Huntress Recaps Cybersecurity Lessons from hack_it 2021.2

Summary

Huntress recaps its hack_it 2021.2 training event, covering a cybercrime investigation exercise, dark-web markets, and macro-enabled phishing. Key lessons include tabletop exercises, the value of data to criminals, and how phishing campaigns pressure recipients.

Key points

• A choose-your-own-adventure exercise had participants investigate a hypothetical network compromise using clues mapped to MITRE ATT&CK tactics; teams succeeded about half the time.
• Panelists discussed how criminals use dark-web marketplaces to sell services and data, and argued that stolen data can cause harm through the time required to respond to an incident.
• A session demonstrated how attackers use macro-enabled Office documents to bait businesses and how to set up an internal phishing campaign.
• The article cites Verizon's 2021 Data Breach Investigations Report, stating that phishing was involved in 36% of security breaches in 2021, up 11% from the prior year.
• The recap describes effective phishing campaigns as establishing a pretense, creating fear with a threat, and demanding action through urgency.

People