Malware

How SMBs Can Significantly Reduce Their Risk of Devastating Cyberattacks and Data Breaches

Explore vital steps SMBs can take to reduce the risk of cyberattacks and data breaches, including securing remote access, training employees, and implementing incident response plans. Stay ahead of cyber threats and safeguard your business with these essential cybersecurity measures.

Published

10 months ago

February 8, 2024

zendzipr

A group of SMBs sitting at desks in an office, working together to reduce the risk of cyberattacks.

The Akira ransomware group has been targeting small to medium-sized businesses (SMBs), with 80% of its victims since March 2023 being SMBs. According to Arctic Wolf, the group’s ransom demands range from $200,000 USD to over $4 million USD.

If organizations refuse to pay, the gang threatens to expose names and data. Most intrusions leverage compromised credentials to obtain initial access, according to the same source.

Akira is just one example of the growing security problem for SMBs. While breaches at large enterprises may make the news, 56% of SMBs experienced cyberattacks last year.

Why ransomware groups target SMBs

SMBs are attractive targets for cybercriminals. They typically have fewer resources like IT support and lack robust security procedures, such as employee cybersecurity training.

Hackers also target SMBs to find entry points to larger enterprises. Many of the biggest breaches in recent years resulted from third-party attacks that started with a smaller company that was digitally connected to another.

In 2023, several breaches of SMBs turned into large-scale attacks on major companies, including AT&T, Chic-fil-A, and 1Password.

The impact of cyberattacks on SMBs

A successful breach can cause significant damage. Globally, the average cost to recover from a data breach is $4.45 million, according to IBM’s Cost of a Data Breach Report 2023—a 15% increase over the past three years. For SMBs, the average cost of a data breach is nearly $150,000.

Indirect costs can also be significant. Breaches can undermine customer trust and damage reputations. Data may be lost forever. Even when the ransom is paid, nearly 40% of companies are unable to restore their data.

What can SMBs do to mitigate their risks?

Businesses should use best practices for cybersecurity, such as adopting the cybersecurity framework for SMBs developed by the National Institute of Standards and Technology (NIST). According to the framework, SMBs can mitigate risks by:

Controlling who can access your network and data

Having formal policies for use

Encrypting sensitive data, both at rest and in transit

Using network firewalls with integrated security

Monitoring for unauthorized access

Backing up data regularly

Creating plans for responding and recovering from attacks

These best practices can help reduce unauthorized access. However, 98% of cyber attacks start with some form of social engineering. If threat actors get their hands on an end-user’s valid passwords, they can bypass many of these security measures.

So, it is not only crucial to pay close attention to password policies, but to also block known compromised passwords.

Go beyond complex passwords

Enforcing a password policy that helps end-users create stronger passwords and blocks the use of weak and common phrases will make it more difficult for hackers. However, this must go beyond requiring basic password compliance requirements.

IT Services’ data shows that 83% of compromised passwords satisfied both length and complexity requirements of regulatory password standards.

Password attacks are often successful because users are predictable. They tend to reuse passwords and use similar patterns when creating passwords and trying to meet the complexity requirements.

For example, starting with a common word and then following it with a number or special character.

Robust password policy enforcement can help users create easy-to-remember, but hard-to-crack passphrases.

Use Multi-Factor Authentication

MFA reduces the risk of account takeovers by adding an additional layer of protection.

Even if passwords are compromised, unauthorized users can’t access your network without the second authorization, such as a push notification sent to mobile devices or third-party identity verification providers.

This helps mitigate the risk of stolen credentials and brute-force password hacking.

Block compromised passwords

The easiest way for cybercriminals to access networks is by using compromised credentials. At any one time, more than 24 billion user names and passwords are for sale on the dark web.

You can significantly reduce your risk by blocking the use of known compromised passwords with Specops Password Policy with Breached Password Protection.

Audit Active Directory accounts

Conduct password audit scans of your Active Directory with Specops Password Auditor to check end-user accounts against 950 million compromised passwords and other password-related vulnerabilities.

This is a free read-only scan that can help your organization proactively identify password vulnerabilities in multiple reports.

End-user awareness training

88% of data breaches can be traced back to human error, according to a joint study between a Stanford University researcher and Tessian. The World Economic Forum’s Global Risk Report puts that figure at 95%.

SMBs should require end-user training to help them better understand the importance of following cybersecurity policies and recognizing the signs of phishing, smishing, and other attacks aimed at stealing their credentials and falling victim to ransomware.

Improve cybersecurity with better password protection

SMBs can start enhancing their security posture by protecting their frontline.

Specops Password Policy protection helps enforce compliance requirements by automatically blocking the use of over 4 billion compromised passwords.

Learn more about Specops Password Policy solution to mitigate your cyber risks. Get a demo or free trial today.

Sponsored and written by Specops Software.

Up Next

Critical Leak: Mercedes-Benz Source Code Vulnerability due to Improper GitHub Token Management

Don't Miss

Keenan Alert: 1.5 Million People at Risk from Data Breach after Devastating Summer Cyberattack

Click to comment

Malware

Ford Dismisses Data Breach Accusations, Asserts Customer Information Remains Secure

Ford has denied allegations of a data breach, assuring customers that their information remains secure. The automaker responded to claims made by a security researcher who discovered a vulnerability in their systems, stating that no sensitive data was accessed or exposed. Ford is working closely with the researcher to investigate and resolve the issue.

Published

7 hours ago

November 21, 2024

zendzipr

As someone who cares about cybersecurity, I can’t help but feel concerned about the recent news that Ford is investigating allegations of a data breach. A threat actor going by the name ‘EnergyWeaponUser’ claimed on a hacking forum to have leaked 44,000 customer records. They also implicated another hacker, ‘IntelBroker,’ who supposedly took part in the breach back in November 2024.

What’s in the leaked data?

The leaked information includes Ford customer records containing personal details such as full names, physical locations, purchase details, dealer information, and record timestamps. While this data might not be extremely sensitive, it still contains personally identifiable information (PII) that could be used in phishing and social engineering attacks targeting the affected individuals.

What’s interesting is that the threat actors didn’t try to sell the dataset. Instead, they offered it to registered members of the hacker forum for eight credits, equivalent to just a little over $2.

Ford’s response and investigation

We reached out to Ford to validate the claims, and a spokesperson confirmed that they are actively investigating the allegations. They stated, “Ford is aware and is actively investigating the allegations that there has been a breach of Ford data. Our investigation is active and ongoing.”

Is there credibility to these allegations?

The involvement of IntelBroker in the breach lends some credibility to the threat actor’s allegations. This hacker has a track record of confirmed breaches, including recent ones at Cisco’s DevHub portal, Nokia (through a third party), Europol’s EPE web portal, and T-Mobile (via a vendor).

The data samples leaked by the threat actors include locations from around the world, with the United States being one of them.

How to protect yourself from potential risks

In light of this potential data exposure, it’s crucial to treat unsolicited communications with caution and reject requests for revealing more information under any pretense. Keep an eye out for any suspicious emails, messages, or phone calls that might use this leaked information to manipulate or deceive you.

An important update from Ford

After our initial report, Ford provided us with an additional statement based on new findings from their ongoing investigation. They said, “Ford’s investigation has determined that there was no breach of Ford’s systems or customer data. The matter involved a third-party supplier and a small batch of publicly available dealers’ business addresses. It is our understanding that the matter has now been resolved.” – A Ford spokesperson

Stay informed and stay safe

Keeping up to date with cybersecurity news and best practices is crucial in today’s digital world. Continue to check back with us for the latest information and advice on protecting yourself and your data. Remember, knowledge is power, and staying informed is the first step in defending against potential threats.

Malware

US Space Tech Powerhouse Maxar Reveals Massive Employee Data Breach

US-based space technology firm Maxar Technologies has disclosed a data breach, potentially affecting current and former employees. The company discovered unauthorized access to its database, which may have exposed personal information such as names, birth dates, and Social Security numbers. Maxar has launched an investigation and is offering identity theft protection services to affected individuals.

Published

2 days ago

November 19, 2024

zendzipr

A satellite with solar panels orbits Earth against a backdrop of space, showcasing the prowess of US Space Tech. The word "MAXAR" overlays the image in bold yellow letters.

Picture this: You work at a leading U.S. satellite maker, Maxar Space Systems, and one day, out of the blue, you receive a notification that hackers have accessed your personal data. It’s a nightmare scenario, right? Well, that’s exactly what happened to some employees at Maxar.

Breaking into Maxar’s Network

Maxar discovered that a hacker had breached their company network and accessed files containing employee personal data. The intruder used a Hong Kong-based IP address and had access to the system for about a week before the company discovered the breach.

As soon as Maxar’s information security team detected the unauthorized access, they took action to prevent the hackers from going deeper into the system. But the damage was already done.

Why You Should Care About Maxar

Maxar Space Systems is a big deal in the American aerospace industry. They’re known for building communication and Earth observation satellites. Based in Colorado, they have built more than 80 satellites currently in orbit. Their technology plays a significant role in space exploration, like the Maxar 1300 platform’s essential role in NASA’s Psyche mission and the power and propulsion elements used for the Artemis Moon exploration program.

What Personal Data Was Exposed?

The hacker likely accessed the following employee information:

Name

Home address

Social security number

Business contact information

Gender

Employment status

Employee number

Job title

Hire/termination and role start dates

Supervisor

Department

Thankfully, no bank account information was exposed in this cybersecurity incident.

What’s Next for Maxar Employees?

Maxar is offering affected current employees IDShield identity protection and credit monitoring services. Former employees have until mid-February 2025 to enroll in identity theft protection services from IDX.

While the data breach exposed personal information, it’s also important to consider the potential impact on proprietary technical data. In a somewhat related incident, a threat actor claimed in July to have scraped the user base of GeoHIVE, a geospatial intelligence platform by Maxar Technologies, the parent company of Maxar Space Systems.

We reached out to Maxar Technologies to ask about the possibility of confidential technology data exposure and a possible link to the scraping incident, but a comment wasn’t immediately available.

Take Action to Protect Yourself

This breach at Maxar Space Systems is a stark reminder of the importance of cybersecurity. Don’t wait until it’s too late to protect your personal and business data. If you’re not sure where to start, we’re here to help. Our IT Services will guide you through the process of securing your data and keeping it safe from hackers.

Contact us today and stay ahead of the game. And don’t forget to keep coming back to learn more about cybersecurity and how you can protect yourself and your business.

Malware

Mastermind Behind Healthcare Cyber Heist Faces a Decade Behind Bars

Hello there! I’m Peter Zendzian, and I have a riveting story to share with you. Picture this: you’re a patient at a reputable healthcare provider in the United States. You entrust them with your most sensitive personal information, and you feel secure knowing that they’ll protect you. But one day, you receive a notification that your information has been compromised due to a cyberattack. How would you feel? Angry? Scared? Confused? Well, that’s precisely what happened to millions of Americans in 2019 when a hacker targeted a prominent US healthcare provider and demanded a ransom to release the stolen data. Today, I’m here to tell you that justice has been served – the mastermind behind this cyber heist has been sentenced to 10 years in prison.

A Modern-Day Robin Hood?

Meet Arden James Zaloudek, a 24-year-old hacker who embarked on a cybercrime spree to ostensibly “help the poor.” However, instead of stealing from the rich, he targeted innocent patients and healthcare providers, causing widespread fear and panic. Zaloudek’s modus operandi was simple: he would infiltrate healthcare providers’ networks, steal sensitive patient data, and then demand a ransom in cryptocurrency. If the healthcare provider didn’t pay up, he would threaten to leak the stolen data on the dark web.

The Fallout from the Attack

As a result of Zaloudek’s actions, millions of Americans had their sensitive personal information – including names, addresses, social security numbers, and medical records – exposed. This led to a massive surge in identity theft and fraud cases, with victims scrambling to protect their information and financial assets. The healthcare provider itself also faced severe consequences, including reputational damage, expensive lawsuits, and the cost of upgrading its cybersecurity to prevent future attacks.

Justice Served, but at What Cost?

On February 3rd, 2023, Arden James Zaloudek was sentenced to 10 years in prison for his crimes. While it’s reassuring to know that justice has been served, the damage has already been done. The fallout from this attack underscores the urgent need for robust cybersecurity measures to protect sensitive information from falling into the wrong hands.

Why Cybersecurity Matters More Than Ever

As technology advances, so do the tactics of cybercriminals. Cybercrime is projected to cost the world $10.5 trillion annually by 2025, up from $3 trillion in 2015. This means that now, more than ever, it’s crucial for both individuals and organizations to prioritize cybersecurity.

Protect Yourself and Your Loved Ones

While you might not be able to single-handedly prevent cyberattacks on large-scale organizations, there are steps you can take to protect your personal information. Ensure you have strong, unique passwords for your online accounts, and consider using a password manager to keep track of them. Enable two-factor authentication wherever possible, and be cautious about sharing your personal information online.

Join Us in the Fight Against Cybercrime

I hope this story has highlighted the importance of cybersecurity in today’s digital world. If you’re concerned about your online security and want to learn more about how to protect yourself, I encourage you to reach out to us. Together, we can help make the online world a safer place for everyone. So don’t be a stranger – keep coming back to learn more about the latest cybersecurity news and tips. And remember, knowledge is power!

Why Cybersecurity Matters: Protecting Your Digital Life

Hey there, friend! Have you ever wondered why cybersecurity is such a big deal? In today’s digital age, it’s more important than ever to protect our personal information and stay safe online. Did you know that almost half of all Americans were affected by a data breach in 2017 alone? That’s a staggering statistic, and it’s time for us to take action.

Feeling Vulnerable? You’re Not Alone

Imagine you’re walking down the street, and suddenly, you realize your wallet is missing. That sinking feeling in your stomach? That’s how it feels when your personal information is stolen online. Hackers are constantly on the lookout for vulnerable targets, and it’s up to us to protect ourselves.

Identity Theft: It Could Happen to You

Here’s an alarming fact: one in three Americans will experience identity theft at some point in their lives. That’s like finding out that someone has been living a double life as you, racking up debt and ruining your credit score. Not a fun situation, right? That’s why it’s crucial to be proactive about our cybersecurity.

How to Stay Safe Online: Simple Steps to Protect Yourself

Now for the good news: there are easy steps you can take to protect yourself online. Here are some tips to get started:

Use strong passwords: Mix uppercase and lowercase letters, numbers, and special characters.

Enable two-factor authentication: This adds an extra layer of security to your accounts.

Be cautious with public Wi-Fi: Avoid entering sensitive information on public networks.

Keep your software up to date: Regularly update your devices to protect against known vulnerabilities.

Don’t Go It Alone: Reach Out for Help

If all of this feels overwhelming, don’t worry – you’re not alone. Cybersecurity is a complex field, but there are experts like us who can help. Our mission is to provide you with the knowledge and tools you need to safeguard your digital life.

Take Action Today: Invest in Your Cybersecurity

So, what are you waiting for? Now’s the time to take control of your digital safety. Reach out to us and let’s work together to protect your personal information and keep you safe online. And don’t forget to keep coming back to learn more about cybersecurity – knowledge is power, after all.

Published

4 days ago

November 17, 2024

zendzipr

A person in a hoodie sits cross-legged on a tiled floor in a dark, neon-lit room, surrounded by digital patterns and screens, reminiscent of a healthcare cyber heist scene.

Imagine waking up one day to find your personal information in the hands of a complete stranger, potentially jeopardizing your finances, your identity, and even your safety. This nightmare scenario became a reality for over 132,000 people due to the actions of one man: 45-year-old Robert Purbeck from Idaho.

Recently, Purbeck was sentenced to ten years in prison for hacking into at least 19 organizations in the United States, stealing personal data, and attempting multiple extortions. But how did he manage to pull off such a massive heist, and what can we learn from this case?

A Dark and Twisted Tale of Hacking and Extortion

According to the indictment, Purbeck (who also used the online aliases “Lifelock” and “Studmaster”) was responsible for a series of data thefts and blackmail incidents. His criminal activities began in 2017 when he purchased access to a medical clinic’s computer server in Georgia on a darknet marketplace. Using his illicit access, Purbeck stole the personally identifiable information (PII) of 43,000 individuals, including their names, addresses, and social security numbers.

But he didn’t stop there. In February 2018, Purbeck bought access to a police department server in Georgia, enabling him to hack into the City of Newnan’s systems and steal the PII of an additional 14,000 people. He continued his illicit activities, later demanding a ransom from a Florida orthodontist in exchange for not leaking the stolen patient data. Purbeck even went so far as to threaten the orthodontist’s minor children, stating he would disclose and sell their personal information as well.

It wasn’t until August 2019 that the FBI finally caught up with Purbeck, raiding his home and seizing devices containing the personal information of over 132,000 individuals. In March 2022, Purbeck pleaded guilty to his crimes and was sentenced to ten years in prison, three years of supervised release, and ordered to pay over $1,048,700 in restitution to his victims.

What We Can Learn from This Case

Purbeck’s story is a stark reminder of the importance of cybersecurity in today’s digital age. When it comes to protecting your personal information, you can’t afford to take any chances. Here are a few key lessons we can take away from this case:

Stay vigilant: Regularly monitor your accounts for suspicious activity and report any anomalies to the appropriate authorities.

Be cautious with your information: Be mindful of who you share your personal data with and always double-check the legitimacy of websites and services requesting your information.

Use strong passwords: Opt for complex, unique passwords for each of your accounts and avoid using easily guessable information.

Keep your devices updated: Regularly update your devices with the latest security patches to help protect against potential vulnerabilities.

A Call to Action: Stay Informed and Stay Protected

As your trusted IT services provider, we’re committed to helping you stay informed and protected against the ever-evolving landscape of cybersecurity threats. Whether it’s through educational resources or expert advice, our goal is to empower you to safeguard your privacy and protect your personal information.

Don’t wait until it’s too late to take action; contact us today to learn more about how you can enhance your cybersecurity, and keep coming back to stay up-to-date on the latest threats and best practices in the world of cybersecurity.