Okta Urgent: Hackers Target IT Help Desks to Gain Super Admin
ALERT
Recent reports from Okta highlight a surge in cybercriminals targeting IT help desks via phones to access credentials and critical assets. It's no longer a theoretical risk, it's happening.
KEY POINTS
- Emerging Threat: Organized hacker groups are attacking IT help desks for credentials. They impersonate real users. Okta reported four instances, suggesting a broader trend.
- Attack Complexity: Criminals spend considerable time studying target organizations. They're leveraging public tutorials and training materials for their benefit.
According to TechTarget, then Kevin Greene, public sector CTO at OpenText Cybersecurity, said it's likely the threat actor spent a significant amount of time studying the targeted organizations to learn the identities and backgrounds of targeted users and executives.
Immediate Actions
- Forced Verification: Only provide vital info, password resets, and MFA data via a stringent and forced IT workflow. Keep emotions out of verification.
- Data Usage: Use contextual and dynamic data in verification tests.
- Multi-Factor Authentication (MFA): Mandate the use of MFA devices whenever possible
- Manager Approvals: If in doubt, require a manager's sign-off.
- ITSM Integration: Embed your verification process in your IT Service Management system.
CONCLUSION
Given Okta's warning, IT help desk security negligence is a high-risk game. Act now.
For rapid protection measures, check FastPass Identity Verification Manager.
Finn Jensen | Founder, FastPasscorp
