There was a second incident involving the DevOps engineer as part of the same attack. The theft from the cloud storage service and source code is what it calls the first incident. This week the company added more information describing the entire attack. S ome source code and technical information were also stolen from the company’s development environment and used to target another employee, obtaining credentials and keys which were used to access and decrypt some storage volumes within the cloud-based storage service. Also stolen was an encryption key for a portion of the encrypted backups.
LastPass, which is owned by GoTo, had previously detailed the attack, which saw a threat actor exfiltrating encrypted backups involving its Central, Pro,, Hamachi, and RemotelyAnywhere products that were stored on Amazon’s cloud storage. Password management provider LastPass has admitted that part of last August’s breach of security controls included hackers compromising the home computer of one of the company’s DevOps engineers to help in data theft.
Artificial Intelligence (923) Auto Tech (47) Blockchain (174) CanadianCIO (96) Careers & Education (4433) Channel Strategy (35) Cloud (2088) Communications & Telecom (423) Companies (1058) Data & Analytics (1297) Development (737) Digital Transformation (1235) Distribution (126) Diversity & Inclusion (66) Ecommerce (54) Editorial (0) Emerging Tech (24219) End User Hardware (51) Engineering (79) Financial (165) FinTech (87) Future of Work (347) Governance (107) Government & Public Sector (6084) Human Resources (865) Infrastructure (8522) IoT (6174) ITWC Morning Briefing (130) Leadership (4291) Legal (163) Legislation (170) Managed Services & Outsourcing (4313) Marketing (61) MarTech (3) Medical (31) Mobility (3429) Not For Profit (23) Open Source (30) Operations (85) People (149) Podcasts (2126) Privacy (642) Project Management (1099) Security (8026) Service (44) Smart Home (18) SMB (59) Social Networks (206) Software (4169) Supply Chain (122) Sustainability (108) Tech in Sports (5) Women in Tech (190)
0 kommentar(er)
