Phishing attacks use electronic communications (most commonly emails) by posing as a ‘trusted source’ with the attempt to trick the victim into giving over confidential and personal information. For example, a person may receive an email that looks like it is from ‘Australia Post’ saying they have a new parcel and they need to ‘confirm their contact details.’ The hacker will then be able to gain any details entered including credit card details and passwords. Prevention strategies include employee training, Multi-Factor Authentication and password management.

Malware attacks are a cyber breach which installs malicious code/s onto a system without the user’s knowledge and consent. Once installed on a system, the code can instruct the computer to do its bidding; this may mean installing ransomware, stealing files, or stealing client confidential details (such as password and credit card details). Malware can enter a computer system in various ways; however, a common technique use by hackers is to leverage weaknesses in old and outdated software. This is why Patch Application Management and Controlling is vital for companies.

Ransomware attacks are designed to hold a company’s files and data at ransom in return for a financial fee. It works by encrypting files, folders, backups and hard drives across an entire company network so no work can be undertaken until the ransom is paid. System backups and Restricting Administration Privileges can alleviate the pain caused by ransomware attacks, and strong Cyber Security Management Systems can minimise the risk of attacks altogether. Ransomware is commonly installed into a system via malware.

A Macro-virus is a malicious computer program written in the macro language and designed to infect programs that use macros; primarily MS Excel and MS Word. The virus can enter the system via phishing emails, malicious online advertising, or via unsecured websites. Once installed, the virus will begin to run as soon the associated computer program (i.e. Excel or Word) is opened. Configuring MS Office Macro Settings dramatically reduces the likelihood of macro-viruses entering a system.

Password attacks aim to decrypt or steal a user’s password to undertake illegal activities. This could include accessing company bank accounts, networks, systems and/or confidential client information. Hackers leverage the fact that 61% of people use the same password for a wide range of logins. This means, once the hacker has the password, they can access both personal and business information. Multi-Factor Authentication can stop hackers from leveraging stolen passwords.

Drive-by attacks, or drive-by downloads, occur when victims visit compromised websites which have been infected by malicious codes. They are called ‘drive-by’ as there is usually no action required by the victim in order for malware to install. Application Control and Application Hardening are two of the best defences against drive-by attacks.

Trojan Horse is the term used to describe malware that is disguised as a trusted and legitimate piece of software. This convinces the user to proactively install the malicious code onto the computer without considering the consequences. Business protection against Trojan Horses comes from user awareness training and Restricting Administration Privileges.

Denial of service attacks aims to take a company offline by overwhelming or flooding a network to overload a system; resulting in users (or businesses) being unable to access files. Often, these attacks are aimed at large companies for the purpose of blackmail, revenge, to harm a competitor or to shut a system down to inject other malware. Ensuring strong Cyber Security Management Systems for your networking infrastructure can reduce the risk and impact of overloading systems.

SQL injection is a form of hacking which takes advantage of database vulnerabilities and thus enables the perpetrator to access, and sometimes manipulate, various databases. Website databases are the most common targets of SQL injection attacks and hackers often aim to steal credit card details, passwords and personal information. Ensuring website platform patches are up to date are two ways to prevent and minimise damage caused by these attacks.

Session hijacking refers to the instance when a hacker manages to substitute its own IP address for a client’s IP address, resulting in the hacker becoming the ‘middle-man’ between the client and the network server. This means, all data that is being sent and received from a trusted computer to a network is also going via an external hacker. This attack compromises a company’s data and leaves it open to ransomware and fraud. Implementing Next Generation Antivirus systems can reduce the likelihood of an attack.