Defense Supplier IEH Hacked Via Fake Microsoft Login

IEH Corporation, a critical supplier for the US military and commercial aerospace sectors, recently suffered a significant cybersecurity incident. Unidentified threat actors compromised employee email inboxes through a sophisticated social engineering scheme. The attackers presented themselves as a business contact and shared a link to a deceptive Microsoft login page. An employee's interaction with this fake page led to the theft of their credentials.

This unauthorized access exposed sensitive information within IEH's email systems. Contents included customer communications, purchase orders, and technical documentation, potentially including export-controlled data. While IEH found no evidence of data exfiltration, malicious mailbox rules designed to forward emails undetected were discovered and removed. The company has completed an audit and implemented corrective actions to mitigate the impact of the breach.