The Essential Guide to Staying Safe Online: How to Secure Your Devices from Cyber Attacks

Introduction: What is Cybersecurity and Why is it Important?
Cyber security is how individuals and organisations reduce the risk of cyber-attacks. Cyber security’s core function is to protect the devices we all (smartphones, laptops, tablets, and computers), and the services we access – both online and at work/home – from theft or damage.

Cyber security is important because of how much smartphones, computers, and the internet are now such are now such a fundamental part of our modern lives. It is now difficult to imagine how daily life would function without them. We all use are devices for things such as online shopping and banking, sending emails, surfing the internet, and scrolling through social media. It is more important now than ever to take steps that can prevent cyber criminals getting a hold of our accounts, data, and devices.

Cyber attacks can be identified as when there is an unauthorised system/network accessed by a third, hostile party. The person(s) that carry out a cyberattack is known as a hacker/attacker. Cyber attacks can have several negative effects, depending on the type of attack and the severity of the attack. When an attack is carried out, it can lead to data breaches, resulting in data loss or data manipulation. Organisations can suffer financial losses, customers are likely to lose trust, organisations may suffer reputational damage. To prevent cyber-attacks from occurring we utilise cyber security.

Understanding the Different Types of Cyber Attacks & How to Defend Against Them
Various digital devices and the internet have made life far more comfortable and better. The internet and digital devices have brought in a positive change in our lives today, but with that, there is also an enormous challenge in protecting our data. This gives rise to cyber-attacks. In this section, we will explore the different types of cyber attacks and how you can defend against them.

There is a variety of cyber-attacks that happen in the world today. If you become aware of the different types of attacks, it becomes easier for you to identify and protect your network and systems against them. Listed below are some of the most common cyber-attacks that you may encounter:

• Malware

One of the most common types of cyberattacks. Malware is malicious software that is designed with the intent to damage, disrupt, or gain unauthorised access to your device and inflict damage to data and/or people in multiple ways. Malware is usually found attached to emails, embedded in fraudulent links, hidden in ads, or lying in-wait on various sites that you (or employees) might visit on the internet. The end goal of malware is to harm or exploit computers and networks, often to steal data or money.

All it takes is one wrong click by one person for the malware to install itself and begin to execute its program.

You can protect yourself from malware by utilising anti-malware and anti-virus software.
Antivirus usually deals with the older, more established threats, such as Trojans, viruses, and worms. Antivirus protects users from lingering, predictable-yet-still-dangerous malware. Anti-malware protects users from the latest, currently in the wild, and even more dangerous threats. antivirus is best at crushing malware you might contract from a traditional source, like a USB or an email attachment.

Anti-malware, by contrast, typically focuses on newer stuff, such as polymorphic malware and malware delivered by zero-day exploits. Anti-malware protects users from the latest, currently in the wild, and even more dangerous threats. In addition, anti-malware typically updates its rules faster than antivirus, meaning that it's the best protection against new malware you might encounter while surfing the net.

Malware can appear in a variety of forms, each with their own method of attack. Some of the most common types of malware includes adware, viruses, worms, trojans, bots, ransomware, spyware, mobile malware, and rootkits.

Adware
Adware, also commonly referred to as spam, servers unwanted or malicious advertising to its victim. While relatively harmless by itself, adware can hamper your computers performance. In addition, these ads may lead users to download more harmful types of malwares inadvertently.
 To defend against adware, ensure that you keep your operating system, web browser, and email clients updated so they can block known adware attacks before they are able to download and install.

Viruses
A virus, in addition to performing its own malicious acts,  infects other programs and can spread on to other systems. A virus is attached to a filed and is executed once the file is launched. The virus will then encrypt, corrupt, delete, or move your data and files.
To defend against viruses, utilise an antivirus. This can help protect all your devices from a single location while maintaining central control and visibility. Make sure that you run full system scans regularly, some antiviruses will do this automatically, and keep your antivirus definitions up to date.

Worms
Worms, like a virus, can duplicate themselves in other devices or systems. However, unlike viruses, worms do not need human action to spread once they are in a network or system. Worms often attack a devices memory or hard drive.
To protect yourself against worms, you should ensure that all your devices are updated to their latest versions. Technology such as firewalls and email filtering will also help you detect files or links that may contain a worm.

Trojans
A trojan program disguises itself as a legitimate program, but is in face malicious. A trojan cannot spread itself like a virus or worm, instead a trojan must be executed by its victim, often through social engineering tactics such as phishing.
As trojans rely on social engineering tactics, the burden of defence is put on you, the user. The best defence against trojans is to never open an email attachment or run a program unless you are 100 percent certain of the source. Also ensure that your software and devices are up to date. If you are still unsure that a source can be trusted, you can scan the source with an anti-virus software.

Bots
A bot is a software program that performs an automated task without requiring any interaction. Bots can execute attacks much faster that a human ever could.

A computer that is infected with bots can spread the bot on to other devices, creating what is known as a botnet. This network of bot-compromised machines can then be controlled and co-ordinated to launch massive attacks – such as Denial-of-Service attacks or brute force attacks – often with the owner of the device being unaware of its role in the attack. Bots can also be used for crypto mining on specific hardware.

To protect your devices being infected by bots, ensure that the software you use and your devices are as up to date as possible. You can also utilise strong passwords for your devices. Do not under any circumstances download unknown/un-trustworthy files on to your devices. A final way to protect your device is to use an anti-virus software that has advanced anti-malware features.

Ransomware
Ransomware attacks will encrypt a devices data and holds it for ransom. If the ransom is not paid by a certain deadline, the attacker will threaten to delete or release the valuable data (often opting to sell it on the dark web).

If your machine becomes infected with ransomware, meeting the demands of the ransom is highly discouraged. This is because there is no guarantee that you will get access to your data or computer, also your computer will still be infected, and it is likely that you are more likely to be targeted in the future.

Some actions to take to protect your devices against ransomware includes completing regular data backups, never click on unsafe links, do not open suspicious email attachments, keep your software and devices up to date. 

Spyware
Cybercriminals will use spyware to monitor the activities of users. By logging the keystrokes a user inputs throughout the day, the spyware can provide access to usernames, passwords, and personal data. Spyware often leads to credential theft, which in turn can lead to a devastating data breach. Spyware often originates in corrupt files, or through downloading suspicious files.
To defend your devices against spyware, utilise antivirus software. Employing multi-factor authentication can be used to prevent spyware or the resulting credential theft.

Mobile malware
As the name implies, mobile malware is designed specifically to target mobile devices. This kind of malware has become more common with the increase of phones and tablets used by individuals and organisations.

Mobile malware can employ several tactics, including spying and recording texts and phone calls, impersonating common apps, stealing credentials, or accessing data on the device. Mobile malware often spreads through SMS phishing.

Security awareness is imperative in protect mobile devices from mobile malware. Never open a link unless you can verify that the source is 100% safe.

Rootkits
Rootkits were originally designed as a collection of tools that enabled administrator-level access to a computer or network. However, over the years, rootkits have become a common attack vector for hackers. Rootkits function the same, allowing a user to maintain privileged access within a system. When used by hackers they utilise rootkits to gain administrator-level access without being detected.

To prevent rootkits from doing damage, users and organisations will need to revoke privileged access and employ a zero trust approach, where ever used must be verified. You can also employ multi-factor authentication to prevent single credential access. 
 

• Phishing

Phishing is one of the most prominent widespread types of cyberattacks. It is a type of social engineering attack wherein an attacker impersonates a trusted contact and sends the victim fake, malicious emails and messages.

By disguising as a trusted contact, the victim will none-the-wiser and open the email, click on the malicious link or open the emails attachment. By doing so, attackers gain access to confidential information and account credentials. Attackers can also install malware through a phishing attack.
You can prevent phishing attacks by scrutinising any messages and emails you receive. Phishing emails may have significant errors like spelling mistakes and format changes from that of a legitimate source.

• Password Attack

This form of attack wherein a hacker cracks your password using various password cracking programs and tools.
To prevent password attacks you can utilise strong alphanumeric passwords that contain special characters. A key way to ensure that your passwords are safe is to steer away from using the same password for different accounts.
There are several websites that can generate a strong password for you. There are also websites where you can test the strength of your passwords.

• Man-in-the-Middle Attack

A Man-in-the-Middle Attack (MITM), is also known as an eavesdropping attack, it is when an attacker comes in between a two-party communication, i.e., the attacker hijacks the session between a client and host. By doing so, hackers steal and manipulate data.
You can prevent MITM attacks by being mindful of the website you are browsing, utilise encryption on all your devices. Refrain from public Wi-Fi networks, if you have to use a public Wi-Fi network, use secure VPN.

• SQL Injection Attack

A Structured Query Language (SQL) Injection Attack occurs on a database-driven website where the hacker manipulates a standard SQL query. It is carried out by injecting a malicious code into a vulnerable website search box, thereby making the server reveal crucial information.
This results in the attacker being able to view, edit, and delete tables in the databases. Attackers can also get administrative rights through this.
To prevent SQL Injection attacks, use an intrusion detection system. These systems are designed to detect unauthorised access to a network.

• Denial-of-Service Attack

A Denial-of-Service Attack can be a significant threat. Attackers will target systems, servers, or networks and flood them with traffic to exhaust their resources and bandwidth.
When this happens, catering to the incoming requests becomes overwhelming for the servers, resulting in the server slowing down or completely shutting down.
A Distributed Denial-of-Service (DDoS) is when attackers use multiple compromised systems to launch the attack. The end result is the same.
To protect your systems from DoS or DDoS attacks, configure firewalls and routers. Doing so will cut down on the entry points into your network.

• Insider Threat

An insider threat does not involve a third-party but an insider. It could be an individual from within the organisation who knows everything about the organisation. Insider threats have the potential to cause tremendous damages. Reasons for insider attacks include greed, malic, or even carelessness. Insider threats are hard to predict and therefore tricky to protect against.
Insider threats can also occur at home. You may fall victim to a negligent insider. Negligent insiders pose an unintentional threat, usually due to human error. For example, a family member could accidently send an email with sensitive information to the wrong person.
The best ways to prevent insider threats is to have a good culture of security awareness. Organisations can limit the IT resources staff can access depending on their job roles.

• Cryptojacking

Cryptojacking is closely related to cryptocurrency. Cryptojacking takes place when attackers access a victim’s computer with the purpose of mining cryptocurrency.
The access is gained by infecting a website or manipulating the victim to click on a malicious link. They also use online ads with JavaScript code for this. Victims are unaware of this as the Crypto mining code works in the background.
To secure yourself from cryptojacking, ensure your software and security apps are up to date. Install an ad blocker, this is because ads are the primary source of cryptojacking scripts; extensions like MinerBlock are used to identify and block crypto mining scripts.

• Zero-Day Exploit

A Zero-Day Exploit occurs after the announcement of a network vulnerability; there is no solution for the vulnerability in most cases. As there is no fix solution, the vendor will notify users of the vulnerability so that they are aware; however, this news will also reach hackers.
Depending on the vulnerability, the vendor or the developer could take any amount of time to fix the issue. Meanwhile, the attackers will target the vulnerability. They will exploit the vulnerability before a patch or solution is implemented to it.
Microsoft Windows users can take advantage of Windows Defender Exploit Guard. As of Windows 2010, Microsoft introduced the Windows Defender Exploit Guard, which has several capabilities that can effectively protect against zero-day attacks.

Common Cyber Security Mistakes People Make
We’re all shifting more and more of our lives online and into the cloud. We shop, stream video content, manage our bank accounts, socialize with friends and family, share photos, track our fitness and even speak to our doctor via a range of innovative user-friendly apps today. And we do so from a variety of devices – from the trusty household PC to tablets, smartphones and wearable gadgets.
All of this has implications for security. As the number of passwords, devices and accounts mounts up, our ability to keep track of all of these digital assets declines. Some of us resort to quick fixes like recycling passwords, which only makes things worse. Others might ignore security warnings altogether and carry on regardless.
We all must get better and stay on top of managing security risks. This begins with understanding and mitigating some of the common mistakes. Below is a list of some of the most common cyber security mistakes to avoid:

• Clicking on links and opening attachments from unsolicited messages

This is also known as phishing, these messages can travel over email, text, social media, or messaging services, like WhatsApp. These messages will spoof a legitimate sender like a bank and will try to elicit an urgent response from the recipient.
If the recipient clicks on a link or opens an attachment from the message, this will usually lead to a covert malware download, or else the recipient will be tricked into inputting sensitive personal or financial data.
Always be sceptical of unsolicited messages and do not click on links or open attachments in them. Check separately with the sender about the content of the message.

• Skipping updates

Device updates are a vital way of keeping your systems secure. This is because they are the manufacturers way of delivering the most up-to-date software possible. Sometimes these updates are used to resolve a specific vulnerability which hackers are taking advantage of in real time to hack devices and accounts.

• Using and reusing weak passwords

One of the most common security mistakes users make and is something all of us are guilty of. Weak passwords are short, and easy for hackers to guess or crack. They will then use them to hijack that account and possibly others you share the same credentials with.
Passwords should be long, strong, and unique. Using a password manager can help you keep your passwords secure and easy to recall.

• Failing to enhance logins with 2FA

Multi-factor, or two-factor authentication (2FA) is used to add an extra layer of security on top of passwords because it includes a second ‘factor’ like an SMS code or facial scan, that hackers will find harder to steal or replicate.

• Failing to back up

Completing regular data backups can be mundane, but they are essential security step. Users that don’t back up their data can get into trouble if hackers manage to access and encrypt all their data, demanding a ransom in return for the decryption key.
By backing up regularly, with one copy offline, can protect you from this kind of extortion, and any accidental data loss.

• Using and sharing work devices for personal use

The new era of remote and hybrid working means many of us now spend more time logging on to work whilst at home. Unfortunately, that makes it more tempting to use the corporate device for personal tasks like shopping, internet downloads, gaming or streaming content. This might put your employer at risk, and potentially your job, if malware ends up on the machine, and hackers can access corporate networks and apps.
Try to separate work and play by only using the corporate machine for work business. Log on for fun stuff with your own laptop, smartphone or tablet.

Best Practices for Keeping Your Devices Secure
We have talked about some most common cyber security mistakes people make and how to avoid those mistakes, so let’s list some practises you can take to ensure your devices are as secure as they can possibly be.
Practises such as:

• Keeping all your devices and all your software up-to-date
• Ensuring your machine has both anti-virus and anti-malware software
• Don’t leave your device unattended in a public setting
• Use complex and unique passwords for all your accounts
• Ensure that devices that are lost or stolen can be tracked, locked, or wiped
• Avoid suspicious looking emails and messages
• Back up your data

Securing Your Smart Home & Protecting Your IoT Devices from Cyber Attacks
As more and more Internet of Things (IoT) are becoming more and more common in homes all over the world, turning them into ‘smart’ homes; IoT, if not set up properly, are also turning them into ‘insecure’ homes.
A more connected home makes your life easier and more efficient. But with the increased internet-based convenience comes an increased risk of becoming the target of cyber attackers. These attackers if they manage to hack into your IoT, can steal and misuse your personal information and banking details, they can even take control of those smart cameras or microphones to spy on you.
If you own devices such as smart speakers, TVs, thermostats, fridges, security cameras, etc. Your privacy and security could be at stake because these devices, out of the box, are multiple entry points with rickety security that hackers can take advantage of.
If you are investing money and time converting your home to a smart home, you must also invest time and energy securing. Below is several ways to get started:

• Set up your router correctly

Your Wi-Fi router is the doorway to your smart home. You don’t want it to break down just because a hacker ‘kicks’ it. Creating a more secure smart home starts with your router. It’s what connects all of your IoT devices and makes them so valuable.

By following these practises, you can set up a secure router:

Change the routers default name
The name of your router will usually be the make and model of it. If malicious users discover the make and model, they may be able to look up the default login and password and gain easy access to your smart home network.

Set the router password to something unique
Like the name of the router, set the router’s password to something unique. Use complex passwords composed of letters, numbers, and symbols. Consider using a password generator and then utilise a password manager to store and have easy access to the password.

Use the highest level of encryption
Currently WPA3 is the highest level of encryption you can have on your router. If your router does not support WPA3, WPA2 is still a viable option. However, if your router only supports the WPA or WEP protocols, it may be time for an upgrade.
Home routers are primary IoT targets for attackers. A secure router translates to a substantially more secure smart home.

• Use super strong passwords

You should ensure all your IoT devices have a super-strong password. For instance, your IoT devices require you to create an account and sign in to use them. Most IoT devices will usually have mobile apps associated to them where those login credentials are needed.
It is important to create unique credentials for each IoT device’s account and app. This is so that if one device gets compromised, others will still remain intact.
The downside to this is that you will have to remember many passwords, which can be an inconvenience. The best way to remember your passwords is to use a password management tool, a password management tool can store unlimited unique passwords, create new passwords, and sync passwords between various devices.

• Disable features you don’t use

Many IoT have features that some users have no use for. An example of this is remote access, some IoT devices will give you the ability to control them from anywhere on the planet. But if you only use them on your home’s Wi-Fi connection, you should disable remote access. Another example of a feature you may not use is Bluetooth connectivity on devices such as smart speakers. Voice control is another feature, if an active mic is hacked can be used to pry on your conversations.
Disabling features, you don’t use is all about blocking as many of those entry points as possible.

• Keep your devices up-to-date

Device updates often include essential security patches that can greatly enhance your network’s security. Updates to your Wi-Fi router’s firmware may not happen automatically which is why it is important to keep on top of updates.

• Enable multi-factor authentication

Multi-factor authentication is an added layer of security beyond a mere password.
With two-factor authentication, every time someone attempts to log in to one of your IoT devices, they will have to provide additional proof of identity.
This proof can come in the form of a one-time pin or a verification code sent into your phone or email address that confirms that the person logging in is indeed you.

Conclusion
In conclusion, cyber security is imperative, now more than ever. If you want more information the National Cyber Security Centre (NCSC) has an entire website packed full of information on staying safe online.
If you are concerned that your machine has been compromised. Bring it in to us and we will take a look at it and try and fix your machine. Bring your machine down to 44 Nicholas Street, CH1 2NX, Chester or contact us 01244 344366.