So its been about a week and a bit now since Easyjet came out to say they have been the victim of a very sophisticated hack. We have not heard any more about this, and considering this was being investigated by the ICO (Information Commissioner’s Office) along with GCHQ, I would of thought we would of heard more by now, especially as it had been out in the press that Chinese hackers were supposed to be behind the attack.
The breach saw nine million customer have their personal information compromised. Two anonymous sources linked with the investigation have said that similar hacking tools and techniques were used by the hacking group in previous campaigns, not sure if this has been enhanced slightly as sure many so called hackers use the same tools and similar techniques, unless these were all in Chinese then it will be good to see some more details around this.
I hope it was something clever, and not just a default password on an appliance, or a simple email phishing attack, especially the way it was reported in the press.
So I wonder when we will get some more details, also with these how do they press charges. If this team were that good to get in, I am sure they were quite good cleaning up on their way out the systems and won’t point back to an individual, or an IP address at PLA Unit 61398.
Just another example of trying to keep up with all the security holes and vulnerabilities out there, it’s a never ending game of cat and mouse.