Who Else Was Hit by the RSA Attackers?
Summary: Krebs on Security published a previously unreleased list indicating that more than 760 organizations had networks communicating with some of the same control infrastructure used in the March RSA breach, with almost 20 percent of Fortune 100 companies on the list. The first victims appear to have begun contacting the attackers' control networks as early as November 2010, and a pie chart accompanying the list shows the overwhelming majority of command-and-control networks located in or around Beijing, China.
Key Takeaway: The list was shared with congressional staff, and it names organizations including Google, Intel, Cisco, eBay, Facebook, the IRS, Northrop Grumman and Freddie Mac - so the question for a security leader is whether your own network has been phoning home to infrastructure tied to this campaign, and whether you would know.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026