The Anatomy of a Google Cloud (GCP) Cryptomining Attack | Detection Opportunities EP 2 скачать в хорошем качестве

The Anatomy of a Google Cloud (GCP) Cryptomining Attack | Detection Opportunities EP 2

GCP Service Accounts are interesting cloud identities. Let's go over how they led to a Cryptomining Attack in this Attack Case. Report: https://unit42.paloaltonetworks.com/c... _____________ 🧬 VIDEO RESOURCES 🔹How A Compromised AWS Lambda Function Led to a Phishing Attack:    • How A Compromised AWS Lambda Function Led ...   🔹GCP Lateral Movement & PrivEsc:    • Compromise any GCP Org Via Cloud API Later...   🔹GCP Service Accounts: https://cloud.google.com/compute/docs... 🔹 DEFCON 30 Cloud Village - Weather Proofing GCP Defaults:    • Видео   🔹GCP IAM basic and predefined roles reference: https://cloud.google.com/iam/docs/und... _____________ 💼 CAREER RESOURCES 🔹Check out these Cybersecurity Notion Templates for planning our career: https://daycyberwox.gumroad.com/l/cyb... 🔹The Best Entry-Level Cybersecurity Resume Template: https://daycyberwox.gumroad.com/l/cyb... _____________ ⏰ TIMESTAMPS 00:00 How GCP Service Accounts Work 02:12 Initial Access - Stolen Service Account Credentials 02:52 Attack Flow 03:33 Privilege Escalation - Permission Upgrades 03:50 Detection Opportunity 1 04:04 Defense Evasion - Firewall Rule Modification 05:19 Detection Opportunity 2 05:38 1,600 VMs Created during attack 05:51 Persistence - New Token Creations 06:16 Final Thoughts _____________ ⚡️JOIN CYBERWOX ACADEMY ON DISCORD!   / discord   _____________ 📱 LET'S CONNECT IG:   / daycyberwox   Twitter:   / daycyberwox   Linkedin:   / dayspringjohnson   Email: day@cyberwoxacademy.com _____________ #️⃣ Relevant Hashtags #cybersecurity #cloudcomputing #cloudsecurity #gcp #googlecloud #crypto #cryptocurrency #cryptomining #bitcoin #ethereum #eth