Security researcher Bill Demirkapi says he has obtained copies of a Mandiant security report detailing the Sitel/Sykes breach timeline and the methodology of the Lapsus$ group. The report, allegedly produced by cybersecurity firm Mandiant, offers a step-by-step account of how the threat group gained access to the identity management company’s environment. Sitel says there have been false allegations that a spreadsheet containing passwords was compromised, contributed passwords and contributed to the attack. The company says there is “no longer a security risk regarding this incident” Sitel Group says it is aware of a security incident affecting a legacy Sykes network.”]
Source: https://www.bankinfosecurity.com/okta-breach-timeline-attack-method-analyzed-a-18802