var Component=(()=>{var dn=Object.create;var A=Object.defineProperty;var un=Object.getOwnPropertyDescriptor;var cn=Object.getOwnPropertyNames;var fn=Object.getPrototypeOf,mn=Object.prototype.hasOwnProperty;var B=(u,t)=>()=>(t||u((t={exports:{}}).exports,t),t.exports),pn=(u,t)=>{for(var g in t)A(u,g,{get:t[g],enumerable:!0})},xe=(u,t,g,v)=>{if(t&&typeof t=="object"||typeof t=="function")for(let y of cn(t))!mn.call(u,y)&&y!==g&&A(u,y,{get:()=>t[y],enumerable:!(v=un(t,y))||v.enumerable});return u};var bn=(u,t,g)=>(g=u!=null?dn(fn(u)):{},xe(t||!u||!u.__esModule?A(g,"default",{value:u,enumerable:!0}):g,u)),gn=u=>xe(A({},"__esModule",{value:!0}),u);var Ee=B((Nn,Ne)=>{Ne.exports=React});var Ce=B(G=>{"use strict";(function(){"use strict";var u=Ee(),t=Symbol.for("react.element"),g=Symbol.for("react.portal"),v=Symbol.for("react.fragment"),y=Symbol.for("react.strict_mode"),X=Symbol.for("react.profiler"),H=Symbol.for("react.provider"),K=Symbol.for("react.context"),w=Symbol.for("react.forward_ref"),D=Symbol.for("react.suspense"),F=Symbol.for("react.suspense_list"),P=Symbol.for("react.memo"),M=Symbol.for("react.lazy"),Pe=Symbol.for("react.offscreen"),J=Symbol.iterator,Se="@@iterator";function Oe(e){if(e===null||typeof e!="object")return null;var n=J&&e[J]||e[Se];return typeof n=="function"?n:null}var N=u.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;function m(e){{for(var n=arguments.length,r=new Array(n>1?n-1:0),o=1;o=1&&f>=0&&i[c]!==p[f];)f--;for(;c>=1&&f>=0;c--,f--)if(i[c]!==p[f]){if(c!==1||f!==1)do if(c--,f--,f<0||i[c]!==p[f]){var b=` `+i[c].replace(" at new "," at ");return e.displayName&&b.includes("")&&(b=b.replace("",e.displayName)),typeof e=="function"&&O.set(e,b),b}while(c>=1&&f>=0);break}}}finally{W=!1,I.current=d,We(),Error.prepareStackTrace=l}var C=e?e.displayName||e.name:"",ve=C?S(C):"";return typeof e=="function"&&O.set(e,ve),ve}function Ve(e,n,r){return le(e,!1)}function Le(e){var n=e.prototype;return!!(n&&n.isReactComponent)}function j(e,n,r){if(e==null)return"";if(typeof e=="function")return le(e,Le(e));if(typeof e=="string")return S(e);switch(e){case D:return S("Suspense");case F:return S("SuspenseList")}if(typeof e=="object")switch(e.$$typeof){case w:return Ve(e.render);case P:return j(e.type,n,r);case M:{var o=e,l=o._payload,d=o._init;try{return j(d(l),n,r)}catch{}}}return""}var q=Object.prototype.hasOwnProperty,de={},ue=N.ReactDebugCurrentFrame;function k(e){if(e){var n=e._owner,r=j(e.type,e._source,n?n.type:null);ue.setExtraStackFrame(r)}else ue.setExtraStackFrame(null)}function ze(e,n,r,o,l){{var d=Function.call.bind(q);for(var s in e)if(d(e,s)){var i=void 0;try{if(typeof e[s]!="function"){var p=Error((o||"React class")+": "+r+" type `"+s+"` is invalid; it must be a function, usually from the `prop-types` package, but received `"+typeof e[s]+"`.This often happens because of typos such as `PropTypes.function` instead of `PropTypes.func`.");throw p.name="Invariant Violation",p}i=e[s](n,s,o,r,null,"SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED")}catch(c){i=c}i&&!(i instanceof Error)&&(k(l),m("%s: type specification of %s `%s` is invalid; the type checker function must return `null` or an `Error` but returned a %s. You may have forgotten to pass an argument to the type checker creator (arrayOf, instanceOf, objectOf, oneOf, oneOfType, and shape all require an argument).",o||"React class",r,s,typeof i),k(null)),i instanceof Error&&!(i.message in de)&&(de[i.message]=!0,k(l),m("Failed %s type: %s",r,i.message),k(null))}}}var Ue=Array.isArray;function $(e){return Ue(e)}function Be(e){{var n=typeof Symbol=="function"&&Symbol.toStringTag,r=n&&e[Symbol.toStringTag]||e.constructor.name||"Object";return r}}function Ge(e){try{return ce(e),!1}catch{return!0}}function ce(e){return""+e}function fe(e){if(Ge(e))return m("The provided key is an unsupported type %s. This value must be coerced to a string before before using it here.",Be(e)),ce(e)}var T=N.ReactCurrentOwner,Xe={key:!0,ref:!0,__self:!0,__source:!0},me,pe,V;V={};function He(e){if(q.call(e,"ref")){var n=Object.getOwnPropertyDescriptor(e,"ref").get;if(n&&n.isReactWarning)return!1}return e.ref!==void 0}function Ke(e){if(q.call(e,"key")){var n=Object.getOwnPropertyDescriptor(e,"key").get;if(n&&n.isReactWarning)return!1}return e.key!==void 0}function Je(e,n){if(typeof e.ref=="string"&&T.current&&n&&T.current.stateNode!==n){var r=h(T.current.type);V[r]||(m('Component "%s" contains the string ref "%s". Support for string refs will be removed in a future major release. This case cannot be automatically converted to an arrow function. We ask you to manually fix this case by using useRef() or createRef() instead. Learn more about using refs safely here: https://reactjs.org/link/strict-mode-string-ref',h(T.current.type),e.ref),V[r]=!0)}}function Ze(e,n){{var r=function(){me||(me=!0,m("%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a different prop. (https://reactjs.org/link/special-props)",n))};r.isReactWarning=!0,Object.defineProperty(e,"key",{get:r,configurable:!0})}}function Qe(e,n){{var r=function(){pe||(pe=!0,m("%s: `ref` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a different prop. (https://reactjs.org/link/special-props)",n))};r.isReactWarning=!0,Object.defineProperty(e,"ref",{get:r,configurable:!0})}}var en=function(e,n,r,o,l,d,s){var i={$$typeof:t,type:e,key:n,ref:r,props:s,_owner:d};return i._store={},Object.defineProperty(i._store,"validated",{configurable:!1,enumerable:!1,writable:!0,value:!1}),Object.defineProperty(i,"_self",{configurable:!1,enumerable:!1,writable:!1,value:o}),Object.defineProperty(i,"_source",{configurable:!1,enumerable:!1,writable:!1,value:l}),Object.freeze&&(Object.freeze(i.props),Object.freeze(i)),i};function nn(e,n,r,o,l){{var d,s={},i=null,p=null;r!==void 0&&(fe(r),i=""+r),Ke(n)&&(fe(n.key),i=""+n.key),He(n)&&(p=n.ref,Je(n,l));for(d in n)q.call(n,d)&&!Xe.hasOwnProperty(d)&&(s[d]=n[d]);if(e&&e.defaultProps){var c=e.defaultProps;for(d in c)s[d]===void 0&&(s[d]=c[d])}if(i||p){var f=typeof e=="function"?e.displayName||e.name||"Unknown":e;i&&Ze(s,f),p&&Qe(s,f)}return en(e,i,p,l,o,T.current,s)}}var L=N.ReactCurrentOwner,be=N.ReactDebugCurrentFrame;function E(e){if(e){var n=e._owner,r=j(e.type,e._source,n?n.type:null);be.setExtraStackFrame(r)}else be.setExtraStackFrame(null)}var z;z=!1;function U(e){return typeof e=="object"&&e!==null&&e.$$typeof===t}function ge(){{if(L.current){var e=h(L.current.type);if(e)return` Check the render method of \``+e+"`."}return""}}function rn(e){{if(e!==void 0){var n=e.fileName.replace(/^.*[\\\/]/,""),r=e.lineNumber;return` Check your code at `+n+":"+r+"."}return""}}var he={};function tn(e){{var n=ge();if(!n){var r=typeof e=="string"?e:e.displayName||e.name;r&&(n=` Check the top-level render call using <`+r+">.")}return n}}function _e(e,n){{if(!e._store||e._store.validated||e.key!=null)return;e._store.validated=!0;var r=tn(n);if(he[r])return;he[r]=!0;var o="";e&&e._owner&&e._owner!==L.current&&(o=" It was passed a child from "+h(e._owner.type)+"."),E(e),m('Each child in a list should have a unique "key" prop.%s%s See https://reactjs.org/link/warning-keys for more information.',r,o),E(null)}}function ye(e,n){{if(typeof e!="object")return;if($(e))for(var r=0;r",i=" Did you accidentally export a JSX literal instead of a component?"):c=typeof e,m("React.jsx: type is invalid -- expected a string (for built-in components) or a class/function (for composite components) but got: %s.%s",c,i)}var f=nn(e,n,r,l,d);if(f==null)return f;if(s){var b=n.children;if(b!==void 0)if(o)if($(b)){for(var C=0;C{"use strict";Re.exports=Ce()});var vn={};pn(vn,{default:()=>yn,frontmatter:()=>hn});var a=bn(Te()),hn={title:"Nuevas metodolog\xEDas de secuestro de sesiones",description:"Robo de sesiones",category:"Investigaci\xF3n",tags:["mfa","hijacking","stealers"],date:new Date(17324928e5)};function we(u){let t=Object.assign({p:"p",img:"img",strong:"strong",h2:"h2",h3:"h3",a:"a"},u.components);return(0,a.jsxDEV)(a.Fragment,{children:[(0,a.jsxDEV)(t.p,{children:(0,a.jsxDEV)(t.img,{src:"/SESSION.png",alt:""},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:12,columnNumber:1},this)},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:12,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["El secuestro de secciones es una t\xE9cnica que ha evolucionado en tal grado que ",(0,a.jsxDEV)(t.strong,{children:"los atacantes se han"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:14,columnNumber:79},this)," ",(0,a.jsxDEV)(t.strong,{children:"especializado en aludir la autenticaci\xF3n multifactor (MFA)"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:14,columnNumber:104},this),". Considerando que tan solo en el 2023, Microsoft report\xF3 un aumento significativo de ataques de repetici\xF3n de tokens (111%) en comparaci\xF3n al a\xF1o anterior y, los ataques a cookies de sesi\xF3n se han vuelto tan comunes como aquellos basados en la adquisici\xF3n de contrase\xF1as Google, se puede deducir que nos enfrentamos a una amenaza latente."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:14,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Si bien, esta t\xE9cnica no es reciente, a diferencia de los ataques antiguos de man-in-the-middle (MitM), en donde se espiaba el tr\xE1fico de red local no seguro para capturar credenciales o informaci\xF3n financiera, los cuales presentaban fallas ante controles b\xE1sicos como tr\xE1fico cifrado, VPNs o MFA, ",(0,a.jsxDEV)(t.strong,{children:"el secuestro moderno es altamente confiable para eludir controles defensivos est\xE1ndar"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:16,columnNumber:299},this),", enfoc\xE1ndose en aplicaciones y servicios en la nube."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:16,columnNumber:1},this),` `,(0,a.jsxDEV)(t.h2,{children:"\xBFCu\xE1l es el inter\xE9s de robar tus sesiones?"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:18,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Principalmente, al ser una sesi\xF3n activa, no deben preocuparse de nombres de usuario y contrase\xF1as puesto que es una ",(0,a.jsxDEV)(t.strong,{children:"sesi\xF3n autenticada"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:20,columnNumber:118},this),", logrando as\xED eludir controles de identidad, y de este modo comprometer la mayor\xEDa de los datos de clientes, poniendo en ",(0,a.jsxDEV)(t.strong,{children:"riesgo la integridad de tu empresa."},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:20,columnNumber:262},this)]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:20,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Sin embargo, el ",(0,a.jsxDEV)(t.strong,{children:"enfoque del atacante"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:22,columnNumber:17},this)," puede ser diverso, ya sea utilizando kits de phishing modernos como AitM y BitM o herramientas que apuntan a datos del navegador, como infostealers."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:22,columnNumber:1},this),` `,(0,a.jsxDEV)(t.h3,{children:"Ataques de phishing modernos: AitM y BitM"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:24,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Los kits de phishing modernos obligan a las v\xEDctimas a completar la verificaci\xF3n de MFA. AitM act\xFAa como un proxy, permitiendo que los atacantes ",(0,a.jsxDEV)(t.strong,{children:"intercepten"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:26,columnNumber:146},this)," todo el material de autenticaci\xF3n, incluidos los tokens de sesi\xF3n, mientras que en BitM se ",(0,a.jsxDEV)(t.strong,{children:"enga\xF1a a la v\xEDctima"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:26,columnNumber:253},this)," para obtener un control en forma remota, iniciando sesi\xF3n en la aplicaci\xF3n deseada desde el computador del cibercriminal. As\xED, a diferencia de los ataques MitM tradicionales, que son oportunistas, AitM es m\xE1s enfocado en cuentas pertenecientes a una aplicaci\xF3n o servicio espec\xEDfico seg\xFAn el programa que est\xE9 emulando o el sitio que est\xE9 suplantando."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:26,columnNumber:1},this),` `,(0,a.jsxDEV)(t.h3,{children:"Infostealers"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:28,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Por otro lado, los infostealers son ataques menos dirigidos y m\xE1s oportunistas en comparaci\xF3n con AitM, utilizando m\xE9todos como la ",(0,a.jsxDEV)(t.strong,{children:"infecci\xF3n de sitios web, publicidad maliciosa y foros de juegos para propagarse."},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:30,columnNumber:132},this)," Se centran en robar todas las cookies de sesi\xF3n y credenciales almacenadas en los navegadores de las v\xEDctimas, lo que expone m\xE1s sesiones al riesgo. Debido a ello, son bastante flexibles."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:30,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["En aquellos escenarios en donde existan controles que impidan el acceso desde el dispositivo del hacker (como IP estrictas, que requieran de una direcci\xF3n especifica), pueden intentar atacar otras aplicaciones, y aunque se implementen monitoreos m\xE1s robustos en plataformas como M365, es menos probable que se empleen en aplicaciones secundarias, permitiendo que ",(0,a.jsxDEV)(t.strong,{children:"las sesiones sean robadas y reanudadas sin necesidad de autenticaci\xF3n adicional."},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:32,columnNumber:364},this)]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:32,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Vale decir que, los ",(0,a.jsxDEV)(t.strong,{children:"infostealers no siempre son bloqueados por los EDR."},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:34,columnNumber:21},this)," Aunque los mejores softwares puedan detectar la mayor\xEDa de los stealers m\xE1s comunes, los cibercriminales desarrollan ",(0,a.jsxDEV)(t.strong,{children:"malwares personalizados para evadir la detecci\xF3n"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:34,columnNumber:194},this),", generando un ciclo interminable en los que es imposible estar protegido de forma absoluta."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:34,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Esta ",(0,a.jsxDEV)(t.strong,{children:"suele originarse en dispositivos no administrados"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:36,columnNumber:6},this),", como aquellos utilizados en pol\xEDticas de BYOD. Un compromiso en un dispositivo personal puede f\xE1cilmente llevar a la exposici\xF3n de credenciales corporativas, ya que ",(0,a.jsxDEV)(t.strong,{children:"los perfiles del navegador se sincronizan entre equipos"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:36,columnNumber:226},this),", y que suele ocurrir cuando un usuario guarda credenciales corporativas en su navegador personal, lo que puede resultar en la sustracci\xF3n de informaci\xF3n sensible tras una infecci\xF3n."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:36,columnNumber:1},this),` `,(0,a.jsxDEV)(t.h2,{children:"Soluciones"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:38,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Algunas metodolog\xEDas que se pueden implementar para disminuir los riesgos de secuestro de sesiones son principalmente ",(0,a.jsxDEV)(t.strong,{children:"capacitar a los empleados"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:119},this)," para detectar correos electr\xF3nicos sospechosos y phishing, implementar ",(0,a.jsxDEV)(t.strong,{children:"herramientas de monitoreo de sesiones activas"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:220},this)," para identificar accesos inusuales desde ubicaciones desconocidas, activando alertas ante comportamientos at\xEDpicos, ",(0,a.jsxDEV)(t.strong,{children:"limitar o desactivar la sincronizaci\xF3n de perfiles entre dispositivos"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:386},this)," personales y corporativos, o en su defecto, ",(0,a.jsxDEV)(t.strong,{children:"otorgar equipos que solo se utilicen en el \xE1mbito empresarial"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:504},this),", haciendo cumplir ",(0,a.jsxDEV)(t.strong,{children:"las pol\xEDticas de Seguridad para BYOD,"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:588},this)," evitando as\xED la propagaci\xF3n de infostealers. Implementar ",(0,a.jsxDEV)(t.strong,{children:"Tecnolog\xEDa de Prevenci\xF3n de Perdida de Datos (DPL)"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:687},this)," para identificar y proteger datos sensibles y evitar su filtraci\xF3n durante un ataque y realizar ",(0,a.jsxDEV)(t.strong,{children:"auditor\xEDas peri\xF3dicas de acceso y privilegios"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:838},this)," para asegurarse de que los usuarios poseen acceso solo a lo que requieren para desempe\xF1arse en su cargo."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:40,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["Independientemente del contexto expuesto, el uso de ",(0,a.jsxDEV)(t.strong,{children:"Autenticaci\xF3n multifactor (MFA)"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:42,columnNumber:53},this)," es imprescindible, puesto que adiciona una \u201Ccapa\u201D de seguridad ante ataques de robo de credenciales, as\xED como la implementaci\xF3n de ",(0,a.jsxDEV)(t.strong,{children:"EDR"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:42,columnNumber:220},this),", puesto que permiten detectar comportamientos inusuales y malwares, asegurando que se mantengan actualizados y configurados correctamente."]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:42,columnNumber:1},this),` `,(0,a.jsxDEV)(t.h2,{children:"Referencias"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:43,columnNumber:1},this),` `,(0,a.jsxDEV)(t.p,{children:["-",(0,a.jsxDEV)(t.a,{href:"https://thehackernews.com/2024/09/session-hijacking-20-latest-way-that.html",children:"Session Hijacking 2.0 \u2014 The Latest Way That Attackers are Bypassing MFA"},void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:45,columnNumber:2},this)]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:45,columnNumber:1},this)]},void 0,!0,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx",lineNumber:1,columnNumber:1},this)}function _n(u={}){let{wrapper:t}=u.components||{};return t?(0,a.jsxDEV)(t,Object.assign({},u,{children:(0,a.jsxDEV)(we,u,void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx"},this)}),void 0,!1,{fileName:"/home/leslie/Cytrong/blog-next-contentlayer/posts/_mdx_bundler_entry_point-dd163469-a61f-4791-9c03-284f53adc840.mdx"},this):we(u)}var yn=_n;return gn(vn);})(); /*! Bundled license information: react/cjs/react-jsx-dev-runtime.development.js: (** * @license React * react-jsx-dev-runtime.development.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. *) */ ;return Component;

Tags: stealers

Nuevas metodologías de secuestro de sesiones