Hacking email accounts doesn't have download of kids sex videoto be a sophisticated affair.
We are reminded once again of this fact thanks to a report released Friday by the Microsoft Threat Intelligence Center detailing how a group of hackers targeted the email accounts of journalists, government officials, and the campaign of a U.S. presidential candidate. And here's the thing, the bad actors didn't use some fancy 1337computer skills, but rather employed the oldest trick in the book: the password reset.
According to Microsoft, over a 30-day period in August and September of this year, hackers likely affiliated with the Iranian government went after 241 email accounts and successfully compromised four. The MTIC dubbed the group Phosphorous, and explained how the team operated.
"Phosphorous used information gathered from researching their targets or other means to game password reset or account recovery features and attempt to take over some targeted accounts," reads the blog post. "For example, they would seek access to a secondary email account linked to a user’s Microsoft account, then attempt to gain access to a user’s Microsoft account through verification sent to the secondary account."
Importantly, MTIC writes that the four compromised accounts were not tied to the U.S. presidential campaign. But, still, this isn't good.
Password-reset features come in many forms, from questions about where you went to high school or your mother's maiden name to sending a link or code to a secondary email address or phone number. The former opens victims up to attack by anyone who knows how Google works, while the latter makes your primary email only as secure as your linked secondary email or cell phone.
A prominent abuse of this feature came in 2008, when a 20-year-old college student accessed Sarah Palin's Yahoo email account. He used information like Palin's ZIP code and birthday to reset her account password and gain access to the email account.
"While the attacks we’re disclosing today were not technically sophisticated," explain MTIC, "they attempted to use a significant amount of personal information both to identify the accounts belonging to their intended targets and in a few cases to attempt attacks."
SEE ALSO: How to find stalkerware on your smartphoneThis warning from Microsoft should serve as a reminder to everyone online that a password alone isn't enough to protect your email — especially if someone is motivated to hack the account. Instead, use multi-factor authentication and for the love of god create a unique password.
Oh, and consider ditching those password-reset questions altogether.
Topics Cybersecurity
9 of the best Ikea hacks to help transform your homeEnquirer wants you to know that they are not the National EnquirerYou need to watch this guy make sharp knives out of weird objects'Serial' Season 3 is coming your way'Super Mario' Toad mask sure to induce nightmares this HalloweenThe 'f*ck your zodiac sign' meme wants to know who you really are as a personHilarious meme reveals the 'real' names of your favorite celebritiesYour guide to proper Venmo etiquette in the year 2018Results from Logan Paul vs. KSI and Jake Paul vs. Deji boxing matchVic Mensa warmed hearts all over with his 'anti Hillary Clinton watching the World Series is every Cubs fan Amazon's biggest rival just recruited Kobe Bryant to help get your holiday shopping The last time the Chicago Cubs won the World Series... America, you may be sleepwalking into a Trump presidency. Still. Watch Felix the hero duck save a chicken from a hawk Twitter laughs at GOP governor for seemingly pro Everyone is giving up on GoPro Another big cyberattack is taking a country offline Watch Idris Elba kickboxing and be thankful you're not fighting him John Lithgow wants to play Boris Johnson if there's a Brexit film
0.141s , 14339.3125 kb
Copyright © 2025 Powered by 【download of kids sex video】Report: Hackers use simple trick to target U.S. presidential campaign and government officials,Feature Flash