One of the things TfL have done in their containment phase is locked their IT staff's accounts, who aren't working on recovery -- and they're working to manually reauthenticate who their staff are, i.e. check their identities.
In entirely unrelated (👀) news, teenagers in LAPSUS$ and Scattered Spider often obtain access by calling up the helpdesk and saying they've lost their phone for MFA and/or forgot their password.
Kevin Beaumont /
npub1lc…6lcye
2024-09-12 16:03:20
in reply to nevent1q…njpd
Author Public Key
npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcyePublished at
2024-09-12 16:03:20Event JSON
{
"id": "46ff923f5a1665697fc4c1255e6caa0dd0ce9e81a2f9eea9ee91fc74ce7f3df3",
"pubkey": "fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd",
"created_at": 1726157000,
"kind": 1,
"tags": [
[
"e",
"33229ae6f5bb286039b7399d116127b90901b3647de87b4a8257ce8040ce69af",
"",
"reply",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"1d3b8dde5a1c9f6153a3a09071d15be5d0c9d20bc627305b473b45f15452d524"
],
[
"e",
"44d53e6b7c9c87b35c3fe23ce491c7b84bee34ad2ea53bdbb3b5450d02d5f64c",
"",
"root",
"fe31a74ce7a735689686a4a8bdb765a8f4db945d91b67412c75058a82a51cffd"
],
[
"p",
"0d05fcbc368e873c322780f81e96fd2130cc54fd9ddeb2a4c85425cbefc971d4"
],
[
"proxy",
"https://cyberplace.social/@GossiTheDog/113125425193499517",
"web"
],
[
"p",
"68bbd82da9c1151442bfb56b674eb7a34bef4ec22f15636b20171d3aba42cb95"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/113125425193499517",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/GossiTheDog/statuses/113125425193499517",
"pink.momostr"
],
[
"-"
]
],
"content": "One of the things TfL have done in their containment phase is locked their IT staff's accounts, who aren't working on recovery -- and they're working to manually reauthenticate who their staff are, i.e. check their identities.\n\nIn entirely unrelated (👀) news, teenagers in LAPSUS$ and Scattered Spider often obtain access by calling up the helpdesk and saying they've lost their phone for MFA and/or forgot their password.",
"sig": "5bd8d13c7c3a2950f1880332db59cc1e328fa3a1a0ba1da307606c1dbdc5cd92b3cd80f24b9450c3bc1c7a27ae3a962158af06482770a57d73b7f1a967cc253f"
}