Make Your Computer Network Hacker-Proof

Filed Under: Security

You might think your network is already hacker-proof because you’ve got a great antivirus program and a firewall in place. You have an eye toward security and you make sure everything is updated, upgraded and top-notch.

But that still won’t protect your network. That’s because there’s another way hackers get in and get your information.

The Dangers of Social Engineering

Social engineering is the process of getting someone with a password to simply hand it over. Usually it’s handled through instant messages, email or telephone, and it works best in large companies and corporations that have many employees. A small company with a few employees in one office is far less likely to fall prey to social engineering, because everyone knows the chain of command and is familiar with each other.

Three Common Social Engineering Hacks

There are three common situations to look out for if you want to protect your company’s network against social engineering.

One: A Network Problem

Someone will call or contact someone in the company and claim to be working on the network. He’ll ask the employee to type in some basic commands. This scam works when the employee doesn’t really understand the network, and doesn’t realize that any tech would have access and would not need this kind of help. The caller will eventually ask for the user’s login and password, possibly by claiming that it’s that system that’s causing the problem and he needs access to it. Thanks to the helpful employee, the hacker has a map of the network and direct access. Protect your network by making sure all employees understand never to give out this type of information, and always report this type of call to a supervisor.

Two: Email Attachments

An employee who opens an email attachment, whether it appears to be business-related or personal, could allow a virus to get into the system. A Trojan horse virus will open a security hole for a hacker to access the network from a remote location. Good antivirus programs will stop this, but also make sure your employees know to never open unexpected attachments, no matter who they may be from.

Three: Phishing Emails

An employee may get a common phished email that claims to be from a bank, credit card company, ISP or even a site like eBay. These emails make claims that a payment didn’t go through and the user’s account is suspended or will be suspended or closed if they don’t click the link and provide legitimate information. If the employee does this and gives the hacker private information, especially if they reveal their password, that could give the hacker access to the network because so many people use the same or similar passwords for everything.

Phishing emails link to sites that are clearly not the company they claim to be from, and often are poorly written in broken English. Even if they look absolutely legitimate, these companies will never ask for a password, and they make that clear in their TOS. Make employees aware of this scam.

DATA BACKUP

ARTICLES OF INTEREST