Supply Chain Vulnerabilities 2.3

Question 1

In a supply chain attack, […] are targeted in hopes of gaining access to the data they have access to from customers

Answer 1

Service Providers

Question 2

Example of a Supply Chain Attack involving a service provider:

Answer 2

1. HVAC provider for Target is infected with malware by email
2. VPN credentials were stolen by attackers
3. The attackers then accessed the HVAC network, which the cash registers also used
4. Attackers placed malware on every cash register and started collecting credit card info