Unspecified Company

The company experienced a cyber attack due to outdated routers that had not received updates for over five years and had remote administration enabled by default. This vulnerability allowed attackers to exploit the system, leading to network anomalies such as slow network speeds, overheating, configuration changes, and unknown traffic. The attack compromised the company's security, potentially leading to data leaks and operational disruptions. The incident highlights the importance of maintaining up-to-date firmware and securing remote access to avoid similar breaches in the future.

Source: https://www.clubic.com/actualite-564990-cyberattaque-mondiale-le-fbi-fait-tomber-un-botnet-geant-qui-detournait-vos-routeurs-depuis-plus-de-vingt-ans.html

TPRM report: https://scoringcyber.rankiteo.com/company/creative-design-network-inc-

"id": "cre217051225",
"linkid": "creative-design-network-inc-",
"type": "Vulnerability",
"date": "5/2025",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'type': 'Company'}],
 'attack_vector': 'Remote Administration Exploit',
 'description': 'The company experienced a cyber attack due to outdated '
                'routers that had not received updates for over five years and '
                'had remote administration enabled by default. This '
                'vulnerability allowed attackers to exploit the system, '
                'leading to network anomalies such as slow network speeds, '
                'overheating, configuration changes, and unknown traffic. The '
                "attack compromised the company's security, potentially "
                'leading to data leaks and operational disruptions. The '
                'incident highlights the importance of maintaining up-to-date '
                'firmware and securing remote access to avoid similar breaches '
                'in the future.',
 'impact': {'operational_impact': ['Slow network speeds',
                                   'Overheating',
                                   'Configuration changes',
                                   'Unknown traffic'],
            'systems_affected': ['Routers', 'Network']},
 'initial_access_broker': {'entry_point': 'Outdated Routers'},
 'lessons_learned': 'Maintaining up-to-date firmware and securing remote '
                    'access to avoid similar breaches in the future.',
 'post_incident_analysis': {'corrective_actions': ['Update firmware',
                                                   'Secure remote access'],
                            'root_causes': ['Outdated routers',
                                            'Remote administration enabled by '
                                            'default']},
 'recommendations': ['Update router firmware regularly',
                     'Disable remote administration by default'],
 'title': 'Cyber Attack Due to Outdated Routers',
 'type': 'Cyber Attack',
 'vulnerability_exploited': 'Outdated Routers with Remote Administration '
                            'Enabled'}