Officials at the City of Philadelphia have confirmed that 35,881 individuals had their personal and protected health information exfiltrated following the compromise of several email accounts from late May to late July 2023.
Aside from alerting users regarding the phishing scheme, Ethereum also disclosed performing selective email service migration and other measures to curb similar attacks in the future.
Attackers were able to obtain Authy customers' phone numbers and other data via an unauthenticated endpoint, which has since been secured, but there has been no indication of breaches of Twilio's systems and sensitive data.
Intrusions by Unfurling Hemlock, which is believed to be of Eastern European origin, commence with the delivery of malicious emails with the 'WEXTRACT.EXE' file.