miscellany

FTA: typical of ‘copycat’ sites quickly thrown up by right-leaning groups

“Get something online quick with little to no attention paid to security or secure deployment, and all it takes is a skilled hacker to come along and rip it all to shreds.” https://t.co/o7SQ1SZ1ow

— George Atherton (@notrehta) February 16, 2022

from the article:

“Attackers only have to be right once, while defenders have to be right all of the time,” said Richard Henderson, chief information security officer with cybersecurity firm WithYouWithMe.

“It just takes a single mistake to allow a skilled attacker in, and once they’re inside its game over.”

The scope of the attack, which saw intruders not only take control of GiveSendGo’s DNS records but also get their hands on their donor lists, suggests they had “free rein” inside the company’s data.

“We’ve seen this multiple times in the past with other ‘copycat’ sites quickly thrown up rapidly by right-leaning groups,” he said.

“Get something online quick with little to no attention paid to security or secure deployment, and all it takes is a skilled hacker to come along and rip it all to shreds.”*