Their act of logging into the fake CircleCI login page and inputting their credentials allowed the attacker to enter Drop Box repositories and access sensitive information. Unbeknownst to the employees, the email was not legitimate. The emails asked the receiver to click on a link to CircleCI’s login page, where they were asked to enter their GitHub username, password, and hardware authentication key. The emails slipped through spam detection filters and landed in employees’ inboxes. Sales leads and vendors’ information have also been breached.Īccording to Dropbox, the attack started in early October 2022 when employees received phishing emails from the attacker who posed as CircleCI. Third-party libraries modified for use by Dropbox were the main victims, with core apps saved from the threat actor.Īlong with the leaked source code repositories, the phishing attack also gained access to thousands of names and email addresses belonging to Dropbox employees. On Tuesday, November 1st, 2022, San Francisco-based firm Dropbox disclosed that it had been the victim of a phishing campaign, which lead to the unauthorized access of 130 source code repositories on GitHub. However, given the sensitive nature of the data that was accessed, it is possible that the number of affected individuals could be quite high. In that incident, a user’s account was hacked, and a file containing the email addresses and hashed passwords of over 68 million Dropbox users were leaked.ĭropbox has not yet released any information on how many users were affected by this latest breach. This breach comes a couple of years after another high-profile data leak at Dropbox. The company is urging all users to change their passwords as a precautionary measure. It is not yet clear how the unauthorized access took place, but Dropbox has said that they are investigating the matter. On November 1st, 2022, Dropbox became the victim of a cyber attack where source code repositories, as well as names and emails of their employees, were unauthorizedly accessed.
0 kommentar(er)
