Stryker

[Handy Run]

Hmmm.
So it ‘seems’ it was not actually Malware but rather an administrative or privileged account for their Mobile Device Management portal was compromised .
That sent a command to wipe all devices enrolled in InTune. So at least that works …

I wonder if there is a jumphost server or some OTP system in between but anyways….the horse has bolted now.

Absolute madness having a BYOD policy for phones. No excuse for it in this day and age.

We use our own phones for Microsoft Authenticator (2FA) but that's it.

Even for home office we have to use the company laptop.

 

[BoggyRoad]

Are their systems still down?

 

[criodain]

When I was in primary school, if you had a horn it was called a “striker”.