In today’s digital age, cyber security is more important than ever. But according to a new report from eSentire, a Waterloo-based cyber security service, companies may not be keeping up with the latest threats.
The report found that hackers have been shifting their tactics away from traditional methods like spam emails and attachments and towards browser-based attacks. In the first three quarters of 2023, browser-based initial access attacks have accounted for nearly half (47%) of all cyber attacks.
This increase is due in part to the rise of millions of dangerous links that lead to fake websites. These websites often mimic well-known brands and services, such as Google ads, Zoom download pages, and Adobe program installers.
Companies Lagging Behind
Unfortunately, many companies are still focusing their cyber security training on identifying phishing emails and haven’t adapted to the new threat landscape. This lack of awareness leaves them vulnerable to browser-based attacks.
Specific Industries at Risk
Some industries are more at risk than others. One example is the legal industry, which has been specifically targeted by the Gootloader malware group through poisoned search engine results for legal documents.
The Rise of Artificial Intelligence
As if the current threats weren’t enough, experts like Ryan Westman, senior manager of threat intelligence at eSentire, warn that the rise of artificial intelligence could pose significant cyber security risks by 2025. This underscores the need for constant vigilance and adaptation in the face of evolving threats.
How to Protect Yourself
There are a few simple things you can do to protect yourself from browser-based attacks:
- Review the link: Before clicking on any link, carefully review the URL for any discrepancies. Hackers often use subtle substitutions, like an “E” for a “3” or a “1” for an “L,” to create fake websites that look legitimate.
- Update user awareness training: Companies should update their cyber security training to include information about browser-based threats and how to identify them.
- Stay informed: It’s important to stay up-to-date on the latest cyber security threats and trends.
CTV News Kitchener has previously spoken with eSentire about cyber security. You can find their tips for creating a strong password, maximizing cyber security, and staying cyber safe during the Super Bowl on their website.
Conclusion
By following these simple tips and staying informed about the latest threats, you can help protect yourself and your organization from cyber attacks.
