Protocol
protocol:vpn
Also: VPN layer, VPN server, VPNs, perimeter VPN, virtual private network
VPN functionality built into the router that could be abused to proxy attacks through users' networks.
VPN functionality built into the router that could be abused to proxy attacks through users' networks.
“The router also has a VPN built into it”
“use the VPN of these people ... to proxy their attacks”
Network access technology for which the investment bank sent Ira a preconfigured computer during the social-engineering test.
“I even got the investment bank to send me a computer preconfigured for their VPN.”
Remote-access technology exposed by Sands Bethlehem and the Las Vegas data center; attackers attempted password guessing and later used stolen credentials against it.
“This VPN was for remote workers who could securely connect into the network”
“there was a VPN for them to connect to”
Virtual private network configured for the tunnel Wi-Fi to make Askia believe he was in Virginia.
“he set the WiFi up with a VPN which made [00:35:00] Askia believe he was in Virginia”
Virtual private network layer created by Regin using an assigned virtual IP address to conceal traffic and maintain access.
“This forms a VPN layer on top of everything else.”
Remote-access network path used by the external party to reach the plant environment.
“logging in from the VPN through to the DMZ and then through to the engineering workstation”
Remote-access network connection used by an employee during the vishing exercise.
“are you on the VPN right now?”
Encrypted remote-access mechanism used by LinkedIn employees and abused by the intruder to enter the corporate network.
“He concluded they must be getting in through a VPN.”
“connected directly into LinkedIn’s VPN server”
Private remote-access connection used by IT staff to connect into the Academy’s internal network from home.
“there was a way for the IT staff to VPN into the school from home”
“He successfully VPNs into the school’s network”
Network privacy mechanism recommended to traders to conceal IP addresses while accessing stolen press releases.
“how to use a proxy and a VPN to hide the IP addresses”
“used VPNs, multiple computers, burner phones, and offshore accounts”
Privacy technology that Jack says he routinely uses while online.
“I always use a VPN”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Ira Winkler | Explicit | 21 |
| incoming | USES | Daniel Beckwitt | Explicit | 39 |
| incoming | USES | Regin | Explicit | 48 |
| incoming | INITIAL_ACCESS_VIA | Triton | Explicit | 68 |
| incoming | USES | Mspkr | Explicit | 69 |
| incoming | INITIAL_ACCESS_VIA | LinkedIn data breach | Explicit | 86 |
| incoming | USES | Adam Georgeson | Explicit | 113 |
| incoming | INVOLVES | Academy network attack | Explicit | 113 |
| incoming | USES | Ivan Turchynov | Explicit | 123 |
| incoming | USES | Jack Rhysider | Explicit | 138 |
Ira Winkler USES VPN
Ira obtained a computer preconfigured for the investment bank's VPN as part of the engagement.
Explicit Confidence 90% · Ira Winkler EP 21 Details
“I even got the investment bank to send me a computer preconfigured for their VPN”
Daniel Beckwitt USES VPN
Daniel configured the tunnel Wi-Fi through a VPN so Askia would believe he was in Virginia.
Explicit Confidence 99% · Jack Rhysider EP 39 Details
“Daniel provided WiFi but he set the WiFi up with a VPN”
Regin assigns an infected machine a virtual IP address that forms a VPN layer over the network.
Explicit Confidence 97% · Jack Rhysider EP 48 Details
“This forms a VPN layer on top of everything else.”
Investigators traced the external party entering through the perimeter VPN, then through the DMZ and into an engineering workstation.
Explicit Confidence 98% · Julian Gutmanis EP 68 Details
“We did track this to an external party that was logging in from the VPN through to the DMZ and then through to the engineering workstation”
During the recorded vishing call, Mspkr says they are on the VPN while using their work machine.
Explicit Confidence 98% · Christopher Hadnagy EP 69 Details
“are you on the VPN right now? You’re on your work machine?”
“Yes.”
LinkedIn data breach INITIAL_ACCESS_VIA VPN
The hacker gained direct access to LinkedIn through an employee's VPN profile and credentials.
Explicit Confidence 99% · Jack Rhysider EP 86 Details
“connected directly into LinkedIn’s VPN server”
Adam Georgeson USES VPN
Adam used the Academy’s VPN to connect to its internal network from home.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“I successfully VPNs into the school’s network”
Academy network attack INVOLVES VPN
The attack involved gaining VPN access to the Academy’s internal network.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“He successfully VPNs into the school’s network”
Ivan Turchynov USES VPN
Ivan advised participants to use a VPN to conceal their IP addresses.
Explicit Confidence 99% · Jack Rhysider EP 123 Details
“how to use a proxy and a VPN to hide the IP addresses”
Jack Rhysider USES VPN
Jack says he always uses a VPN as part of his digital-privacy practices.
Explicit Confidence 99% · Jack Rhysider EP 138 Details
“I always use a VPN”