The ransomware that hit Asahi Breweries and Askul entered through a VPN device and broke through the server
It might have been prevented by “applippli Cloud”, a private cloud you can own cheaply, simply and safely, or by its higher-tier service “DX Pro”
It might have been prevented by “applippli Cloud”, a private cloud you can own cheaply, simply and safely, or by its higher-tier service “DX Pro”
Ransomware damage through devices that have been left unattended is happening again and again
VPN devices are installed at head offices, warehouses, branches and sales offices, but once fitted they are rarely looked at again.
They are small and inconspicuous, from the size of a lunch box to about the size of a school bag.
Because a VPN device is installed in order to connect to outside warehouses and branches, it is an easy target.
People rarely travel to the site for maintenance or to change settings; they connect to the VPN device remotely, enter a password and make the settings they need.
The VPN device is the entrance to each location.
Two-step verification has been introduced for software and websites, but it also needs to be applied to logging in to the devices themselves. In practice, device logins almost never have it.
“Device” here includes the PC you use.
A network camera installed for security is also a device.
Logging in to these devices does not use two-step verification.
To deal with this, you would have to replace the VPN device with a very expensive latest model, and of course a large setup cost follows. The same goes for PCs: to put two-step verification on a PC login you need to introduce an expensive separate server and an expensive two-step verification system, pay for the setup, and on top of that survey the network and train staff — an enormous amount of effort and time.
Two-step verification for device logins is urgent.
Everyone knows it, but cost, time and effort stand in the way.
With applippli Cloud and DX Pro, the VPN devices at each location (head office, warehouse, sales office and so on) are no longer needed.
You connect to the cloud safely and simply, without a VPN device.
With the VPN devices gone, 98.6% of ransomware damage can be prevented, and the purchase, setup and maintenance costs of VPN devices disappear as well.
Logging in to the cloud is also passwordless and uses two-step verification.
The very first entrance — the device and PC login — gains passwordless login and two-step verification too.
applippli’s cloud services require no special server hardware and no expensive setup fees to become passwordless and use two-step verification.
All you do is install applippli-key (the passwordless app) on each PC.
The main causes of intrusion through a VPN device are “leaked passwords” and “devices left un-updated”.
applippli Cloud needs no VPN device in the first place: each location connects to the private cloud directly. This was a case in which an intrusion caused by a VPN device might have been prevented.