FX Cloud Breached
After a third party planted malicious programs in GMO's FX trading cloud, GMO says customer info was taken and it refused a demand of about $50 million.
Key terms
AP Cybersecurity alignment
- 1.2.C.3When available, users should enable multifactor authentication (MFA), which will require the user to provide extra proof of identity—such as a one-time code—in addition to the password as an extra layer of security.Learning objective: Explain how to make authentication stronger.
- 2.1.C.3In the initial-access phase of an attack, adversaries establish a foothold on the target’s computer, often through social engineering or compromised or weak credentials.Learning objective: Describe the phases of a cyberattack.
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
AP Networking alignment
- 1.4.B.4To prevent unauthorized account access through credential reuse or guessing, users should use strong, unique passwords for each account to prevent access if any single set of credentials is compromised.Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 1.4.B.6To protect devices and accounts from unauthorized access, users should configure strong security settings. Users should: • enable MFA • enable screen lock with a strong PIN, password, or biometric authentication • disable…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.