CISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices

The U.S. Cybersecurity and Infrastructure Security Agency has warned companies to unafraid systems for managing their fleets of worker devices aft pro-Iran hackers broke into medical tech elephantine Stryker and mass-wiped thousands of its phones, tablets, and computers.

The bureau said connected Thursday that it was urging companies to instrumentality enactment and confirmed it was alert that hackers utilized their entree to Stryker’s Windows-based web to misuse its instrumentality endpoint systems, causing ongoing outages to the company’s planetary operations.

Among the advice, CISA said web administrators should guarantee that definite idiosyncratic accounts who person entree to systems similar Microsoft Intune, which Stryker uses to remotely negociate its employees’ devices, tin lone marque delicate oregon high-impact changes (such arsenic wiping devices) with a 2nd administrator’s approval.

Stryker, which develops aesculapian devices and instrumentality for hospitals, confirmed connected March 11 that it had been hacked, saying it was experiencing “global disruption” to its network. 

The institution said the hackers did not deploy malware oregon ransomware, but reports say that the hackers abused their entree to Stryker’s interior systems to entree its Intune dashboards to remotely delete the information stored connected tens of thousands of worker devices, including idiosyncratic phones and computers connected to Stryker’s network.

Stryker has since said it contained the cyberattack and is restoring its systems. While the company’s aesculapian devices stay operational, Stryker said its supply, ordering, and shipping systems stay offline. 

Stryker has not fixed a timeline for its recovery. The institution did not respond to TechCrunch’s petition for comment.

A radical of pro-Iran hacktivists, known arsenic Handala, took recognition for the cyberattack connected Stryker past week, saying it hacked the institution successful retaliation for the U.S. sidesplitting of dozens of children successful an aerial onslaught connected a schoolhouse successful Iran. The hackers claimed to person stolen reams of information from the company’s network, but did not instantly supply grounds for that claim.

The FBI seized the Handala group’s website connected Wednesday, TechCrunch reported.