Threat Hunter
4 months, 1 week ago
The Snowflake Breach: How Missing MFA Handed Attackers the Keys to Everything
Scattered Spider walked into Snowflake environments at Ticketmaster, AT&T, and Santander using stolen credentials. No zero-days. No malware. Just accounts without MFA. Here is the attack chain, what to look for in your logs, and what to fix.