---
id: 542
title: "Trick or treat: 5 spooky phishing stories"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/trick-or-treat-5-spooky-phishing-stories/"
published_at: "2025-10-30 12:00"
tags: ["supply-chain", "phishing", "bugcrowd", "case-studies", "bec", "usb-drop-attack", "solarwinds"]
phying_url: "https://phying.com/item/542"
lang: en
---

# Trick or treat: 5 spooky phishing stories

## Summary

A Halloween roundup of real incidents: the USB drop attack that crippled Saudi Aramco, the Ubiquiti BEC scam costing over $40 million, and the SolarWinds supply chain compromise, each with lessons.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2025-10-30 12:00
- **Original:** https://www.bugcrowd.com/blog/trick-or-treat-5-spooky-phishing-stories/
- **Phying News:** https://phying.com/item/542