The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
Palo Alto Networks, Tuesday, October 13th, 2026
Unit 42 recounts a European bank intrusion that succeeded through persistence and weak basic controls, not novel techniques.
A European bank detected unauthorized VPN-based access attempts spanning several months and engaged Unit 42 to scope the intrusion.
Although it resembled a stealthy espionage campaign, the attack succeeded through gaps in foundational security controls and third-party access, with the threat actor relying on persistence rather than novel techniques.
Unit 42 says stronger identity protections and basic hygiene would have prevented it.