One Login, Many Files
An intruder used one compromised login to copy California student records from a testing nonprofit's file transfer site between May 22 and Sept. 18.
Key terms
AP Cybersecurity alignment
- 2.1.C.3In the initial-access phase of an attack, adversaries establish a foothold on the target’s computer, often through social engineering or compromised or weak credentials.Learning objective: Describe the phases of a cyberattack.
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
- 2.1.D.2An asset is anything valuable. Assets include financial resources, intellectual property, data, digital infrastructure, physical property, and reputation.Learning objective: Describe the risk assessment process.
AP Networking alignment
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.3.B.2Secure File Transfer Protocol (SFTP) can be used to transfer data between devices. SFTP uses SSH to establish a secure connection ensuring that all data, including login credentials, are encrypted during the transfer. SSH and…Learning objective: Apply CLI commands to securely transfer files.