DATASHEETManufacturing Industry Brief

Stolen User Credentials Put Manufacturers at Risk

#12nd55%

156%

target for phishingattempts aremanufacturers1

most common target
for cyberattacks2of data breaches target
user credentials3

increase of ransomware
attacks between
Q4 ‘19 & Q1 ‘204

Vulnerable IT Systems Put Operational Technology (OT)
Systems at Risk
The manufacturing industry is powered by operational technology(OT) systems, the highly specialized hardware and software thatmonitors and controls the physical equipment and processes used
in today’s automated manufacturing plants.
Historically, OT and IT systems were siloed from each other, whichshielded OT systems from cyberattacks. However, as manufacturing
became increasingly computer-driven, IT and OT networks became
interconnected. While this interconnectivity enables holistic
management of production systems, it enables cybercriminals to use
IT systems as backdoors into OT systems.
Cyberattacks on OT systems can damage plant equipment, causing
production bottlenecks and even putting human health and life atrisk. In 2014, cybercriminals used a spear phishing campaign toobtain user credentials to a German steel mill’s corporate IT network.
Once inside the mill’s IT systems, the cybercriminals accessed OT
systems and manipulated the controls for a blast furnace, causing
massive damage to plant equipment.5
OT systems are also vulnerable to ransomware attacks, which candamage equipment, put employees in danger, and halt operations.
In October 2020, Steelcase, the world’s largest office furniture
manufacturer, suffered a ransomware attack that forced it to shutter
operations for two weeks. It is believed that attackers accessed
Steelcase’s network after obtaining a set of admin credentials, thendeployed the ransomware payload.6
In addition to attacks on OT systems, manufacturers have long beentargets for cyberespionage perpetrated by nation-state actors orcompetitors who are seeking to steal valuable digital intellectualproperty (IP), such as product design schematics. Often, cyberspies
enlist the help of malicious company insiders. According to Verizon,
27% of cyberattacks on manufacturers involved espionage activities,
and 25% of attacks involved company insiders misusing theircredentials.7

Exacerbating these problems, many manufacturers are small
businesses that lack comprehensive cybersecurity defenses.
In addition to being soft targets for cybercrime, these small
manufacturers are more likely than large enterprises to experiencesignificant downtime as they attempt to restore operations following
an attack.

Keeper Protects Your IT Systems, OT Systems,
and Digital IP
Keeper enables manufacturers to secure their number-one
vulnerability, their employees’ passwords, enabling them toaddress password security across their entire data environment
and protect both their IT and OT systems.
A security dashboard in Keeper’s Administrative Console provides anoverview of weak passwords, password reuse, and 2FA enforcement,along with role-based access controls (RBAC) to enforce leastprivilege policies that prevent users from accessing data andsystems that have nothing to do with their jobs. Administration may
be delegated according to department or by team leader, and folders
and records can be securely shared and revoked. If an administrator
or employee leaves the company, their vault can be automaticallylocked and securely transferred. Access logs to Keeper vaults can beaudited for compliance or forensics.
In addition to giving administrators complete control over
employees’ password usage, Keeper helps prevent employees fromentering their credentials on phishing sites. Many phishing sites
are carefully designed to look just like the “real” webpage they areimpersonating, right down to a phony URL that is only a bit different.
These phony URLs may get past the naked eye, but they don’t get
past Keeper. If a user tries to use Keeper to auto-fill their login
credentials on a phishing site, Keeper notifies them that there’s nomatch for that URL in their vault, a big red flag that they’re about tobe scammed.

© 2021 Keeper Security, Inc.

DATASHEETManufacturing Industry Brief

Secure More than Just Passwords with Keeper Secure File
Storage
Digital IP is the lifeblood of today’s manufacturing industry.
In addition to securing employee passwords, Keeper helps
manufacturers prevent theft of digital IP and other sensitive data byenabling them to store sensitive files, documents, digital certificates,
private keys, images, and videos in a highly secure, encrypted digitalvault. Employees can securely share files with colleagues withconfidence, knowing that only the intended recipients can accessthe shared files.
Keeper uses PBKDF2 to derive authentication keys based on theuser’s Master Password, then generates individual record-level
AES-256 encryption keys locally on the device to encrypt eachstored file. Keeper’s cloud only holds the encrypted ciphertext ofeach file. Sharing between users is performed using PKI to ensurethat only the recipient of a shared file can decrypt it. Keeper’s zeroknowledge encryption methods ensure that only the user can accessand decrypt their stored files.

Defend Against Third-Party Vendor Breaches with
BreachWatchTM
Even if your password security is solid, your company could becompromised through one of your vendors. With remote workforces
having rapidly expanded, cybercriminals are taking advantage of themyriad of SaaS solutions that businesses are deploying to enable
their remote workforces.
Data breach victims are typically the last ones to know they’ve beencompromised. It can take a breached organization months, evenyears to detect a breach, but cybercriminals don’t wait. When theysteal login credentials, they put them to use very quickly, either
by launching their own cyberattacks or by putting them up forsale on the Dark Web - the part of the World Wide Web that is only
accessible by means of special software.
Keeper’s BreachWatch for business protects your organization
against third-party vendor breaches. BreachWatch for businessdoesn’t depend on public breach notifications. It scans Dark Web
forums and notifies organizations in real-time if any employeepasswords have been compromised. This allows IT administrators
to force password resets right away, minimizing the risk ofcybercriminals using them to breach company systems.

1IndustryWeek

2

Dark Reading

3Verizon4

Beazley

5BBC News

6

Bleeping Computer

keepersecurity.com | sales@keepersecurity.com

7

Simplify Compliance Enforcement & Reporting
Keeper simplifies compliance monitoring and reporting with robustinternal controls through delegated administration, enforcement
policies, event tracking, monitoring, and reporting, as well as
customizable audit logs and event reporting.

Email Auto-ProvisioningEasily and quickly provision Keeper vaults to tens or thousandsof users, with a domain match on email addresses. With minimum
administration, large-scale deployment can be accomplished using
an existing email channel or portal.

Flexible Provisioning
Keeper supports the ability to seamlessly provision users andteams from Microsoft Azure AD or other identity platforms using
the SCIM protocol. Keeper also supports API-based, commandline provisioning through the use of Keeper® Commander SDK.
The Keeper Commander SDK is open-source Python code that isavailable for download from Keeper’s Github repository.

Microsoft Active Directory Synchronization
Keeper® AD Bridge synchronizes to Microsoft Active Directory orOpenLDAP. This enables rapid user provisioning and automaticallyadds Nodes (organizational units), Users, Roles, and Teams. Keeper
enables RBAC and the ability to track roles when employee positions
or job duties change. This includes automatically locking vaults whenemployees depart the company.

About Keeper Security, Inc.
Keeper Security, Inc. (Keeper) is the highly-rated and patented
cybersecurity platform for preventing password-related data
breaches and cyberthreats. Keeper’s zero-knowledge security andencryption software is trusted by millions of people and thousandsof businesses across the globe to mitigate the risk of cybertheft,boost employee productivity and meet compliance standards. In
2020, Keeper was named PCMag’s Best Password Manager of theYear & Editors’ Choice for the third time. Keeper has also been
named PCWorld’s Editors’ Choice and is the winner of four G2Best Software Awards and the InfoSec Award for Best Product inPassword Management for SMB Cybersecurity. Keeper is SOC-2
and ISO 27001 Certified and is also listed for use by the U.S. federal
government through the System for Award Management (SAM).

Verizon DBIR

© 2021 Keeper Security, Inc.