top of page
  • Liz Lindsay

Much needed protection for VPNs

Since the onset of the pandemic, cybercriminals are leveraging the vast number of employee’s working from home to plant zero-day malware, most commonly keyloggers used steal credentials and other personal information. When workers were sent outside the normal work environment, managing devices, patching and securing their devices became a much more difficult challenge. Unmanaged devices accessing a corporate network will deliver a higher risk of stolen sensitive data, including corporate login credentials from attacks involving keyloggers, which, along with spyware is ranked the highest global malware, by the NTT Security Threat Intelligence Report. [1] Phishing emails that download keylogging spyware had already increased 3,000% by the first quarter of 2020, account takeovers have more than tripled in the last year and unemployment fraud has skyrocketed. [2,3,4] In a CNBC survey, more than one-third of senior technology executives say that cybersecurity risks have increased as a majority of their employees work from home. The survey included tech leaders at large companies, along with government and nonprofit organizations. [5]

VPN Apps need broader security VPNs are a great tool which enables employees to access an organization’s files remotely, encrypting everything sent through WiFi, however it does not protect the employee from keylogging malware installed on their device. Keyloggers steal passwords, credit card and banking information, and personal information to use in identity theft, breaches and other malicious deeds. Every piece of data entered into any application used by the consumer, home-based employee, contractor / supplier can be recorded on the endpoint itself by the keylogging malware – then later sent out to the command and control server of the cybercriminal. In summary, the VPN will not prevent you from getting malware in the first place or prevent malware from stealing everything you type into your device including VPN credentials or other steal sensitive information you type while using the VPN. . How individuals and employees can protect themselves

EndpointLock Keystroke Encryption Software by ACS (Advanced Cyber Security) can protect all data typed into a device. According to ACS CEO Dan DelGiorno, “It is never too late to add keystroke protection. Once installed, EndpointLock will immediately begin encrypting everything you type into the device rendering any software keyloggers you already have installed, useless. The reality is that cybercriminals will always find new ways to trick unsuspecting victims into downloading malicious software onto their device. EndpointLock is a great defensive solution to the invisible problem of keylogging spyware that is increasingly targeting and infecting personal devices.”


15 views0 comments


bottom of page