Cyber-attacks have become sophisticated and are now capable of causing long-term effects on organizations. Thus, businesses need to prepare comprehensive cybersecurity policies. The first step to drafting a cybersecurity policy is to be aware of the threats.

Here are the types of cyber-attacks that an organization is most likely to face:

• Brute Force Attack: Under this type of attack, the attackers adopt a trial and error approach to guess the password to a system or user account. They try every possible combination of passwords or passphrases until the account is unlocked. Brute force attacks are expedited by using software or tools that can push many possible passwords in a short time. Some of the tools used by cybercriminals include Aircrack-ng, Crack, Hashcat, Hydra, etc.
  Safety Tips:
• Use complex passwords and change them regularly
• Set a limit on number of login attempts
• Enable captchas
• Employ multi-factor authentication
• Credential Stuffing: Credential stuffing cyber-attack is based on the assumption that users tend to keep the same password across multiple accounts. Attackers use a database of compromised credentials (password breach database available on the dark web containing stolen credentials from data breaches) to gain unauthorized access to an account. The attackers use bots for automating and scaling up the attack. The hacked accounts can be used for financial theft, fraudulent transactions, misuse of stored data, etc.

Safety Tips:

• Employ multi-step login process throughout the organization
• Blacklist suspicious IP addresses
• Use techniques such as device fingerprinting
• Phishing & Spear Phishing: Phishing is one of the most common cyber-attack types. Attackers frame an email that looks legitimate with a seemingly trusted source to trick targets into providing personal details. The emails generally include matters that would require a user to act in a hurry; for example, the email may mention that the user needs to verify his details within a few minutes to avoid being charged a penalty or account suspension by his financial institution. The attackers use technical knowledge in conjunction with social engineering to design a successful phishing attack. Spear phishing is a more targeted attack where the attackers research the target to prepare a more personalized message or email.

Safety Tips:

• Be wary of emails from unknown sources
• Before clicking on a link, hover over it to see the destination
• Pay close attention to email headers
• Malware Attacks: Malware is a broad term representing attacks where malicious software is downloaded on the target device to steal, encrypt, or delete sensitive data for business or financial benefits. Majorly known forms of malware include adware, bots, ransomware, and Trojans.

Safety Tips:

• Use a dedicated tool for adware removal
• Install firewall and keep the system up-to-date
• Perform frequent backup
• Avoid downloads from unknown sources

Centex Technologies is committed to helping clients understand cyber-attacks and formulate an effective strategy to stay protected. For more information, call Centex Technologies at (972) 375 - 9654.