What is the attack? The login to the system is sle mean that after a fail login the login is not attempt again with the same data. If you log in to the same account with the wrong password many times, the account will be automatically lock to prevent abuse and crime. Unfortunately that didn’t happen in this case as the login was perform by a distribut botnet us multiple addresses. Finally the attacker manag to gain access to our customer’s account due to more than login attempts. This means that one of our customers has logins and passwords that they also use on other sites.
Valuable sales knowlge can be found in the book
Such logins and passwords went into a database leak from another website so attackers manag to gain access to user accounts in . Once inside the account the attacker did the follow: Spam the account with a link rirect to an archive contain the malware Export the address database on the account Import an external address database on the account. Measures taken Cook Islands B2B List after the discovery of the incident Procures were initiat immiately after the discovery of the incident to protect customers from additional losses. To some of them our actions may seem excessive but in any case we believe that our most important duty is to protect customer data. As part of our activities we carri out several actions.
Build a trustworthy and loyal community
From a technical point of view, we have forcibly chang the passwords of all users of the system and remind you that the passwords set in the system must be strong enough, unique, contain AZB Directory at least 2 characters, contain uppercase and lowercase letters, contain numbers and special characters. We reset the key for the affect accounts We block the endpoint from be available to log in with a login and password We temporarily disabl the functionality of the login and the application We introduc mechanisms on the login page to defend against botnet logins.
