3 ms·
The entry points are "whatever works". Typically: * Password spraying from previous data leaks * Good old-fashioned fishing * Bugs in anything that's common
by perlgeek 5y ago
The entry points are "whatever works".
Typically:
* Password spraying from previous data leaks
* Good old-fashioned fishing
* Bugs in anything that's common in enterprises, exposed to the Internet and not patched fast enough, including MS Exchange, various security/VPN products, vcenter, you name it. All of these had pretty critical pre-auth bugs exposed just this year
* malicious browser plugins
* malicious O365 apps
... and so on.
- TwoBit 5y agoLack of MFA, lack of hardware whitelisting, servers exposed directly to the Internet, lack of user privilege restrictions, allowing passwords that are known-compromised, ...
- flowerlad 5y agoIf so, it doesn't make sense to blame Putin. The blame lies on US lawmakers, for not incentivizing US businesses to have a budget for fixing these sorts of issues. For example, when companies such as Equifax are hacked because of poor security practices do they pay a penalty? No. That's the problem.
- mike00632 5y agoThere is a lot of blame to go around.
- anthk 5y ago- VBA macros - ActiveX for legacy ad-hoc software