Thanks for being so transparent.
replyIs it understood what the initial attack vector was? How confident are you that compromise is contained to just this GTM application (and lateral movement/exposure hasnt occurred)?
We identified and verified the attack vector and have no indication there is other compromise.
replyIn addition to our in-house security team, we also have hired a 3rd-party firm to do their own investigation and validate our analysis.
We hope to share more about our findings once the investigation concludes.
Thanks for the transparency
reply[flagged]
reply> The attack involved ARTEX
replyWhy does it matter what framework is used?
It may not be relevant from your perspective, but yours isn't the only one. Others will find this detail useful or insightful, for any number of reasons.
replySo, why? Because details matter.
It is as useful as saying that attackers used Kali Linux - no details of what was actually exploited, just blaming some random tool.
replyThey aren’t blaming a random tool, where do you see blame? For you this information may not be relevant but for many people in the cybersecurity sector it’s very relevant and helps put these frameworks into the spotlight. Sharing knowledge is not a bad thing.
reply