A world’s best information sharing website Forbes.com is now in list of
successfully infiltrated website list Syrian Electronic Army – The #SEA.
They successfully able to get access of Forbes’ email and publishing
systems, download email addresses and hashed passwords of millions of
users, and post articles rights.
As we can see such a big name is now under the list of hacked website,
then how small business can survive over on internet. It is very
shocking for all of us how recently hackers have done very remarkable
hacking of world’s well-known brands like Microsoft, Skype, Twitter account of Times Magazine, CNN. Below is main security ignorance, which played a main part in different cyber attacks.
Respond to Phishing mail: Phishing is a serious concern for the
whole cyber world as it lures user to click on email links, which
directs him/her on another page where attacker swipes the details of
user. Sometimes such suspicious links ask users for private login
details and after getting login details attacker can again attack on the
server or system. It is sensible to avoid such spam links especially in
organizations that seems ripe fruits for cyber culprits.
Respond to fake login page: When a user innocently enters his or
her login details in fake login page, resulting in phishing attack.
Attacker can take the user to another web page to make phishing attack
in real. Attacker can perform an attack called cross-site request
forgery to hack the browser. After hijacking the browser attacker can
install malicious software to steal the information from the website. In
this case, it is sensible to look for webpage security and authenticity
before submitting the login credentials. Many website has SSL security
on their login page to ensure users about website authenticity.
Lack of Security monitoring: It is very essential to monitor for any suspicious activity of the server or network system.
Security monitoring
includes collection, analysis, and escalation of warning samples and
indications. It alerts organization immediately and organization can
avert
further potential destruction. Accomplish inspection about daily IT security risks.
Educate employees: The biggest concern is lack of security
knowledge and its measures. Organization should provide enough security
knowledge to its employees, which must cover organization’s security
policy, immediate action against suspicious activity, policy about
sharing details and web surfing guidelines, etc.
Other Recommendations: Besides the above security measures organization can take below security measures.
- Install essential tools to check the ability of your web server against DOS or DDOS attack.
- Install phishing detection tool on your server.
- Keep a data backup tool that regularly takes data backups.
- Secure your website with SSL protocol.
- Install anti-phishing and antivirus tool that regularly scans server for any vulnerability.
Cyber crime is evolving drastically around us. Whether you are a large
organization or small business, security precautions can make a big
difference. A single click in today’s world can welcome major cyber
attack. It is better to take precaution rather to suffer.
Enjoy Guys! and don't forget to post your comments. ©
Comrade Pyrate
