Urgent FBI Alert: Secure Your Email and VPN Immediately

At a glance

• The FBI has warned organizations to secure email accounts and Virtual Private Networks (VPNs) with Two-Factor Authentication (2FA).
• The warning came in a joint advisory on the Medusa ransomware group.
• Attackers keep refining phishing and credential theft, so vigilance has to be ongoing.
• Turning on 2FA sharply reduces the risk of account takeover.

What the FBI advisory says

In March 2025, the FBI, CISA and MS-ISAC published a joint advisory on the Medusa ransomware group. Its advice was direct. Protect webmail, VPNs and other critical systems with Two-Factor Authentication (2FA). Medusa had hit more than 300 victims in critical infrastructure sectors, often getting in through phishing and unpatched software.

Why email and VPN accounts matter

Email and VPN accounts are gateways to the wider network. A stolen password for either can give an attacker access to company data, internal systems and personal information. That is why ransomware crews target them first.

Security reporters, including Davey Winder at Forbes, highlighted the FBI’s advice to turn on 2FA. Attackers keep improving their phishing and look for any account protected only by a password.

The Power of Two-Factor Authentication

Two-Factor Authentication is a security measure that requires users to provide two forms of identification prior to accessing an account, usually a password they know plus a code from a phone or app they hold. Stolen password? The second factor still blocks the login.

Turning it on is usually easy. Gmail, Outlook and most VPN products offer 2FA in their settings. Individuals and companies alike should make it a priority.

Other defenses to add

2FA is strong, but it should not be the only defense. Use strong, unique passwords for every account and keep software updated. Be wary of phishing attempts. Watch especially for messages asking you to approve a login you did not start.

Training matters too. People who can recognize the signs of a compromise report it faster.

Closing the easy doors

The FBI’s alert is a timely reminder that ransomware crews look for the easiest way in. 2FA closes one of the most common doors. Combined with patching and training, it stops most account takeovers.

Attackers adapt. Defenders have to as well, and every security team needs to check that 2FA is actually enforced on email and VPN accounts, not merely offered as an option that most users never get around to switching on.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.