Whistleblower: Ubiquiti Breach “Catastrophic”

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by cutemonster on Tuesday March 30, 2021 @04:47PM (#26640251)

> My guess is their local workstation was compromised

You mean someone was physically at the laptop/desktop and could access the OS and apps? Maybe if the employee was working remote (covid?) from, say, a cafe and left the laptop unattended when refilling coffee?

Or something else? ... Hmm, could also have been eg a browser zero day that gave someone remote access to the computer? Or a dev tools supply chain attack?

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by hn_throwaway_99 on Tuesday March 30, 2021 @05:24PM (#26640744)

It's not that complicated. The local workstation could have had a trojan or virus that installed a keylogger or screengrabber.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by junon on Wednesday March 31, 2021 @02:36AM (#26644161)

Or someone watched over their shoulder. 1Password makes it all too easy to accidentally reveal your password within the app. Someone with a video camera just needs one clear frame - 1/60th of a second - with a good enough view.

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by cutemonster on Tuesday March 30, 2021 @07:12PM (#26641685)

Ok, thanks

[ Parent | on HN ]

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by benjaminwai on Wednesday March 31, 2021 @02:37AM (#26644166)

Or keylogger?

[ Parent | on HN ]