How to Prepare Your Business For a Cyber Security Disaster

Safeguard Your Business Against Cyber Security Threats

As technology advances, so do the methods cyber criminals use to steal data. To combat this, we’ve learned that simply deploying antivirus software is not enough anymore to keep our business data secure – you need the latest cyber security solutions to keep your business moving. 

A cyber security breach can be devastating or even life-threatening to a business. From cybercriminals stealing funds to holding your data for ransom, the cost of a cyberattack can be incredibly high. Furthermore, the implications of data security and GDPR data protection compliance can reduce customer trust in your brand, incur hefty fines and cause legal issues. In short, the biggest threat to your business is poor cyber security and knowing how to prevent an IT disaster is a vital measure you can take to protect your business.

At Netcentrix, we know the impact a cyber security breach can have on a business and the threat of an attack is very much a case of ‘when’ rather than ‘if’. In 2022, according to data from Embroker, 70% of UK businesses were targeted in attacks of some form, making an eventual attack very likely, if it hasn’t happened already. You have put a lot of time, money, stress and care into building your business, it’s only right that you take the time to ensure you and your team know how to avoid cyberattacks. Also, investing in effective cyber security measures is as vital as investing in protective measures for other expensive business assets, such as insurance for your business premises or vehicle fleet. 

Let’s explore how you can safeguard your business against cyber security threats to prevent an IT disaster and keep your business data secure.

What are the most common cyber security threats?

How can we stay one step ahead of cybercriminals? By finding out what the most common cyber security threats are! At the moment, there are a handful of common cyber threats you need to be on your guard against – malware, phishing, weak passwords, and social engineering. An innocent mistake from a team member or lack of knowledge on these cyber security threats could be enough to allow a cybercriminal to infiltrate your network, steal your data or money or hold your business information for ransom. According to Verizon, 82% of data breaches in 2022 were caused by human error, which is why it’s essential to arm your team with the knowledge and tools they need to defend themselves and your precious data.

To protect both your business’s and your customer’s data it’s also important to spot the characteristics of common cyberattacks. So, let’s jump in and discover the most common cyber threats you and your team need to look out for.

Malware

Malware (short for malicious software) is any type of software that has been created to cause damage or disruption to a business or gain access to your business devices. Malware is an umbrella term for the vast array of harmful software that cyber criminals use to attack your business data. Here are some of the most common:

Worms

Worms are spread via insecurities within software or phishing through spam emails or instant messages. They are installed within the computer’s memory and, from there, they are capable of infecting a machine or your business’s entire network. There are different types of worms, so depending on which one your computer is infected with and the type of security measures you have in place, they are capable of causing devastating damage including:

• Modifying and deleting files
• Replicating themselves to cause more damage and destroy your resources
• Theft of data
• Installing backdoor entry for hackers to infiltrate your network

Due to the nature of how worms work, they can replicate without any human interaction and infect a large number of devices quickly, so once one computer is infected, they could threaten your entire fleet.

To spot a worm before it can cause damage:

• Monitor the space on your hard drive –  as a worm replicates itself it will take up the free space on your computer. 

• Take notice if your computer is starting to slow down or you find that programmes are either crashing often or aren’t running properly – this could be a sign of a worm. 

• Note file changes –  if you find that files either start mysteriously disappearing or new files start appearing that you haven’t installed, this is another clear sign that your machine is infected with a worm.

Viruses

Computer viruses are probably one of the most well-known types of malware and typically infect machines via a document or an executable file (a file that has a ‘.exe’ extension). 

Viruses spread through file sharing, infected websites or dodgy email attachment downloads and are activated when the infected host file or programme is used. Once the virus has infected your computer, it can start to replicate itself and spread through your computer systems. Just like a virus that affects humans – it’s contagious. Think of file sharing from an infected computer as sneezing and coughing. Once a machine has been infected with a virus it is then capable of taking over your applications and sending infected files to colleagues or clients. The virus makes these files look like they are coming from you to increase the likelihood of somebody opening it, so the virus can continue to spread.

Similar to a worm, if your computer is infected with a virus, you will notice that your computer is performing more slowly. Apps and programmes may take a long time to load and general use of the machine will feel sluggish. You may find frequent pop-ups from random websites or pop-ups that tell you to download software, such as antivirus – be warned, these will lead to malicious websites or will download malware if clicked! Pop-ups spreading viruses may also cause spyware to be installed onto your computer, which will allow a hacker to steal information from your system without you realising it. 

Another sign is changes to your machine that you haven’t executed, such as being unable to log in or off your computer, unknown programmes starting up on your computer, security software being disabled, or mass emails being sent from your account.

Ransomware

Ransomware is an especially dangerous malware as it denies or restricts your access to your data and holds it for ransom by demanding payment in return for your data. In many cases, criminals will set a time frame for payment and if it is not received a business will risk losing access to their data forever. Even if payment is given to the criminal, it is not a guarantee that you will get your data back. Not only could you be burdened with a massive financial loss due to having to pay a cyber-criminal to retrieve your information, the impact it has on your GDPR and data security compliance can be dreadful and could even result in a hefty fine. Ransomware attacks can be severe enough to shut down an entire business.

You will know if you have been infected with ransomware if you find that files or programmes on your computer are inaccessible due to being encrypted. Ransomware is often accidentally downloaded through email attachments or links from unknown sources. Although ransomware can be presented in different ways, they all have one thing in common – you will be met with a demand for money in return for your data.

Spyware

As the name suggests, spyware secretly records your online activity and collects data and personal information, such as passwords. It runs in the background, sneaking around and harvesting the data it needs without you noticing. Spyware can be used for a variety of reasons, but it is mainly used for fraud, such as stealing banking or credit card information or identity theft. This can be incredibly harmful for businesses, as important data can be stolen without your knowledge and used to steal money from your business or to steal sensitive information either about your business or your customers.

Like other forms of malware, one of the key symptoms of spyware is a device that is slow or crashes often. You may also find, like worms, that space has been unexpectedly taken up on your hard drive without you installing anything. Finally, like viruses, you may notice pop-ups on your screen asking you to click on them or download something, whether you’re online or offline.

Phishing

Did you know that 83% of cyber breaches in businesses are through phishing? If you have an email account, you may have come across an email that doesn’t look quite right. It usually looks like it’s from a reputable source, such as a supplier, bank or a governing body such as HMRC. They also may be presented in a text message or a phone call. Once you have opened the phishing email or text they will direct you to a website where you will normally be asked to fill in your details or make an online payment.

In days gone by, it was pretty easy to spot a scam email. The layout may be a clear giveaway by not looking professional or the branding not matching the company or authority they are trying to impersonate. However, nowadays phishing messages and emails can look very convincing. Criminals are taking extra, sophisticated steps to make the emails or messages and the websites that they link to look like the real deal.

Some scammers may not go to such lengths, even today, and still send out emails or messages that don’t look particularly professional, but this is due to many scammers working in bulk. They will send out hundreds or thousands of emails at a time, as they only need to trick a few people in order to gain enough sensitive information to make a financial gain.

When it comes to phone phishing, it’s the same kind of concept. You will receive a phone call out of the blue, usually from someone posing as a governing body, insurance company or retailer. They tend to threaten you with an account suspension or a fine and pressure you into giving them your payment details or ask you to go to a website or download a phone application, which is capable of taking your personal details from your device or hacking into your bank accounts.

Weak Passwords

Keeping data password protected can be an effective step in building a decent security strategy. However, users must keep up good password hygiene when it comes to creating them. When we’re talking about password hygiene, we don’t mean choosing soap-related words as a password! 

We mean that there should be a solid procedure when it comes to choosing passwords and looking after them. Our top tips include: 

• Firstly, choose a password that is difficult to guess. The key to a strong password is one that a hacker can’t easily guess or use software tools to crack. 
• Your password should use a combination of uppercase and lowercase letters, as well as symbols and numbers. 
• Avoid common phrases, words or common passwords like birthdays, family names, addresses or famous names. 
• Ensure that your password is at least 8 characters long. The more characters you use and the more symbols and numbers you incorporate, the harder it can be to guess the password. 
• Random codes using letters, numbers and symbols work the best.

When it comes to looking after your passwords, there are many things you can do to keep them safe. 

• Do NOT use the same passwords across multiple accounts and never allow your browser to save your passwords. If a device is stolen, all someone needs to do is open your browser to find out your passwords! 

• Avoid writing passwords down, sharing them with anyone or allowing other people to watch you log into devices, programmes or websites. Once you’ve picked a password, it is important to change them regularly, to decrease the likelihood of a hacker cracking them. 
• Ensure you log out of websites and devices when you are done using them, to prevent someone else from using your account. 
• Use two-factor authentication (2FA) – an easy security measure that can be added to your strategy and provides an extra layer of security. After you have entered a password for a programme or device, you can then use an app where a PIN, password or biometrics are required for access. Therefore, a person will need to know the password for your account, as well as your 2FA login information.

Can Password Managers Help with Password Security

Password managers are a great tool to help you both keep your passwords safe and come up with passwords that are incredibly difficult to crack. A password manager is a service offered by a cyber security company – or similar – that stores all your passwords on a cloud-based server separate from any of your devices; think of them as a bank account for your passwords. 

You are usually able to install easy-to-use programmes to your devices and browsers that automatically fill in your passwords from your password manager whenever you need to log back into a new site. The ironic thing is you must choose a very specific password to access your password manager, known as a ‘master password’ – this is the one password that is not stored within the password manager itself and must be kept safe at all times. 

Ideally, do not save your master password on any digital device and only write it down if you absolutely have to. Naturally, you should always choose a reputable and experienced company to use as your password manager. It may sound like a risk to store all your passwords in one place, but these vendors have strict security guidelines in place that make them trustworthy and reliable to millions of customers globally.

Social Engineering

No matter how clever we are, we’re still human and therefore are capable of making mistakes. Unfortunately, it’s mistakes that cyber-criminals look out for, so they can manipulate us into offering up sensitive information. 

Cybercriminals will utilise social engineering, usually through digital communication and social media to find out information about their victims, following several key steps. 

1. They will then pose as a real person, using the information to promote trust with their victim. 
2. They will then try to persuade the victim to give up information, such as account logins, payment methods, and contact information to commit a cyberattack. 
3. Finally, the criminal commits their attack, usually stealing money, and then cuts off all communication with the victim.

There are plenty of red flags when it comes to social engineering that are easy to spot when you know what to look for. This includes:

• A message that seems legitimate but is worded strangely – the message from the criminal could come from a seemingly legitimate source, such as a brand, authority or even someone you know, but if the wording of the message is off, don’t trust it. 
• The request within the message will be urgent and try to push you to do something quickly, such as pay a fine, go to a particular website, open a video or download a file. 
• Furthermore, the message or email could come from an unfamiliar name or email address and if asked to prove their identity, they refuse.

There are many steps you can take to avoid becoming a victim of social engineering, including:  

• Avoid clicking on links in emails from people you don’t know or senders you don’t recognise. 
• When using social media or online accounts, avoid sharing excessive personal information that a hacker could use to access your accounts. 
• Be aware when talking to people online – if you don’t know them personally, do not share too much personal information with them. 
• Furthermore, take care with how much information you share about your job and the company you work for, as a hacker can use this information to pose as a person, such as a client or supplier to try and gain information from a team member.

Protecting Against Cyber-Criminals

So now we’ve covered some of the most common cyber-attacks and some specific measures you can take to protect yourself from certain attacks, let’s look at how you can generally protect your business from a cyber security disaster.

Deploy the right tools for the job

Businesses must ensure they deploy the right security solution to protect their staff, customers and data. These tools should include products and solutions such as:-

• Endpoint security software that protects against Zero-Day exploits.
• Conditional Access & Multi-Factor Authentication.
• Advanced email threat protection
• Mobile Device Management, including remote wipe capabilities for laptops, tablets & smartphones

As a minimum, all businesses should deploy multi-factor authentication in their protection against cyber criminals”

Phil Scanlon | Director | Netcentrix

Education is Key

We say this often, because it’s true! The more educated your team is about cyber security and how to keep their data secure, the better. Ensure your team undertakes training to learn:

• How to create and look after passwords safely
• How to identify a scam email and to check links before clicking them
• Who to talk to if they are suspicious about any email or message
• How to use two-factor authentication
• Company specific policies relating to data security

Update, Update, Update

Software and systems that aren’t up to date will contain weaknesses and insecurities which hackers can exploit to get at your data, attack your systems or gain access to your machines and network.  Ensure you regularly update any software and programmes that you use, such as firewalls, servers, software applications, and operating systems on your machines and cyber security software, as this will help to keep them out.

Back Up Your Data

Ensure all company data is effectively and safely backed up. Utilise the cloud to back up your data so you can recover it in the event of a cyber security breach.

Keep Your Data Under Lock and Key with Netcentrix

At Netcentrix, we know how important security is when it comes to your business data. From secure data backup to next-generation endpoint security tools, we can help you ensure that your data is safe today and in the future. 

Our team of experts take the time to get to know your business, its needs and its budget to find the best security solutions for you. To do this,  your business will be appointed a dedicated account manager who will oversee the security tools that are put in place, and will be responsible for ensuring they’re fit for purpose both now and in the future, so you can stay ahead of the game.

Our team is comprised of industry experts with decades of combined experience offering the technology and security solutions major businesses employ to maintain a healthy defence and trajectory. With security solutions from Netcentrix, your data is protected by a strong cyber fortress that keeps cybercriminals at bay. Speak to a Netcentrix expert today to give your business the defence it needs to thrive.