homepage
Open menu
Go one level top
  • Train and Certify
    • Overview
    • Get Started in Cyber
    • Courses
    • GIAC Certifications
    • Training Roadmap
    • OnDemand
    • Live Training
    • Summits
    • Cyber Ranges
    • College Degrees & Certificates
    • Scholarship Academies
    • NICE Framework
    • Specials
  • Manage Your Team
    • Overview
    • Group Purchasing
    • Why Work with SANS
    • Build Your Team
    • Hire Cyber Talent
    • Team Development
    • Private Training
    • Security Awareness Training
    • Leadership Training
    • Industries
  • Resources
    • Overview
    • Internet Storm Center
    • White Papers
    • Webcasts
    • Tools
    • Newsletters
    • Blog
    • Podcasts
    • Posters & Cheat Sheets
    • Summit Presentations
    • Security Policy Project
  • Focus Areas
    • Cyber Defense
    • Cloud Security
    • Digital Forensics & Incident Response
    • Industrial Control Systems
    • Cyber Security Leadership
    • Offensive Operations
  • Get Involved
    • Overview
    • Join the Community
    • Work Study
    • Teach for SANS
    • CISO Network
    • Partnerships
    • Sponsorship Opportunities
  • About
    • About SANS
    • Our Founder
    • Instructors
    • Mission
    • Diversity
    • Awards
    • Contact
    • Frequently Asked Questions
    • Customer Reviews
    • Press
  • SANS Sites
    • GIAC Security Certifications
    • Internet Storm Center
    • SANS Technology Institute
    • Security Awareness Training
  • Search
  • Log In
  • Join
    • Account Dashboard
    • Log Out
  1. Home >
  2. Blog >
  3. Top Three COVID-Related Risks
Deb Radcliff

Top Three COVID-Related Risks

March 31, 2020

Shifting an entire business to a remote workforce typically takes years of planning and implementation. Yet to prevent the spread of COVID-19, organizations had about a week to move most or all of their workers home.

It also took about the same amount of time for COVID-related scams to hit users’ home systems, the very same systems from which users are accessing their enterprise resources.

There’s a lot of news going around about risks and solutions, so this blog attempts to streamline the risks into three threat areas:

  • User-owned devices accessing business resources are being targeted and compromised.
  • Fraudulent websites, emails, social media messaging and other COVID-19 lure locations are on the rise.
  • Medical, government and other important infrastructure are being attacked to stir up more chaos.

User-Owned Devices

“A lot of enterprises overnight had to change their BYOD policies, but they haven’t changed their BYOD threat models,” explains Jake Williams, SANS instructor and owner of Rendition Infosec consultancy. “Bad stuff gets on the BYOD device. Then once the user has VPN’ed into the network, the bad guys use that access to move laterally through the enterprise, deliver more malware and steal sensitive data.”

Workers could also be accessing their resources through an intranet portal, the cloud, remote desktop, etc. with the same result, he adds. So organizations need to update their policies and scale their remote access protections to meet new demand.

This means using tools such as network segmentation, strong access and identity management, network packet capture, and remote endpoint management capabilities. (For more information, check out our SANS Security Awareness Work-from-Home Deployment Kit.)

Encryption and key management are also important for supporting remote endpoints securely, explains JD Kilgallin, senior integration engineer at Keyfactor, which recently released a remote worker security guide.

“You want to add a client certificate to each of the remote workstations accessing business resources, then only allow connections from those machines with certificates,” he explains. “But you need to deploy these certificates securely in environments where they generate strong random numbers.”

This is especially important for medical-related devices that feed COVID-related data to reporting systems and are known to produce weak random numbers, Kilgallin adds.

Phishing, Fraud and Scams

Malicious and fraudulent offers for COVID-19 tracker maps, masks, tests and cures targeting users are on the rise, says Vincent D’Angelo, corporate development director at CSC Digital Brand Services.

“Dangerous phishing, counterfeiting or misinformation scams are aggressively referencing trusted brands, products, government agencies and health organizations via fraudulent domain names, email, websites, apps, social media profiles and marketplace listings,” he says.

Attackers are after money or credit card information as well as personal data. They also take over the users’ computers, devices and phones in the process.

“What’s very concerning is that global consumers are being targeted with fake and potentially harmful medical products. This is especially dangerous now, since billions of people are in desperate need of a remedy to the COVID-19 pandemic,” D’Angelo says.

Increasing consumer and employee awareness, while deploying brand protection and domain name and DNS security best practices are important to mitigate these risks, he adds.

Infrastructure Insecurity

According to reports, attacks on the World Health Organization have more than doubled during the pandemic. Attackers are also hacking DNS to point routers to fake sites that look legitimate to the home user. SANS has reported an explosion of fake COVID-19 domains since February, providing tracking information and advice on its COVID-19 fraud page.

Williams also points to the medical system infrastructure, which is not prepared for the onslaught of COVID-related scams against hospitals and medical facilities. As a result, Williams has joined several hundred cyber investigators and intelligence professionals in the COVID-19 CTI League. These volunteers are collectively analyzing and sharing intelligence and indicators through healthcare information sharing and analysis centers (ISACs) and elsewhere to help hospitals protect their systems and digital resources. They’re also working with internet service providers to take down fraudulent sites.

“In past security operations, professionals have washed their hands from user devices, but right now you can’t do that,” says Williams. “You need to update policies and practices for the long-term, not just for the now.”

Share:
TwitterLinkedInFacebook
Copy url Url was copied to clipboard
Subscribe to SANS Newsletters
Receive curated news, vulnerabilities, & security awareness tips
United States
Canada
United Kingdom
Spain
Belgium
Denmark
Norway
Netherlands
Australia
India
Japan
Singapore
Afghanistan
Aland Islands
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antarctica
Antigua and Barbuda
Argentina
Armenia
Aruba
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belize
Benin
Bermuda
Bhutan
Bolivia
Bonaire, Sint Eustatius, and Saba
Bosnia And Herzegovina
Botswana
Bouvet Island
Brazil
British Indian Ocean Territory
Brunei Darussalam
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Cook Islands
Costa Rica
Croatia (Local Name: Hrvatska)
Curacao
Cyprus
Czech Republic
Democratic Republic of the Congo
Djibouti
Dominica
Dominican Republic
East Timor
East Timor
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands (Malvinas)
Faroe Islands
Fiji
Finland
France
French Guiana
French Polynesia
French Southern Territories
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Heard And McDonald Islands
Honduras
Hong Kong
Hungary
Iceland
Indonesia
Iraq
Ireland
Isle of Man
Israel
Italy
Jamaica
Jersey
Jordan
Kazakhstan
Kenya
Kingdom of Saudi Arabia
Kiribati
Korea, Republic Of
Kosovo
Kuwait
Kyrgyzstan
Lao People's Democratic Republic
Latvia
Lebanon
Lesotho
Liberia
Liechtenstein
Lithuania
Luxembourg
Macau
Macedonia
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Micronesia, Federated States Of
Moldova, Republic Of
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nauru
Nepal
Netherlands Antilles
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Northern Mariana Islands
Oman
Pakistan
Palau
Palestine
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Pitcairn
Poland
Portugal
Puerto Rico
Qatar
Reunion
Romania
Russian Federation
Rwanda
Saint Bartholemy
Saint Kitts And Nevis
Saint Lucia
Saint Martin
Saint Vincent And The Grenadines
Samoa
San Marino
Sao Tome And Principe
Senegal
Serbia
Seychelles
Sierra Leone
Sint Maarten
Slovakia (Slovak Republic)
Slovenia
Solomon Islands
South Africa
South Georgia and the South Sandwich Islands
South Sudan
Sri Lanka
St. Helena
St. Pierre And Miquelon
Suriname
Svalbard And Jan Mayen Islands
Swaziland
Sweden
Switzerland
Taiwan
Tajikistan
Tanzania
Thailand
Togo
Tokelau
Tonga
Trinidad And Tobago
Tunisia
Turkey
Turkmenistan
Turks And Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United States Minor Outlying Islands
Uruguay
Uzbekistan
Vanuatu
Vatican City
Venezuela
Vietnam
Virgin Islands (British)
Virgin Islands (U.S.)
Wallis And Futuna Islands
Western Sahara
Yemen
Yugoslavia
Zambia
Zimbabwe

Tags:
  • Cybersecurity Insights

Related Content

Blog
sans_live_340x340_2.jpg
Cyber Defense, Cybersecurity Insights
March 10, 2022
The Return of SANS In-Person Training
Experience our new live training from wherever you are! Save $500 on select courses in North America when you register by 4/15.
No Headshot Available
Melanie Braddock
read more
Blog
Cybersecurity Insights
March 2, 2022
SANS + International Women's Day | Women Lifting Women
International Women’s Day is celebrated on March 8, and the 2022 theme is #BreaktheBias. We join in International Women’s Day (and every day) by recognizing and amplifying the achievements and contributions of women to cybersecurity.  You can join our live-streamed panel discussion at 11 am EST on...
370x370_jennifer-santiago.jpg
Jennifer E Santiago Jennifer E Santiago
read more
Blog
sans_live_340x340_2.jpg
Cyber Defense, Cybersecurity Insights
February 22, 2022
The New SANS Live Training Experience
Have you taken a SANS Live Training course lately? If it’s been a while, you’re in for a treat!
No Headshot Available
Melanie Braddock
read more
  • Register to Learn
  • Courses
  • Certifications
  • Degree Programs
  • Cyber Ranges
  • Job Tools
  • Security Policy Project
  • Posters & Cheat Sheets
  • White Papers
  • Focus Areas
  • Cyber Defense
  • Cloud Security
  • Cyber Security Leadership
  • Digital Forensics
  • Industrial Control Systems
  • Offensive Operations
Subscribe to SANS Newsletters
Receive curated news, vulnerabilities, & security awareness tips
United States
Canada
United Kingdom
Spain
Belgium
Denmark
Norway
Netherlands
Australia
India
Japan
Singapore
Afghanistan
Aland Islands
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antarctica
Antigua and Barbuda
Argentina
Armenia
Aruba
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belize
Benin
Bermuda
Bhutan
Bolivia
Bonaire, Sint Eustatius, and Saba
Bosnia And Herzegovina
Botswana
Bouvet Island
Brazil
British Indian Ocean Territory
Brunei Darussalam
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Cook Islands
Costa Rica
Croatia (Local Name: Hrvatska)
Curacao
Cyprus
Czech Republic
Democratic Republic of the Congo
Djibouti
Dominica
Dominican Republic
East Timor
East Timor
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands (Malvinas)
Faroe Islands
Fiji
Finland
France
French Guiana
French Polynesia
French Southern Territories
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Heard And McDonald Islands
Honduras
Hong Kong
Hungary
Iceland
Indonesia
Iraq
Ireland
Isle of Man
Israel
Italy
Jamaica
Jersey
Jordan
Kazakhstan
Kenya
Kingdom of Saudi Arabia
Kiribati
Korea, Republic Of
Kosovo
Kuwait
Kyrgyzstan
Lao People's Democratic Republic
Latvia
Lebanon
Lesotho
Liberia
Liechtenstein
Lithuania
Luxembourg
Macau
Macedonia
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Micronesia, Federated States Of
Moldova, Republic Of
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nauru
Nepal
Netherlands Antilles
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Northern Mariana Islands
Oman
Pakistan
Palau
Palestine
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Pitcairn
Poland
Portugal
Puerto Rico
Qatar
Reunion
Romania
Russian Federation
Rwanda
Saint Bartholemy
Saint Kitts And Nevis
Saint Lucia
Saint Martin
Saint Vincent And The Grenadines
Samoa
San Marino
Sao Tome And Principe
Senegal
Serbia
Seychelles
Sierra Leone
Sint Maarten
Slovakia (Slovak Republic)
Slovenia
Solomon Islands
South Africa
South Georgia and the South Sandwich Islands
South Sudan
Sri Lanka
St. Helena
St. Pierre And Miquelon
Suriname
Svalbard And Jan Mayen Islands
Swaziland
Sweden
Switzerland
Taiwan
Tajikistan
Tanzania
Thailand
Togo
Tokelau
Tonga
Trinidad And Tobago
Tunisia
Turkey
Turkmenistan
Turks And Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United States Minor Outlying Islands
Uruguay
Uzbekistan
Vanuatu
Vatican City
Venezuela
Vietnam
Virgin Islands (British)
Virgin Islands (U.S.)
Wallis And Futuna Islands
Western Sahara
Yemen
Yugoslavia
Zambia
Zimbabwe
  • © 2022 SANS™ Institute
  • Privacy Policy
  • Contact
  • Careers
  • Twitter
  • Facebook
  • Youtube
  • LinkedIn