Incident: Enterprises need to change passwords following ClickStudios, Passwordstate attack | ZDNet
Australia Software Company Cyberattack, 24 April 2021
Enterprises need to change passwords following Australian privilege access management company ClickStudios, Passwordstate attack
Advises “please reset all the stored passwords, and especially VPNs, Firewall, Switches, local accounts or any server passwords etc”
Company Statements: Incident Management Advisories, and 28/04/21 Statement
Source: Enterprises need to change passwords following ClickStudios, Passwordstate attack | ZDNet
View other breaches relating to the Australian IT Industry.
ClickStudios has told its global customer base to start changing passwords following a breach that resulted in a supply chain attack.
The Australian software company, which makes the Passwordstate password manager, suffered a breach between April 20 and April 22. CSIS Security Group, which dealt with the breach, posted the attack details.
The supply chain attack was initiated via an update of the Passwordstate app.
In a post, CSIS said its researchers found the attack during an investigation. “As recommended by ClickStudios, if you are using Passwordstate, please reset all the stored passwords, and especially VPNs, Firewall, Switches, local accounts or any server passwords etc,” said CSIS, which dubbed this incident/malware “Moserpass”.
