A news release issued by the World Health Organization (WHO) today says this week, some 450 active WHO email addresses and passwords were leaked online along with thousands belonging to others working on the novel coronavirus response. The leaked credentials did not put WHO systems at risk because the data was not recent. However, the attack did impact an older extranet system, used by current and retired staff as well as partners. WHO is now migrating affected systems to a more secure authentication system.
Experts Comments
April 26, 2020
These credentials are most likely from earlier data breaches, usually where people have used work emails on compromised third-party sites, hotel bookings, rewards programs, etc. The common “covid” nature of the organizations targeted strongly suggests that they are old credentials that have been bundled to take advantage of the current Wuhan virus crisis. The leaks may also be tied to political hostility to the Gates Foundation’s work on vaccinations and its participation in an October.....Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Craig Cooper, COO , provides expert commentary at @Information Security Buzz.
"It unfortunately reinforces the need for every organization to secure their systems and data...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/who-emails-passwords-leaked-cybersecurity-expert-comments
Facebook Message
@Craig Cooper, COO , provides expert commentary at @Information Security Buzz.
"It unfortunately reinforces the need for every organization to secure their systems and data...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/who-emails-passwords-leaked-cybersecurity-expert-comments