Mobile Devices and Apps
The use of mobile devices continues to grow in 2012, consequently, so does the volume of attacks targeted to these devices. Every new smart phone, tablet or other mobile device provides another window for a potential cyber-attack. Closely tied to the trend of more smart phones and tablets being deployed in the enterprise will be the influx of new apps for those devices. Location-based mobile apps and games all pose potential threats. The risks include access to information such as physical location or contacts lists, as well as the ability for the apps to download malware, such as keyloggers or programs that eavesdrop on phone calls and text messages. Hackers are quickly learning how to harvest legitimate applications and repackage them with malicious code before selling/offering them on various channels to the unsuspecting user.
Attacks carried out as cyber protests for a politically or socially motivated purpose are expected to increase, especially in light of the activist movements continuing to take place across the country and around the globe. Common strategies used by hactivist groups include denial of service attacks and compromise of user credentials to gain access to data, along with posting of emails, credentials, credit card information and other sensitive exfiltrated information.
Search Engine Optimization (SEO) Poisoning
Cyber criminals will continue to take advantage of the 24-hour news cycle to target visitors searching on the most popular keywords or sites and infect users via sites designed to look like legitimate news services, Twitter feeds, Facebook posts/emails, LinkedIn updates, YouTube video comments, and forum conversations. Expect cyber criminals to take advantage of notable news events such as the London Olympics, U.S. presidential elections, and Mayan calendar predictions.
Social engineering tactics—including the use of rogue anti-virus to entice users into clicking on malicious links—will continue. Experts also anticipate that in 2012 will see a growth in fake registry cleanup, fake speed improvement software, and fake back-up software mimicking popular personal cloud services.
Advanced Persistent Threat
Advanced Persistent Threat (APT) refers to a long-term pattern of targeted hacking attacks using subversive and stealthy means to gain continual, persistent exfiltration of intellectual capital. The entry point for espionage activities is often the unsuspecting end-user or weak perimeter security. APT is likely to remain high in 2012. Whether focused on exploiting vulnerable networks for use as a storage location or relay point, or to gain insider information, cyber espionage will remain a consistent threat to networks.
Phishing is a deceptive communication (e-mail, text or tweet) targeting a specific individual, seeking to obtain unauthorized access to confidential data. Phishing attempts are not typically initiated by "random hackers" but are more likely to be conducted by perpetrators seeking financial gain, trade secrets or sensitive information.
What Can You Do?
By using sound cyber security practices, you can help strengthen Johnson County’s readiness and response to defend against the myriad of challenges and mitigate potential impacts of incidents:
- Make sure that you have encryption and password features enabled on your smart phones and other mobile devices.
- Use strong passwords, ones that combine upper and lower case letters, numbers, and special characters, and do not share them with anyone. Use a separate password for every account. In particular, do not use the same password for your work account on any other system.
- Do not use your work email address as a “User Name” on non-work related sites or systems.
- Be cautious about all communications; think before you click. Use common sense when communicating with users you DO and DO NOT know. Do not open email or related attachments from un-trusted sources.
- Don't reveal too much information about yourself on social media websites. Depending on the information you reveal, you could become the target of identity or property theft.
- Verify Location Services settings on mobile devices.
- Allow access to systems and data only by those who need it and protect those access credentials.
- Learn to recognize a phishing website. Visit https://www.phish-no-phish.com to learn ways to identify a phished website.