As cited
Copy frozen at (site build).
threat intel
Cracks in the Foundation: FOUNDATION Accounting Intrusions | Huntress
Threat actors are exploiting accounting software commonly used by construction companies to gain unauthorized access to networks. The intrusions, tracked as FOUNDATION, suggest a focused campaign targeting this industry vertical through application vulnerabilities or supply chain weaknesses.
Why it matters: Construction companies and their accountants face direct compromise risk; practitioners should audit access to accounting software, review user activity logs, and patch or isolate affected systems immediately.
- Source published
- First seen by Cybersecurity Tracker