FEATURE | Cyber Security


5 Either way, the adversary then uses a support network (oſten the ‘dark-web’) to monetise whatever they exfiltrate.


5 Organised crime networks that see cyber-crime as a low-risk, high- return activity seeking, for example, stock exchange gains aſter obtaining information before transactions are officially announced.


5 Organised crime networks/criminals that want to blackmail your company.


5 Competitors looking to gain an advantage over you, for example, in deal negotiations, by accessing confidential information or pricing data.


5 Nation states by way of state- sponsored attacks, for example, to sabotage deals in favour of local companies or to give their own industries an advantage.


5 Hacktivists driven by political/moral opposition who want to sabotage your company, a deal or transaction.


5 Disgruntled employees/ex-employees who wish to sabotage their ex-company.


5 Hackers, who are curious about this company they have just gained access to.


5 Hackers/criminals who use automated tools to search for (and exploit) weaknesses.


34 DIRECTOR OF FINANCE


5 Employees or contractors specifically planted by an organisation to gain access to sensitive information.


WHAT TOOLS DO THEY USE AGAINST YOU? Attackers and adversaries use a multitude of methods to attack your organisation. 5 Theſt of physical devices; laptops, mobile phones, USB sticks, tablets etc. either as an opportunist crime (mugging to sell down the pub) or by targeting specific employees.


5 A USB memory stick dropped in the car park or reception with malicious code that automatically activates and installs.


5 Drive-by-downloads – infected legitimate websites, or infected advertising, that your staff visit and automatically downloads malware.


5 Phishing – emails with a malicious attachment or a malicious link.


5 Spear-phishing – emails specifically craſted to target an individual or department with highly believable information.


5 Automated network reconnaissance tools to find weaknesses in your networks or systems.


dofonline.co.uk


5 DDoS (Distributed-Denial-of-Service attacks) to flood your networks connections and/or website and make them unusable.


5 DNS (internet address) hi-jacking to point visitors to your sites to a malicious alternative site.


5 Ransomware – encrypting all your data and only decrypting on the payment of a ransom.


These days adversaries need few, if any, skills. All these attacks can be brought on the ‘dark-web’ or as ‘crime-as-a- service’ at negligible cost. More importantly, the majority of these tools exploit known and un-patched vulnerabilities in your systems and application soſtware – rarely are your adversaries doing anything novel or


particularly clever.


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32  |  Page 33  |  Page 34  |  Page 35  |  Page 36  |  Page 37  |  Page 38  |  Page 39  |  Page 40  |  Page 41  |  Page 42  |  Page 43  |  Page 44  |  Page 45  |  Page 46  |  Page 47  |  Page 48  |  Page 49  |  Page 50  |  Page 51  |  Page 52