<story><title>The mechanics of a sophisticated phishing scam and how we stopped it</title><url>https://blog.cloudflare.com/2022-07-sms-phishing-attacks</url></story><parent_chain></parent_chain><comment><author>tkgally</author><text>&amp;gt; [H]aving a paranoid but blame-free culture is critical for security. The three employees who fell for the phishing scam were not reprimanded. We’re all human and we make mistakes. It’s critically important that when we do, we report them and don’t cover them up.&lt;p&gt;That sounds to me like a very healthy culture. I wonder how many other organizations are similar?</text></comment>
<story><title>The mechanics of a sophisticated phishing scam and how we stopped it</title><url>https://blog.cloudflare.com/2022-07-sms-phishing-attacks</url></story><parent_chain></parent_chain><comment><author>cmroanirgo</author><text>Have a look at their timeline. Very impressive, 3 mins from first sign (2 mins from first report), the domain is blocked.&lt;p&gt;(Edited a bit for brevity &amp;amp; mobiles)&lt;p&gt;&amp;gt; 22:49 UTC  Attacker sends out 100+ SMS messages...&lt;p&gt;&amp;gt; 22:50 UTC Employees begin reporting SMS messages...&lt;p&gt;&amp;gt; 22:52 UTC Verify that the attacker&amp;#x27;s domain is blocked in Cloudflare Gateway for corporate devices.&lt;p&gt;&amp;gt; 22:58 UTC Warning communication sent to all employees across chat and email.&lt;p&gt;etc</text></comment>