Credential stuffing attack on Jumpcloud
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Goal
Detect an account take over (ATO) through credential stuffing attack against a Jumpcloud account.
Strategy
To determine a successful attempt: Detect a high number of failed logins from at least seven unique users and at least one successful login for a user within a period of time from the same IP address.
To determine an unsuccessful attempt: Detect a high number of failed logins from at least seven unique users within a period of time from the same IP address.
Triage and response
- Determine if it is a legitimate attack or a false positive.
- Determine compromised users.
- Remediate compromised user accounts.
