Cybersecurity Cyber Security Threats - Malware compares each file against a database of known virus codes.

If
viruses are found (ie contains code that is in the database) the file is
Cybersecurity is concerned with the protection of computer systems,
Computer viruses replicate themselves and can transfer from one quarantined. That is the file cannot be run without explicit
computer networks and data. Its purpose is to:
computer to another. They are activated by a user often as email authorisation from the user. New malware are regularly being
attachments and attachment to other files and programs. created and so anti-virus software needs to be updated to identify
 to protect computers and networks from cyberattacks
the new viruses. That is why anti-virus software is regularly updated.
 to prevent unauthorised access to computers
 to protect computers against damage caused by malicious software Trojan gains access to a computer by pretending to be legitimate
 to prevent data from being stolen software. The trojan allows unauthorised backdoor access to a Cyber Security Threats – Social Engineering
 to protect against the disruption of services running on the computer computer without the user being aware.
Blagging (Pretexting) Fraudsters make up a scenario to con victims
Spyware records the activity on your computer such as your into revealing something they would not ordinarily do. They may
Cyber Security Threats keystrokes, thereby logging your passwords for instance and then have found out some personal information about you from social
send the data back over the network to a hacker. Spyware can also media sites, to pretend they already know you.
Malware is software that has been purposely developed to damage, be used to control your webcam and microphone.
disrupt or take control of computer systems. How to prevent
Adware includes banners and popups that are automatically • Use biometric measures because these cannot be divulged.
Social engineering techniques manipulate people into giving away installed onto a computer. Whilst this does not cause any, adware is • Ensure you have your privacy settings on any social media to
confidential and personal information. undesirable and can slow down the performance of a computer. maximum so that fraudsters cannot find information about you
such as your date of birth, where you live etc.
Weak passwords are easy to guess. Passwords that use words are easy to Worms spread like viruses but do not require human intervention.
crack using an algorithm that systematically goes through all the words in They attach themselves to network tools to spread automatically Phishing Normally an email or text messaging scam where victims
a dictionary until the word matches the password. around a network very quickly. are conned into believing that they are being contacted by their bank
for instance and can give sensitive personal details such as bank
Default passwords Upon registration for an online account, users may be Methods to detect and prevent cyber security threats account passwords.
given a default password that they do not change. Often these passwords
are sent out unencrypted via email so pose a major security vulnerability. Biometric measures such as fingerprints, facial recognition and iris How to prevent
scans are increasingly being used to verify a user’s identity for mobile • Awareness and vigilance. Be particularly aware of unsolicited
Removable media such as a USB pen drive can be a vector for transmitting devices. These are more secure than passwords that can be guessed texts, emails and phone calls. Do not give personal confidential
malware. and forgotten. Biometric measures require a user to be present information away. Official organisations such as banks will never
when signing into a system. ask for this information.
Unpatched/outdated software Software needs regular updates to fix • Apply email filtering to prevent dubious emails getting through.
security vulnerabilities in computer systems. Software that remains Automatic software updates to firewalls, operating systems,
unpatched is vulnerable to attack. antivirus and other security software are needed so that software Pharming Users are redirected to a fraudulent website that they
can be kept up-to-date against new malware and to fix recently believe to be genuine because it looks like the real site. For instance,
Misconfigured access rights Users should only have access to files and discovered vulnerabilities. you could be directed site that pretends to be an online store that
data that they need, but sometimes they have access that they should not. asks you for your credit card information.
CAPTCHA is a test that can distinguish between humans and bots. It
Penetration Testing uses images that machines cannot interpret but humans can. How to prevent
• Check the URL in the web address. For secure websites such as
Penetration testing is legitimate testing of an organisation’s computer Password systems Virtually all accounts require passwords to access. banking or e-commerce sites the HTTPS protocol should be used.
system to identify whether there are any vulnerabilities that an attacker Some secure sites such as online banking require 2 passwords. Banks • Website filter
could exploit. By identifying vulnerabilities, these can be patched before may also contact you by phone to confirm a large transaction. This is
the system gets attacked. called two-factor authentication. Password systems can force users Shoulder surfing Fraudsters look over the shoulder of users to see
to have strong passwords that regularly need to be changed. what passwords or pin numbers that are being typed into the device.
White box testing testers are given some information about the network, This can easily occur at computer terminals and at ATMs that are out
such as network architecture, source code, and IP addresses. This is Using email to confirm a person’s identity Often when you register in the street.
designed to simulate an attack by a malicious insider. for an online service you need to provide your email address. You
are then requested to activate a link sent to you in an email. This is How to prevent
Black box testing testers are given very little information about the to confirm that the email account is actually active. Helps to ensure • Be aware of who is around you when typing in your pin into an
network before the test. This is designed to simulate an outside attack or that the users are human and not bots. ATM or into a chip and pin device. Make sure you cover your
cyber warfare attack. hands and they are shielded from prying eyes.
Anti-virus software scans the computer intermittently to identify • Place computers in locations that makes shoulder surfing difficult
whether there is any malware on the computer. The software