Meta Business Account Phishing Campaign Exposed
Meta's business email infrastructure was exploited by hackers to send phishing emails from legitimate business accounts, attempting to steal login credentials. Researchers discovered the campaign, which has since been shut down by Meta. The incident highlights the risks of impersonation attacks on business accounts.
Key points
- Meta's business account email infrastructure was hijacked by hackers to send phishing emails from legitimate accounts.
- The campaign, uncovered by researchers Huntress, targeted business account holders with the goal of stealing login credentials.
- Victims were redirected to landing pages mimicking Meta's Agency Partner Program, a legitimate initiative.
- Meta has since added guardrails to prevent similar attacks, and researchers published IoCs to aid detection.
Meta's business email infrastructure was recently exploited by hackers to send phishing emails from legitimate business accounts. The campaign, uncovered by researchers Huntress, targeted business account holders with the goal of stealing login credentials. The phishing emails were designed to mimic Meta's Agency Partner Program, a legitimate initiative that connects businesses with professionals in social media management work.
The campaign's success relied on the fact that emails sent between business accounts pass through Meta's infrastructure, making them appear as if they originated from the company itself. However, Meta has since taken steps to prevent similar attacks by adding guardrails to its business account email system.
Researchers at Huntress have published indicators of compromise (IoCs) to aid organizations in detecting related activity. This incident serves as a reminder of the importance of vigilance in protecting business accounts from impersonation attacks.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.