Then encryption is usually 128 and 256 bit and is effectively unbreakable. The basic version of these viruses scans for all drives mounted to the user’s PC (either local or network), and proceeds to encrypt all files contained in those drives. These attachments contain malicious code that executes under the user’s profile. They usually operate by sending a legitimate looking email containing an “unpaid invoice” or some other document that looks like a PDF, and would normally demand action on the part of an un-wary user. Crypto-Locker Attacks: Holding Your Data HostageĬrypto-locker attacks use a similar profile. This type of attack rarely affects company data, but can result in a significant loss of funds. There are many simple checks that, with training, any staff member can be trained to perform. Educating finance and accounting staff by showing them how to determine if an email is actually from company leadership is also of paramount importance. Proper accounting controls and careful scrutiny of these emails are the best prevention.

They will usually ask for a wire transfer of some kind, typically to an entity that sounds legitimate. They are not very sophisticated, but are often very convincing. These emails are most often sent to finance staff, and purport to be from senior company leadership. Phishing most often involves an email sent with a spoofed (faked) header. Phishing Attacks: Tricks to Transfer Money

Unfortunately, because of this, they often run with the user’s permissions, which if security permissions are not set correctly, can be devastating to shared resources. Fortunately, both attacks require action on the part of the end user. Additionally, there are numerous steps which can be taken to mitigate the damage to the business and loss of income due to lost productivity.įirst, it is important to define and differentiate between the two types of attacks. Fortunately, both are entirely preventable. Over the past several years, two types of cyber-attacks have become increasingly prevalent in the SMB segment: phishing and crypto-locker style viruses. A Rising Threat: Phishing and Crypto-locker Viruses

Define crypto locker