4 ms·
why do the hackers disclose the hack though? why not keep it silent and abuse more seems pretty easy to hack a SaaS anyway. just need to phish an engineering e
by supergirl 5y ago
why do the hackers disclose the hack though? why not keep it silent and abuse more
seems pretty easy to hack a SaaS anyway. just need to phish an engineering employee account. often they have superuser access to debug customer issues
- itsjloh 5y agoOne of the various twitter threads mentions that the account they used was suspended so perhaps they no longer have access.
- tuwtuwtuwtuw 5y agoThey (lapsus) also mentioned that the account was blocked in their "announcement" of this in telegram: > yes we know the URL has a email address. the account is suspended - we dont care
- ec109685 5y agoSuspended, but then Okta doesn't tell the world they were breached isn't a great look.
- tuwtuwtuwtuw 5y agoThat is too early to say. It could be that his account was suspended because he left the job, changed job responsibilities or something else. Not saying this looks good and really not trying to defend Okta, but a user account being terminated isn't proof that Okta knew about it.