Compromise admin's corporate (or personal) devices or accounts partially mitigated Legacy (Tails/SVS)
THREAT145
· Partially mitigated: Some controls are in place, but the risk is still too high.
· Defined in catalog.py:2493
- Risk
- Medium impact × Low likelihood = 4 medium
- After mitigations
- Medium impact × Low likelihood = 4 medium (unchanged)
Compromise of an administrator's corporate account
Threat actors: Nation State / Law Enforcement Large Corporation
Mitigations
| Mitigation | Status |
|---|---|
| Use of external dedicated hardware firewall MITIG21 | implemented |
Possible further mitigations
- Journalists/admins encouraged not to reuse credentials MITIG146 Legacy (Tails/SVS) proposed
Residual risk
Candidate for further mitigation efforts.
Where it applies
Applies to 1 component in 1 scenario.
- Admin Workstation (device) Legacy (Tails/SVS)
Workstation lifecycle and backups Legacy (Tails/SVS) · Admin Workstation (device)
Notes
In scope: No. Existing mitigations: SecureDrop area (app and mon server) isolated from corporate environment via a physical firewall (MITIG21). Further mitigations: Admins should be instructed to strictly segregate accounts (e.g. no passphrases on phones/corporate computers). If they do store the Admin stick persistence password on those devices, they should immediately rotate the passphrase (MITIG146). Automated test for mitigation: No.
How this threat is matched
Listed for these components. A boundary covers every component inside it.