Infosys McCamish Systems Third-Party Breach: Possible Attack Vectors and Infrastructure

SecurityScorecard investigated a November 2023 incident in which LockBit claimed a breach of Infosys McCamish Systems (IMS). The analysis identified 23 potentially compromised IMS credentials, open SSH ports across 16 Infosys BPM IPs, and NetFlow evidence of repeated communications with known-malicious and anonymizing infrastructure (including a frequently communicating IP 45.115.113.94 linked to a compromised MikroTik router), indicating plausible attacker access vectors and emphasizing the need for stronger third-party vendor security.