Phishing Holiday

As we enter Black Friday week, and the holiday season is well underway, everyone is starting to relax and look forward to a much-needed break.

Don't forget that it's now a prime time for phishing attacks.

Criminals will be looking to use the latest tech offers and those must-have gifts for the kids to trick many of us into following suspicious links all aimed at obtaining our login credentials.

In order to avoid these holidays phishing attacks, I'd suggest following these simple steps:-

It's obvious, but when you're offered that unbelievable deal on an iPhone X or Pixel 2 it's easy to forget, but don't click on any links from unknown people.
Don't forget that friends can also be duped into sending links via social media, messenger or email. If a link looks suspicious, don't click on it.
Fake websites now look just like the real ones. Check and double-check the webpage is genuine before entering any of your credentials or confidential information. (at least take a look at the URL, Google Chrome & Firefox may help, see below).
Don't enter your credit card details on unfamiliar or suspicious sites, if a deal looks too good to be true, it's probably fake.
Help others and forward any phishing emails you receive over to me@rescam.org and scam the scammers.

Look at switching over to Firefox, Google Chrome browser or even invest in a Chromebook. Google has gone a long way to introduce techniques to combat many of these threats by blocking some suspicious URLs.
In addition to Chrome, Google has also implemented new security tools such as the Advanced Protection program and through its new two-step verification program Google Prompt.

Comments

GDPR Compliance - The Sky Is Falling

Over the past few months, I've been speaking to more and more business owners about their concerns regarding GDPR (General Data Protection Regulation), which becomes law on 25th May 2018. The concerns appear to come from misinformation and fake news over GDPR. There are the scaremongers, reporting on the increase fines that an organisation could face. While it's true GDPR has increased the levels of fines to 2% of an organisation’s global turnover, and for more severe incidents €20 million or 4% of turnover, whichever is the larger, it's unlikely that fines will rocket. Elizabeth Denham, the information commissioner for the UK, stated in a recent blog , it’s scaremongering to suggest that we’ll be making early examples of organisations for minor infringements or that maximum fines will become the norm. Denham continued to say that; " The ICO’s commitment to guiding, advising and educating organisations about how to comply with the law will not change under the GD...

5 things you can do to improve cybersecurity

As I mentioned last year, phishing attacks are on the increase. Recent studies have shown that many small businesses are seriously underprepared to deal with a security breach. With its employees being a small businesses most valuable asset, it is important to understand how you can protect them and your business from a cyber attack. Here are the top five things you and your employees need to know about cybersecurity:- Cybersecurity knowledge Many users believe that all IT security is the responsibility of the IT staff, or that some magical shield has been implemented like a technological Patronus Charm which will save them from the bad guys. Unfortunately, many small businesses can't afford top security experts so it is important that employees understand they play a critical role in protecting your organisation. Employee training is the first line of defence against cyber-criminals. Make sure that all employees are have been correctly onboarded into your organisation. Make...

All my files are stored in the Cloud, so I’m not at risk, right?

This is something I hear all the time. It is often thought that ransomware is an on-premises threat only affecting old, unpatched Windows PC’s. And on the whole, this is true. We’ve all heard the stories and read the news, “WannaCry infects 230,000 computers in over 150 countries”. In the UK ransomware brought the NHS to its knees affecting over 34% of trusts in England and caused the cancellation of an estimated 19,000 appointments and operations. But what people storing files in the Cloud don’t often realize is that they are far from immune. Apps used to share files and images, such as Google Drive, OneDrive, iCloud, and Dropbox etc are now being specifically targeted by sophisticated attacks. Emails appearing as document requests from these apps are amongst the most effective in generating some of the highest click-through rates. Don’t take my word for it, researchers at Proofpoint found that when it comes to attacks looking to steal your login credentials, a quarter is targeti...

Bespin labs

Search This Blog