How did this happen?
Frame a plot/solution via a story (A video/Write-up). The winner would win a 32 GB persistent bootable KALI LINUX OS.
Submit
the You-tube video link/ Write-up @ hackin2minutes@gmail.com
Subscribe my Youtube channel : CYBER WIZARD
Story
Professional, coordinated attackers with a plan, breached a
server maintained by Anonym
University and walked off with nearly 800,000 records, and have
used the information to commit at least 30 acts of identity theft.
Anonym
officials reported on 19/06/2018, that between June and December
of this year, a server containing records on some 3,500 employees was breached.
Notification using all campus email was initiated, and the staffers were told
to watch for unusual patterns on their credit card statements.
The investigation is ongoing, with both an external expert
consultant and a cyber-crime investigators from Cyber team.
“The integrity of the Anonym’s
system has been restored and there is no indication of any additional instances
of compromise of personal information,” said Dr. Praveen, university president.
The lack of further incident is good news to be certain, Dr. Praveen’s
memo to the university staff on the incident is both disturbing and eye opening
from an Information Security perspective. If anything, it can serve as a
nightmare scenario for organizations on data protection.
According to the investigation details till now, between June
and December of this year, the attackers targeted a single folder on the main Anonym’s
server. The folder housed several files on it with personal information, but no
single file had a complete set of information.
“However, by working between files, the hacker(s) have been able
to piece together enough information to be able to engage in the theft of
identity of at least 100 employees...by working between files, data regarding
Name, Adhar number,Pan number, Date of Birth, and Deposit Account numbers were
accessed. Additional directory information such as address, phone numbers,
college email address, etc. was also likely compromised.”
In addition, the stolen data has been used to apply for SBI
credit cards under the employee’s name.
“The access pathway used to invade our main server has been
sealed. We hope to know, by the end of this week precisely who had their
information compromised,” Dr. Praveen added.
Story by SAWAN BHAN
Comments
Post a Comment