
Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime
Security
Threat actors are exploiting vacant homes as "drop addresses" to intercept physical mail and facilitate fraudulent activities. The technique involves abusing postal services and fake identities to convert mail into a vector for hybrid cybercrime, as detailed by cybersecurity firm Flare. No specific technical details, dates, or CVE IDs were mentioned in the reported findings. The impact includes enabling financial fraud and identity theft through unauthorized access to sensitive documents. The method leverages physical infrastructure vulnerabilities rather than traditional digital exploits. The abuse targets mail delivery systems to bypass security measures.