Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1121945" data-attributes="member: 96560">It depends on how the attacker gained the foothold. The most obvious best way is to get hold of the tech admin account. Then he would have access to all accounts the admin is looking after. Another good way is to break the web code of the pension fund&#039;s access server. Once he gets in that way, the attack would again have access to many accounts. Another credential based attack vector would be to get hold of the clerical admin account. If the pension fund has an cell app, the attacker could reverse engineer the app. Or the attacker could monitor or capture the network traffic of a customer and forge his way in. Or it could be supply chain attack ............ There are many different ways to get in, and they all involve a bunch of accounts.I think you read The Hacker News; I think you posted a link one time if I remember correctly. It is not the number of people affected nor the amount stolen or ransomed for that is interesting. The interesting thing about them is that they always provide a link to the source security researcher. You can read That long article, and gain insights to the TTPs of attackers.</blockquote>

[QUOTE="Victor M, post: 1121945, member: 96560"] It depends on how the attacker gained the foothold. The most obvious best way is to get hold of the tech admin account. Then he would have access to all accounts the admin is looking after. Another good way is to break the web code of the pension fund's access server. Once he gets in that way, the attack would again have access to many accounts. Another credential based attack vector would be to get hold of the clerical admin account. If the pension fund has an cell app, the attacker could reverse engineer the app. Or the attacker could monitor or capture the network traffic of a customer and forge his way in. Or it could be supply chain attack ............ There are many different ways to get in, and they all involve a bunch of accounts. I think you read The Hacker News; I think you posted a link one time if I remember correctly. It is not the number of people affected nor the amount stolen or ransomed for that is interesting. The interesting thing about them is that they always provide a link to the source security researcher. You can read That long article, and gain insights to the TTPs of attackers. [/QUOTE]

Verification