[The Exiled]

Hackers breach Avast Antivirus Network through insecure VPN profile

Hackers accessed the internal network of Czech cybersecurity company Avast, likely aiming for a supply chain attack targeting CCleaner. Detected on September 25, intrusion attempts started since May 14. Following an investigation, the antivirus maker determined that the attacker was able to gain access using compromised credentials via a temporary VPN account. It is unclear if this is the same threat actor responsible for the CCleaner supply chain attack disclosed in 2017. Chances are low for discovering a connection between these two incidents. The company tracked the intruder by keeping the VPN profile active and monitoring the access going through it until mitigation actions could be deployed. Law enforcement has been notified of the intrusion and an external forensics team assisted Avast's efforts to verify the collected data.

Izvor: BleepingComputer