Cybercriminals stole 40 million payment card accounts from Target. Target had to set up a command-and-control inside the Target network to siphon and then ship out the data from the POS to their own machines. There are no specific tools or sure-fire techniques for tripping up attackers trying to grab data. Seattle Children’s Hospital chief information security officer says there is no easy answer for how to stop an attack from becoming a breach. A solid and well-rehearsed incident response (IR) plan can go a long way.”]
Source: https://www.darkreading.com/attacks-breaches/operation-stop-the-exfiltration