Wipro: when your IT outsourcer is the way in
Attackers phished their way into one of India’s largest IT firms and used it to reach its clients.
Reports this week say Wipro, one of India’s largest IT outsourcing companies, was breached through phishing, and the attackers used its systems to go after Wipro’s customers. Wipro has confirmed it’s investigating with an outside firm.
When you outsource IT, your provider often has remote admin access to your systems. If they’re compromised, so are you.
What to ask your IT provider:
- How do your staff access our systems, and is MFA required every time?
- Are their accounts separate from their normal email and internet use?
- Can we see and log what they do in our environment?
- How fast will you tell us about an incident on your side?
And on your side: give providers only the access they need, and review it every few months.