Fox-IT - Lessons learned from a Man-in-the-Middle attack

FanJ · Dec 14, 2017

Fox-IT blog - 14 Dec 2017
https://blog.fox-it.com/2017/12/14/lessons-learned-from-a-man-in-the-middle-attack/

It’s become a widely accepted mantra that experiencing a cyber breach is a question of ‘when’ and not ‘if’. For Fox-IT ‘if’ became ‘when’ on Tuesday, September 19 2017, when we fell victim to a “Man-in-the-Middle” attack. As a result of the multi-layered security protection, detection and response mechanisms we had in place, the incident was both small and contained, but as a cyber security specialist it has made us look long and hard at ourselves. While the police investigation is still on-going, we are sharing details of this incident with the public now that we feel confident that most details are sufficiently clear. This is about who we are and what we do. We believe that ultimately in these cases, transparency builds more trust than secrecy and there are lessons to be learned, both good and bad, that we want to share.
Click to expand...

Read more there.

FanJ · Dec 14, 2017

The fact that this happened to a security company (that is involved in protecting Dutch "state secrets") has raised some attention, at least in The Netherlands.
Here is a Dutch article by newspaper "de Volkskrant":
https://www.volkskrant.nl/tech/kort...ertrouwelijke-bestanden-onderschept~a4545445/

FanJ · Dec 14, 2017

Graham Cluley blog:
"Fox-IT reveals hackers hijacked its DNS records, spied on clients' files.
Dutch security firm was not protecting its DNS entries with two-factor authentication."
https://www.grahamcluley.com/fox-it-dns-hack/

Kudos to Dutch security firm Fox-IT which has gone public about a cyber attack it suffered in September
Click to expand...

Rasheed187 · Dec 16, 2017

I'm sorry, but this is a bit embarrassing, you would think that such a company would have covered this stuff. I felt the same when I read about Kaspersky being hacked. But cool that both companies decided to be open about it, so we can all learn from it.

Log in or Sign up

Fox-IT - Lessons learned from a Man-in-the-Middle attack

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

Rasheed187 Registered Member

Log in or Sign up

Fox-IT - Lessons learned from a Man-in-the-Middle attack

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

Rasheed187 Registered Member

Useful Searches