Roughly four out of five Americans are on government-mandated lockdowns, forcing many of them to work from home to avoid spreading the novel virtual private networks, or . And now Microsoft says those companies -- specifically health care workers -- need to be on the lookout for a different breed of threats that come from VPNs.. Many of these people use technology to access their work called
The tech giant took what it says is its first-ever step to warn hospitals about the threat. "Ransomware operators have identified a practical target -- network devices like gateway and virtual private network (VPN) appliances," Microsoft said in a statement. "These are more difficult to remediate because it can be challenging for defenders to go and extensively hunt to find where the ransomware attackers have established persistence and identify what has been compromised."
Microsoft issued its warning because companies around the world are leaning on VPN technologyto access sensitive work apps and documents. It's concerned that some companies aren't as prepared for the hackers who attack using that technology.
Microsoft has good reason to be concerned.
At the end of February, just as theto the coronavirus, hotel chain that had been accessed. All told, it said, data from 5.2 million customers may have been compromised, including names, mailing addresses, phone numbers, birthday days and months, and more. Marriott hasn't disclosed details of the hack or if VPN software was involved, but it's a reminder that hackers aren't slowing their activity during the crisis.
In its blog post Wednesday, Microsoft suggested similar steps tofor remote workers to protect themselves and their company's data. Among them was to keep applying security updates (something people still regularly don't do, and is the reason behind some hacks.) Microsoft also recommended companies reduce people's access to most documents, only people who need it have access to various data.