Notorious crooks broke into a company network in 48 minutes. Here's how.
Briefly

A report reveals how attackers are enhancing their speed and tactics, allowing rapid infiltration into corporate networks. After a massive phishing onslaught, attackers infiltrated a manufacturing company within an hour. With breakout times shrinking significantly, security firms note a 22% decrease in the time threat actors take to move laterally within networks. Effective threat containment during this critical period is essential to avoid serious consequences like data loss and reputational damage. This necessitates that defenders increase their speed and vigilance alongside the attackers' evolving strategies.
"For defenders, breakout time is the most critical window in an attack," ReliaQuest researcher Irene Fuentes McDonnell wrote. "Successful threat containment at this stage prevents severe consequences."
As awareness of ransomware attacks increases, security companies and their customers have grown savvier at detecting breach attempts and stopping them before they gain entry.
The spam barrage was simply a decoy. It created the opportunity for the threat actors-most likely part of a ransomware group known as Black Basta.
Read at Ars Technica
[
|
]