Think that you could spot a cyberattack a mile away? <\/p>\n\n\n\n
Gone are the days when the term phishing was associated with a leisurely Sunday afternoon activity and trees were the only victims of hacking. As we continue to make dramatic advancements in the digital and tech space, the threat of cybercriminals has grown significantly, and the methods used aren\u2019t just limited to viruses and ransomware.<\/p>\n\n\n\n
When cybercriminals use social engineering tactics, they aim to psychologically manipulate their victims for their own gain. This often includes handing over sensitive information or transferring large amounts of money to an unknown account. These attacks can occur at any time, through text, email, phone calls and social media chat facilities.<\/p>\n\n\n\n
Social engineering attacks often appear to come from a trusted source such as a friend, relative or colleague. Or you may find they approach you as your banking, utility or broadband provider. The purpose of this impersonation is to gain your trust. <\/p>\n\n\n\n
Most phishing attacks aim to obtain personal information from the victim. These are often opportunistic and use fear tactics based on what\u2019s happening in the world at the time, such as the COVID-19 pandemic. No two types of phishing attacks look the same so it\u2019s important to remain constantly aware of this threat when working online.<\/p>\n\n\n\n
Very similar to phishing attacks, baiting uses the promise of free goods or services to encourage victims to hand over information. This tactic also takes advantage of our natural curiosity, asking us to click a link to uncover a mystery prize or access a piece of information.<\/p>\n\n\n\n
Not all cyber-related attacks happen online. Tailgating attacks occur when a criminal attempts to access your office premises by tailgating an employee, playing on our instinct to be polite and hold the door open for the person behind us. Some criminals have even gone as far as to wear fake baby bumps to garner sympathy \u2013 because who would shut the door on a pregnant person?<\/p>\n\n\n\n
Unlike phishing attacks which are usually conducted in mass, pretexting attacks try to build a believable scenario to establish trust before they try to obtain information. For example, you could receive an email from your CEO who states they\u2019re about to enter an important meeting and need your password urgently to access a system. Or you may receive a call from your payroll team saying your payment didn\u2019t go through this month and they need to check your account details. These types of attacks are designed to put pressure on the individual, so they act fast without careful consideration. <\/p>\n\n\n\n
Cybercriminals are changing their methods all the time, so there\u2019s no exact formula that makes up a social engineering attack \u2013 but there are red flags to look out for.<\/p>\n\n\n\n
These include:<\/p>\n\n\n\n
When it comes to protecting yourself and your business against cybercrime, you need to remain vigilant and think before you click.<\/p>\n\n\n\n
Ensure that your staff are up to date with the latest cyber training, implementing measures to ensure it remains at the forefront of their minds. If you have a near miss, let people know about it.<\/p>\n\n\n\n
While it doesn\u2019t make you immune to a cyber-attack, it helps to create an extra barrier of defence with well-reputed anti-virus software. Look at setting your spam filters to high \u2013 although keep an eye on your junk mailbox to ensure nothing legitimate slips through the net!<\/p>\n\n\n\n
Encourage your staff to always check the source if an email seems suspicious. As well as checking the email address itself, recipients can hover over links (don\u2019t click them!) to see where they lead.<\/p>\n\n\n\n
It\u2019s hard to know how you\u2019re going to react to a social engineering attack until it happens. That\u2019s why it\u2019s a great idea to send test emails to your staff to see what they would do. Use this as a learning tool to educate them on what they should do if a real risk presents itself.<\/p>\n\n\n\n
Some of us tend to overshare on social media, giving hackers ammo to hack into our devices. But have you considered what you\u2019re sharing outside of these platforms? For example, if your CV is online \u2013 are your address and phone number on this? Not to mention your old schools, interests\u2026 the list goes on. Think twice about what you share online. <\/p>\n\n\n\n
Despite nearly 40% of all UK businesses reporting at least one cyber attack in the last 12 months, businesses are still not taking the threat of cyber attacks seriously enough. Now, the Government are urging businesses to take steps to improve their digital resilience. Cyber Insurance is designed to protect your business in the aftermath of an attack, including investigation, data recovery, loss of income, reputation management and more. To discuss how you can better protect your business with dedicated Cyber Insurance, give Rowett Insurance a call on 01726 871144 option 3.<\/p>\n\n\n\n