This briefing explains a public 2024 advisory. It is not a live incident feed; consult the original source and current vendor guidance for updates.
What the advisory tells us
The FBI and HHS described incidents in which attackers impersonated employees to persuade a help desk to reset credentials. In some cases they bypassed MFA and then targeted accounts involved in reimbursement payments.
What teams can do
Use a documented, independent verification process for account recovery and sensitive changes. Train help desk staff to pause and escalate suspicious requests without relying on caller-provided contact details.
Read the original advisory
FBI IC3 / federal partners: source advisory (PDF) ↗
The linked advisory is an independent government source. It does not endorse CyberWall or its products.