Author Archives: Stephen Green

Emerging Cyber Security Threats and Trends, 2021 and Beyond – Part 1

There is no denying that the world of cybercrime has changed the way businesses think about security. Not only do we need to consider physical security but also digital security. Everything in business is at risk if the business has an internet connection. Intellectual property, trade secrets, personal data and financial data are just a few of the things that hackers will try to steal from your business.

So let’s talk about cybercrime and the top cybercrime trends we have seen in 2020 – Part 1

Cybercrime – as-a-service – Cybercrime has gone mainstream and, like software, cloud, and infrastructure technologies, it is now being offered as a service. With the rise in computing power and the decrease in cost, cyber criminals have seized the chance to make money by offering their cybercrime skills to others who have the money to pay for their services with no technical experience required. Denial of service attacks can be launched for less than US $10 and email accounts on popular sites like Gmail, Yahoo, and Hotmail cost around $130.

State sponsored cyber-attacks – Hacking is no longer performed by the stereotypical teenage hacker in a basement accessing your systems. State sponsored hacking is now performed by sophisticated organized groups using every tool available to steal valuable intellectual property & critical data as well as to damage or shut down core infrastructure.

Think of the Sony Pictures or Office of Personnel Management data breaches in the US for examples of how state sponsored hackers have stolen valuable or damaging information from companies. These hackers are targeting companies and information that can provide economic or political advantages.

Recently publicized cases in the US show that state-sponsored hackers from Iran accessed critical infrastructure systems at a dam in upper New York state. In late December, alleged Russian hackers took down the power grid in Western Ukraine. Hackers have turned the fantasies of Die Hard into reality by accessing the core infrastructure of nations with direct penetration attempts. The state sponsored hackers are trying to get control of everything from oil fields, power stations, water stations, and nuclear facilities.

Hackivism – One of the emerging cybercrime threats to the world is what is termed “hactivism” or politically motivated hacking to destroy reputation, steal data, or affect critical infrastructure. Hackers such as Anonymous use their skills to forward their own political agenda. This trend began to gain traction during the US elections where people from around the world enlisted hacking as a form of speech. Businesses must have protections in place that can address the threat of hacktivism. From defacing your website to bringing down your network with a denial of service, hacktivism must be defended against.

Next: Ransomware

Fraud in the Time of Corona -19

Fraud in the Time of Corona -19

During this time of uncertainty due to the Corona-19 virus, we all need to protect ourselves and our loved ones and friends from unscrupulous people.  These bad actors will take advantage of any situation in order to defraud those vulnerable or unaware.

International Consultants and Investigations, Inc. (ICI) recommends the following guidelines in order to avoid falling prey to scammers:

  1. Don’t give out a healthcare insurance number or Medicare number to anyone other than a trusted health care provider.
  2. Do not provide a social security number, bank account or checking account number over the phone to anyone, even if they claim to be from the Social Security Administration or your financial institutions. A follow-up call to the Agency or your bank can confirm if there is an issue to be addressed.
  3. The Census taker will not require any personal information such as an employee ID, Social Security number, etc.
  4. The IRS will not call to inform you that you are under threat of arrest unless you remit immediately by providing banking information to the caller. The IRS does not make these calls.
  5. The World Health Organization, the Centers for Disease Control and Prevention or other health agencies will not call to ask for donations. Stick to charities you know and trust.
  6. Beware of any stranger or recent acquaintance that offers to take your money and go to the supermarket or drug store for you; your money and your new friend will not be back.
  7. If you don’t recognize a number on your caller ID don’t answer. If it’s a “real” call a voice mail will be left.  If you don’t have caller ID and you answer the phone to “dead space” hang up; chances are it’s a “robo” call.
  8. Work from home offers are often scams requiring the victim to “buy” materials necessary to earn money for representing the “firm”. Check any such offering of work-at-home home with your local Better Business Bureau or the police.
  9. No one from Nigeria or a Baltic country has millions of dollars they need you to help move to the United States. In all cases remember, if it sounds too good to be true it is probably fraud.

Scammers are friendly people.  In this time of social isolation a friendly voice on the phone is a scammer’s primary tool used to cheat you. Being aware is your best defense.