Storm Chasing: How We Hacked Your Cloud
ID: 962673dc-99e6-58ad-8a92-a06106074a4e
STIX ID: report--962673dc-99e6-58ad-8a92-a06106074a4e
Feed Name: Black Hills Infosec Blog
Threat Score
This blog post recounts a black-box external assessment where attackers password-sprayed Office 365 accounts, used a compromised mailbox to enumerate the Outlook address book and SharePoint (discovering sensitive documents and VPN configuration), then used that information to connect via VPN and escalate to domain admin; the author recommends enabling multi-factor authentication and coordinating third-party pentest authorization.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.