Iranian cyber actors are targeting critical infrastructure entities

The CISA alert of Iranian cyber actors' brute force and credential access activity is a good reminder - especially during Cybersecurity Awareness Month - that these malicious actors are working to abuse 'Multifactor Authentication (MFA) Exhaustion.' If, as a good cyber-aware person, you've enabled MFA on your social networking, WhatsApp or other messaging apps, and bank accounts, you may have grown used to getting and approving MFA requests.

Malicious actors are constantly testing credentials they've obtained through breaches. They hope that the combination of these credentials and MFA exhaustion will let them take over your account. While the CISA alert specifically mentions critical infrastructure as the target of these malicious actors, this diligence is important to prevent access to your work and personal accounts.

While the warning discusses Iranian cyber actors, it is important to keep in mind that these cyber actors are not the only nation-state actors utilizing lateral movement.

Read at Securitymagazine