{"id":4592,"date":"2019-10-16T12:49:50","date_gmt":"2019-10-16T16:49:50","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4592"},"modified":"2021-04-06T13:35:55","modified_gmt":"2021-04-06T17:35:55","slug":"what-are-pass-the-hash-attacks-how-can-your-enterprise-prevent-them","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/what-are-pass-the-hash-attacks-how-can-your-enterprise-prevent-them\/","title":{"rendered":"What are “Pass the Hash” Attacks? How Can Your Enterprise Prevent Them?"},"content":{"rendered":"

\"What<\/p>\n

What are \u201cPass the Hash\u201d attacks? How can your enterprise prevent them from harming your users or business processes? What can privileged access management (PAM) do to prevent these attacks?\u00a0<\/span><\/p>\n

According to <\/span>recent survey research<\/span><\/a> from privileged access management provider One Identity<\/a> and Dimensional Research<\/a>, Pass the Hash attacks proliferate; in fact, they proliferate faster than ever despite being a threat first discovered in the 1990s.\u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Yet while many enterprises took the steps to defend themselves from Pass the Hash attacks, others have not. Unfortunately, of those enterprises that did not take the steps to defend themselves, 85 percent do not have plans to do so. Simultaneously, Centrify recently revealed more than 70 percent of all enterprise breaches involve abused privileged accounts.\u00a0\u00a0<\/span><\/p>\n

So what can enterprises do?\u00a0<\/span><\/p>\n

What are Pass the Hash Attacks?<\/b><\/h2>\n

First, we need to define Pass the Hash attacks. In this kind of attack, a threat actor steals privileged credentials by compromising the end user\u2019s endpoint. Here\u2019s how:\u00a0<\/span><\/p>\n