“Work from home” - CERT issues red alert

20 March 2020 04:21 am - 3     - {{hitsCtrl.values.hits}}


There is a high-level threat as hackers could attack remote user credentials and emails when organisations allow employees to work from home, the Computer Emergency Readiness Team (SLCERT) has warned.

Speaking to Daily Mirror (CERT|CC) Information Security Engineer Ravindu Meegasmulla said an attacker could use social engineering techniques such as phishing or spear-phishing attacks to steal user credentials and disrupt an organisation’s workflow.

“When assessing mails, there could be chances of having malware and ransomware infections. Email users are requested not to click on links claiming newsletter regarding COVID-19,” he said.

As the Coronavirus is affecting the world’s economy adversely many sources show that the COVID-19 now has a significant impact on cyber-security.

“Most of the employees use remote connections to get in touch with the organisation’s internal network. Due to this an attacker could easily conceal a malicious login without being detected by the targeted organisation’s security team,” he said.

“Employees use their personal computers for work from home, which are significantly less secure, compared to the official ones, making them more vulnerable to malware attacks,” he said.

“An attacker could grab this opportunity to mount different types of email-related attacks such as sending emails with malicious attachments or emails with phishing links.

“If the employee is not alerted, they could get affected by this and if this not resolved properly it could affect the whole organisation’s network,” he said.

“Raise awareness among employees regarding these types of attacks, send alerts to employees and customers, establish a contact point with the security team during working hours and encourage employees to use computers provided by the organisation would be essential to protect their computer systems and emails,” he said. (Chaturanga Samarawickrama)

  Comments - 3

  • Umagiliya Friday, 20 March 2020 09:38 AM

    why do hackers need to bust their butts when an easy bribe to anyone can get them anything and more than what hackers need in a country that is corrupt to the core?

    Chen Friday, 20 March 2020 07:10 PM

    Very true. Hackers too stay at home worldwide due to Corona. So there are high chances of risk will be there. One of the hacking methods called "Blue Tree" which targets email contacts. Its similar like Corona. From one person's email there are chances of averagly 200 emails can be hacked like tree diagrams. Need to protect our personal data of mobile, laptop

    Channa Friday, 20 March 2020 09:56 PM

    What happen if employees are provided with VPN facility to secure the network. Any comments?

Add comment

Comments will be edited (grammar, spelling and slang) and authorized at the discretion of Daily Mirror online. The website also has the right not to publish selected comments.

Reply To:

Name - Reply Comment

Kidneys that whisper death

A flute version of Beethoven’s ‘Für Elise’ was echoing from a distance

Burning Panamanian tanker leaves SL authorities gutted

Weeks after MV Wakashio, a Japanese-owned bulk carrier, ran aground a coral r

New Diamond on Fire

The fire has been contained, now where will the oil go?


To have received her son’s death certificate on the day she brought him to