Three Most Common Cyber Threats Today
Alex Shipp, senior anti virus technologist at MessageLabs, outlined the top three common cyber threats today. He was speaking at the "RSA Conference 2006," a meeting focused around data security.
The first line of defense is the user. Customers need to NOT open email attachments they're not expecting and do not trust. They also need to NOT enter information when they have not verified that they're on the web site they think they are. This isn't always easy. Gone are the days of poor spelling, grammar and silly looking duplicate web sites. They need to keep their firewalls up, and up to date and the same holds true for their anti-virus and spyware protections. Your customers need to keep this foremost in their minds, and you have a responsibility to keep it in yours, and theirs as well. The aggravation and loss you reduce may be your own.
- Remote control code for zombie networks. A worm infects a computer and then control of that machine can be taken remotely. When enough machines are under their control they call this organized network a botnet. Botnets of 5,500 machines rent for about $350 a week and are used by those sending spam, launching phishing attacks, looking to steal confidential information, etc.
- Phishing scams. These are the official looking emails that want a victim to click a link for example, and to enter logon information to their baking site, PayPal or eBay information and similar confidential, financial information.
- Bank-stealing Trojans. Third on the list and raising the threat level is this new Trojan which doesn't care about usernames, passwords, random codes or pictures. As banks are increasing the security level of online authentication, the cyber-crooks are responding with a Trojan that waits for the customer to logon to the real site, and then just transfers the money out of the account. These Trojans are programmed for specific banks. But more are being added.
The first line of defense is the user. Customers need to NOT open email attachments they're not expecting and do not trust. They also need to NOT enter information when they have not verified that they're on the web site they think they are. This isn't always easy. Gone are the days of poor spelling, grammar and silly looking duplicate web sites. They need to keep their firewalls up, and up to date and the same holds true for their anti-virus and spyware protections. Your customers need to keep this foremost in their minds, and you have a responsibility to keep it in yours, and theirs as well. The aggravation and loss you reduce may be your own.


0 Comments:
Post a Comment
<< Home