{"id":35199,"date":"2022-07-20T10:56:31","date_gmt":"2022-07-20T07:56:31","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=35199"},"modified":"2026-03-28T01:19:47","modified_gmt":"2026-03-27T22:19:47","slug":"new-social-engineering-tactics-cybercriminals-posing-as-journalists-or-twitter-employees","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/new-social-engineering-tactics-cybercriminals-posing-as-journalists-or-twitter-employees\/","title":{"rendered":"New social engineering tactics: cybercriminals posing as journalists or Twitter employees"},"content":{"rendered":"\n

These attacks typically aim to harvest credentials<\/strong><\/p>\n\n\n\n

Cybersecurity experts at Poofpoint\u00a0have recently noticed<\/u><\/a>\u00a0tactics that hackers from Iran and Turkey have been using in 2022 to steal credentials. The attacks include cybercriminals sending malicious emails stating that a user\u2019s Twitter account has been hacked or a journalist\u2019s request for the online interview.\u00a0<\/p>\n\n\n\n

\u201cThe report by Proofpoint focuses on the effect these attacks have on  journalists. However, we have seen numerous times how ordinary people get their personal information stolen in phishing schemes. Hackers learn from each other, and it is only a matter of time that those tactics will be used on regular users,\u201d says Daniel Markuson, a cybersecurity expert at NordVPN<\/a>. <\/p>\n\n\n\n

Know your enemy: What are the newest tactics?<\/strong><\/p>\n\n\n\n

  1. Fake Twitter security alert<\/strong><\/li><\/ol>\n\n\n\n

    During this attack, hackers \u2013 often from Turkey \u2013 send an email with a request to change a person\u2019s Twitter account password because of a suspicious login from a new location. If a victim clicks on the link supplied in the email, they are taken to a credential-harvesting landing page that impersonates a Twitter login page to reset their password.<\/p>\n\n\n\n

    Example: <\/p>\n\n\n\n

    \"New<\/a><\/figure>\n\n\n\n
    1. Impersonating a journalist<\/strong><\/li><\/ol>\n\n\n\n

      Typically performed by Iranian hackers, this attack involves impersonation. The hacker pretends to be an international journalist and asks for comments from their targets. If the victim agrees, the hacker sends them an invitation to a virtual meeting with a malicious link that leads to a credential-harvesting form or infects the device with malware or an IP tracker. <\/p>\n\n\n\n

      Example:  <\/p>\n\n\n\n

      \"New<\/a><\/figure>\n\n\n\n

      How to tell if it\u2019s a phishing email <\/strong><\/p>\n\n\n\n

      If you know what to look out for, detecting phishing scams is pretty easy. The clues are often hidden in plain sight. <\/p>\n\n\n\n