0

Now that everyone is working from home using VPN, if infected by any malware, is lateral movement possible?

Improve this question
3
  • 1
    A VPN is essentially an extension of the internal network. Thus it is not unlikely that lateral movement into this internal network is possible. Even without a VPN lateral movement would be possible, starting from the infected machine to machines in the same network, on the internet etc
    – Steffen Ullrich
    Sep 22, 2020 at 20:57
  • This is far too broad to be answerable. It's like asking if you can hack a computer that is connected to the internet.
    – Conor Mancone
    Sep 22, 2020 at 21:13
  • It not like there's a mechanism to take over the Windows Active Directory Domain Controller and from there grab every machine on the network ... oh wait ... Zerologon CVE-2020-1472 . ☣
    – user10216038
    Sep 22, 2020 at 21:13

1 Answer 1

Reset to default
1

Yes. Some VPN will place all connected computers on the same net, without client isolation, thus you could jump from one computer of an employee to another (and from those to their home network, too!). Even if you can't do lateral movement between clients, it may be possible between different servers to which those users connect to.

Improve this answer
3
  • I'd add more highlight to that first line. Lots of people are using "VPNs".
    – schroeder ♦
    Sep 23, 2020 at 8:39
  • I'm not sure what you want highlighted, @schroeder
    – Ángel
    Sep 24, 2020 at 0:43
  • Just that it really depends on the type of VPN and the networking that is configured. A browser-based VPN is different from a site-to-site VPN, etc.
    – schroeder ♦
    Sep 24, 2020 at 8:40

Not the answer you're looking for? Browse other questions tagged .