DNC Phishing Scare Was a Training Exercise Gone Awry: Lessons Learned
It seemed like déjà vu’ all over again. Echoing one of the most talked about successful phishing attacks of all time, the Democratic National Committee (DNC) once again had cause to raise concern recently believing that it was the intended target of a new phishing campaign. And, given upcoming elections in the US, the DNC had every reason to take the threat of attack seriously. The then-known evidence and facts seemed to point to a motivated attacker was building a sophisticated phishing campaign, including a credential harvesting webpage “target[ing] the Democratic Party’s voter file, known as Votebuilder.” Even the FBI, the DNC’s CISO, and outside security companies believed the trail pointed to a malicious attack…. Except it wasn’t malicious. And it wasn’t an attack… at least not in the traditional sense. As experts and the media had more time to study the evidence, it became clear that all of the fear and excitement was over simulated phishing test conducted by the Michigan De...