European bank suffers months of unauthorized VPN access through vendor
Unit 42 assisted a European bank after internal teams detected unauthorized VPN-based access attempts spanning several months.
FTMQ Security, written by our newsroom0 views
Internal security staff at a European bank detected unusual activity on its central IT system and brought in Unit 42 to investigate, Unit 42 reported. Investigators discovered unauthorized VPN-based access attempts that spanned several months. [1]
Unit 42 was engaged to determine the full scope of the intrusion, locate any persistent footholds, and secure the network environment. [1]
Third-party management involves monitoring and mitigating risks from external entities such as vendors, contractors, and software as a service providers. As FTMQ Security reported earlier, a separate third-party support platform compromise at EY exposed sensitive client data for Goldman Sachs and Man Group. [4][5]
Unit 42 stated that it released the findings to provide defense strategies to help other organizations detect and counter similar infrastructure threats. [1]
In short
- A European bank detected unauthorized VPN access attempts spanning several months.
- Unit 42 was hired to locate persistent footholds and secure the network.
- The incident highlights security risks associated with third-party vendors.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party RiskUnit 42, 3h ago (the report this story comes from)
Background
- [2]Denial-of-service attack on Wikipedia
- [3]Adam Watts (musician) on Wikipedia
- [4]Third-party management on Wikipedia
- [5]EY Data Breach Exposes Information of Goldman Sachs and Man Group Clients FTMQ Security, 5d ago
Our newsroom writes these reports with the help of software, from the 5 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Meta suffers GitHub breach exposing corporate code and employee dataTop Stories, 1h ago
- EY Data Breach Exposes Information of Goldman Sachs and Man Group ClientsTop Stories, 5d ago
More in Threat Intelligence
- CISA warns of privilege escalation vulnerability in Inductive Automation Ignition1h ago
- Swann security cameras contain authentication flaws allowing unauthorized video access1h ago
- Japan declares first cyberspace emergency following severe automated ransomware attacks1d ago
- Hackers abuse custom GPTs to execute ClickFix malware attacks1d ago
- AvisLoader Windows Malware Uses Peer to Peer Network to Resist Disruption1d ago
- US Offers Ten Million Dollar Reward for Alleged Hafnium Hacker4d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.