Remember AOHell? How hackers are using AI for phishing

Phishing attacks are one of the most successful and damaging types of threat activity, and they have been that way for a long time.

The first attack recognised as phishing was launched in 1995 using a Windows application called AOHell that targeted users of the America Online (AOL) service. It exploited vulnerabilities in AOL’s software to steal passwords and credit card numbers, send mass phishing emails, and creating fake accounts. Since then, nothing has been off limits to hackers.

So it’s only natural that now AI tools are here, hackers are able to exploit them for phishing and other malicious activity. This article from Barracuda looks into how phishing attacks have evolved over time, and how to combat them affecting your business through GenAI.

Want to learn more?

Complete IT Systems have a team of Barracuda specialists on hand to demo the solution, discuss business benefits and help you understand how the technology works for your organisation.

To get in touch or request a demo please contact us.

 

Let’s talk about QR codes

QR codes can be a security risk. Have you covered the base?

We’ve all scanned those little tags on tables, adverts and such. You’re not alone! In 2022 there was a 433% increase in QR code scans from 21. Your users will be doing this to work productively, efficiently and get things done.

So what’s the problem?

A malicious link hidden in a QR code can bypass traditional email filters. Additionally, the tell-tale signs of a phishing link are not as apparent with a QR code because it is difficult to validate and lures your users to switch to their mobile device with weaker security protection.

KnowBe4 have developed a new FREE tool so you can test your end users on the type of attack. Scan now to get started (see how easy it is!)

▶ Or click the safer link here!

Spear phishing: Top threats and trends

Spear phishing remains a huge threat to British firms – yet many remain inadequately protected.

Tap into this report – “Spear phishing: Top threats and trends” – from Barracuda to:

  • Gain the most recent trends in social engineering
  • The latest methods attackers are using to trick their victims,
  • Best practices to protect your business from these evolving threats.

Find out more?

As Barracuda Partners, Complete IT Systems can offer you expert advice on the solutions and how they could be effectively deployed in your business.

To find out more please call us on 01274 396 213 or use our contact form and we’ll arrange a good time to call you back.

90% of malware is delivered via email. Is your business email secure?

Malware and email messages are, unfortunately, the same as bread to butter or hands to gloves. The two go hand in hand. In fact, the connection is so acute that it’s been found that over 90% of all known malware is delivered into companies via email.

And there’s even worse news for IT managers and systems administrators. Here’s some of the main points from the Cofense State of Phishing Defence report:

  • The average user / employee doesn’t go two full days between receiving phishing messages
  • More than 50% of phishing messages have the word “invoice” in the subject line
  • 21% of malicious emails carry harmful attachments or phishing-related malware

Given that this data was gathered over 135 million simulations, 800,000 emails and 50,000 actual phishing campaigns targeting companies in 23 industries, the threat is obviously a real one.

Protect your business email with a 6 month FREE Kaspersky trial!

To support remote working in this challenging time, we’re offering 6 months’ FREE protection with the very latest version of Kaspersky Security for Microsoft Office 365. This extends protection for SharePoint Online and Microsoft Teams, securing all collaboration and messaging channels within Microsoft Office 365.

Kaspersky Security for Microsoft Office 365 uses advanced heuristics, machine learning and other next-generation technologies to protect your communication and collaboration processes from ransomware, malicious attachments, spam, phishing (including Business Email Compromise) and unknown threats.

Sign up NOW for a FREE 6-month license and take protecting remote workers off your to-do list.

Why Kaspersky?

  • Prevent threats and keep your business running
  • Endpoint protection from the most tested, most awarded security vendor
  • Protect Windows desktops and file servers, Mac OS workstations, iOS and Android smartphones and tablets
  • Secure Microsoft Office 365 communication and collaboration

Want to find out more?

As Kaspersky Gold Partners, Complete IT Systems can offer you expert advice on the solutions and how they could be effectively deployed in your business.

To find out more please call us on 01274 396 213 or use our contact form and we’ll arrange a good time to call you back.

 

References:

https://www.darkreading.com/attacks-breaches/most-malware-arrives-via-email/d/d-id/1333023

Ransomware in numbers for UK SMBs

ransomware

With the recent spate of ransomware attacks in the UK proving that the threat hasn’t subsided, it is likely a good time to re-think your company’s IT security plan. To this end, we’ll be blogging over the coming weeks about the extent of the problem, the increasing creativity of hackers, the risks and exposure businesses face if ill-prepared, and some practical measures you can adopt to asses and safeguard your business against such a scenario.

What’s the impact of ransomware?

To kick off our series, we start with 10 key stats about how ransomware affects small businesses in the UK.

  1. Ransomware remains the most prominent malware threat to SMBs, with 83% reporting it as the most common security threat
  2. In the first half of 2019 alone, 61% of MSPs report attacks on their clients, with 19% reporting multiple attacks in a single day.
  3. On average, 2 in 5 SMBs report that they’ve fallen victim to a ransomware attack. SMBs with in-house IT teams are at greater risk
  4. When it comes to the ransomware threat, there is a disconnect between service providers and SMBs. 82% of MSPs are “very concerned” about the ransomware threat and 8% report their SMB clients feel the same.
  5. Phishing emails are the leading cause of successful ransomware attacks.
  6. Lack of cyber security education, weak passwords, and poor user practices are among the other top causes of attacks
  7. The aftermath of a ransomware attack can be a nightmare for any business. Almost 50% of victimised clients experienced business-threatening downtime.
  8. The average ransom requested by hackers is increasing. The average requested ransom for SMBs is now £1,990.
  9. And this as downtime costs are up by 300% year-over-year, and the cost of downtime is 53X greater than the average ransom requested in 2019.
  10. 81% of SMBs with backup and disaster recovery (BCDR) solutions in place are less likely to experience significant downtime during a ransomware attack. And victimised SMBs with BCDR in place recovered from the attack in 24 hours, or less.

This data is taken from a 2019 Datto study into how ransomware is affecting SMBs in the UK.

In our next article, we’ll look in more at how UK SMBs can plan for and prevent ransomware attacks.

How can I find out more?

As Datto Partners, Complete IT Systems can offer you expert advice on the solutions and how they could be effectively deployed in your business.

To find out more please call us on 01274 396 213 or use our contact form and we’ll arrange a good time to call you back.

Datto

Make sure your emails don’t let you down

With cybercrime on the rise and more and more employees and contractors working “on the go”, it’s more important than ever to have the right email security in place for your business.

From your inbox to your employees, you need to know that every avenue a hacker could take is blocked. But with increasingly sophisticated attacks, that’s easier said than done.

Barracuda Total Email Protection ensures your organisation is secured against email-borne threats. Its multi-layered approach combines the most advanced protection available with the radical simplicity and ease of use that Barracuda’s known for.

How easy is it to deploy?

From the IT department’s perspective, you can also avoid the integration chores, uncertain support, and risk that come with building your own solution using point products from unproven startups. The full portfolio of data protection capabilities provides resiliency, and easy recovery from ransomware and accidental data loss, leaving your firm’s email security in the very best hands.

 

 

Want to give it a try?

If you would like to try the solution for yourself, please click here to request your free evaluation.

Further information

The below assets are available to make sure your business is well informed – and safe.

As Barracuda Diamond Partners, Complete IT Systems can offer you expert advice on the solutions and how they could be effectively deployed in your business.

To find out more please call us on 01274 396 213 or use our contact form and we’ll arrange a good time to call you back.