It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings.

The attacks, which have impacted dozens of organizations, date back at least three years, lasting an average of 393 days. And that’s just what’s been uncovered in…

Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised.

The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift.

The digital engineering services firm said human resources data on nearly 10,500 current and former employees was exposed.

Research from Cisco Talos and Google Threat Intelligence Group underscores the extent to which North Korea-aligned attackers attempt to avoid detection.

Researchers said malicious activity dates back to early July and active exploitation was observed two months ago.

Okta thwarted the supply-chain attack with security controls it had in place. Zscaler did not. Their experiences provide insights into the root of a much broader problem.

The emails, which are littered with broken English, aim to instill fear, apply pressure, threaten public exposure and seek negotiation for a ransom payment.

Researchers tell CyberScoop that notorious ransomware group Clop may be behind the email barrage.