That’s why finding their way into cloud applications has become a hacker’s priority. Hackers know that most people constantly feel really busy, and that they have absolutely no idea what total number of accounts they’ve spawned in the world.
Hacking SaaS: Low Commitment and High Reward Even watching for remote international connections has become less effective, now that many attacks proxy their attempts via free VPNs in your geography. Assuming that keeping up with every account - their integrations with other apps, the inevitable permission-granting, and the security surrounding all of that (from actual passwords to multi-factor authentications that protect them) - is really difficult, how can you know if an account is compromised?Īlthough it is good practice to monitor for things like failed login attempts on new devices, these alerts can get lost in the noise of daily events - like the alerts that Google emails you when you login on a different device than usual, but one you still trust. With how entwined collaboration and communication have become, it is important to be aware of all the accounts in use at your organization and how they’re set up. Identifying these compromised accounts has become increasingly difficult, and also increasingly vital.
But depending on the SaaS, existing logins might stay open to the hacker even if they are discovered and the password is changed. To combat this, attackers tend to log in once and keep the connection alive to avoid multiple login events that might raise suspicion. At the same time, hackers have changed their mentality, shifting from the short-con to the long-con to extract as much data as possible (as quietly as possible) before the inevitable detection.
SaaS credentials have become as valuable as banking credentials because of the access they provide to other applications. As an administrator, how can you standardize healthy account management at your organization and reduce the risk of account compromise? What configurations and settings point to the presence of a hacker? In this blog, we identify the most common indicators of compromised accounts and recommend short-term and long-term solutions to protecting the integrity of accounts and their data.
0 kommentar(er)
