Forest Global Training Partners

Cyber Risks · Krebs on Security

Secret Service Investigates Breach at U.S. Govt IT Contractor

Summary: The U.S. Secret Service is investigating a breach at Miracle Systems LLC, an Arlington, Virginia IT contractor serving more than 20 federal agencies, after a Russian-language cybercrime forum seller offered access to its internal network for six bitcoins (~$60,000). CEO Sandesh Sharda confirmed the auction involved company-managed credentials and databases but said the data was years-old and tied only to internal test systems never connected to government clients, while acknowledging Hold Security's finding that at least eight internal systems were compromised on three occasions between November 2018 and July 2019 by Emotet.

What's compelling: The seller's screenshots included internet addresses tied to the Department of Transportation, NIH, and USCIS, and the contractor's own test systems were compromised three times by Emotet over nine months - a reminder that test environments and stale credentials are exactly where attackers look for a way in.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related