JP Morgan Targeted in New Phishing Campaign
Corporate email provider Proofpoint discovered a new phishing campaign, this week, aimed at customers of JP Morgan Chase Co.
The campaign has been dubbed “Smash and Grab” because it combines two methods of obtaining access credentials.
It uses social engineering tactics to try to persuade users to part with their JP Morgan credentials, specifically, by asking them to click to view a secure message from the bank. It also infects the target with Dyre, a banking Trojan that lifts login data for other places too.
The attack appears to have been launched on Tuesday. Proofpoint saw roughly 150,000 of the phishing emails that day.
Sara Peters is Senior Editor at Dark Reading and formerly the editor-in-chief of Enterprise Efficiency. Prior that she was senior editor for the Computer Security Institute, writing and speaking about virtualization, identity management, cybersecurity law, and a myriad … View Full Bio
Article source: http://www.darkreading.com/jp-morgan-targeted-in-new-phishing-campaign/d/d-id/1306589?_mc=RSS_DR_EDT