CISA (the Cybersecurity & Infrastructure Security Agency) has issued a cybersecurity advisory after the discovery of documents containing host and user information of a state government organization’s network environment—including metadata—on a dark web brokerage site. An attacker managed to compromise network administrator credentials through the account of a former employee of the organization.
Source: Malwarebytes Unpacked