SANS infosec training org suffers data breach after phishing attack

guest · Aug 11, 2020

SANS infosec training org suffers data breach after phishing attack
August 11, 2020
https://www.bleepingcomputer.com/ne...rg-suffers-data-breach-after-phishing-attack/

The SANS cybersecurity training organization has suffered a data breach after one of their employees fell victim to a phishing attack.

The SANS Institute is one of the largest organizations that offer information security training and security certification to users worldwide.
In a notification posted to their site today, SANS states that one of their employees fell for a phishing attack that allowed a threat actor to gain access to their email account.

"We have identified a single phishing e-mail as the vector of the attack. As a result of the e-mail, a single employee's email account was impacted. Aside from the affected user, we currently believe that no other accounts or systems at SANS were compromised," states the SANS data incident notification.
Click to expand...

Those affected are being notified and should be on the lookout for targeted phishing attacks utilizing the stolen information.
BleepingComputer has reached out to SANS to learn more about the phishing attack and whether it was targeted but has not heard back.
Click to expand...

guest · Aug 14, 2020

SANS shares details on attack that led to their data breach
August 14, 2020
https://www.bleepingcomputer.com/ne...ails-on-attack-that-led-to-their-data-breach/

SANS has shared the indicators of compromise for a recent phishing attack that compromised one of their email accounts and led to a data breach.

When disclosing the attack, SANS stated that they would release information that they discover about the attack to benefit the cybersecurity community.
SANS releases indicators of compromise
Yesterday, SANS released the indicators of compromise (IOCs) for their phishing attack so that other organizations can make sure they were not affected.
Click to expand...

According to SANS, the initial attack started with a phishing email pretending to be a file shared by a SANS SharePoint service.

SANS states that once the malicious Office 365 app was installed, it would create a forwarding rule named 'Anti Spam Rule' that monitored for specific keywords.
SANS was not the only target for this phishing scam, and at least two other companies had uploaded similar emails to VirusTotal.
Click to expand...

Log in or Sign up

SANS infosec training org suffers data breach after phishing attack

guest Guest

guest Guest

Log in or Sign up

SANS infosec training org suffers data breach after phishing attack

guest Guest

guest Guest

Useful Searches