Citrix Hacked by 'International Cybercriminals'
FBI informed Citrix this week of a data breach that appears to have begun with a 'password spraying' attack to steal weak credentials to access the company's network.
Virtual desktop and app vendor Citrix today said it had been alerted by the FBI on March 6 that its network had been breached.
Citrix said the FBI said it had "reason to believe" that international cybercriminals were behind the attack into its corporate network, most likely via password-spraying attacks to steal weak passwords and gain access to Citrix's network.
The attackers appear to have downloaded business documents, according to Citrix's internal forensics investigation findings thus far, but the company said it's not sure which data was breached. "At this time, there is no indication that the security of any Citrix product or service was compromised," Stan Black, Citrix CSIO wrote in a blog post today.
"Citrix deeply regrets the impact this incident may have on affected customers. Citrix is committed to updating customers with more information as the investigation proceeds, and to continuing to work with the relevant law enforcement authorities," Black wrote.
Read more here.
About the Author
You May Also Like
The State of Attack Surface Management (ASM), Featuring Forrester
Nov 15, 2024Applying the Principle of Least Privilege to the Cloud
Nov 18, 2024The Right Way to Use Artificial Intelligence and Machine Learning in Incident Response
Nov 20, 2024Safeguarding GitHub Data to Fuel Web Innovation
Nov 21, 2024