SecurityWeek reports that customer service solutions provider Zendesk had its network breached last year following a "sophisticated SMS phishing campaign" that resulted in the exfiltration of employee attack credentials.
Several Zendesk employees have been targeted by the phishing attack, enabling attackers to access Zendesk's logging platform data between Sept. 25 and Oct. 26, said Zendesk in a letter sent to cryptocurrency trading and portfolio management firm Coinigy this month.
Further investigation into the incident noted that the logging platform data may have included service data belonging to Coinigy's account but there has been no evidence suggesting the compromise of the cryptocurrency firm's Zendesk instance.
Other organizations impacted by the breach may have been informed earlier, with U.S. cryptocurrency exchange Kraken notifying customers regarding the Zendesk incident in November.
No further information regarding the attack has been provided by Zendesk but the incident may be associated with the 0ktapus campaign, which has already targeted over 130 entities from March to August 2022.
Included in the exposed dataset labeled "PDL" were individuals' full names, email addresses, phone numbers, location data, professional summaries, and skills, as well as education and employment histories.
Attackers could leverage the issue — which impacts Nexus 3000, 7000, and 9000 series switches with vulnerable NX-OS versions with DHCPv6 activated and are in standalone NX-OS mode — to facilitate continuous crashes of the dhcp_snoop process and a denial-of-service condition.
Higher rewards of up to $250,000 will be given by Google for the discovery of memory corruption flaws in the Chrome browser shown to achieve remote code execution using a non-sandboxed process as part of a more robust vulnerability reward program.