An advanced hacking operation that last year stole health data on 1.5 million Singaporeans, including the prime minister, targeted an unpatched version of Microsoft Outlook, an official inquiry has found. The hackers exploited a known vulnerability in Outlook using “a publicly available hacking tool, which allowed the attacker to install malware on compromised workstations,” says a more than 400 page report published Thursday by a government-backed commission. The investigation evoked advice that cybersecurity professionals often give clients: hackers will take the easiest way into a network – without using their top-shelf tools. Although the software upgrade for Outlook was slated to be applied through a regular patching cycle, the workstation was still vulnerable when it was compromised in December 2017, investigators said. The malicious cyber campaign, which lasted more than 10 months, compromised the health data of one of four people living in Singapore, a wealthy city-state in Southeast Asia where tech […]
The post APT heist of Singapore health data exploited Microsoft Outlook, inquiry finds appeared first on CyberScoop.
Continue reading APT heist of Singapore health data exploited Microsoft Outlook, inquiry finds→