Supply Chain Attack: CTX Account Takeover and PHPass Hijack Explained

This blog was originally published by Orca Security on June 13, 2022. Written by Lidor Ben Shitrit, Orca Security. When discussing supply chain attacks, it is important to remember that they rely on a trusted third-party vendor who offers essential services or software to the supply chain. If a popular app contains a single vulnerable dependency, every organization that installs from the vendor is equally exposed, possibly affecting millions of users.Supply chain attack vectors for various pa...

account account takeover attack ctx explained hijack supply supply chain supply chain attack takeover