According to ZDNet US Secret Service says hackers are breaching MSPs to orchestrate ransomware attacks, point-of-sale intrusions, and business email compromise (BEC) scams. The US Secret Service sent out a security alert last month to the US private sector and government organisations warning about an increase in hacks of managed service providers (MSPs). MSPs provide remote management software for companies. MSPs can be simple services like file-sharing systems to complete solutions that manage a customer’s entire computer fleet. Most MSP services are built around a server-client software architecture. The server part can be remotely hosted with the MSP inside a cloud infrastructure or installed on-premise with the client. Usually, getting access to the server component of an MSP grants an attacker full control of all software clients.
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.