virtual sim cards
According to these findings, the detection of hidden threats in enterprise IT networks before attackers can spy, spread and steal is becoming more critical, according to the report. Attackers choose the time and carefully conduct campaigns so that they occur within a few months.
As a result of analyzing specific actions of cybercriminals in recent campaigns used to steal important ICS information, the report found that “in several cases, the participants in the threats accessed workstations and servers on the corporate network that contained data output from ICS in production buildings energy. This is due to the suspicious administrator and the suspicious behavior of the Kerberos account. ”
Often over the course of several months, these slow, quiet reconnaissance missions include monitoring operator behavior and creating a unique attack plan. The study found that remote attackers entrenched themselves in networks with energy and utilities, creating malware to steal administrative credentials. Inside, they use administrative connections and protocols to conduct cross-section reconnaissance and distribution in search of confidential data on industrial control systems.
“The covert abuse of administrative authority gives attackers unrestricted access to critical infrastructure systems and data,” said David Monahan, managing director of security and risk management at Enterprise Management Associates. “This is one of the most important areas of risk in the life cycle of a cyber attack.”
A report based on observations and data published in the Black Hat Conference Edition on user behavior of the attack also found that during the attack phase with commands and control, 194 malicious external remote access behaviors were detected on 10,000 host devices and workloads Also, in each of the 10,000 host devices and workloads, 314 side attack movements were detected. And at the final stage of the attack life cycle at the stage of 10,000 host devices and workloads, an extrafiltration phase of 293 data smugglers was discovered.
