Thad Odido (Dutch ISP) hack seems to be a ScatteredLapsusHunters incident.

[campuscodi@mastodon.social]

Thad Odido (Dutch ISP) hack seems to be a ScatteredLapsusHunters incident.

Hackers entered via phishing customer service, then scraped the ISP's Salesforce account

Odido-hackers kwamen binnen via phishing, deden zich voor als ICT-afdeling

Internetcriminelen ontfutselden de inloggegevens van klantenservicemedewerkers van Odido. Vervolgens wisten ze de gegevens van klanten geautomatiseerd uit het systeem te halen, melden bronnen aan de NOS.

(nos.nl)

[jtig@infosec.exchange]

@campuscodi Because of the tactics used, or do you have anything else that you can attribute the attack on?

Wild if it was an attack from Advanced Persistent Teenagers, but haven't seen the attribution done to the group.

[jtig@infosec.exchange]

@hanscees @campuscodi if it walks and talks like a duck, it could very well be a duck. But I would like to see if it’s not, for instance, a goose copying TTP’s from a well known bird to confuse onlookers.