Chipotle email marketing hacked to send phishing emails

phishing emails, email marketing, blog post, Mailgun, DKIM, Sender Policy Framework, best endpoint protection software, best identity theft protection, best malware removal software, malware, fake Microsoft login page, collect their credentials, Inky, best antivirus, BleepingComputer

Cybercriminals have begun sending out phishing emails after they were able to gain access to one of the email marketing accounts used by the US-based Mexican food chain Chipotle.

According to a new blog post from the email security company Inky, those behind the campaign sent out at least 120 malicious emails in just three days from a hacked Mailgun account that the food chain uses for email marketing.

Cybercriminals often try to obtain legitimate email addresses from businesses as they increase the chances of their phishing emails being delivered since they’ll be able to bypass authentication methods including DomainKeys Identified Mail (DKIM) and Sender Policy Framework.

While the majority of the phishing emails sent from Chipotle’s hacked Mailgun account led users to credential-harvesting sites, a small number also had attachments which contained malware.

Compromised Mailgun account

Many of the emails sent out from the hacked Mailgun account led users to a fake Microsoft login page with the aim of harvesting their credentials. According to Inky, 105 of the 120 malicious emails it detected tired to harvest users Microsoft account credentials.

The emails themselves appeared as if they came from the “Microsoft 365 Message center” and the body of these emails informed recipients that their messages could not be delivered as a result of low email storage in the cloud. When a user then clicked on a button labeled “release messages to inbox”, they would be redirected to a fake login page used to collect their credentials.

In addition to Chipotle, the cybercriminals behind this recent campaign also impersonated the United Services Automobile Association (USAA) and tricked users to visiting a phishing site that appeared to be legitimate at a first glance. The remaining fake emails posed as voicemail notifications that also contained malware attachments.

To prevent falling victim to this and similar phishing scams, Inky recommends that users pay close attention to any discrepancies between a sender’s display name (Microsoft, USAA, VM Caller ID” and the message’s actual email address.

Via BleepingComputer

News Related


'That's absurd': Bryson DeChambeau smashes monster 417-yard drive in display of ferocious power

‘That’s absurd’: Bryson DeChambeau smashes monster 417-yard drive in display of ferocious power – SHUTTERSTOCK You knew Bryson DeChambeau had some devilish sorcery planned when he lined up his body ... Read more »

Cocky most-wanted criminal told police to ‘come and find me'. So they did.

David Holmes taunted Lancashire Police on Twitter, baiting them to ‘come and get me’. So they did. (Twitter) A 'most wanted' criminal was caught by a police force after taunting ... Read more »

Dawn of the universe might have been bursting with galaxies now hidden by dust

Studying galaxies in the night sky is an exercise in time travel, since the light we are seeing represents how things looked in the past, sometimes even billions of years ... Read more »

Set a spooky Halloween scene with these painted marbled pumpkins

This story originally featured on Domino. © Mercedez Rex/Domino For the best-looking DIY marbled Halloween pumpkins, choose your colors wisely and mix them slowly. Sophisticated marbling swirls through all of Mercedez ... Read more »

The CDC recommends booster shots for healthcare workers and other at-risk groups

This post has been updated. It was last published on September 23, 2021. © Pixabay The Pfizer-BioNTech vaccine. Over the past week both the Centers for Disease Control and Prevention ... Read more »

Google CEO sought to keep Incognito mode issues out of spotlight, lawsuit alleges

By Paresh Dave © Reuters/HANDOUT FILE PHOTO: Technology CEOS Zuckerberg of Facebook, Dorsey of Twitter and Pichai of Google testify before House Committee in Washington (Reuters) – Google Chief Executive ... Read more »

How to watch Gold Rush season 12 online where you are

Get your pickaxes and gold pans ready, the miners are back for season 12 of Gold Rush. Thanks to the pandemic the price of gold is booming, so it’s mining ... Read more »

Google has a few tricks up its sleeve for the newsletter platform department

As more journalists and writers are turning to newsletters to distribute their content online, Google is working on its own newsletter platform that will leverage its existing collaboration tools. As ... Read more »

Bentley celebrating 70 years of its design department

© Provided by This Is Money MailOnline logo From pen-and-ink sketches and watercolours to the latest immersive virtual reality technology, Bentley is celebrating 70 years of its design department — ... Read more »

Yahoo is building a new calendar app with help from the creator of Sunrise

Mention the name of Sunrise to a select demographic of nerds and you’re likely to elicit a visceral reaction. Before Microsoft purchased the calendar software in 2015 and shut it ... Read more »

Arsenal legend Brady on the Gunners' plight and scoring against Spurs

© Provided by Daily Mail MailOnline logo When Liam Brady was 13 and the most exciting young player in Irish football, the people from Coventry City offered his mum a ... Read more »

Microsoft applies Internet-sized Band-Aid to stem Autodiscover leaks

It’s a stopgap, not a fix. © Provided by Windows Central What you need to know Microsoft Exchange’s Autodiscover protocol reportedly has a credential-leaking issue. Microsoft acknowledged the situation but ... Read more »

VR developers prove that Steam Deck isn't a mobile VR console just yet

© Provided by Windows Central Ever since the Steam Deck was announced, PC VR gamers everywhere have been wondering if it could power a VR headset. Valve initially shied away ... Read more »

Amazon could unveil a soundbar and new 15-inch Echo Show on Tuesday

Amazon could use next week’s hardware and services event to show off a new  soundbar for TVs, a 15-inch Echo smart display, a second-generation Echo Auto device and new wearables, ... Read more »

Astrazeneca feels force of cancer drug hopes

© Provided by This Is Money MailOnline logo Pharma giant Astrazeneca was a top riser on the FTSE 100 yesterday after a strong week that saw it reporting positive clinical ... Read more »

The best golf balls for beginners to help beginners learn the game

High-end golf balls make lots of lofty promises on their boxes and marketing material. Who wouldn’t want straighter shots, longer drives, and more feel around the green? Unfortunately, those pricy ... Read more »

Scientists find 125M year-old dinosaur that has organic molecules

© Provided by Daily Mail MailOnline logo Scientists from China say they have isolated ‘exquisitely preserved’ cartilage cells of a 125-million-year-old dinosaur that contains organic molecules and may suggest that ... Read more »

Razer Huntsman V2

© Provided by TechRadar Razer Huntsman V2 Optical Razer Huntsman V2 Optical two-minute review The Razer Huntsman V2 optical gaming keyboard is an absolute joy to type on, and I ... Read more »

Hurricane Sam will likely intensify rapidly this weekend

Hurricane Sam, the 18th named storm of the 2021 hurricane season (and the fourth named storm this week alone), is barreling west across the Atlantic Ocean and just this morning ... Read more »

How to customize your Windows 11 taskbar

If you’ve updated your computer from Windows 10 to Windows 11, you may find that your taskbar isn’t quite as configurable — and perhaps not quite as useful — as ... Read more »

Wind farms paid nearly £2m to switch off – even as customers face soaring energy bills

Wind farm turbines – Chris Ratcliffe/Bloomberg Wind farms were paid more than £1.8 million to shut down this week – at a time when consumers face huge rises in energy ... Read more »

Are AMD and Mediatek set for a surprising chip tie-up?

Chipmakers AMD and Mediatek are reportedly in talks to establish a new joint venture according to a recent report from DigiTimes. Based on the news outlet’s report, the joint venture ... Read more »

William Shatner, 90, Set to Be Oldest Man Shot Into Space

Phil Walter/Getty Captain Kirk is truly headed to space…at 90. William Shatner is set to board Jeff Bezos’ Blue Origin New Shepard rocket next month, according to TMZ, becoming the ... Read more »

Xbox Chaturdays 41: Outside help on Perfect Dark with Shinobi602

Join the conversation live! For episode 41 of Xbox Chaturdays we’ll be joined by the iconic Brand Manager of Untold Tales and host of The Joy of Gaming Shinobi602 (Nate ... Read more »

Intel lining up major partners to produce its Arc Alchemist graphics cards

Ready your rigs! Some major after-market motherboard makers are lining up to produce graphics cards using Intel Arc Alchemist early next year, either designing new products themselves or working with ... Read more »

It's Friday, here's the Galaxy S22 Ultra render that has the Android blogosphere abuzz

It’s Friday, it’s fall, there’s a breeze in the air (hopefully), and there’s fresh, I’d argue ridiculous, renders of Samsung’s expected Galaxy S22 Ultra to show you. The renders come ... Read more »

US agrees not to pursue fraud charges against Huawei CFO

© Photo by DON MACKINNON/AFP via Getty Images Reuters and the CBC first reported that Huawei CFO Meng Wanzhou would appear in a Brooklyn federal courtroom today via streaming video ... Read more »

Google TV finally gets its mobile remote for Android

You can now control the Google TV interface using your Android device, The Verge reports. Google announced the feature back in May, so it’s been a long time coming. © ... Read more »

Score a Samsung robot vacuum for $100 off—but only for today

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. If you’re tight on time, vacuuming can be tough. Luckily, right ... Read more »

A bunch of sports fans are about to put their personal data at risk this weekend

Being an avid sports fan can be expensive especially if you’re following multiple leagues which is why many users have turned to illegal streaming to help cut costs. However, a ... Read more »

Art project creates 'human-alien hybrids' with meteorite-infused water

© Provided by Space The first “Fountain of Tolerance,” in the Italian village of Fontecchio, offers the opportunity to become a human-alien hybrid, via the ingestion of meteorite-infused water. A ... Read more »

This International Space Station VR experience lets you explore the ISS… and it's as amazing as it sounds

© Provided by Space This International Space Station VR experience lets you explore the ISS… and it’s as amazing as it sounds Think about what VR actually is. In the ... Read more »

How to photograph meteors and meteor showers

© Provided by Space How to photograph meteors and meteor showers – a meteor streaks across the night sky Watching meteors flash across the sky is one of the most ... Read more »

Ice Melt at The Poles Is Now Causing Hidden Changes to Earth's Crust on a Huge Scale

© Paul Souders/Stone/Getty Images As the polar ice sheets melt, the process is not just raising sea levels – it’s also warping the underlying surface of Earth, a new study ... Read more »

3 wild ideas for how to stop a tornado

This post has been updated. It was originally published on July 10, 2003. © NOAA Weather in Focus Photo Contest 2015 We don’t know how to stop a tornado just ... Read more »

See what you can and cannot do with the Pro 8 when it comes to gaming

© Windows Central Surface Pro 8 Profile Best answer: Certain Surface Pro 8 models will be able to handle light gaming thanks to Intel Iris Xe integrated graphics. All models ... Read more »

New Microsoft Edge on Xbox Series X|S lets you use Office

© Windows Central Microsoft Office Xbox We don’t know why you’d do it, but you can indeed use Microsoft Office on Xbox consoles through the new Edge browser. What you ... Read more »

NFL reportedly wants Apple to be the next home for Sunday Ticket

The NFL’s long-standing Sunday Ticket partnership with DirecTV is coming to an end, following an eight-year agreement the two reached in 2014. The viewing package is probably on the move ... Read more »

Netflix's stylish 'Kate: Collateral Damage' heads to Steam on October 22nd

Netflix’s recent foray into video games continues. On Friday, the company announced the existence of Kate: Collateral Damage. Like Eden Unearthed, the VR experience we saw make the media rounds ... Read more »

Scientists test machine that makes oxygen by 'cooking' lunar soil

© Provided by Daily Mail MailOnline logo Engineers in Europe have demonstrated a way for moon colonists to make their own water and oxygen from lunar soil.  In the experiment, ... Read more »