.gif)
.jpg)
.gif)
A little over a week after JumpCloud reset API keys of customers impacted by a security incident, the company said the intrusion was the work of a sophisticated nation-state actor.
The adversary “gained unauthorized access to our systems to target a small and specific set of our customers,” Bob Phan, chief information security officer (CISO) at JumpCloud, said in a post-mortem report. “The attack vector used by the threat actor has been mitigated.”
The U.S. enterprise software firm said it identified anomalous activity on June 27, 2023, on an internal orchestration system, which it traced back to a spear-phishing campaign mounted by the attacker on June 22.
While JumpCloud said it took security steps to shield its network by rotating credentials and rebuilding its systems, it wasn’t until July 5 when it detected “unusual activity” in the commands framework for a small set of customers, prompting a forced-rotation of all admin API keys. The number of affected customers was not disclosed.
Further analysis of the breach, per the company’s disclosure, unearthed the attack vector, which it described as a “data injection into the commands framework.” It also said the attacks were highly targeted.
JumpCloud, however, did not explain how the phishing attack it spotted in June is connected to the data injection. It’s currently not clear if the phishing emails led to the deployment of malware that facilitated the attack.
Shield Against Insider Threats: Master SaaS Security Posture Management
Worried about insider threats? We’ve got you covered! Join this webinar to explore practical strategies and the secrets of proactive security with SaaS Security Posture Management.
Additional indicators of compromise (IoCs) associated with the attack shows that the adversary leveraged domains named nomadpkg[.]com and nomadpkgs[.]com, a likely reference to the Go-based workload orchestrator used to deploy and manage containers.
“These are sophisticated and persistent adversaries with advanced capabilities,” Phan said. JumpCloud has yet to reveal the name and the origins of the group allegedly responsible for the incident.
Unique Visitors
[url=http://lyricalm.online/]lyrica 75 mg pill[/url]
[url=https://medrol.science/]medrol 32 mg[/url]
[url=https://suhagrasildenafil.foundation/]suhagra 100mg buy online india[/url]
[url=http://proscar.skin/]minoxidil finasteride[/url]
[url=https://tenormina.charity/]atenolol 25[/url]
[url=http://vardenafil.party/]vardenafil 20 mg canada[/url]
[url=http://trimox.party/]augmentin 625mg cost[/url]
[url=http://prazosin.science/]prazosin for ptsd[/url]
[url=https://aurogra.party/]buy aurogra 100[/url]
[url=http://suhagrasildenafil.foundation/]suhagra tablet online purchase[/url]
[url=https://lyricalm.online/]lyrica 600 mg[/url]
[url=https://suhagrasildenafil.foundation/]suhagra 50 mg buy online india[/url]
[url=http://trimox.party/]where to get augmentin[/url]
[url=http://medrol.science/]medrol 32[/url]
[url=http://cafergot.charity/]cafergot tablets[/url]
[url=https://medrol.science/]buy medrol online[/url]
[url=http://aurogra.party/]aurogra tablets[/url]
[url=https://tenormina.charity/]atenolol 50 mg price in india[/url]
[url=http://tenormina.charity/]atenolol 40 mg price[/url]
[url=https://trimox.party/]how much is amoxicillin 500mg[/url]
[url=https://cafergot.charity/]cheap cafergot[/url]
[url=https://vardenafil.party/]levitra generic usa[/url]
[url=http://cymbalta.science/]cymbalta without a prescription[/url]
[url=http://inderala.charity/]propranolol cost uk[/url]
[url=https://lyricalm.online/]generic lyrica canada[/url]
[url=http://cymbalta.science/]cymbalta price in india[/url]
[url=https://glucophage.charity/]buy metformin without a proscription[/url]
[url=http://medrol.science/]medrol 4mg price in usa[/url]
[url=http://allopurinol.charity/]allopurinol for sale[/url]
[url=http://celebrex.charity/]buy celebrex uk[/url]
[url=http://cafergot.charity/]cafergot online[/url]
[url=https://ciprofloxacincipro.online/]cipro 750 mg tablet[/url]
[url=http://prazosin.science/]prazosin 2mg capsules[/url]
[url=https://aurogra.party/]aurogra 100 online[/url]
[url=http://allopurinol.charity/]allopurinol 150 mg[/url]
[url=http://glucophage.charity/]buy metformin over the counter[/url]
[url=https://stromectol.download/]stromectol tablets uk[/url]
[url=http://cymbalta.science/]cymbalta generic coupon[/url]
[url=http://ciprofloxacincipro.online/]buy ciprofloxacin 500mg online[/url]
[url=https://medrol.science/]medrol 500 mg[/url]
[url=https://tenormina.charity/]atenolol medication[/url]
[url=https://lyricalm.online/]lyrica tablets 50mg[/url]
[url=http://cymbalta.science/]cymbalta brand name[/url]