Attention: what you should never do in the event of falls like Microsoft’s
The problems generated by the fall of many of the services provided by the multinational Microsoft can trigger additional problems if hasty decisions are made, according to cybersecurity experts, who are very clear about what should never be done.
Because in addition, and although it has been ruled out in principle that these failures have their origin in malicious activity, experts have warned that this type of incident can open the door to cyberattacks through false support messages, ‘recovery’ links – also false -, or fraudulent payment requests to restore services.
Microsoft 365, this company’s platform under which tools such as Outlook, Teams, Word or Excel operate, continues today with errors that make it difficult for users to access email, manage meetings and use the artificial intelligence assistant.
In this situation, technology experts advise not to deactivate ‘multi-factor authentication’ or other controls in any case, and to verify in all cases through a second channel any request to change password, access or make a payment.
Microsoft recommendations
Eusebio Nieva, technical director of Check Point Software for Spain and Portugal, has added to these recommendations that of enabling a ‘backup’ communication channel to avoid the use of personal applications, and promptly warning company staff not to log in from any ‘recovery’ link.
Nieva has also stressed the importance of reviewing ‘logins’ and administration changes once service has been restored.
Several of the experts consulted by EFE have stressed the importance of not reinstalling services such as Outlook or the ineffectiveness of changing passwords.
Experts have insisted that in these cases you should always distrust any message related to the crash, not respond when an email or message asks for data or credentials, and that you should ignore any proposal to ‘fix’ the problem, because no one ‘legitimate’ is going to ask for remote access to the equipment. Efe
