Cyber attacks are actions carried out by hackers. They aim to damage a system, to access confidential information or to obtain a sum of money. A cyber attack can take many forms. For this reason, it is necessary to set up a safe work environment to protect yourself from possible risks. Different ways of ensuring the cybersecurity for remote businesses in a previous article. Computer hacking is often subtle. Would you be able to recognize that you are a victim of it? Here are some ways to better identify attacks.

1. Malicious software (Macro Malware)

The use of malicious software (better known in English as Macro Malware) is a fairly common cyber attack. It consists of installing firmware in a document and sending it to a correspondent to damage their computer. In many cases, hackers invite their victims to activate the software themselves at the push of a button.

How?

By creating a feeling of insecurity. The message linked to the document encourages victims to want to know more, to wonder if it is an unpaid bill, etc. You have to be careful. When you receive a document from an unknown correspondent, do not open it. Also, if you receive an illegible document and the only way to read it is by pressing a button, don't open it either. Stay alert and take the necessary precautions to protect yourself.

2. Email Phishing

Email phishing is offered in two different ways by scammers. The first is the best known of all forms of cyberattacks. It's the receipt of a fraudulent email. Among them, we find resetting a password or even tracking a package.

However, these emails have signs that should alarm you. First, pay close attention to spelling and punctuation errors. Also, rate the greetings at the beginning of the email. A business you've purchased from knows your information, like your name. Hackers who send fraudulent emails don't know your name. So they don't use it in their greetings.

You can also be suspicious when you don't know the sender and the sender seems to know you. A final way to identify these attacks is to hover your mouse over the button or link that the scammer invites you to press. In these emails, there is a heavy use of tools that aim to disguise a URL, such as bit.ly. Careful! In our case, we use bit.ly on our Twitter account to reduce the number of characters. This tool is, at its core, intended for this use. Hackers are only using it to disguise the real landing page of their attack.

Fraudulent business emails (BEC - Business Email Compromise)

A second form of email phishing is aimed primarily at businesses. These attacks are carried out in the medium and long term. The final objective is to receive a significant amount of money that will be transferred internationally.

To do this, hackers proceed in stages. The first is to target people who can make payments and transfers in a business. We think, among other things, of people in finance or accounting departments. Then, an email is sent to a targeted person, an email containing malicious software. The latter will study the digital actions and actions of his victim in the weeks and months that follow.

Who is this person talking to? How does she communicate with her bosses? Who are its directors? What words do they use?

This software will even be able to create a document in which the victim's accesses and passwords will be listed.

What does this type of cyber attack consist of?

The software establishes when the circumstances are conducive to attack (absence of the decision-makers' office, business trip, etc.). At this point, the hackers will create and send an email to the victim that will falsely come from their boss. In this email, the fake manager will be unable to respond and provide more details since he would have a plane to catch, would be outside the office, in a meeting, etc. In addition, it is not uncommon for these emails to contain the mention “Urgent” and invite you to make an important money transfer as quickly as possible.

You have to be careful. Even if we don't want to disturb our bosses, a major transfer requires double checking. Get on the phone and talk to your boss in person to confirm that this transfer is in fact a real request.

If it is a genuine request, you will have taken precautions. Most of the time, your manager won't have a clue what it's all about. You will therefore have made it possible to thwart an attack that aimed at the company to pay large amounts to scammers. At that point, it will be a good idea to review the overall cybersecurity of the company.

3. Text message phishing (Smishing)

Smishing, or SMS phishing, is phishing via text message. The primary aim of scammers is to steal the personal and banking data of their victims. They go so far as to use a pseudonym that everyone knows (iCloud, Apple, banking institutions, etc.). For example, you may receive a text message from iCloud asking you to confirm certain information. You could also get one from your fake banking institution telling you to log in to accept a wire transfer.

The important thing when you receive such texts is not to press the links and buttons. By “confirming” your information or by accepting a false transfer, you are offering your personal and banking data to your scammers who will undoubtedly use them excessively.

Smishing is becoming more and more well known. It is a bit of a replacement for fraudulent emails asking to save a foreign cousin, for example. Smishing is popular and effective because we always have our phone with us. Also, because the screen is small, we all tend to want to tap on a link to find out more and to see bigger. That's where the attack comes in. Smishing has a very quick response.

How do you protect yourself?

Of course, you should avoid visiting links sent by text message. You should also not respond or engage in any conversation. The best way to protect yourself is to do nothing except, of course, block malicious numbers. Although you won't receive text messages from this number in the future, you should stay on the lookout. Scammers have more than one trick up their sleeve and more than one number at their disposal!

4. Phone phishing (Vishing)

Like the other types of cyberattacks explained so far, the aim of vishing is to gain access to the victims' computers. However, his way of doing things is different. It all works by phone calls.

You know, these accusations of fraud by the government or even this cruise that you win every month? It's phone phishing.

The best way to not get caught in the trap is to simply hang up. You can also contact the organization that the scammers say they work for. Why? Because they will possibly make other calls and potentially reach victims who will not be as savvy as you.

5. Ransomware

Ransomware is malicious software that blocks access to the computer system and encrypts data. The aim is to create a feeling of anxiety among victims by accusing them of having committed illegal actions or of storing illicit documents.

Scammers then act on behalf of a business or government to demand a ransom to be paid. This is often requested by cryptocurrency. After receiving this payment, the scammers promise to unlock the system. True or false? It depends, but be aware that such a cyberattack, like any other, leaves traces on the victims. The installed malware will not be removed from the computer, which suggests a new attack in the future.

Being malicious software, ransomware reaches your computer through a downloaded attachment or an infected website. To minimize the risks of being a victim of this cyberattack, updates must be made. Software, antivirus, firewall, operating system, in short, everything must be up to date on your computer. We also recommend that you back up your content periodically. Store this copy on the cloud or on an external hard drive. In the event of a cyberattack, you can keep access to your files.

Here you have the 5 most frequent cyberattacks. Hackers act for two reasons: to access your personal or business data and to collect money. In any case, caution should be exercised. Cybersecurity involves the work environment, but also through vigilance and awareness. Learning to detect possible cyberattacks is the best way to avoid them.

Are you vigilant when browsing the web?

Image source: Unsplash