FBI: FortiBleed attackers can lock organizations out of their own firewalls
Details from an FBI investigation into the ongoing FortiBleed attacks reveal that victims could be locked out of their own firewall even as attackers remain logged in. After gaining access to a backend server left exposed by the attackers, the FBI and US Secret Service have…
Ningún otro medio seguido por Zonactu publica todavía esta noticia.
During an intrusion, attackers create new accounts that were not previously present on the device. In some cases, they then delete existing accounts, preventing organizational persistence and attempting to move laterally through the environment.
“When you no longer have access to your own firewall, you cannot just apply a software patch and move on,” said Ben Bernstein , manager, cybersecurity advisors team at Huntress. “These attackers know organizations will have to physically factory reset and rebuild the hardware before the encryption starts.”
