A news release issued by the World Health Organization (WHO) today says this week, some 450 active WHO email addresses and passwords were leaked online along with thousands belonging to others working on the novel coronavirus response. The leaked credentials did not put WHO systems at risk because the data was not recent. However, the attack did impact an older extranet system, used by current and retired staff as well as partners. WHO is now migrating affected systems to a more secure authentication system.
Experts Comments
The common “covid” nature of the organizations targeted strongly suggests that they are old credentials.
These credentials are most likely from earlier data breaches, usually where people have used work emails on compromised third-party sites, hotel bookings, rewards programs, etc. The common “covid” nature of the organizations targeted strongly suggests that they are old credentials that have been bundled to take advantage of the current Wuhan virus crisis. The leaks may also be tied to political hostility to the Gates Foundation’s work on vaccinations and its participation in an October.....Read More
Like(Dot Your Expert Comments
Only for registered and approved experts. Please register before providing comments. Register here
Linkedin Message
@Craig Cooper, COO , provides expert commentary for "dot your expert comments" at @Information Security Buzz.
"It unfortunately reinforces the need for every organization to secure their systems and data...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/who-emails-passwords-leaked-cybersecurity-expert-comments
Facebook Message
@Craig Cooper, COO , provides expert commentary for "dot your expert comments" at @Information Security Buzz.
"It unfortunately reinforces the need for every organization to secure their systems and data...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/who-emails-passwords-leaked-cybersecurity-expert-comments