CISA warning: “Russian actors bypassed 2FA” – what happened and how to avoid it

[EricG]

This is not of concern to most users, just Windows Server I think. Expect more like these, this was May 2021.

The US Cybersecurity and Infrastructure Security Agency (CISA) has just put out a bulletin numbered AA22-074A, with the dramatic title Russian State-Sponsored Cyber Actors Gain Network Access by Exploiting Default Multifactor Authentication Protocols and “PrintNightmare” Vulnerability.

[ioneja]

Thanks for the heads up on this -- please keep posting things like this, still very relevant considering the current situation with Russia/Ukraine, etc...

[TenFour]

So often these hacks start with a stolen password or in some cases the password is guessed or brute forced due to a poor password. Individuals can avoid almost all hacks if they just do a few simple things:

1. Use a password manager.
2. Create long, unique passwords.
3. Never reuse a password anywhere.
4. Use some form of 2fa on important accounts.
5. Never click on any links in an email or text message.

[janusz]

Originally Posted by TenFour

.Never click on any links in an email or text message.

e.g. "click here to confirm your registration/new email address" ??

[TenFour]

Yes, I would agree that it is usually safe to click on a message in an email to sign in if you were just signing in to something. However, avoid clicking on links in emails that were unsolicited even if they appear completely genuine. For example, I receive a reminder to pay my credit card bill, but I don't click the link in the email--instead I go direct to the site and login to pay.

[janusz]

Originally Posted by TenFour

I receive a reminder to pay my credit card bill, but I don't click the link in the email--instead I go direct to the site and login to pay.

In my case the message from the bank is "your credit card statement is ready. Login to our internet banking and see it there" (mind you, there is no link to the banking site).

[TenFour]

In most cases, my bank and credit card notices include links to click on--I don't do it. My bank statement notice arrived this morning and included a link to go see it.