,

Most consumers can’t spot phishing scams

Some consumers don’t know what the padlock in the browser means

Most consumers in the UK wouldn’t be able to spot a phishing website if they ever landed on one, a new report from NordVPN claims.

The VPN provider recently ran its National Privacy Test, a global survey on cybersecurity and the public’s awareness of online privacy. More than 26,000 people from 175 countries around the world participated in the poll. 

The results showed that almost two-thirds of Brits (63%) couldn’t correctly identify a phishing website, as they were looking in all the wrong places and mistaking certain features as signs of safety. 

Looking for SSL

For example, 85% of Brits wrongly believe a padlock in the web browser’s address bar means the website is trusted. Furthermore, a quarter (22%) of UK respondents said they’d be suspicious of a website that didn’t have a copyright symbol at the bottom of the page, which would make absolutely no difference regarding their online safety.

On the other hand, some red flags were properly identified by many. For example, three-quarters (72%) said that if a website’s SSL showed a random individual or company name, they would be suspicious. Furthermore, four in five (81%) would be suspicious of a website with poor visuals and copy, and 86% would be wary of the site’s address.

Phishing is a cybercriminal practice in which hackers try to trick people into giving away sensitive information such as login credentials or payment information. 

Sometimes, they distribute emails pretending to come from trusted brands, and sometimes they set up malicious landing pages where people would try to log in, or make a purchase. 

There are more than a million unique phishing websites live right now, with “several” new ones being generated every minute, NordVPN concluded. To stay safe, users are generally advised to deploy common sense and never rush to download a file or open a link they receive in an email or a social media message. 

Cybersecurity is an ongoing process, and staying informed about the latest threats and solutions is essential to keep your business safe in the digital age. Protect your assets, safeguard your customers, and maintain your reputation by talking to our cybersecurity experts today.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechRadar SOURCE

/by
,

Email phishing is still very effective – and it’s only getting stronger

Phishing is still by far the most popular attack vector out there. Not only that, but its popularity among the cybercriminal community is growing by the day.

This is according to “Phishing threats report”, a new paper just published by Cloudflare. After analyzing more than 279 million detected email threats, 250 million malicious messages, and more than a billion of brand impersonations, Cloudflare found that phishing is the initial attack vector for nine in ten cyberattacks.

As a result, businesses lose more than $50 billion every year.

Two key objectives

When it comes to phishing, cybercriminals are focused on two objectives: to achieve authenticity, and to get victims to click. The goal to achieve authenticity was underscored by the uptick in identity deception threats, which saw an increase from 10.3% to 14.2% year-on-year. That equals 39.6 million total detections.

Furthermore, Cloudflare’s researchers witnessed attackers impersonating over 1,000 different organizations, in more than a billion brand spoofing attempts. Most of the time (63.3%), the attackers tried to ape the same brands. The researchers identified the top 30 most popular brands, which included big names like Microsoft, Google, and Salesforce (all highly trusted organizations). 

Finally, almost all (89%) unwanted messages squeezed through SPF, DKIM, or DMARC authentication checks. “Attackers’ efforts to achieve legitimacy in the eyes of their victims have proven successful, as we have seen email authentication failing to stop threats,” the researchers concluded.

When it comes to the second goal, Cloudflare says users are more susceptible to the click “as an authentic form of communications.” Apparently, hackers know it’s easier for victims to click a link, rather than download a file. Hence, malicious links were the number one threat category, taking up more than a third (35.6%) of all detected threats. 

In almost all phishing attacks, the email will have a sense of urgency to it, forcing victims to react before taking the time to think their actions through. Given that most firms will not require urgent action in the majority of cases, a company asking for something to be done immediately can be considered a red flag.

Cybersecurity is an ongoing process, and staying informed about the latest threats and solutions is essential to keep your business safe in the digital age. Protect your assets, safeguard your customers, and maintain your reputation by talking to our cybersecurity experts today.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechRadar SOURCE

/by

Strengthening SMB cybersecurity with managed IT services

As technology continues to advance, small- and medium-sized businesses (SMBs) face increasing cybersecurity risks. Protecting sensitive data and maintaining a secure online environment is crucial for the success and longevity of SMBs, but without the right resources and expertise, this task can be daunting. Managed IT services providers (MSPs) offer a cost-effective and comprehensive solution to these challenges, helping SMBs bolster their cybersecurity defenses. Here’s how.

Enhanced security expertise and resources

Cybersecurity can be challenging for SMBs because it requires specialized expertise and solutions. Luckily, top MSPs employ teams of dedicated cybersecurity experts who have seen it all, from malware attacks to sophisticated network intrusions to online scams. These experts possess a wealth of knowledge on the latest cyberthreats and security best practices, so they can help SMBs develop a solid security strategy and framework. They’ll even facilitate the implementation of the security protocols and solutions, which can save SMBs time and money.

Comprehensive security assessment

To understand an SMB’s risk profile and security posture, an MSP will perform a thorough security assessment. This helps the MSP identify any existing vulnerabilities and develop solutions to correct them before they can be exploited. They will also review the SMB’s current security protocols and provide recommendations for improving them. By taking advantage of these assessments, SMBs can protect themselves from the newest threats.

Proactive monitoring

Managed IT services providers employ advanced threat intelligence databases and monitoring software to watch over networks, systems, and data. With these tools, MSPs can check network traffic for any suspicious activities that may indicate a potential cyberattack and promptly warn the SMB. This proactive monitoring can help SMBs detect, contain, and eliminate potential threats before they cause any serious damage.

Regular security updates

Maintaining a secure IT infrastructure requires constant updates and patch management. Patch management is a core service of many MSPs. It involves keeping track of all software patch releases, testing the patches for compatibility, and deploying them to client networks. By regularly updating and patching vulnerabilities, SMBs can significantly enhance their overall cybersecurity posture and reduce the likelihood of successful attacks.

Security awareness training

Beyond the technical security measures, MSPs also offer security awareness training programs for SMBs. These programs educate employees on the process of identifying potential threats, safe online practices, good password hygiene, and the importance of protection. Through ongoing training sessions and workshops, employees can develop a security-conscious mindset and contribute to maintaining a strong cybersecurity posture within the organization.

Incident response

If a security breach occurs, SMBs must be prepared to respond swiftly and effectively. MSPs can help SMBs develop comprehensive incident response plans to ensure they are well equipped to handle any cyberthreats. With an incident response plan, SMBs will be able to quickly identify potential breaches and take remedial actions with minimal disruption to their operations. MSPs can also assist SMBs in preserving evidence, restoring systems to their pre-breach state, and communicating with stakeholders regarding the incident.

Cybersecurity is a multifaceted endeavor that requires the right resources and expertise, but you don’t have to handle all of it by yourself. MSPs can lighten the load and provide your SMB with powerful security solutions and services. Contact us now to learn more about how managed IT services can help you protect your SMB.

/by