United Nations’ Computers Breached by Hackers Earlier This Year



The credentials belonged to an account on the U.N.’s proprietary project management software, called Umoja. From there, the hackers were able to gain deeper access to the U.N.’s network, according to cybersecurity firm Resecurity®, which discovered the breach. The earliest known date the hackers obtained access to the U.N.’s systems was April 5, and they were still active on the network as of Aug. 7.

“Organizations like the U.N. are a high-value target for cyber espionage activity,” Resecurity® Chief Executive Officer Gene Yoo said. “The actor conducted the intrusion with the goal of compromising large numbers of users within the U.N. network for further long-term intelligence gathering.”

The attack marks another high-profile intrusion in a year when hackers have grown more brazen. JBS SA, the world’s largest meat producer, was hit by a cyberattack this year that forced the shutdown of U.S. plants. Colonial Pipeline Co., operator of the biggest U.S. gasoline pipeline, also was compromised by a so-called ransomware attack. Unlike those hacks, whoever breached the U.N. didn’t damage any of its systems, but instead collected information about the U.N.’s computer networks.

Resecurity® informed the U.N. of its latest breach earlier this year and worked with organization’s security team to identify the scope of the attack. U.N. officials informed Resecurity® that the hack was limited to reconnaissance, and that the hackers had only taken screenshots while inside the network. When Resecurity®’s Yoo provided proof to the U.N. of stolen data, the U.N. stopped corresponding with the company, he said... Please continue the article at the source

Source: TIME

Keep up to date with the latest cybersecurity news and developments.

By subscribing, I understand and agree that my personal data will be collected and processed according to the Privacy and Cookies Policy

Cloud Architecture
Cloud Architecture
445 S. Figueroa Street
Los Angeles, CA 90071
Google Maps
Contact us by filling out the form.
Try Resecurity products today with a free trial