Express Computer
Home  »  Security  »  Sensitive credentials of 900 enterprises leaked on hacking forum

Sensitive credentials of 900 enterprises leaked on hacking forum

0 410

A Russian hacker has published passwords of over 900 enterprise VPN servers on a hacking forum visited by several ransomware groups, putting them at risk.

Even if those companies patch their VPN servers now, they need to change passwords to avoid hackers abusing the leaked credentials to take over devices and then spread to their internal networks, reports ZDNet.

The list of plaintext usernames and passwords includes 913 IP addresses of ‘Pulse Secure’ VPN servers.

All the ‘Pulse Secure’ VPN servers were running a firmware version vulnerable to the ‘CVE-2019-11510′ vulnerability.

The threat intelligence analyst Bank Security said the hacker used an exploit for the ‘CVE-2019-11510′ vulnerability to gain access to systems, dump server details (including usernames and passwords), and then collected all the information in one central repository.

The ‘Pulse Secure’ VPN servers are usually employed as access gateways into corporate networks so staff can connect remotely to internal apps from across the internet.

“These types of devices, if compromised, can allow hackers easy access to a company’s entire internal network,” said the report.

The list has been shared on a hacker forum that is frequented by multiple ransomware groups who break into corporate networks by leveraging network edge devices and ask for huge ransom demands.

The companies, whose names were not revealed in the report, “have to patch their Pulse Secure VPNs and change passwords with the utmost urgency”.

Get real time updates directly on you device, subscribe now.

Leave A Reply

Your email address will not be published.

LIVE Webinar

Digitize your HR practice with extensions to success factors

Join us for a virtual meeting on how organizations can use these extensions to not just provide a better experience to its’ employees, but also to significantly improve the efficiency of the HR processes
REGISTER NOW 

Stay updated with News, Trending Stories & Conferences with Express Computer
Follow us on Linkedin
India's Leading e-Governance Summit is here!!! Attend and Know more.
Register Now!
close-image
Attend Webinar & Enhance Your Organisation's Digital Experience.
Register Now
close-image
Enable A Truly Seamless & Secure Workplace.
Register Now
close-image
Attend Inida's Largest BFSI Technology Conclave!
Register Now
close-image
Know how to protect your company in digital era.
Register Now
close-image
Protect Your Critical Assets From Well-Organized Hackers
Register Now
close-image
Find Solutions to Maintain Productivity
Register Now
close-image
Live Webinar : Improve customer experience with Voice Bots
Register Now
close-image
Live Event: Technology Day- Kerala, E- Governance Champions Awards
Register Now
close-image
Virtual Conference : Learn to Automate complex Business Processes
Register Now
close-image