3 ms·
"To understand how the hack was carried out, the threat actor explains that they were able to sign into a Snowflake employee’s ServiceNow account using stolen c
by weinzierl 2y ago
"To understand how the hack was carried out, the threat actor explains that they were able to sign into a Snowflake employee’s ServiceNow account using stolen credentials, thus bypassing OKTA which is located on lift.snowflake.com."
I'm unfamiliar with ServiceNow and their website seems to be just marketing bable.
Can someone explain the role of ServiceNow in this scenario and why it important?
- p_l 2y agoServiceNow is a system used for many ticketing, CMDB, etc. tasks, including automation. That said, the quoted sentence boils down "the cookie we stole authorized us to service now instance bypassing SSO prompt".