Subscribe to our mailing list

* indicates required

 

 

 

 

BROWSE BY TOPIC

ABOUT FINANCIALISH

We seek to provide information, insights and direction that may enable the Financial Community to effectively and efficiently operate in a regulatory risk-free environment by curating content from all over the web.

 

Stay Informed with the latest fanancialish news.

 

SUBSCRIBE FOR
NEWSLETTERS & ALERTS

FOLLOW US

Technology/Internet

How Hillary Clinton's Campaign Got Hacked- It's Not Fishy, It's Phishing

October 31, 2016

[Photo: facebook-phishing / gakuu.com]

 

Democratic presidential nominee Hillary Clinton has a hacking problem. More specifically, her campaign's chairman, John Podesta, had his personal Gmail account compromised earlier this year. The hack, which U.S. intelligence agencies have blamed on the Russian government, revealed more than 50,000 emails - many of which have been published on WikiLeak.

 

How is it that a man such as Podesta, in such a position of importance, had his email compromised? It turns out he's just as susceptible to social-engineering hacks as your Uncle Morty. Podesta's email was apparently accessed by a simple social-engineering tactic called "phishing":

 

Hackers emailed him posing as Google's Gmail account-services dept.

They told him his password was compromised and provided a false link to a place to change his password (this appears to be where Podesta went wrong, eventually clicking this link and entering his info).

Before doing anything else, Podesta's chief of staff forwarded that email to the Clinton campaign's internal computer-security dept.

A Clinton campaign help-desk staffer, seemingly fooled by the ruse himself, called the email "legitimate."

He then asked Podesta's chief of staff to ensure that Podesta had two-factor authentication turned on (which adds extra security to his account) and to change his password.

 

Even though the campaign staffers sent Podesta the correct email link from Google to reset his password, Podesta seemingly clicked the original link - to the fake website.

 

Upon entering his account information, he handed over the keys to his Gmail.