Fake 401K year-end statements used to steal corporate credentials

Threat actors are using communication about personal pension accounts (the 401(k) plans in the U.S.), salary adjustments, and performance reports to steal company employees' credentials. [...]

accounts communication corporate credentials employees end fake pension performance personal plans reports salary security steal threat threat actors year-end