The $387M Heist
Hackers broke into crypto exchange Bitget through flaws in two of its own security devices, then drained $387.5 million in about three hours.
Key terms
AP Cybersecurity alignment
- 2.1.C.4After gaining access during an attack, adversaries establish persistence to maintain access without needing to regain it. They may use a command and control (C2) protocol to send commands to the device and receive output,…Learning objective: Describe the phases of a cyberattack.
- 2.1.C.5In the lateral-movement phase of an attack, adversaries try to escalate their privileges by accessing computers and user accounts with elevated permissions to services and data.Learning objective: Describe the phases of a cyberattack.
- 2.1.G.3A defense-in-depth strategy allows for resilience in data protection so when one security control is bypassed by an adversary, another security control may still prevent access to the data or system or limit the damage done to…Learning objective: Explain why a defense-in- depth security strategy is necessary to optimally protect an organization.
AP Networking alignment
- 3.4.B.5Security controls to limit lateral movement or unintended communication between segments can include: • allowing only essential services, such as printing, to communicate across segments • deny-by-default firewall or access…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a segmented LAN.
- 4.5.A.3Widespread data compromise, service outages, or loss of administrative control can occur when an adversary or malicious software moves laterally across a network. These impacts are more likely in segmented or large networks…Learning objective: Identify the impacts of common threats and vulnerabilities in a managed network.