Stolen Credentials Analysis using SpyCloud

Passwords are the classic “something you know” authentication factor and when combined with usernames, they form the credentials that are now everywhere in our digital age. Everything online requires credentials. Email, bank or credit card accounts; a video game or streaming music; even kitchen appliances, your thermostat and, strangely, your toothbrush needs credentials.

You don’t need a zero-day attack or to be an advanced actor to empty a bank account, compromise a network, or cripple a company. All you need are the right credentials. Legitimate credentials are a ticket through the front door of every account and organization, regardless of whether the person using them is their owner or someone who stole them.

Stealing credentials doesn’t necessarily require any level of technical ability. Attackers can even rent the necessary tools, like keyloggers and Trojans, in underground forums, as well as, purchase already stolen—and in many cases verified as working—credentials for every type of account. Credential theft is rampant.

In this course, students will be introduced to what can be done with credentials, how they are being used, how they could be used and what having credential spill means and then guided through analysis, authentication, evaluation, and reporting.