Citycomp, a German company that offers multi-vendor maintenance and infrastructure services was hacked and cybercriminals got away with sensitive financial information of some of the company’s largest customers. After the company refused a cyber extortion attempt, cybercriminals dumped the information online.
“Although there is no information about how this attack occurred on Citycomp, many of these breaches happen due to apt hackers that are able to find system vulnerabilities or to phish those who own admin accounts. Unfortunately, with phishing, bad actors don’t need to “hack” a site, instead they can get in through the front door. Now that the information has been exposed, bad actors will use it to take over the victim’s accounts or steal their identity. Companies offering services online can still mitigate this potential damage by leveraging a security framework that uses passive biometrics and behavioral analytics that identifies customers by their online behavior. This approach cannot be mimicked by cybercriminals and renders stolen credentials and personal information valueless. Once this is done, companies will see fewer instances of blackmail as the personal information at stake won’t be as valuable.”
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.