Thad Odido (Dutch ISP) hack seems to be a ScatteredLapsusHunters incident.

Hackers entered via phishing customer service, then scraped the ISP's Salesforce account

https://nos.nl/artikel/2602283-odido-hackers-kwamen-binnen-via-phishing-deden-zich-voor-als-ict-afdeling

[jtig@infosec.exchange]

@campuscodi Because of the tactics used, or do you have anything else that you can attribute the attack on?

Wild if it was an attack from Advanced Persistent Teenagers, but haven't seen the attribution done to the group.

[hanscees@ieji.de]

@jtig @campuscodi because of tactics, read https://www.immersivelabs.com/resources/c7-blog/scattered-lapsus-hunters-the-cybercrime-group-redefining-threats
#odido #infosec

[jtig@infosec.exchange]

@hanscees @campuscodi if it walks and talks like a duck, it could very well be a duck. But I would like to see if it’s not, for instance, a goose copying TTP’s from a well known bird to confuse onlookers.