Tag Archive for: MFA

SLAM Method: What It Stands For (And How It Can Save You From Hackers)

The internet became a thing just over four decades ago, and has now transformed into an essential service that connects billions of people worldwide. Every major industry, including healthcare, banking, and entertainment, relies heavily on digital communication. As convenient as instant access to millions of websites and apps has become, it has also opened the door for bad actors that find vulnerabilities to exploit users’ personal information. According to the U.S. Department of State, cyber criminals caused over $4 billion worth of financial losses in 2020 alone.

Top-rated antivirus programs like ESET and McAfee protect against various kinds of malware, which are usually beyond the control of the user once the malicious files have made their way into the system. Despite the clever advancements in the delivery mechanisms and execution strategies of malware, phishing remains a widely adopted method among cyber criminals. This is largely thanks to phishing being an easy yet persistent form of social engineering — often with a high success rate. 

With phishing, cyber criminals send fraudulent emails or messages to users, and these victims, who often don’t know any better, end up clicking on malicious links or downloading attachments. An effective defense against falling victim to phishing attacks is adopting the SLAM method. It’s a quick, four-step checklist that encourages users to briefly pause and examine potentially dangerous emails or text messages. It’s an acronym that stands for Sender, Links, Attachments, and Messages — four variables to look out for in any new emails.

Using The SLAM Method

Breakdown of the SLAM acronym

The SLAM method advises all internet users to check for the following four key aspects in any suspicious emails or messages they receive:

  1. Sender: Carefully examine the sender’s email address or phone number, in the case of a text message. Look for spelling errors or cleverly masked domains. For example, an email from “xyz@apple.com” is legit, whereas one from “xyz@apple-support.com” should raise immediate suspicion. 
  2. Links: Many phishing attacks depend on the victim clicking on fraudulent links. Before you click on a link in an email, hover your cursor over it to preview the URL. Most browsers show the destination URL at the bottom of the screen, and you can also long-press on a mobile to view a preview of the webpage. This can help you identify scam websites that disguise themselves as legitimate login portals.
  3. Attachments: Only download attachments from trusted senders. With document-based malware, PDFs or Microsoft Office files are laced with malicious macros that execute when they are launched. 
  4. Messages: Sometimes carefully going through the contents of an email or a text message is enough to spot an attempted phishing attack. Look for inconsistencies in the font and color, in addition to poor grammar or spelling mistakes.

It only takes a few intentional applications of using the SLAM method before it develops into habitual instinct. Not to mention, it’s a fast and effective measure against phishing attacks that doesn’t require any fancy apps or browser extensions.

What To Do If You Receive A Phishing Email

The safest way to deal with a phishing email is by not interacting with any links or attachments it contains. If, after a quick SLAM analysis, you determine that an email you’ve received is potentially fraudulent, you should delete it. You can also report an email before you send it to the trash. Flagging a suspicious email will help train the systems of email providers, which eventually would reduce the likelihood of phishing emails landing in the inbox of users.

You can report an email for phishing on most major services like Gmail and Outlook. For example, on Gmail, click on the three-dotted menu icon located on top of the email message, and click the “Report phishing” button. You can also directly forward a suspected phishing email to reportphishing@apwg.org, which is an address that belongs to the Anti-Phishing Working Group of the FTC.

If you have unfortunately fallen prey to a phishing attack and have entered your credentials on a fake website, immediately change your passwords. Preventing hackers from easily accessing your accounts is also why you should always enable two-factor authentication.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from Slashgear.com SOURCE

/by

How Much Cybersecurity Is Enough?

Cybersecurity investments can be infinite: Here’s how to find your floor.

You can make unlimited investments in cybersecurity and still never achieve that nirvana of being “totally secure.” At the same time, service interruptions or losing customer data are so detrimental to your company’s reputational trust and financial bottom line that security is paramount. So, just how much time, effort, and money should your organization invest to ensure it’s secure?

Because cybersecurity perfection is elusive, it’s important to first determine your floor–the minimum amount of security your organization needs to meet your base-level requirements. These should include:

  • Recoverability of data and systems should a catastrophic breach occur
  • Meeting foundational security best practices for current threats, such as employing multi-factor authentication (MFA), deep packet inspection, lateral movement defenses, stringent password hygiene, and security operations center services/endpoint detection and response tools
  • Adequate security to meet ethical responsibilities (and be able to demonstrate due diligence in) protecting organizational/customer data
  • Meeting all regulatory requirements around data protection and privacy, pertaining to your specific industry and organization

Recoverability: The importance of backups

In our experience, few companies understand that backups are one of the most important security controls for an organization’s future. All breaches end with data exfiltration, backup/mass destruction, or both. To disrupt the breach pattern, organizations must first assume it is impossible to prevent all breaches. Threat actors target backups for encryption or destruction 93 percent of the time in attacks like ransomware, so it’s essential to ensure you can recover without resorting to paying ransoms (because even ransom payments don’t guarantee recovery).

Prioritize having stringent controls within and around your backups while also ensuring that threat actors cannot move laterally in your network to access, damage, or destroy these data stores. Also take great care that these safeguards are well-orchestrated, secure, resilient, redundant, and complete, which protects against the risk of total loss. Backups must also be “immutable,” meaning incapable of being changed, deleted, or moved outside of set retention policies or strict access procedures.

Protect sensitive data and meet regulations

Every company has–at a minimum–an ethical obligation to protect the data they hold in trust about their employees, customers, partners, and operations. Law firms must protect their clients’ private and sensitive legal case information; healthcare organizations must maintain patient data privacy; critical infrastructure and government entities are the custodians of highly sensitive data, the loss of which can have serious consequences for people’s lives and national defense.

Most industries also have a varying number of legal obligations to protect data. Regulatory frameworks like HIPAA, GDPR, FedRAMP, and others outline standards that applicable companies must meet to ensure data security and privacy. The cybersecurity rules adopted in July 2023 by the SEC further mandate additional governance, policy, and process requirements for publicly traded companies, holding C-level officers accountable. Your organization should meet applicable requirements and be able to demonstrate due diligence against ethical goals and frameworks.

Insurance carriers and clients may also dictate minimum security requirements.

How can you meet your minimum requirements?

The key to security efficiency is understanding how breaches progress, including tactics and patterns (“breach context”), and then working to disrupt the breach context with highly prioritized investments and efforts.

There is a pattern to breach progression: The attacker compromises credentials; creates persistent network access; elevates access; and then moves laterally in the environment to execute malicious acts (including exfiltrating data, encrypting, and/or destroying backups).

Effective security requires moving backwards in the chain. First, ensure that your backups are impenetrable and recoverable. Next, secure systems so that lateral movement is impossible (by rigorous application of MFA on all administrative controls). Then, focus on locking down credentials and endpoint access (and so on).

To keep this process scalable, it is important to do all these tasks with full knowledge of the tactics, techniques, and procedures of today’s threat actors–how they are compromising organizations today in real-world breaches–so you can prioritize your efforts and focus your dollars. Security frameworks like NIST and many organizational security programs are too blind to current threat patterns, tactics, and methods to be effective. By focusing on defending against in-use threat tactics and patterns, companies can hone their efforts. It’s equally important to only buy tools and solutions you or a third-party team have the skills and breadth to fully utilize, rather than purchasing expensive and complicated tools that sit idle or underutilized.

Achieve a security program that’s just the right size

Most people in IT and security understand you can’t create perfect security. But with knowledge of threat actor tactics, as they change daily, IT teams can disrupt the breach pattern at every stage and achieve relevant, timely defenses where they are the most vulnerable. While access to real-time threat actor data can be challenging, some managed security services providers can help. Coupled with a solid focus on meeting regulations for your specific industry, you can arrive at a right-sized, focused security program.

Contact our team of experts to learn more about developing a comprehensive cybersecurity training program for your business.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from Inc.com SOURCE

/by

Why MFA isn’t foolproof: How to strengthen your security

Multifactor authentication (MFA) significantly enhances your business’s security, but it’s not invincible. Cybercriminals have found ways to exploit MFA’s weaknesses, and understanding these is essential for safeguarding your business. This article will guide you through common MFA hacks and provide preventive strategies.

How cybercriminals bypass MFA

Cybercriminals use a variety of techniques to compromise MFA systems.

MFA fatigue

MFA fatigue, also known as push bombing, occurs when cybercriminals flood users with numerous authentication requests, often through push notifications. Overwhelmed by the constant bombardment, users may accidentally or out of frustration approve one of the requests, unwittingly giving cybercriminals access. A notable example of this occurred in 2022 when cybercriminals targeted Uber’s external contractor, repeatedly sending MFA requests until access was granted.

Phishing

In a phishing attack, cybercriminals pose as legitimate entities such as banks or IT support, and send deceptive messages that prompt users to provide their MFA codes. These messages often contain a sense of urgency such as a warning of an account breach or a required security update to pressure users into acting without verifying the authenticity of the request. Once the cybercriminals have the MFA code, they can use it to bypass security systems and gain unauthorized access to accounts or sensitive data.

SIM swapping

Mobile devices are often used as a primary means of receiving MFA codes, making them a prime target for cybercriminals. In a SIM swapping attack, a cybercriminal convinces a mobile carrier to transfer a victim’s phone number to a new SIM card that they control. Once successful, the cybercriminal intercepts MFA codes sent via SMS, allowing unauthorized access to the victim’s accounts.

Strategies to prevent MFA attacks

To protect your organization from MFA hacks, follow these strategies:

Use risk-based authentication

Implement risk-based authentication that dynamically adjusts security requirements based on user behavior. For example, if a user logs in from an unusual location or unknown device, the system can automatically require additional verification. This adaptive approach helps prevent attacks by raising security standards when necessary.

Implement hardware-based MFA

Hardware security keys such as those that use Fast Identity Online (FIDO) protocols, provide stronger protection than software-based MFA. These physical devices generate unique authentication codes, making them much harder to intercept or duplicate. Consider using hardware-based MFA for highly sensitive applications to enhance your security posture.

Regularly review access rights

Grant users only the access they need. Regularly audit user permissions to ensure employees have access only to the data and systems necessary for their roles. This limits the potential damage a compromised account can cause, reducing the overall risk to your business.

Strengthen password reset processes

Password reset procedures can be a weak link in MFA systems. Make sure your reset processes require users to verify their identity through more than one channel. This additional layer of security can prevent cybercriminals from exploiting reset processes to gain unauthorized access.

Monitor high-value targets

Certain users, such as system administrators and legal or HR personnel, possess elevated privileges that make them attractive to attackers. Pay close attention to the MFA protections surrounding these accounts and implement the strictest security measures.

Stay ahead of emerging threats

Cybercriminals are constantly evolving their tactics. To ensure your systems remain resilient, keep a close eye on new attack methods and vulnerabilities, and proactively update your security measures to counter these threats.

Implementing these strategies can help you significantly bolster your company’s defenses against MFA attacks and safeguard valuable assets from unauthorized access.

Contact our team of experts to learn more about developing a comprehensive cybersecurity training program for your business.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

/by
,

Essential cybersecurity tips for small businesses

Cyberattacks target businesses of all sizes. While large corporations often grab headlines, small businesses are increasingly becoming prime targets due to their often weaker security defenses. Fortunately, by following the tips in this article, you can enhance your business’s cybersecurity posture.

Secure your cloud storage

Cloud storage provides a convenient and cost-effective solution for storing data. However, not all cloud providers prioritize security. To protect your sensitive information, select a reliable platform that offers strong encryption and access controls.

Fortify your network

Your network is the backbone of your business operations, connecting all company devices such as computers, printers, smartphones, and routers. Unfortunately, all connected devices can be entry points for cybercriminals.

To protect your network, use strong, unique passwords for every device and enable multifactor authentication (MFA) whenever possible. MFA adds another layer of security by requiring multiple forms of verification such as a password and a code sent to your phone.

Moreover, you should secure your Wi-Fi network with a robust password and create a separate guest network for visitors. Ensure your Wi-Fi is encrypted with the latest standard, WPA3, to prevent unauthorized access.

Invest in extra security tools

Bolstering your business’s digital defenses requires more than just basic security measures. Consider implementing these additional tools:

  • Virtual private network – creates a secure, encrypted connection between your devices and the internet
  • Firewall – monitors incoming and outgoing traffic and blocks suspicious activity
  • Intrusion detection and prevention systems – monitor network traffic for suspicious activities and block such activities in real time
  • Email security – detects and blocks malicious emails
  • Data loss prevention – keeps sensitive data from being accidentally or maliciously shared outside your organization

Keep software up to date

It’s tempting to ignore those software update notifications, but doing so can leave your system vulnerable. Software updates often include patches that plug security holes that cybercriminals can exploit. By promptly installing updates, you can strengthen your defenses.

Back up company data

Ransomware attacks are a serious business threat. They encrypt critical data, holding it hostage until a ransom is paid. Implementing a robust backup strategy is crucial for protecting your data and minimizing disruption if you suffer a ransomware attack.

Limit employee access to the company network

Believe it or not, many cyberattacks start from within a company. To minimize the damage caused by an insider threat, grant employees only the necessary permissions to perform their job functions. Regularly review and adjust employee permissions, and promptly revoke access when employees leave the company.

Educate your team

Many cyberattacks happen because employees make mistakes. They might click on a suspicious email, give away their password, or use weak passwords.

To prevent human error, train staff to recognize and avoid common cyberthreats, create strong passwords, and handle sensitive information securely. Conducting regular cybersecurity training and cyberattack simulations can reduce the risk of breaches.

Create a security culture

Cybersecurity shouldn’t be solely the IT department’s responsibility but rather every employee’s. Involve employees in security initiatives and encourage them to report suspicious activities. By fostering a company-wide security culture, you can create a stronger and more resilient organization.

These steps might seem simple, but they go a long way in safeguarding your business from cyberattacks.

Not sure where to begin? Don’t worry, you can turn to our IT experts for help. We offer comprehensive security solutions customized to your specific needs. Get in touch with us today to discover how we can help you build a strong cybersecurity defense for your business.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

/by

Key tips for boosting online security

The digital landscape is riddled with threats: malware attacks, phishing scams, and data breaches are just a few. But by taking a proactive approach to cybersecurity, you can significantly reduce your risk and keep your business safe. Here’s a guide to fortifying your online defenses.

Create strong, unique passwords

Passwords are your first line of defense against unauthorized access to your accounts and sensitive information. This is why you should avoid using easily guessable passwords such as “123456” or “password.” Instead, create strong passphrases. A passphrase is a string of four or more random words. This extra length and randomness make them much harder for cybercriminals to crack but still easier for you to remember than a jumbled mess of characters.

For maximum security, use a different passphrase for each of your accounts. This way, if one account gets compromised, your other accounts are still safe.

Tip: Remembering multiple complex passphrases can be a challenge. Consider using a password manager, which stores all your passphrases in one place. This makes your passphrases easily accessible while keeping them safe from prying eyes.

Implement multifactor authentication (MFA)

MFA adds an extra layer of security to your online accounts by requiring additional verification beyond just a password, such as a one-time code sent to your phone or a fingerprint scan. By enabling MFA, even if someone obtains your password, they won’t be able to access your account without fulfilling the additional verification requirements.

Tip: Whenever possible, enable MFA on your important accounts, including email, banking, and cloud services.

Keep software and systems updated

Cybercriminals often exploit weaknesses in outdated software to gain unauthorized access to systems. To stay protected, regularly update your software, operating systems, and applications because these updates often include essential security patches that fix those vulnerabilities.

Tip: Set up automatic updates on all your devices so you don’t have to remember to update manually, and your devices stay continuously protected without any extra effort from you.

Use secure Wi-Fi networks

When accessing the internet, it’s important to use secure Wi-Fi networks. Public Wi-Fi in airports or coffee shops can be targeted by cybercriminals. Instead, use encrypted Wi-Fi connections, which require a password and scramble your data, making it unintelligible even if intercepted.

For an extra layer of security, consider using a virtual private network (VPN). A VPN encrypts all your internet traffic, creating a secure tunnel between your device and the internet, regardless of the Wi-Fi network you’re on.

Tip: Configure your devices to automatically connect only to trusted Wi-Fi networks that you know and use. Additionally, disable the option to connect to open networks to avoid accidental connections to unsecured Wi-Fi.

Conduct security awareness training for employees

Employees are often the weakest link in an organization’s cyber defense, as they may inadvertently fall victim to phishing scams or unknowingly compromise sensitive information. However, regular training sessions can empower your employees to recognize and respond to cyberthreats effectively.

Tip: Simulate phishing attacks to test your employees’ preparedness and reinforce training.

By following these simple yet effective tips, you can significantly enhance the online security posture of your business and minimize the risk of falling victim to cyberthreats. Remember, investing in online security is not just about protecting your data — it’s also about safeguarding the reputation and integrity of your business in an increasingly digital world.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

/by
,

Fortifying your business with two-factor authentication and two-step verification

The digital realm is teeming with risks that can compromise business data. Thankfully, a variety of tools and technologies are available for your company to fortify its cybersecurity. Two-factor authentication (2FA) and two-step verification (2SV) are among the most effective methods for bolstering your defenses against attackers.

2FA and 2SV are often used interchangeably, but they are, in fact, two distinct approaches to security. Let’s take a look at the differences between them and explore how they can benefit your business.

Two-factor authentication

2FA is a security measure that requires users to provide two different types of credentials in order to log into their accounts. Typically, the first factor consists of something that the user knows, such as a password. The second factor could be something like a one-time passcode sent via text message or email or a biometric identifier, such as a fingerprint.

With 2FA enabled on your business accounts, cybercriminals will have a harder time gaining access to these. Even if they somehow manage to obtain the first factor (e.g., by guessing your password), they still won’t be able to log in without the second piece of information, which only you can have.

Two-step verification

2SV is similar to 2FA in that it requires two pieces of information to gain access to an account. However, the difference between the two lies in the number of authentication steps involved. As the name suggests, 2SV requires two authentication steps: one where the user provides their first factor (e.g., a password) and another where they provide additional information that proves they are who they say they are.

For example, with 2SV enabled on your business accounts, users may be asked to provide a second form of authentication when they attempt to log in from an unfamiliar device or IP address. This could be in the form of another password, a one-time passcode generated by an authentication app on their phone, or some other type of verification.

Benefits of 2FA and 2SV for businesses

Enabling 2FA and/or 2SV on your business accounts can provide a variety of benefits, including:

  • Improved security – By adding an extra layer of authentication, you can reduce the risk of unauthorized access to your accounts.
  • Enhanced compliance – By using advanced authentication, such as 2FA and 2SV, you can ensure that your business is meeting industry and government standards for data security.
  • Reduced costs – Fewer unauthorized access attempts means fewer chances of fraud and data theft, which can lead to significant cost savings over time.

Which is best for your business?

The decision of whether to use 2FA or 2SV depends on a number of factors, such as the size and complexity of your business, the type of data you are storing, and the level of security you require.

For example, if your business is storing sensitive data, such as customer credit card information, then a multifactor authentication system that includes both 2FA and 2SV may be the most appropriate choice. On the other hand, if you are simply looking to add an extra layer of protection to your email accounts, then a 2FA system may be all that is needed.

Ultimately, the best authentication solution for your business will depend on its individual needs and requirements. It is always a good idea to consult with an experienced security professional to ensure that you are making the right decision.

Our team of experts is here to help you make the best choice for your business. Get in touch with us today to learn more about 2FA and 2SV and how they can improve your security.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

/by
,

Cybersecurity jargon made simple

Cybersecurity is a crucial component of managing a successful company and understanding different cybersecurity terms is essential to protecting your company’s sensitive information, data, and assets can be deleted. Here’s a guide to key cybersecurity terms every business owner should know.

Malware

Malware is short for malicious software and encompasses various harmful programs designed to disrupt computer systems, steal data, or gain unauthorized access to a network. Types of malware include viruses, ransomware, Trojans, and spyware. Employing robust antivirus and anti-malware solutions is crucial to detect and mitigate these threats.

Phishing

Phishing is a cyberattack where malicious actors attempt to trick individuals into revealing sensitive information, such as passwords, credit card details, or login credentials. Phishing attacks often come through deceptive emails, spam messages, or websites that appear legitimate. Business owners must educate their employees about the dangers of phishing and promote a culture of vigilance when dealing with suspicious communications.

Firewall

A firewall is a network security solution that acts as a barrier between a company’s internal network and external networks such as the internet. It constantly scans and controls traffic coming in and out of a network using predetermined rules. These security rules help prevent unauthorized access to a system and keep potential cyberthreats at bay.

Encryption

Encryption is a method of converting plain, readable data into an unreadable format called ciphertext. It is used to protect sensitive information and maintain confidentiality during data transmission or storage. Even if the data is intercepted, the information will be unreadable without the correct decryption key.

Multifactor authentication (MFA)

MFA is a security mechanism that enhances the protection of user accounts and sensitive information by requiring users to provide multiple forms of identification or “factors” such as passwords, biometrics, and one-time codes to verify their identity. The goal of MFA is to add an extra layer of security beyond just a username and password.

Patch management

Hackers often exploit vulnerabilities in networks and applications to gain unauthorized access to an organization’s system. Patch management involves regularly updating and applying security patches to software, operating systems, and applications to close these vulnerabilities and protect businesses from potential breaches.

Data breach

A data breach occurs when unauthorized individuals gain access to sensitive information, such as customer data, financial records, or intellectual property. Data breaches can have severe consequences, including financial losses, legal repercussions, and reputational damage. Implementing robust security measures can help minimize the risk of data breaches.

Security awareness training

Security awareness training educates employees about potential cybersecurity threats and best practices to help them recognize and respond to such threats effectively.

Virtual private network (VPN)

A VPN is a software or platform that helps establish a secure and encrypted connection between a user’s device and a remote server. Using a VPN especially when connected to public Wi-Fi networks will ensure privacy and data protection.

Insider threat

An insider threat is a current or former employee, contractor, or business partner who intentionally or accidentally misuses their authorized access to compromise data security.

Security audit

A security audit is a systematic evaluation of an organization’s security policies, practices, and controls to identify potential vulnerabilities and improve overall security.

Cybersecurity is an ongoing process, and staying informed about the latest threats and solutions is essential to keep your business safe in the digital age. Protect your assets, safeguard your customers, and maintain your reputation by talking to our cybersecurity experts today.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

/by

Beware of Phishing Attacks

Phishing attacks are increasing and getting more sophisticated. Here’s how to avoid them:

Phishing is on the rise, and anyone who uses email, text messaging, and other forms of communication is a potential victim.

These attacks, in which a cybercriminal sends a deceptive message that’s designed to fool a user into providing sensitive information such as credit card numbers or to launch malware on the user’s system, can be extremely effective if done well.

These types of attacks have become increasingly sophisticated — making them more dangerous — and more common. An October 2022 study by messaging security provider SlashNext analyzed billions of link-based URLs, attachments, and natural language messages in email, mobile and browser channels over a six-month period, and found more than 255 million attacks. That’s a 61% increase in the rate of phishing attacks compared with 2021.

The study revealed that cybercriminals are shifting their attacks to mobile and personal communication channels to reach users. It showed a 50% increase in attacks on mobile devices, with scams and credential theft at the top of the list of payloads.

“What we’ve been seeing is an increase in the use of voicemail and text as part of two-pronged phishing and BEC [business email compromise] campaigns,” said Jess Burn, senior analyst at Forrester Research. “The attackers leave a voicemail or send a text about the email they sent, either lending credibility to the sender or increasing the urgency of the request.”

The firm is receiving a lot of inquiries from clients about BEC attacks in general, Burn said. “With geopolitical strife disrupting ransomware gang activity and cryptocurrency — the preferred method of ransom payment — imploding as of late, bad actors are going back to old-fashioned fraud to make money,” he said. “So BEC is on the rise.”

Criminals using phishing attacks based on tax season, shopping deals

One of the iterations of phishing that people need to be aware of is spear-phishing, a more targeted form of phishing that often uses topical lures.

“While it is not a new tactic, the topics and themes might evolve with world or even seasonal events,” said Luke McNamara, principal analyst at cyber security consulting firm Mandiant Consulting. “For example, as we are in the holiday season, we can expect to see more phishing lures related to shopping deals. During regional tax seasons, threat actors might similarly try to exploit users in the process of filing their taxes with phishing emails that contain tax themes in the subject line.”

Phishing themes can also be generic, such as an email that appears to be from a technology vendor about resetting an account, McNamara said. “More prolific criminal campaigns might leverage less specific themes, and conversely more targeted campaigns by threat actors involved in activity like cyber espionage might utilize more specific phishing lures,” he said.

What people should do to ward off phishing attempts

Individuals can take steps to better defend themselves against phishing attacks.

One is to be vigilant when giving out personal information, whether it’s to a person or on a website.

“Phishing is a form of social engineering,” Burn said. “That means that phishers use psychology to convince their victims to take an action they may not normally take. Most people want to be helpful and do what someone in authority tells them to do. Phishers know this, so they prey upon those instincts and ask the victim to help with a problem or do something immediately.”

If an email is unexpected from a specific sender, if it’s asking someone to do something urgently, or if it’s asking for information or financial details not normally provided, take a step back and look closely at the sender, Burn said.

“If the sender looks legitimate but something still seems off, don’t open any attachments and mouse or hover over any hyperlinks in the body of the email and look at the URL the link points to,” Burn said. “If it doesn’t seem like a legitimate destination, do not click on it.”

If a suspicious-looking message comes in from a known source, reach out to the person or company via a separate channel and inquire as to whether they sent the message, Burn said. “You’ll save yourself a lot of trouble and you’ll alert the person or company to the phishing scam if the email did not originate from them,” he said.

It’s a good idea to stay up on the latest phishing techniques. “Cyber criminals constantly evolve their methods, so individuals need to be on alert,” said Emily Mossburg, global cyber leader at Deloitte. “Phishers prey on human error.”

Another good practice is to use anti-phishing software and other cyber security tools as protection against potential attacks and to keep personal and work data safe. This includes automated behavior analytics tools to detect and mitigate potential risk indicators. “The use of these tools among employees has increased significantly,” Mossburg said.

Another technology, multi-factor authentication, “can provide one of the best layers of security to secure your emails,” McNamara said. “It provides another layer of defense should a threat actor successfully compromise your credentials.”

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from CNBC.com SOURCE

/by
,

Linking Strong Cybersecurity to the Growth and Survival of SMBs

When it comes to protecting small businesses from cyberattacks, there is a constant balance between managing risk and applying limited resources between security, operational budgets, and convenience. Small businesses face critical resource decisions every day. Can my business afford to deploy optimal, strong cybersecurity solutions? And will my cybersecurity policies be a burden for my employees, trading partners, and customers?

Small business owners face significant challenges, and their most important daily responsibility is ensuring their businesses grow and thrive. As an industry, we have not done enough to connect the benefits of strong cybersecurity practices and policies to business expansion, resiliency, and long-term survival.

There is no area of cybersecurity more indicative of the challenges we face in threading the needle between security and business-friendly policies than usernames and passwords. We still overwhelmingly rely on an insecure means of account and network access that has proven inefficient and insecure for more than 30 years.

Multi-factor authentication (MFA)

We know there are more secure methods that can be deployed. Multi-factor authentication (MFA) bolsters security by requiring users to present more than one piece of evidence (credential) whenever the user logs in to a business account (ex. company email, payroll, human resources, etc.). MFA usually falls into three categories: something the user knows (a 15-character password), something the user has (fingerprint), or something the user receives (a code sent to the user’s phone or email account).

MFA works, but companies remain extremely reticent to deploy. The Global Small Business Multi-Factor Authentication (MFA) Study released by the Cyber Readiness Institute (CRI) found that only 46% of small business owners claim to have implemented MFA methods recommended by leading security experts, with just 13% requiring its use by employees for most account or application access.

Most companies implementing some form of MFA have not made it a requirement for all.

Only 39% of those who offer MFA have a process for prioritizing critical hardware, software, and data, with 49% merely “encouraging the use of MFA when it is available.”

According to Microsoft, 99.9% of account compromise attacks can be blocked simply using MFA. Yet, 47% of small business owners surveyed said they either didn’t understand MFA or didn’t see its value. In addition, nearly 60% have not discussed MFA with their employees.

Implementation of MFAs

Implementing MFA does not require hardware changes to company computers, mobile devices, or printers. Instead, there are numerous free and low-cost software-based tools users can download to their company and personal devices. For example, email providers usually offer (and encourage) MFA. Therefore, it can be as easy as clicking an option in email settings to turn on MFA.

There are several easy steps companies can take to implement MFA. First, organizations should update their policies and procedures with specific expectations. For example, all employees should implement MFA on their company email accounts. Next, hold workforce information sessions to communicate MFA policies and expectations. Employees need to know that it is easy to activate MFA on their accounts. Finally, designate someone in the organization who accepts the responsibility for cyber readiness to help employees troubleshoot as they begin using MFA.

Final Thoughts

At CRI, we fully believe strong cybersecurity is a business imperative, not an operational challenge. This requires a change in mindset from small business leaders, new questions must be asked, and behaviors need to change:

  • Can my business afford to suffer a cyberattack?
  • Will a cyberattack irreparably damage my brand?
  • Will a cyberattack burden my employees, customers, and trading partners?

Honestly answering these questions will change the importance of cybersecurity in a small business’s growth strategy.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from SmallBiz Technology SOURCE

/by