Some of Our Sources
- Technology Review
- Pearsonified
- Abduzeedo
- Creative Curio
- FanExtra - PSD
- 24 Ways
- Freelance Switch
- Design Modo
- Android Dissected
- Dev To
Help Webnuz
Referal links:
December 6, 2018 10:20 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/vvTMZfMPP9s/eastern-european-banks-were-attacked-via-backdoors-directly-connected-to-local-networks-re
Eastern European Banks Were Attacked Via Backdoors Directly Connected To Local Networks, Report Finds
An anonymous reader writes: Karspesky security researcher Sergey Golovanov writes about recent cybertheft incidents involving hardware backdoors planted by criminals. Each attack had a common springboard: an unknown device directly connected to the company's local network. In some cases, it was the central office, in others a regional office, sometimes located in another country. At least eight banks in Eastern Europe were the targets of the attacks, which caused damage estimated in the tens of millions of dollars. Hardware backdoors are cheap and immune to antivirus. A firmware modified OpenWrt based router can provide covert remote access, painless packet captures, and secure VPN connections with the flip of a switch. Will a flashlight and a ladder be common tools of computer security someday? After the cybercriminals entered a organization's building, connected a device to the local network and scanned the local network seeking to gain access to the resources, they proceeded to stage three. "Here they logged into the target system and used remote access software to retain access," writes Golovanov. "Next, malicious services created using msfvenom were started on the compromised computer. Because the hackers used fileless attacks (PDF) and PowerShell, they were able to avoid whitelisting technologies and domain policies. If they encountered a whitelisting that could not be bypassed, or PowerShell was blocked on the target computer, the cybercriminals used impacket, and winexesvc.exe or psexec.exe to run executable files remotely."at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/vvTMZfMPP9s/eastern-european-banks-were-attacked-via-backdoors-directly-connected-to-local-networks-re
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot