Stefan Mileschin

It was a lemon entry Citrix

Iranian-backed hackers have stolen vast amounts of data from an IT outfit which handles the White House communications agency, the US military, the FBI and many American corporations.

Citrix was hacked twice, once in December and again Monday, according to Resecurity, which notified the firm and law enforcement authorities.

The attacks were not particularly sophisticated, the hackers just used brute force attacks and guess the passwords. The attack was carried out by the Iranian hacking group Iridium, which was also behind recent cyberattacks against numerous government agencies, oil and gas companies and other targets.

Charles Yoo, Resecurity's president, said the hackers nicked between six and 10 TB of datathrough several compromised employee accounts.

"So it's a pretty deep intrusion, with multiple employee compromises and remote access to internal resources", he said.

While there is no evidence the attacks directly penetrated US government networks, the breach carries a potential risk that the hackers could eventually find their way into sensitive government networks, experts said.

https://fudzilla.com/news/48300-iran...of-citrix-data