Over the weekend, the cloud communications firm, which owns popular two-factor authentication (2FA) Authy, said that on 04 August, it became aware of unauthorised access to information related to a limited number of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials
A data breach has been admitted by the cloud communications company Twilio as hackers entered its internal systems after stealing employee credentials in an SMS phishing attack.
Twilio identified 125 customers who had their data accessed during a security breach, the cloud communications company said.
“We have identified approximately 125 Twilio customers whose data was accessed by malicious actors for a limited period of time, and we have notified all of them,” Twilio said in a statement.
Over the weekend, the cloud communications firm, which owns popular two-factor authentication (2FA) Authy, said that on 04 August, it became aware of unauthorised access to information related to a limited number of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials.
“The attackers then used the stolen credentials to gain access to some of our internal systems, where they were able to access certain customer data,” it said in a statement.
According to Bleeping Computer, the SMS phishing messages “baited Twilio’s employees into clicking the embedded links by warning them that their passwords had expired or were scheduled to be changed.”
The cloud communications firm later revoked the compromised employee credentials to block the attackers’ access to its systems.
Also, the company asked several US mobile carriers to shut down the accounts used to deliver the phishing messages, the report mentioned.
Also read: I believe digital literacy should not just be mandated to newer generations
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics
