Brinks Home targeted in criminal extortion; Troy Hunt criticizes vague incident FAQ
In Weekly Update 516, Troy Hunt comments on the Brinks Home incident, in which the company is the target of criminal extortion. He criticizes the company's FAQ as so heavily lawyered that it fails to answer basic incident response questions. Hunt describes a common breach pattern: attackers obtain data by vishing a target and abusing OAuth, demand payment, leak the data when unpaid, and the victim then faces class actions and notifies customers only 'where legally required'. He says this is a generic pattern and that it is not yet fully known to apply to Brinks. The article names no threat actor, gives no technical indicators and does not state what data was taken.
Technical Details
- The generic pattern Hunt describes is vishing leading to OAuth abuse for data access, followed by extortion and a data dump if the ransom is unpaid.
- Hunt states this has not yet been confirmed for Brinks Home.
Linha do tempo
-
Brinks Home targeted in criminal extortion; Troy Hunt criticizes vague incident FAQ
ler a análise desta fonte ocultar
In Weekly Update 516, Troy Hunt comments on the Brinks Home incident, in which the company is the target of criminal extortion. He criticizes the company's FAQ as so heavily lawyered that it fails to answer basic incident response questions. Hunt describes a common breach pattern: attackers obtain data by vishing a target and abusing OAuth, demand payment, leak the data when unpaid, and the victim then faces class actions and notifies customers only 'where legally required'. He says this is a generic pattern and that it is not yet fully known to apply to Brinks. The article names no threat actor, gives no technical indicators and does not state what data was taken.
Technical Details
- The generic pattern Hunt describes is vishing leading to OAuth abuse for data access, followed by extortion and a data dump if the ransom is unpaid.
- Hunt states this has not yet been confirmed for Brinks Home.