In August 2022, workers at Twilio began receiving text messages purporting to be from their company’s IT department. The texts claimed that their passwords had expired, or that their schedule had changed, and that they needed to log in to their work accounts.
A link was provided that took them to a landing page that looked identical to the sign-in page for the US communications company. It was convincing enough that several employees fell for the scam, leading to the data of roughly 125 customers being compromised.
