Attackers steal money through corporate VPN services

Kaspersky Lab has uncovered a new series of attacks on financial and telecommunications companies based in Europe.

The main goal of the attackers is to steal money. In addition, online scammers try to steal data to access financial information of interest to them.

Attackers steal money through corporate VPN services

The investigation showed that criminals are exploiting a vulnerability in VPN solutions that are installed in all attacked organizations. This vulnerability allows you to obtain data from the accounts of administrators of corporate networks and thus provides access to valuable information.

It is said that the attackers are trying to withdraw several tens of millions of dollars. In other words, if the attack is successful, the damage could be enormous.


Attackers steal money through corporate VPN services

β€œDespite the fact that the vulnerability was discovered in the spring of 2019, many companies have not yet installed the necessary update,” writes Kaspersky Lab.

During attacks, attackers obtain data from corporate network administrator accounts. After this, access to valuable information becomes possible. 



Source: 3dnews.ru

Add a comment