Hackers Use Heartbleed Bug to Attack 'Major Corporation' - WRCBtv.com | Chattanooga News, Weather & Sports

Hackers Use Heartbleed Bug to Attack 'Major Corporation'

Posted: Updated:
NBC News - Hackers took advantage of the Heartbleed vulnerability to break into a major corporation’s network, less than a day after the bug was brought to the public’s attention, security experts told The New York Times.

Officials with Mandiant, an Alexandria, Va.-based network security firm, said in a blog post Friday that a hacker or hackers leveraged the Heartbleed bug to break into an employee’s virtual private network, or VPN.

“Once connected to the VPN, the attacker attempted to move laterally and escalate his/her privileges within the victim organization,” Mandiant said.

Mandiant didn’t identify the company by name, but a Mandiant investigator told the Times, it is a “major corporation.”

The attack occurred on April 8, just one day after the Heartbleed bug became public knowledge. Officials are still assessing what, if any, damage was caused by the hack, the Times said.

Heartbleed is a serious security flaw in OpenSSL, the software that a huge number of websites use to encrypt and transmit data. Hackers exploiting the bug can gain access to sensitive private information such as usernames and passwords.

To date, much of the discussion about Heartbleed has focused on an attacker using the vulnerability to steal private encryption keys from a Web server. The case cited by Mandiant exposed another danger: the potential for hijacking user sessions while employees are logged on to a corporate network.

The Mandiant case is one of the first known attacks involving Heartbleed. Earlier this week, Canadian police charged a 19-year-old man in connection with exploiting the bug to steal taxpayer data from a government website.


  • NewsMore>>

  • Eclipse weather forecast: Best in West, least in East

    Eclipse weather forecast: Best in West, least in East

    Monday, August 21 2017 1:46 PM EDT2017-08-21 17:46:28 GMT
    If you want good eclipse watching weather, Oregon and Idaho look like the best spot.More
    If you want good eclipse watching weather, Oregon and Idaho look like the best spot.More
  • What the Tech? Eclipse Megamovie

    What the Tech? Eclipse Megamovie

    Monday, August 21 2017 1:12 PM EDT2017-08-21 17:12:20 GMT

    The solar eclipse will likely be the most photographed event in history as millions of people with smartphone cameras in hand won't be able to resist snapping a picture. What do you do with those photos? Google is teaming up with a university and scientists to make a movie of the eclipse using photos uploaded to its site.

    More

    The solar eclipse will likely be the most photographed event in history as millions of people with smartphone cameras in hand won't be able to resist snapping a picture. What do you do with those photos? Google is teaming up with a university and scientists to make a movie of the eclipse using photos uploaded to its site.

    More
  • Ole Miss to open drug, alcohol abuse center

    Ole Miss to open drug, alcohol abuse center

    Monday, August 21 2017 1:06 PM EDT2017-08-21 17:06:38 GMT
    William Magee (Source: University of Mississippi)William Magee (Source: University of Mississippi)

    A new program at the University of Mississippi hopes to reduce drug and alcohol abuse.

    More

    A new program at the University of Mississippi hopes to reduce drug and alcohol abuse.

    More
Powered by Frankly