case study
Stopping A Dangerous Supply Chain Attack
Fraud Is Discovered
The retailer discovered it was the subject of financial fraud that included the creation and sale of fake gift cards. There was no clear attribution to any known threat group.
Sygnia Uncovers a Multi-million Dollar Supply Chain Attack
Sygnia performed a forensic investigation that uncovered the full attack scope, timeline, and methods. A wide compromise of the client’s corporate network was discovered, that included continuous threat-actor reconnaissance of the client’s financial systems. The scope of the fraud was quantified and found to reach several million dollars.
Attacker Eradicated
Sygnia identified a third-party IT provider as the attacker entry point. Sygnia put an end to the theft by eradicating all malicious access to the client’s corporate network and financial systems.
Mitigating Supply-chain Risk
The client received a comprehensive forensic report from Sygnia that detailed the root cause of the attack and quantified the scope of the financial theft. The current security practices of all third-party suppliers were further evaluated and improved where necessary to mitigate the risk of a future supply chain breach.
“Sygnia discovered that a third-party IT provider was the attacker entry point.”
RELATED CONTENT
BEC Remediation and Post-attack Resilience Enhancement
A Sygnia team identified the full attack chain including the original phishing email, subsequent credential harvesting, and malicious access methods.
Eradicating A Persistent Attacker
An advanced threat actor attacked the client. The threat actor gained domain admin privileges over the network, including access to critical servers and backups.
Log4J Attack Contained In Minutes
The client had previously engaged Sygnia to contain and eradicate an attacker, including deployment of Sygnia’s Advanced Monitoring for post-breach surveillance.
By clicking Subscribe, I agree to the use of my personal data in accordance with Sygnia Privacy Policy. Sygnia will not sell, trade, lease, or rent your personal data to third parties.