SnapChat’s payroll department was targeted by an isolated email phishing scam in which a scammer pretended to be the CEO and asked for payroll information, Mártin Illés, Product Evangelist at Balabit have the following comments on it.
“The snapchat breach is another example of where hackers become “insiders” using social engineering tactics – this is obviously much easier and beneficial for them than writing zero-day exploits.
Although traditional access control tools and anti-malware solutions are necessary in today’s corporate cyber defences, these tend to only protect companies’ sensitive assets against external cyber attacks. However, once a cyber criminal breaks through the corporate network and becomes an “insider”, it is extremely difficult to detect and defend against.
Hijacked accounts, such as when a legal username and password is misused, can only be detected efficiently if it can be compared to a user’s “normal” activities and behaviour using the systems. For example, login time and location, speed of typing, used commands, etc. User Behaviour Analytics tools that provide baseline profiling about real employees, can detect abnormal behaviour of users’ accounts and alert the security team or block user activities until further notice – a crucial tool for organisations today.”
Balabit – headquartered in Luxembourg – is a leading provider of contextual security technologies with the mission of preventing data breaches without constraining business. Balabit operates globally through a network of local offices across the United States and Europe together with partners.
Balabit’s Contextual Security Intelligence™ Suite protects organizations in real-time from threats posed by the misuse of high risk and privileged accounts. Solutions include reliable system and application Log Management with context enriched data ingestion, Privileged User Monitoring and User Behaviour Analytics. Together they can identify unusual user activities and provide deep visibility into potential threats. Working in conjunction with existing control-based strategies Balabit enables a flexible and people-centric approach to improve security without adding additional barriers to business practices.
Founded in 2000 Balabit has a proven track record including 23 Fortune 100 customers amongst over 1,000,000 corporate users worldwide.