Renewed PeopleSoft Cyber Attacks
Mandiant reports ShinyHunters has resumed global cyber attacks exploiting Oracle PeopleSoft vulnerabilities.
Anonymous
Google’s Mandiant says the ShinyHunters hacking group has resumed mass exploitation of a vulnerability in Oracle PeopleSoft, adapting its tactics to target organizations that added web application firewall rules but did not install Oracle’s security update. The latest campaign affected dozens of systems worldwide across sectors including higher education, technology, health care, agriculture, transportation and government; an earlier wave mainly hit universities. ShinyHunters has claimed it used the flaw to access FBI data, and reports say the group disclosed names of personnel in sensitive units and obtained medical and psychiatric records. The FBI says it is investigating the reported breach, but the claim of access to its data has not been independently verified, and Oracle did not comment.
Key Points
1
Mandiant said the earlier wave of attacks ran from May 27 through June 9.
2
Mandiant’s threat-intelligence report announcing the renewed campaign came several days after ShinyHunters claimed it had accessed FBI data.
3
PeopleSoft is widely used to manage payroll, human-resources and student data, which makes it a high-value target for attackers, according to the article.
Sentiment
Mostly NegativeNEGATIVENEUTRALPOSITIVE
Publishers
29
Articles
59
Reach
88
A
AnonymousAuthor
