Microsoft: Police warn of cyber attacks via Office 365
Police warn of cyber attacks via Office 365
The State Criminal Police Office of North Rhine-Westphalia warns of possible cyber attacks via Outlook and Office 365 document management.
Based on current investigations, the State Criminal Police Office of North Rhine-Westphalia (LKA NRW) is warning of possible cyberattacks via Office 365, specifically on the Outlook email program and document management. The attacks not only endanger the affected companies, but also their customers and communication partners. The aim of the perpetrators is to take over email accounts and then send messages containing dangerous attachments or links in the name of the company. The phishing emails often appear authentic as they contain real conversation histories.
Targeted search for VPN access data
Clicking on the links can lead to attacks on IT systems and, among other things, to data leaks. The cybercriminals specifically search the hijacked email accounts for information from the early days of the coronavirus crisis, when some employees were obliged to work from home - in particular VPN access data for non-public IT networks. With this information, the perpetrators can gain direct access to the IT infrastructure of companies. They can also access documents in the emails.
"Thanks to the investigations by the State Criminal Police Office of North Rhine-Westphalia, it has already been possible to protect some companies from further attacks such as encryption by ransomware and the associated blackmail. Otherwise, such cyberattacks regularly cause damage running into millions," writes the LKA in a press release. Due to the developments, it also emphasizes the importance of comprehensive security concepts and raising employee awareness. The LKA also recommends that affected companies contact the cybercrime hotline on 0211/ 939-4040 or contact employees of the Cybercrime Competence Center via cybercrime.lka@polizei.nrw.de. Here you will also find a general overview of the"Central Cybercrime Contact Points of the State and Federal Police" for companies.