Infosec pro Troy Hunt HasBeenPwned in Mailchimp phish
ID: 9861bc8c-5334-5d61-8162-13ec04ed9c66
STIX ID: report--9861bc8c-5334-5d61-8162-13ec04ed9c66
Feed Name: The Register (Security)
Threat Score
Troy Hunt's Mailchimp mailing list (~16,000 records, including ~7,535 unsubscribed addresses) was stolen after he responded to a convincing phishing email, entering his credentials and a one-time passcode; the attacker exported the list in under two minutes, suggesting an automated OTP-relay attack. The phishing domain (mailchimp-sso.com) was taken down by Cloudflare, the fraudulent API key was deleted, and the incident highlights weaknesses of OTP-based 2FA and concerns about retention of unsubscribed user data.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.