Cyber-snoops broke into US military contractor, stole data, hid for months
Spies for months hid inside a US military contractor's enterprise network and stole sensitive data, according to a joint alert from the US government's Cybersecurity and Infrastructure Security Agency , the FBI, and NSA.
The intruders somehow broke into the defense org's Microsoft Exchange Server – the Feds still aren't sure how – and rummaged through mailboxes for hours and used a compromised admin account to query Exchange via its EWS API. The snoops also ran Windows commands to learn more about the IT setup and gathered up files into archives using WinRAR.
Interestingly, the cyberattackers also used the open source network toolkit Impacket to remote-control machines on the network and move laterally. And after sneaking around some more, they used a custom data exfiltration tool called CovalentStealer to siphon off sensitive data, which included contract-related information from shared drives.
While the federal government didn't attribute the break-in to any particular gangs or nation states, a blue box at the top of CISA's
Ireland Latest News, Ireland Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Where Are the Children's Books About Kids With Down Syndrome?'Our public spaces are becoming more inclusive of more people, and our children’s literature needs to reflect these shifts. Our stories tell us who matters enough to write about.' 📝 amyjuliabecker
Read more »
I wanted wood panels at home - with my lazy tip no one can tell the differenceMANY people are loving wooden panelling in homes at the moment, but it can be a commitment. One savvy homeowner showed how they found a very clever hack for nailing the look without having to…
Read more »
Mum's heartbreak as she tells children she has cancer'Nobody wants to tell their children they have got cancer'
Read more »
Putin’s Chaotic Mobilization Order Sends Shockwaves Through Russia | OilPrice.comVladimir Putin’s mobilization order has been chaos for Russians, with many receiving draft summons even though they should have been exempt.
Read more »
Royal Navy frigate sent to protect North Sea pipelines as Russia denies Nord Stream 'sabotage'The frigate will 'reassure those working near the gas pipelines', UK officials said
Read more »
UK imposes sanctions on IT services to RussiaAnnexed Donetsk? No more consultants for you then
Read more »