Blog Post
Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
Huntress SOC found a threat actor exploiting a file upload flaw in recreation management to breach 3 municipal servers and steal payment data.
Cristian's journey into cybersecurity started with a leap of faith. After several years in manufacturing, he traded the factory floor for a field that finally matched his lifelong curiosity about computers, tinkering with mods and building PCs as a kid. He built his foundation in IT before moving into cybersecurity analyst roles at several MSSPs, and now brings that hard-won, hands-on experience to Huntress, where he holds Microsoft SC-200, CompTIA CySA+, and CREST CPTIA certifications.
At Huntress, Cristian's happy place is hands-on-keyboard attacks; there's nothing quite like ruining a threat actor's day while protecting the underdogs. His favorite cybersecurity tip is refreshingly simple: "Just don't click it… don't!" Outside of work, he's an advanced PADI scuba diver (30 meters and a night dive, no less), an avid boulderer, and always scouting the next holiday destination.
Connect with Cristian on his blog.
Blog Posts By This Author
All Categories
Read more about Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
