When is a business most vulnerable in terms of cyber security and when are cyber attacks most effective? This is a question with many and comprehensive answers.<\/p>\n
As a co-author and co-owner of a service and a mobile app, I’ve always thought that the moment when someone will play with the service without permission in an unaccepted and unexpected way is on the one hand inevitable, alarming, and on the other hand somehow abstract, imaginary fruit of some vague, distant future moment.<\/p>\n
However, past previous experience and to save ourselves headaches, great care was taken from the outset and many of the risky stages, modules and integrations were carefully designed, crafted and prepared for ‘X’ day. Other parts were written as if in the midst of an obsessive compulsive disorder and preparation for the Apocalypse.<\/p>\n
Alas, the “X” day came – on Friday night, before Christmas. To put it metaphorically, someone dared to play with our excavators and dump trucks on our sandbox – “yesterday” – while we watch the results of the game from the sidelines. Reports of anomalies started raining in at a nice Christmas moment. After analyzing the time slice of logs, it became clear that besides invalid sessions there are valid ones, which in turn show illogical behavior of real users and attempts to exploit parts of services in the server side in an attractive way that does not match the source code, but also testifies to automation and possibly compromised mobile application, and maybe reverse engineering.<\/p>\n
Fortunately, past the accompanying analysis, we can conclude that there are currently no traces of a data breach, and no traces indicating unauthorized access to data over a sufficiently large time span.<\/p>\n
What conclusions we drew:<\/p>\n
Next.<\/p>\n","protected":false},"excerpt":{"rendered":"
When is a business most vulnerable in terms of cyber security and when are cyber attacks most effective? This is a question with many and comprehensive answers. As a co-author and co-owner of a service and a mobile app, I’ve always thought that the moment when someone will play with the service without permission in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_price":"","_stock":"","_tribe_ticket_header":"","_tribe_default_ticket_provider":"","_tribe_ticket_capacity":"","_ticket_start_date":"","_ticket_end_date":"","_tribe_ticket_show_description":"","_tribe_ticket_show_not_going":false,"_tribe_ticket_use_global_stock":"","_tribe_ticket_global_stock_level":"","_global_stock_mode":"","_global_stock_cap":"","_tribe_rsvp_for_event":"","_tribe_ticket_going_count":"","_tribe_ticket_not_going_count":"","_tribe_tickets_list":"[]","_tribe_ticket_has_attendee_info_fields":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[118],"tags":[],"class_list":["post-3439","post","type-post","status-publish","format-standard","hentry","category-cyber-security"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t