Hacker News new | ask | show | jobs
by vlastik 2435 days ago
The title is misleading, it was not hacked. There was an detected attempt, but it was mitigated.
1 comments

The original title is: “ Avast fights off cyber-espionage attempt, Abiss”

However, there is an unclear statement in the blog post on whether there was in fact a successful hack or a failed attempt:

“When analyzing the external IPs, we found that the actor had been attempting to gain access to the network through our VPN as early as May 14 of this year.

After further analysis, we found that the internal network was successfully accessed with compromised credentials through a temporary VPN profile that had erroneously been kept enabled and did not require 2FA.“

Seems like the internal Avast network was _compromised_, but not the products itself.