Recently, the well-known email marketing company MailChimp was severely compromised by hackers!
The hackers use the cunning tactics. They successfully phished the login credentials of MailChimp employees through social engineering attacks. Then boldly infiltrated the internal customer support and account management tools. That was so serious that they stole 319 accounting records and exported “audience data” from 102 customer accounts, not sparing even the customers’ API keys.
The stolen information and keys were then used by the hackers to conduct phishing attacks.
Many users of Trezor hardware cryptocurrency wallets received phishing emails and were nearly lured into downloading malicious software. If they had actually downloaded it, the cryptocurrency in their wallets would be very dangerous!
Fortunately, MailChimp reacted quickly. Upon discovering the issue, they immediately notified the affected account holders and then advised all customers to enable two-factor authentication as an additional layer of security, leaving the hackers with no opportunity to exploit. This incident serves as a reminder that we must never be complacent about network security!
Original source：https://techcrunch.com/2022/04/04/mailchimp-internal-tool-breach/
