Cyber-attacks have become sophisticated and are now capable of causing long-term effects on organizations. Thus, businesses need to prepare comprehensive cybersecurity policies. The first step to drafting a cybersecurity policy is to be aware of the threats.
Here are the types of cyber-attacks that an organization is most likely to face:
- Brute Force Attack: Under this type of attack, the attackers adopt a trial and error approach to guess the password to a system or user account. They try every possible combination of passwords or passphrases until the account is unlocked. Brute force attacks are expedited by using software or tools that can push many possible passwords in a short time. Some of the tools used by cybercriminals include Aircrack-ng, Crack, Hashcat, Hydra, etc.
- Use complex passwords and change them regularly
- Set a limit on number of login attempts
- Enable captchas
- Employ multi-factor authentication
- Credential Stuffing: Credential stuffing cyber-attack is based on the assumption that users tend to keep the same password across multiple accounts. Attackers use a database of compromised credentials (password breach database available on the dark web containing stolen credentials from data breaches) to gain unauthorized access to an account. The attackers use bots for automating and scaling up the attack. The hacked accounts can be used for financial theft, fraudulent transactions, misuse of stored data, etc.
- Employ multi-step login process throughout the organization
- Blacklist suspicious IP addresses
- Use techniques such as device fingerprinting
- Phishing & Spear Phishing: Phishing is one of the most common cyber-attack types. Attackers frame an email that looks legitimate with a seemingly trusted source to trick targets into providing personal details. The emails generally include matters that would require a user to act in a hurry; for example, the email may mention that the user needs to verify his details within a few minutes to avoid being charged a penalty or account suspension by his financial institution. The attackers use technical knowledge in conjunction with social engineering to design a successful phishing attack. Spear phishing is a more targeted attack where the attackers research the target to prepare a more personalized message or email.
- Be wary of emails from unknown sources
- Before clicking on a link, hover over it to see the destination
- Pay close attention to email headers
- Malware Attacks: Malware is a broad term representing attacks where malicious software is downloaded on the target device to steal, encrypt, or delete sensitive data for business or financial benefits. Majorly known forms of malware include adware, bots, ransomware, and Trojans.
- Use a dedicated tool for adware removal
- Install firewall and keep the system up-to-date
- Perform frequent backup
- Avoid downloads from unknown sources
Centex Technologies is committed to helping clients understand cyber-attacks and formulate an effective strategy to stay protected. For more information, call Centex Technologies at (972) 375 - 9654.
A ransomware is a malicious program that infects a target device and gains control. The program encrypts files and blocks the user access to the infected data (or system) until the targeted organization pays the ransom to the attackers. Although the instances of ransomware attacks have gained momentum lately, it is actually a primitive cybersecurity threat.
Here is a brief account of history of ransomware:
- First Ransomware: The first known ransomware attack was recorded in 1989. The attack was carried out by Joseph Popp, an AIDS researcher. He distributed 20,000 floppy disks containing a malicious program to AIDS researchers across 90 countries. He made pretence that the floppy disks contained a survey program. It was a basic ransomware attack and since then ransomware attacks have evolved and have acquired an array of advanced features.
- Locker Ransomware: In 2007, a new category of ransomware malware appeared. It was known as Locker Ransomware. This type of ransomware did not encrypt files; instead it locked the victim out of the device preventing him from using it. Another ransomware that operated on this technique is known as WinLock. The ransomware employed worms such as Citadel, Lyposit, and Reveton for displaying a fine message from a law enforcement agency. The ransomware demanded $10 as ransom in exchange for the unlocking code.
- Scareware: After a few years, the attackers changed their strategy. They started capitalizing on the fear of ransomware by spreading fake applications and antivirus programs. In these types of ransomware attacks, the malicious applications attack a target device and display a pop up message saying that the device has been infected with viruses. The message encourages the victim to visit a website and pay for antivirus software for fixing the problem. The link mentioned in the message redirects the user to a malicious website designed to look authentic and legitimate. After a few years, cyber criminals understood that they can compromise any website instead of designing fake websites. They switched to automated ransomware attacks the included phishing emails as vectors.
- Crypto Ransomware: In 2013, first cryptographic ransomware emerged. It was known as CryptoLocker. It was launched by Gameover ZeuS bot and was sent as an email attachment. Once downloaded, the ransomware encrypted the files on the device and demanded a bitcoin payment for unlocking the files.
- Ransomware-As-A-Service: It is the latest step in the evolution of ransomware. It first appeared in 2015 with the Tox toolkit launch. This gave beginner cybercriminals a chance to develop custom ransomware tools with advanced capabilities.
Centex Technologies offers cybersecurity solutions to businesses. For more information on, call Centex Technologies at (972) 375 - 9654.