4 ms·
This is a significantly false generalization about the TTPs for rware operators. Vast majority of these attacks don't work with 0days. They work with malformed
by dogman144 5y ago
This is a significantly false generalization about the TTPs for rware operators.
Vast majority of these attacks don't work with 0days. They work with malformed IAM policies, social engineering/phishing, and poor asset registries and cloud vis.
Keseya being a 0day is an outlier in many ways.
- user-the-name 5y agoIt is an outlier today. Do you think it will be an outlier in a year? In two years? If a zero-day can gain you millions, tens of millions, maybe a hundred million dollars? Do you think we can keep operating the way we have been up until now?
- dogman144 5y agoI don't think you work in infosec?
- willcipriano 5y ago> Do you think it will be an outlier in a year? In two years? I think it will remain a outlier until that becomes the easier/more economical way for them to do business. Right now there is so much low hanging fruit that I'd see no reason to invest in a bucket truck to get at the stuff further up the tree. I'd say your prediction is at least a few decades away.
- steve_g 5y agoI thought this vulnerability had already been reported to Kaseya (privately), and they were working on it. Does that still qualify as a zero-day?