Security News Fake 401K year-end statements used to steal corporate credentials BleepingComputer Daniel Bender Jan 10, 2024 Threat actors are using communication about personal pension accounts (the 401(k) plans in the U.S.), salary adjustments, and performance reports to steal company employees' credentials.