100% Jump In Hack-Ability: ERP’s In The Cross-hairs

Those businesses relying on cloud-based ERP (Enterprise Resource Planning) were recently warned about an increase in cyberattacks on those systems. The alert came from the United States Computer Emergency Readiness Team (US-CERT) following a joint report by Digital Shadows and Onapsis. Their report followed the most widely used ERP systems, SAP HANA and Oracle E-Business. It shows the increased hacking vulnerability of these systems, citing a 100% jump in hacking exploit options over the past three years. It’s a sobering statistic, especially for those businesses relying on ERP systems to function. Not only did this report note the increase, but it also found detailed information on the Dark Web instructing just how to go about exploiting ERP systems.

ERP systems are an enormous help to businesses for many reasons, including increasing productivity and efficiency. For a company to have the same database for everything – finance, supply chain, manufacturing, HR services – anything and everything needed to run a company, is what ERP systems provide. But at the same time, that incredibly efficient “data umbrella” provides a treasure trove of sensitive information to hackers. ERP systems contain the sensitive data hackers love to defraud and exploit. These systems are also a favorite target for hacktivist groups and those sponsored by nation state actors. According to the report “ERP applications are being actively targeted by a variety of cyber-attackers across different geographies and industries.”

In addition to stealing data, the report provides insight into an increasingly popular reason for hacking ERP systems – cryptomining. Mining for cryptocurrency, an alternative to standard currency can be wildly profitable. The report found one hacking group used WebLogic, an ERP application, to install cryptomining software called Monero. The information used for the hack was available publicly and in one attack the thieves pocketed $226,000 in Monero currency.

Reducing ERP vulnerability requires a concerted effort from all involved. A cloud-based ERP needs attention from both the business and the provider as well. Working with third party providers on a cyber strategy, including their support during and after a breach is a great start. Regularly backing up data and restoration points is a vital part of rebounding and minimizing damage from a breach. Also, keeping ERP systems promptly updated, especially with security patches, can help avoid being compromised to begin with. As much as possible, minimize the number of employees using their own devices to work.

For all employees, continuing cybersecurity education is priceless. The best defense is knowledgeable employees who can spot phishing and other hacking efforts, greatly reducing exposure and vulnerability for any business. Cyber-resilience against ERP attacks is multi-layered and well worth the effort, especially when considering the alternative.