External affairs ministry of india, Ministry

New Delhi, Dec 27 The Indian cyber agency CERT-In on Tuesday warned Ind users against phishing, credential stuffing, or other brute force attacks against online accounts associated with LastPass vault.The warning came as encrypted password manager LastPass admitted last week that hackers were able to "copy a backup of customer vault data," in a recent data breach.LastPass is a freemium password manager that stores encrypted passwords onlin"."The data is encrypted and the threat actor could possibly perform brute force attempt to guess the master password, or may carry out phishing, credential stuffing, or other brute force attacks against online accounts associated with your LastPass "ault," warned CERT-In in its advisory.It is reported that, threat actors gained access to source code and technical information from the utility¿s developer environment to target users.The threat actors reportedly utilised information copied from backup containing basic customer account information and related metadata from which users were accessing the Password manager "ervice."For successful execution the threat actor may target users with a possible brute force attempt to guess the master password, or may perform phishing, credential stuffing and brute force attacks against online accounts associated with the Password mana"er utility," said CERT-In, which comes under the IT"Ministry."Change your password every 60-90 days on user-level accounts. This ensures threat actors using social engineering, brute force and credential stuffing attacks cannot use your older passwords to gain access to your sy"tems or data," it added.The cyber agency also reported a vulnerability in WordPress which could allow an attacker to execute arbitrary code on the targeted system.This vulnerability exists in YITH WooCommerce Gift Cards Premium plugin for WordPress due to an improper validation of file, durin" file upload."An attacker can exploit this vulnerability by uploading a malicious file. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on"the target system," said CERT-In.Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

External Affairs Ministry Of IndiaFOLLOW

External affairs ministry of india, Latest News

India and Pakistan on Sunday exchanged the list of nuclear installations and facilities, simultaneously through diplomatic channels at New ... ...

New Delhi, Jan 1 India and Pakistan on Sunday exchanged the lists of civilian prisoners and fishermen in ... ...

Helsinki, Dec 30 A temporary profit tax is set to be introduced for companies in Finland that produce ... ...

The Ministry of External Affairs on Thursday confirmed that India has secured second consular access for its 8 ex-Navy ... ...

Indian pharmaceutical industry has been a reliable supplier to countries across the world, said the Ministry of External Affairs ... ...

India on Thursday called on Pakistan to protect its minorities after the killing of a Hindu woman Daya Bheel ... ...

Wellington, Dec 28 New Zealand recorded 32,010 new community cases of Covid-19 and 78 deaths in the week ... ...

New Delhi, Dec 27 The Indian cyber agency CERT-In on Tuesday warned Ind users against phishing, credential stuffing, ... ...