SolarWind’s Data Breach – Update
Some of the information stolen from the various companies after the hack into Solarwinds is now up for sale. Β
What’s on the shelf:
- Microsoft Information (Partial Source Code) for $ 600k
- Cisco Information (source code for some products) for $ 500k
- SolarWinds information (source code of the entire product) for $ 200k.
- FireEye Information (Red Team Assault Tool) for $ 50k.
Oh, and there is a sale … a package of all the above information for a million dollars. Β
WIIFM (What’s in it for me)
Beware: the next wave of ransomware and malware will not be recognized by antivirus which means that if you install it, the hackers will have 6 to 9 months of data
WSID2P (What should I do to protect)
Be aware. They are coming for you, and they’ll use any trick in the book for it.Β
Get informed and Start to protect your company now.
( Source: http://solarleaks.net/)
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
Storm-2657 Payroll Pirate Attacks Expose University HR Risks
π¨ Storm-2657 Payroll Pirates Target Universities
Microsoft warns of attacks hijacking employee accounts to steal salaries.
π‘ HR SaaS platforms like Workday are being exploited with phishing and MFA bypass.
π₯ Attackers use AiTM phishing links, enroll their own MFA devices, and hide email notifications to reroute payroll.
β‘ 11 accounts compromised across three universities sent phishing emails to nearly 6,000 targets.
β Adopt phishing-resistant MFA like FIDO2 keys.
β Review accounts for unknown MFA devices and malicious inbox rules.
β Educate staff to recognize phishing tactics.
AUMINT.io helps organizations detect hidden gaps through simulations and continuous monitoring β Book your session now
.
#CyberSecurity #MFA #Phishing #PayrollSecurity #HigherEducation #MicrosoftSecurity