There's A Simple Way To Protect Against Chinese Hackers
Cybersecurity firm Mandiant has concluded that the onslaught of complicated Chinese Tactics, Techniques and Procedures to exploit systems and run your business into the ground starts with just a click — in particular, your click.Imagine this: The names and emails of your staff, to include your executives, are either listed publicly, or accessible via the web in a matter of five diligent minutes.
The tactic is called "Spear Phishing," and it relies the user and reflexive clicking.From Mandiant:
On some occasions, unsuspecting email recipients have replied to the spear phishing messages, believing they were communicating with their acquaintances. In one case a person replied, “I’m not sure if this is legit, so I didn’t open it.” Within 20 minutes, someone in APT1 responded with a terse email back: “It’s legit.”The solution to this is simple: calm down, breath, and hover that mouse. Most browsers and email platforms allow users to identify the exact email of a sender.
via Geoffrey Ingersoll
Rather, I should contact Henry and ask him if he's been using a new email account.
These emails can also come from other sources, like faux PayPal (subject: "account disabled!") or credit card dummy accounts.Within these emails is usually a harmless looking word document or excel spreadsheet which actually contains malicious code.
Once the code has penetrated the system, it becomes markedly more difficult for IT Officers to clean up the mess.
So the simplest
- Researchers develop new data transfer system ten times faster than USB
- Ayodhya's Ram Temple collects nearly ₹2,100 crore funds for its construction, says associated Trust
- Increase public health care budget in Maharashtra: Activists
- FPI invests ₹25,787 crore in Indian equities in February
- India records 16,752 fresh COVID-19 cases, biggest single-day jump in 30 days