Latest Cyber Threats

Ransomware is the latest cyber threat. Ransomware will block access to corporate files while demanding payment (usually with virtual currency) in order to restore access to the files. Users infect the computer by clicking a link or opening a malicious attachment. Ransomware will appear on the screen and cannot be minimized.

Cybercriminals are increasingly taking over email accounts in an effort to send requests to transfer or withdrawal funds out of accounts. Criminals will attempt to communicate with any financial contacts in the address book that result in financial gain for the cybercriminals. The emails will contain poor grammar and a sense of urgency in order to get the end user to send payments.

Remind all employees to never take any instructions for payment via email. Always confirm financial transactions verbally and utilize dual control.

Corporate Account Takeover is when cybercriminals gain control of the bank account of a business by stealing valid online banking credentials. Once online credentials are gained, it could lead to the unauthorized withdrawal or transfer of funds from business accounts.

Malware refers to malicious software such as viruses and trojans that are intended to cause harm. Malware today is sophisticated and will allow cybercriminals to be able to impersonate a business in online banking sessions.

Typically, malware is delivered via:

• Malicious mobile applications
• Malicious URLs
• Phishing or "SMiShing"

Once installed malware can lead to the following:

• Observing and tracking user behavior
• Copying keystrokes
• Stealing intellectual property
• Taking control of the computer and performing illicit or illegal tasks.

Stolen identities are the fuel that drives the industrial fraud complex. Data breaches can occur through a social engineering attempt or phishing attempts to dupe victims into revealing sensitive information that can be used to open new accounts or takeover existing ones. Data breaches can result in stolen customer information, credit card information and sensitive employee information.

Social media sites can be important marketing channels for businesses, but be careful. Malicious code is increasingly injected into social networking sites, including harmless looking links, advertisements and game apps. Social media can also be a source for cyber criminals to gain knowledgeable information to be used in an effort to access personal information.