Cyber Defense eMagazine December 2019

54
devices. Russian actors can extract device configurations, collect login credentials and impersonate
privileged users, among other actions. By understanding threats to this level of detail, the appropriate
mitigations can be implemented. Make threat intelligence actionable intelligence.
Zombie devices to botnets. While your local coffee shop may seem like a great place to get some
online shopping done, remember that free, public wireless networks make it easier for cyber hackers to
obtain your information. Make sure you use WPA-2 for authentication and 802.1x for remote access using
IPsec/VPN tunnel before entering your personal information for an online order. Be aware of the VPN
you utilize because not all VPNs are 100% secure. As of October 2019, an advanced persistent threat
(APT) was discovered to exploit vulnerabilities in Palo Alto, Fortinet and Pulse Secure products, which
allow actors to collect credentials. These stolen credentials can later be used at accessing a root shell
for increased privileged activity.
Metadata spoofing attacks. Cyber criminals exploit vulnerabilities of web-based applications due to
vulnerabilities associated with various apps, especially when they are outdated. Keep up with the latest
security updates on your computers, browsers and mobile devices. Setting your antivirus software to
auto-update will also help safeguard your computer from the latest viruses.
In addition, ensure that you remain abreast of threat intelligence and immediately apply required patches
to your systems. Many examples have been encountered in which patches were available but had not
been installed as directed, resulting in an information assurance event or compromise. Think back to the
Marriott, Target and Office of Personnel Management hacks – each could have been prevented by
appropriate patching.
Authentication attacks. Once malware has been unleashed onto an electronic device, cyber criminals
use brute force attacks to break the encrypted password saved in the form of an encrypted text. Never
save your personal information – including your name, passwords, address and credit card information
– using the remember me feature on shopping websites. Logging out of your account after each purchase
ensures that your personal information won’t be compromised if your online retailers have a data breach.
People often make the mistake of using the same password for multiple applications, even adding add a
number or symbol to the original password after it expires. With an inverse correlation between security
and convenience, users must carefully assess their circumstance. A trusted password manager can
assist in producing strong and random passwords.
Masquerading emails. During this time of the year, email marketing campaigns are prevalent, and
phishing is an area of major concern. The Anti-Phishing Working Group (APWG) reported that phishing
attacks have increased to their highest levels since 2016. Simple Mail Transfer Protocol does not possess
the necessary mechanisms to verify legitimate email addresses. Users cannot trust in Domain-based
Message Authentication, Reporting and Conformance (DMARC) to protect them from spoofed emails.
As you’re sifting through your inbox for the best holiday sales, verify the sender’s credentials before
clicking any links. Even e-mail attachments and links forwarded from trusted entities may have a
malicious code. Get in the habit of manually typing websites in your internet browser to avoid any
unforeseen cyberattacks.
In addition to phishing, malicious actors are also exploiting vishing and smishing approaches. Always be
suspicious of unsolicited information requests and make sure you know where your information is going.