The contractor purchased a $15 card reader sold by Saicoo on Amazon. As a result, government employees and contractors often turn to the internet to find compatible card readers.Īlarmingly, a contractor found that one such device is a vector for malware. However, approved card readers aren’t standard issue devices for cardholders. Many employees and contractors need to access their email remotely, which requires CAC authentication.
Cardholders don’t just use these cards onsite.
A government defense contractor relayed this discovery to Brian Krebs of KrebsOnSecurity, who published the details.ĭoD employees and contractors, along with military personal, use ID cards known as Common Access Cards (CAC) to access controlled spaces, as well as computer systems and networks. A recent discovery demonstrates how cyberattacks can be indirect and come from unexpected sources. The DoD is a high value target with an extensive attack surface due to its size and complexity. Thankfully, the DoD caught the cybercriminals and recovered the money, but this incident highlights the need for strong cybersecurity practices at the DoD and among its contractors. Earlier this month, we reported on a phishing attack that stole $23.5 million from the US Department of Defense (DoD).
0 kommentar(er)
