videocam_off
This livestream is currently offline
Check back later when the stream goes live
Up next in 10
Hackers breached UPenn's servers, accessing donor & alumni data, including financial info. Cybersecurity expert Jonathan Weissman shares 4 tips to protect yourself from similar attacks. #Cybersecurity #DataBreach #UPenn #Privacy #OnlineSafety
Show More Show Less View Video Transcript
0:00
Tonight, the investigation continues
0:02
into how hackers took over key servers
0:04
at the University of Pennsylvania. They
0:07
bragged about it in an offensive email
0:09
they claimed to have sent to a million
0:11
people. Our Seth Kaplan got one and has
0:14
the latest.
0:16
This was the message which claimed to be
0:19
from the University of Pennsylvania
0:21
containing a few unprincipled words and
0:23
concluding, "Please stop giving us
0:25
money." Unlike common fishing or
0:28
spoofing messages you might get
0:29
pretending to be from somewhere like a
0:31
bank, but which on closer examination
0:33
don't actually come from that company,
0:36
the hackers really did get into Upen
0:38
systems using what's called social
0:40
engineering.
0:41
It doesn't look like they were
0:43
vulnerable from the technology
0:45
standpoint. They were vulnerable from
0:47
the human standpoint.
0:48
Cyber security expert Jonathan Weissman,
0:50
it could have been a fishing email. It
0:52
could have been a voice phone call.
0:56
We're not sure yet, but the victim in
1:00
this case gave the attacker his or her
1:03
credentials
1:04
and then the hackers used that username
1:07
and password to get everything else. The
1:10
attackers then got access to tons and
1:14
tons of data about donors and alumni,
1:18
including financial information,
1:21
personally identifiable information,
1:24
and even information about their
1:26
families. I noticed with the messages I
1:28
got, if I click to view them on the web,
1:31
they are still live on Upen's servers,
1:34
even though the university says all its
1:36
systems are restored and fully
1:38
operational. But Weissman told me
1:40
there's actually a good reason why UPUP
1:42
would not have deleted the messages from
1:43
its servers even if it had the ability
1:46
to do that.
1:46
The digital forensic investigators
1:49
need to use what's on the server to
1:52
piece together what happened in the
1:55
attack. Upen faces several class action
1:57
lawsuits alleging it didn't do enough to
1:59
protect people whose information was
2:01
stolen. If you are one of those people
2:03
or if you're the victim of any attack or
2:06
even better to prevent yourself from
2:08
becoming a victim, Weissman has four
2:10
tips.
2:11
Number one, change your password
2:12
immediately. Number two, if you don't
2:14
have MFA enabled, enable MFA. That's
2:18
multifactor authentication, which could
2:21
be requiring a code sent via text
2:23
message to your phone or even better,
2:25
one from what's called an authenticator
2:28
app. Number three, monitor your
2:30
accounts. Look for suspicious activity.
2:34
And number four, be extra suspicious of
2:37
email messages you get. When the cyber
2:39
criminals have your information, they
2:41
can use that information to construct
2:44
emails to you that sound believable
2:47
because they have all this information
2:49
about you
2:50
and can use that information to get even
2:52
more information in Harrisburg. Seth
2:54
Kaplan, ABC27 News.
2:56
Hi, I'm Eric Finenbinder from ABC27.
2:59
We're excited to announce the new ABC27
3:02
News Plus app. Live stream newscasts or
3:05
watch content on demand. This is
3:07
different than the ABC27 app on your
3:10
smartphone. You can check this out at
3:12
home and it's very easy to use. With a
3:15
Fire Stick, go to the homepage, scroll
3:18
down to search. From there, enter ABC27.
3:21
Move over to the apps and there we are.
3:24
Click the icon and install. It's just
3:26
that easy.
#Hacking & Cracking
#News
#Technology News