Over the past month, irrespective of who or where you are, it’s evident that our world is changing as we respond to the COVID-19 pandemic. Whether allowing employees to work remotely, advancing groundbreaking medical research, facilitating distance learning for students, or helping maintain relationships with friends and loved ones, technology is playing a more important role in our lives than ever. Unfortunately, there are some who seek to take advantage of this expanded reliance on technology. Responding to this elevated risk of cyberthreats requires that we adopt new practices, tools and techniques to cope with a proliferation of cybercriminals seeking to wreak havoc or make a quick buck.
Over recent weeks, the Cybersecurity Tech Accord signatories have seen the COVID-19 pandemic being purposefully used to take advantage of the most vulnerable. Panda has found evidence of an ATP using the pandemic in a spearfishing campaign against public sector entities. Microsoft has fought against human-operated ransomware attacks looking for vulnerable systems, and we collectively saw reports of attacking against the World Health Organization, and even hospitals. It is more important than ever for companies, governments and consumers to remember that maintaining a strong cyber security posture is the best line of defense to protect our online environment. It’s in everyone’s interest, and we all have a part to play.
As part of the Cybersecurity Tech Accord principles, signatories are committed to helping empower users, customers and developers to strengthen their cybersecurity protections. Many signatories (and others) have provided resources, tips and suggestions on how to act securely and safely online in today’s elevated threat environment, as well as offered access to tools to help. Rather than reinventing the wheel, we have collected these resources in one place (below). The list is not exhaustive as companies are adding new resources and insights daily; however, we hope it represents useful resources for:
- Protecting against phishing attacks, scams and disinformation;
- Supporting emergency response;
- Facilitating distanced learning;
- Working from home securely and efficiently.
Today, the Cybersecurity Tech Accord signatories are first and foremost focused on protecting their employees and their families, supporting our customers and partners and striving to protect the health and well-being of the communities in which we operate. Our thoughts are with those who have been impacted by COVID-19 and the medical professionals, first responders and others who are working around the clock to help those in need. We are committed to playing our part to help ensure that this important work proceeds smoothly and unhindered by those looking to take advantage of the situation by undermining cybersecurity. We hope you find these resources helpful.
Protect yourself from phishing attacks, scams, and disinformation
- Anomali: Aggregated open source threat intelligence to fight COVID-19-themed cyberattacks and Overview of COVID-19 themes being utilized by threat actors
- AppDetex: Overview of the Internet and mobile exploitation of COVID-19 and Tips for brand protection
- Avast: COVID-19 threat Intelligence telemetry
- Bitdefender: Overview of COVID-19-themed malware reports
- BT: Recommendations on staying safe online
- Carbon Black: Supporting customers with endpoint limit suspension & Technical analysis of COVID-19 online threats
- Cisco: Free security offerings
- Com Laude: Tips for avoiding online Corona virus scams
- CSC: Overview of top COVID-19 related risks and Sharing information on COVID-19 threats to domain names and Sharing information on COVID-19 threats to marketplaces
- Domaintools: Free COVID-19 threat list and Analysis of coronavirus-themed Android ransomware
- Eset: Overview of the most common scams exploiting COVID-19 fears
- Facebook: Partnering with International Fact-Checking Network and Combatting misinformation and WHO Health alert on Whatapp
- FireEye: Threat research into social engineering around COVID-19 financial compensation
- F-Secure: COVID-19 cyber intelligence hub and Warning of email scams and Overview of email attacks
- HP: Free cybersecurity support
- Imperva: Analysis of how surge in online traffic increases risk to businesses
- Mark Monitor: Analysis of COVID-19 domains
- Microsoft: Overview of COVID-19 related threat intelligence
- Panda: Tips for privacy protection with geotracking and Warning of COVID-19 scams and Analysis of APT exploiting COVID-19 to spread malware
- Safe PC Cloud: Overview of COVID-19 threats
- Security ScoreCard: Recommendations to protect your business from COVID-19 cybersecurity threats
- Strata Information Technologies: Warning of increased phishing threats
- Telefonica: Overview of COVID-19 related threats and Recommendations on protecting yourself from phishing attacks and Overview and video of COVID-19 related fake news and Recommendations on how to distinguish fake and real news
- Tenable: Overview of COVID-19 driving misinformation, scams and fake cures and Highlights of how cybercriminals use COVID-19 and Overview of the expansion of the attack surface
- TrendMicro: Recommendations on how to stay safe online
- VU Security: Coronavirus and Online Fraud
Supporting emergency response
- Avast: Tips on how hospitals can protect themselves from digital viruses
- BitDefender: Free security tools for healthcare organizations
- Cisco: Resources to transition to virtual healthcare
- Dell: Provided Translational Genomics Research Institute with access to Dell Technologies’ Zenith Supercomputer to support search for COVID-19 treatments and Encouraging users of Alienware PC to ‘lend’ their computing power to Folding@home’s search for treatments
- Facebook: Making Workplace Advanced available for free and Using Messenger in response
- GitHub: Open collaboration on COVID-19
- HP: 3D printing in support of COVID-19 containment efforts
- HPE: Healthcare industry support
- Juniper Networks: Various resources to support healthcare providers
- Microsoft: COVID-19 assessment bot and Bing COVID-19 tracker and Support for non-profits and IGOs and Emergency response solution for healthcare providers and Work on decoding COVID-19 immune response
- NTT: Security Incident Response for Hospitals
- Salesforce: Free care response solution for healthcare systems
- SAP: Free access to COVID-19 pre-screen & routing
- Silent Breach: Free vulnerability assessments for emergency responders
- Telefonica: Providing connectivity to emergency responders
- VU Security: Free Technology for Governments and NGOs Worldwide
Underpinning remote education
- Atlassian: Resources to help educators around the world and Tips on working from home when your kids are home, too
- Bitdefender: Tips to help parents cope and Learning resources for kids stuck at home
- BT: Tips on skills for tomorrow
- Cisco: Resources to support transition to virtual learning
- Facebook: Get digital
- GitLab: Tips for virtual learning
- HPE: Continued learning support
- KPN: Free wi-fi for children who do not have it
- Microsoft: Free educational content on Minecraft and Family Learning Center and Nine tips to make your remote lesson a success and Host your virtual class with Microsoft Teams and Free educational programs and Distance learning with Office 365: Guidance for parents and guardians and Learning tools
- Swisscom: Support for remote education
- Telefonica: Resources for learning, innovation and quality in education and Free online training courses.
Work from home securely and efficiently
- Atlassian: Remote work hub and Offer of free core cloud products and Recommendations on the best virtual team building activities
- Avast: How to make the transition to working-from-home and 9 ways to stay sane when work-from-home is the new normal
- Avepoint: 5 tips for working from home with Microsoft Teams
- BitDefender: Tips for safe videoconferencing from home
- BT: Tips for securing homeworkers and Suggestions on how to protect yourself
- Cisco: Free Webex for remote access and Work from home resources
- Cloudflare: Making Cloudflare for Teams available for free as well as Supporting government agencies
- Cloudreach: Tips on being a remote working leader
- Cognizant: Recommendations on how to manage your new virtual teams well
- Contrast Security: Tips for working from home
- DataStax: Possible alternatives to live events
- Eset: 5 tips for a cybersecure home office experience and Recommendations on working from home
- Eyeo: Guide on remote open space and Recommendations on staying sane when you’re stuck at home
- G DATA: Recommendations on how to work from home safely
- GitLab: Remote playbook
- Facebook: Remote work toolkit
- FireEye: Security tips for remote working and Threat modeling the risk of remote work
- F-Secure: Cyber security tips for working from home and Recommendations on protecting employees and systems in a time of pandemic and Practical advice on reducing network traffic
- Intuit: Accountant and tax professional COVID-19 resource center
- Koolspan: How to protect mobile calls, texts, data from increased threats while working from home
- KPN: COVID-19 hub
- MediaPro: Free Course: Staying Secure While Working from Home
- Microsoft: Recommendations on connecting securely and Guidance for CISOs and 9 ways Microsoft IT is enabling remote work for its employees and Delivering online meetings and events and Making Teams available and Tips on staying productive whilst working remotely and Work from home guide
- NTT: Responding to COVID-19 and Securing the remote worker and Modern collaboration for business continuity 2020 and Intelligent workplace and Collaboration and productivity and Digital events
- Orange: 5 technologies that protect your data
- Panda: Recommendations on working from home securely and 5 tips to protect your company as employees work from home
- Predica: A series of recommendations on how to become remote-first in 48 hours? and On how to use Azure AD WAP
- Safe PC Cloud: Support for telecommunting
- SAP: Remote readiness and productivity academy and Free access to Qualtrics Remote Work Puls
- Switchfast: Tips on keeping your business safe and productive while your team is remote
- Tanium: Support for organizations’ move to an enterprise-wide work-from-home policy
- Telefonica: Recommendations, Suggestions and Tips for working from home
- Tenable: Recommendations on securing work from home
- TrendMicro: Recommendations on how to telework securely
- VU Security: Fraud prevention and identify protection technology available for free for non-profits and government organizations
- WIPFLI: Multiple resources available at the COVID-19 resource center
- Wisekey: WISeID app available for free