Read these simple tips to protect your business from cybercrime
As a business, it can be challenging to keep your cybersecurity systems up to date as fraudsters and thieves quickly adapt and exploit new protection methods.
Of the many malicious attempts, phishing is one of the most dangerous and most common threats, since it preys on human error.
It involves a cyber-criminal sending an automated email or message to a large number of recipients, disguised as:
a trusted person or institution
a colleague asking for sensitive information such as bank account number, ID card number and passwords
a seemingly trustworthy link
After clicking the link, the cyber-criminal can search for information and use it to steal money or blackmail the individual.
‘Spear Fishing’ messages are more targeted and customised, with the cyber-criminal pretending to be a close relative, friend or partner. These are usually delivered via email, social media or dating sites.
That’s why it’s important to educate your employees about the possible threats so they can recognise an attack when it happens.
There are five common types of mobile phishing attacks:
URL padding: when the real destination of the website is hidden by hyphens, leaving only the seemingly legitimate site visible.
Tiny URLs are shortened links that lead the user to malicious content. It’s also possible to send these via SMS.
Screen overlays replicate the login page of a legitimate mobile app in order to obtain a person’s username and password. This method is very effective and usually targets mobile banking and payment apps.
Mobile verification can help the attacker verify that the target is a mobile device and send specific attacks to it.
'SMS spoofing' tricks the user to click a link by disguising themselves as a system update notification. When the user clicks on it, it intercepts emails, sensitive data or web traffic to and from the device.