3 ms·
I would think that the same argument could me made for Managed Service Providers handling all IT work at any decent sized org. MSPs have to be one of the juici
by consumer451 3y ago
I would think that the same argument could me made for Managed Service Providers handling all IT work at any decent sized org.
MSPs have to be one of the juiciest targets, and recent history would indicate that they are.
- pier25 3y agoIndeed. Heroku was hacked in 2022. https://www.bleepingcomputer.com/news/security/heroku-admits-that-customer-credentials-were-stolen-in-cyberattack/ https://www.bleepingcomputer.com/news/security/heroku-admits...
- consumer451 3y agoOh, I didn't mean cloud providers, I mean more like when a Fortune 500 company's management decides to shutdown their IT department and outsource the entire function to one of a handful of offshore companies who handle many other important companies as well. https://therecord.media/managed-service-providers-cyberattacks-warning-five-eyes https://therecord.media/managed-service-providers-cyberattac... https://darknetdiaries.com/transcript/103/ https://darknetdiaries.com/transcript/103/ > This is an interesting story since the threat actor targeted MSPs to go after their customers and then carry out their objectives from there. MSPs are pretty common. More and more companies are outsourcing their IT infrastructure, so to target them makes a lot of sense if your goal is to steal intellectual property. It’s sort of like going after the janitor’s key ring which can get you access into many buildings in town.