Microsoft claims that Hafnium targets companies in various sectors, including infectious disease researchers, law firms, higher education institutions, defense contractors, policy think tanks, and NGOs.
This attack is going to disproportionately impact those that can lest afford it (SMBs, Edu, States, Locals)..
How Can You Protect Yourself?
If you think you’re a victim of the Microsoft hack, you should immediately install the patches and reach out to security professionals, like ITRemedy, for an expert evaluation.
But even if you don’t use Microsoft Exchange Servers, there are a few steps you should always take to ensure your security.
First, make sure you create long, varied passwords, especially for sensitive accounts. Be aware of URLs, email addresses, and other general inconsistencies from ‘familiar services that may actually a phishing attempt. Enable two-factor authentication wherever you can.
And if you think you’ve been hacked, reach out to us immediately.