Forest Global Training Partners

Cyber Risks · Krebs on Security

HBGary Federal Hacked by Anonymous

Summary: HBGary Federal, a security firm whose chief Aaron Barr said he had identified Anonymous' leaders through social networking sites, was hacked by Anonymous after the Financial Times quoted Barr's plan to release the findings at a San Francisco security conference. The group posted archives of company executive emails on file-trading networks, defaced the firm's website, and hijacked employee Twitter accounts; HBGary co-founder Greg Hoglund said the intruders breached a tech-support server and an insecure HBGary Federal web server, then used credentials belonging to Barr, an email administrator, to move laterally through other systems.

Key Takeaway: Hoglund said publishing the stolen email would expose proprietary data likely to cost HBGary millions of dollars, and the intrusion began on a non-important system before lateral movement reached everything else.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related