CYS401: Fundamentals of Cybersecurity
Class Activity 2
SCENARIO:
A small family-owned construction company made extensive use of online banking and automated clearing house (ACH) transfers. Employees logged in with both a company and user-specific ID and password. Two challenge questions had to be answered for transactions over $1,000.
The owner was notified that an ACH transfer of $10,000 was initiated by an unknown source. They contacted the bank and identified that in just one week cyber criminals had made six transfers from the company bank accounts, totaling $550,000. How? One of their employees had opened an email from what they thought was a materials supplier but was instead a malicious email laced with malware from an imposter account. The malware was written specifically to steal the owner login credentials by monitoring the keystrokes.
ATTACK:
For the given scenario, identify and explain the type of Attack and the software attacker use to steal the credentials?
RESPONSE:
How should the company respond to this Attack? Briefly explain TWO actions that must be taken by the company.
IMPACT:
What could be the operational/ financial impact of above attack on the company.
SECURITY MEASURE/ CONTROLS:
What are some steps you think the company could have taken to prevent this incident in future?
Solution: