The 2019 OverWatch Mid-Year Report: Observations from the Front Lines of Threat Hunting

guest · Oct 1, 2019

CrowdStrike says an aviation industry hacker had significant high-level access to secrets
October 1, 2019
https://www.cnbc.com/2019/10/01/cro...-hacker-had-high-level-access-to-secrets.html

A new report from cybersecurity company CrowdStrike says an unnamed aviation industry company sustained a significant cyber intrusion through 2018 and 2019, featuring a hacker with “valid credentials” and a “high level of administrative access.”
The report gives further insight into what many experts have called persistent, often successful intrusions against the aviation industry.

The incident is another example of how corporate espionage works in critical industries, including those connected to the defense industrial sector like aviation. Nation-state hackers often target these companies to gather as much information and intellectual property as possible, while also establishing several avenues of access within a company meant to serve as wide-scale, longer term network observation points.

CrowdStrike’s new report says the anonymous aviation company’s attack likely began with the hacking of an internal business application at the company that was “exposed to the internet,” in other words, an internal corporate function that was accessible online.
The hack was part of a compilation of intelligence reports released by CrowdStrike on Tuesday.
Click to expand...

Falcon OverWatch Threat Hunting Report Finds an Increase in eCrime as Adversaries Mature Their Skills
Press Release: New CrowdStrike Threat Hunting Report Reveals Prolific Adversary Trends and Tactics
Download Report: A 2019 Mid-Year Review From the CrowdStrike Falcon OverWatch Team

Log in or Sign up

The 2019 OverWatch Mid-Year Report: Observations from the Front Lines of Threat Hunting

guest Guest

Log in or Sign up

The 2019 OverWatch Mid-Year Report: Observations from the Front Lines of Threat Hunting

guest Guest

Useful Searches