cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
dcontesti
Community Champion

Hackers attack Canada Revenue site

https://nationalpost.com/news/politics/nearly-13000-canadians-potentially-victims-of-cerb-fraud-afte...

 

During the COVID crisis, the Canadian government offered a program to assist Canadians that lost their jobs.  It was intended to provide monies to allow them to pay rent/buy food/ etc.  The program was called Canada Emergency Response Benefit (CERB).  Seems that two separate cyber attacks compromised user credentials using "Credential Stuffing".

 

Thoughts?

 

d

 

 

1 Reply
Caute_cautim
Community Champion

@dcontestiObviously they had not read SP800-207 Zero Trust security and had not even commenced that journey in terms of detecting and responding to such compromises.   It appears their maturity level was at level 0.

 

Regards

 

Caute_Cautim