Administered by:
Security researchers reveal spear-phishing campaign targeting the IT department in a US automaker.
The attackers target employees with high privileges to systems, and luring them with a link to a tool they use. Once they click on the link, they would be tricked into downloading a malicious file that would insert a backdoor.
The researchers suggest implementing MFA and to provide training, among other common defenses.