Overview

This article will explain the ACSIA alert called "automated access attempt".

Explaining the automated access attempt

"Automated access attempt" refers to a type of attack where a malicious entity uses software or scripts to repeatedly and systematically try to gain unauthorized entry into a computer system or a network. Instead of a human manually attempting to break in, a program is used to automate the process, making it faster and more persistent.

Here's an example to help illustrate this concept:
Imagine a large company that has a secure network protecting its sensitive information and resources. The company's IT team has set up various security measures, including a login system with strong passwords, to prevent unauthorized access. However, a group of attackers wants to break into the network to steal valuable data.

Instead of manually attempting to guess passwords one by one, which would take a very long time, the attackers create a specialized software tool. This tool automatically generates and tries thousands of different combinations of usernames and passwords in a short period. It keeps trying different combinations rapidly, hoping to stumble upon a valid set of credentials that would grant access.

This automated access attempt allows attackers to launch a continuous stream of login attempts without the need for direct human intervention. If the company's security is not strong enough to withstand this kind of attack, the attackers might eventually find a working username and password, granting them unauthorized access to the company's network and sensitive data.

ACSIA alerts you when an automated access is attempted. Here's all the information that ACSIA shows you in the Live Notification:

Also, on the right of the above screen, we can see the actions that a user can perform in such cases.