Experts: Breach at IT Outsourcing Giant Wipro

[InfoSec News <alerts () infosecnews org>]

https://krebsonsecurity.com/2019/04/experts-breach-at-it-outsourcing-giant-wipro/

By Brian Krebs
Krebs on Security
April 15, 2019

Indian information technology (IT) outsourcing and consulting giant Wipro Ltd. 
[NYSE:WIT] is investigating reports that its own IT systems have been hacked 
and are being used to launch attacks against some of the company’s customers, 
multiple sources tell KrebsOnSecurity. Wipro has refused to respond to 
questions about the alleged incident.

Earlier this month, KrebsOnSecurity heard independently from two trusted 
sources that Wipro — India’s third-largest IT outsourcing company — was dealing 
with a multi-month intrusion from an assumed state-sponsored attacker.

Both sources, who spoke on condition of anonymity, said Wipro’s systems were 
seen being used as jumping-off points for digital fishing expeditions targeting 
at least a dozen Wipro customer systems.

The security experts said Wipro’s customers traced malicious and suspicious 
network reconnaissance activity back to partner systems that were communicating 
directly with Wipro’s network.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_