Brother
Professional
- Messages
- 2,590
- Reaction score
- 544
- Points
- 113
Attackers compromised the network using stolen credentials for a Umoja account.
Hackers hacked into the United Nations computer network and stole information that could be used to attack UN agencies.
According to Bloomberg, attackers compromised the network using stolen account credentials for Umoja, a UN proprietary resource management system. Using the account, the hackers penetrated deeper into the UN network, Resecurity said. The attackers were online from April 5 to August 7, collecting information on UN computer systems for, it is assumed, further espionage.
Resecurity experts notified the UN of the hack earlier this year. According to UN representatives, the hacking was limited only to intelligence and, while online, hackers simply took screenshots. When Resecurity provided evidence of data theft, the organization cut off contact with the company.
The compromised Umoja account was not protected by two-factor authentication. According to experts, hackers acquired credentials for an account on the darknet. For example, numerous Russian-language hacker forums offer databases with stolen credentials of various organizations, including logins and passwords of UN employees. You can buy such a base for only $ 1,000.
Hackers hacked into the United Nations computer network and stole information that could be used to attack UN agencies.
According to Bloomberg, attackers compromised the network using stolen account credentials for Umoja, a UN proprietary resource management system. Using the account, the hackers penetrated deeper into the UN network, Resecurity said. The attackers were online from April 5 to August 7, collecting information on UN computer systems for, it is assumed, further espionage.
Resecurity experts notified the UN of the hack earlier this year. According to UN representatives, the hacking was limited only to intelligence and, while online, hackers simply took screenshots. When Resecurity provided evidence of data theft, the organization cut off contact with the company.
The compromised Umoja account was not protected by two-factor authentication. According to experts, hackers acquired credentials for an account on the darknet. For example, numerous Russian-language hacker forums offer databases with stolen credentials of various organizations, including logins and passwords of UN employees. You can buy such a base for only $ 1,000.
