RadiumFox Logo
RADIUMFOXSecurity

Select Case File (DRAG TO EXPLORE)

June 27, 2017

NotPetya

The Most Destructive Cyberattack in History

View Analysis
May 12, 2017

WannaCry

The NHS Crippler

View Analysis
Dec 2020 (Discovered)

SolarWinds

The Sunburst Backdoor

View Analysis
May 7, 2021

Colonial Pipeline

DarkSide Ransomware

View Analysis
Sept 7, 2017

Equifax

The Apache Struts Breach

View Analysis
Sept 11, 2023

MGM Resorts

Social Engineering Masterclass

View Analysis
Dec 2013

Target

The HVAC Vendor Breach

View Analysis
2010 (Discovered)

Stuxnet

The First Cyber Weapon

View Analysis
Nov 24, 2014

Sony Pictures

The Guardians of Peace

View Analysis
Nov 2018 (Discovered)

Marriott (Starwood)

The 4-Year Breach

View Analysis

The Kill Chain

A chronological reconstruction of the attack vectors used to compromise the target.

Impact Assessment

Financial LossN/A (Card Theft)
Operational Impact40 Million Credit Cards Stolen
Day 0

Vendor Compromise

Attackers compromise Fazio Mechanical Services (HVAC vendor) via phishing.

Day 5

Network Pivot

Attackers use vendor credentials to pivot from the vendor portal to Target's internal network.

Day 15

POS Infection

RAM scraping malware is installed on Point-of-Sale terminals.

Day 20

Data Exfiltration

Card data is sent to drop servers within Target's network, then exfiltrated.

Evidence Board

CONFIDENTIAL // EYES ONLY

RANSOM_NOTE.TXT

N/A

WALLET ADDRESS

N/A

SHA-256 HASH

BlackPOS (Kaptoxa)

EXPLOITED VULNERABILITIES

Third-Party RiskDefault Creds
Retrospective Analysis

How We Would Have Stopped It

Mapping the specific security failures to RadiumFox's preventative services.

The Failure

Third-Party Risk

The Solution

Enforce strict security standards and MFA for all vendors.

Explore Third-Party Risk Management

The Failure

Lack of Network Segmentation

The Solution

Vendor portals should be completely isolated from the payment card environment (CDE).

Explore PCI-DSS Compliance

The Failure

POS Security

The Solution

Implement application whitelisting on POS terminals.

Explore Endpoint Security

Join Us. Cut Costs.
Focus on What Matters.

Unlock high-impact penetration testing that drives real security gains. Led by experts, tailored for results, and designed to stay budget-friendly.

1

Submit Info

Share your environment, scope, or compliance needs via our quick form.

2

Senior Review

A lead RadiumFox engineer reviews and tailors your assessment—no junior handoffs.

3

Optional Scoping Call

We'll clarify priorities and technical details if needed.

4

Clear Quote

Expect a fixed-cost proposal—no hidden fees or fluff.

5

Fast Kickoff

Once approved, most projects launch within 5–7 business days with full support.