FBI informed Citrix this week of a data breach that appears to have begun with a 'password spraying' attack to steal weak credentials to access the company's network.

Dark Reading Staff, Dark Reading

March 9, 2019

1 Min Read

Virtual desktop and app vendor Citrix today said it had been alerted by the FBI on March 6 that its network had been breached.

Citrix said the FBI said it had "reason to believe" that international cybercriminals were behind the attack into its corporate network, most likely via password-spraying attacks to steal weak passwords and gain access to Citrix's network. 

The attackers appear to have downloaded business documents, according to Citrix's internal forensics investigation findings thus far, but the company said it's not sure which data was breached. "At this time, there is no indication that the security of any Citrix product or service was compromised," Stan Black, Citrix CSIO wrote in a blog post today.

"Citrix deeply regrets the impact this incident may have on affected customers. Citrix is committed to updating customers with more information as the investigation proceeds, and to continuing to work with the relevant law enforcement authorities," Black wrote.

Read more here

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights