CISA: Hackers sun yi nasarar biyan asusun MFA girgije

Anonim
CISA: Hackers sun yi nasarar biyan asusun MFA girgije 18438_1

Hukumar Kula da Lantarki da Hukumar Kula da Kayan Amurka (CISA) ta bayyana cewa CyberCrrididdigar ingantacciyar yarjejeniya (MFA) domin yin sulhu asusun don wasu ayyukan girgije.

Bayanin hukumar ta ce masu zuwa: "CISA tana da ingantacciyar bayani wanda aka gudanar da hare-hare mai cinare-hare-hare da aka gudanar akan ayyukan girgije iri daban-daban. Cybercralis, wanda ya halarci hare-hare, ya ji daɗin dabaru da dabara, ana yin ƙoƙarin shiga cikin tsarin, hare-hare kamar su "Pass-da-kuki" da sauransu. Wannan ya basu damar nemo maki mai rauni a cikin tsarin tsaro na wadanda abin ya shafa. "

CISA Lura cewa CinberCrrials sun daɗe da koyo don samun damar samun wasu dukiyar girgije na wadanda abin ya shafa ta amfani da hare-hare mai ƙarfi, amma wasu hackers sun gaza saboda yin rashin jin daɗin yin hasashen shaidar ko saboda wanda aka azabtar MFA.

Amma aƙalla a cikin abin da ya faru na tsaro guda kwanan nan, Hackers sun sami nasarar samun nasarar shiga asusun mai amfani ko da tare da ingantaccen tabbataccen tabbataccen tabbataccen tabbataccen tabbataccen tabbataccen tabbataccen tabbataccen (MFA).

CISA yana ɗaukar cewa hackers sun yi nasarar "kashe ka'idojin tabbatar da gaskiyar MFA a cikin harin da ke wucewa. A lokacin irin wannan cyberatka, da masu fashin kwamfuta sun riga sun kama wani ingantacce yayin yin amfani da cookies ɗin cookies ɗin da aka sata don izini a cikin ayyukan kan layi da aikace-aikacen yanar gizo.

Hukumar Kula da Wuraren Murmushi da Tsarin Tsaro sun kuma yi rijiga gaskiyar abin da ke cikin sadarwar yanar gizo, wanda aka samu bayan yin rikodin asusun mai amfani, don yin amfani da asusun mai amfani da asusun ajiya a cikin kungiyar.

Tare da wasu masu cinikin yanar gizo, an lura da masana Cisa cewa hackers sun canza ko dokokin imel da bayanan bincike don tattara bayanan sirri ta atomatik.

"Baya ga canza ka'idojin imel wanda ke akwai don masu amfani, wanda ke haifar da jujjuyawar atomatik na haruffa masu amfani (RSS) na wasu masu amfani. An yi hakan ne wadanda abin ya shafa ba su ga wani gargadi game da ayyukan cutarwa ba, "an taƙaita shi a CISA.

FBI ya riga ya gargadi kungiyoyin Amurka wadanda suke jin cin zarafin tururuwa ta atomatik a cikin abokan cinikin yanar gizo a cikin kasuwancin imel na kasuwanci.

Abun ban sha'awa abu akan cisclub.ru. Biyan kuɗi zuwa Amurka: Facebook | VK | Twitter | Instagram | Tabal | Zen | Manzo | ICQ NEW | YouTube | Bugun jini.

Kara karantawa