Sign Missouri Banking Notice To Quit Easy

Industry sign banking missouri notice to quit easy

welcome to zobrio's tech talk our tech talks are about technology topics that affect you and your organization presented in a brief and easy to understand format keeping you informed about what's happening in the world of technology and cyber security i'm john cuado i.t account manager here at zobrio and the topic for this presentation is protecting your data from email born threats and phishing i think most of you it will be a surprise to find out that the most common type of cyber attack is actually phishing emails recent survey has shown that 52 of attacks against organization are actually phishing emails phishing is an email scam designed to solicit information and from an end user cyber criminals use that to to gain access to your credit cards your credentials your banking information there's another type of phishing attack called a spear phishing attack which is a more dangerous type of attack because it is targeted and it is personal it is targeted to a specific person in a specific organization for specific reason to gain specific information so spearfishing tends to be a little bit more um a little bit more dangerous type of fishing attack due to its greater chances of success spearfishing attacks as we mentioned are on the rise this is extremely dangerous in the iq world um we noticed that many of these attacks are actually social engineered um they they gain access to your data they gain access to your finances many of these spear phishing attacks are personalized they're targeted for a specific person coming from a specific sender that may be impersonated the bad news is traditional antivirus may not be enough to stop spear phishing emails as well as firewalls we notice that firewalls and antivirus do a good job in stopping other malware attacks such as ransomware that may contain a payload or an embedded type of code or embedded process in there but most of these spear phishing attacks will ride through the anti-virus rule right pass through the firewall and that's what makes them so particularly dangerous different kinds of spearfishing attacks one is business email compromise the other is blackmail we noticed that during the rise of ransomware that oftentimes employees would pay the ransom out of their own pocket to avoid attention from their superiors well oftentimes these bad actors come back and blackmail the person knowing that they may not want the attention from their superiors or potentially loss of their job the other type of spear phishing attacks are brand impersonation and scamming brand impersonation uses a a particular domain name that may be familiar to you such as your bank's domain and they may take over that and they may send you an email that really appears to come from that particular organization also scamming sometimes you'll you'll notice and you'll be able to pick out a scam by it by the fact that it comes from amazon.org instead of amazon.com or there may be some misspelling or you may notice in the email some of the scams don't use proper english terms that most people will use because they come from a foreign adversary as well so these are some types of spear phishing attacks to be aware of and to keep on look out for malware attacks cause tremendous amount of damage to your business to your organization and a lot of people don't know the length and breadth of how much a malware attack a successful malware attack will cost your business not only does it result in downtime loss of data and tremendous amount of cost to recover to get back in in business but it also leads to reputation a compromise and loss of good name within the community your constituents your customers that just hurt a business and potentially will put them out of business for good as with any malware we recommend a multi-layered solution and that multi-layered solution includes a robust email such as office 365 gmail it includes you know your traditional business class antivirus your traditional next generation firewall but these are important it's also important to have um employee training it's important to have um tools that protect your email against attacks such as phishing and the last line of defense is always having a very robust extremely healthy cloud based email or cloud-based backup for both your email and your data one of the biggest parts we mentioned earlier in this segment is training your employees your employees are your first line of defense and a good solid security awareness training program can really help your organization prevent some of these email attacks and keep your organization much safer than it would without because as we've seen in many cases it's the employees that are letting somebody's malware in we recommend having a very effective security awareness training program and this includes not only training your employees to spot phishing emails teaching your employees about the different malware schemes that are out there currently but also include simulation and testing that you can see your employees can you can see if your employees are able to spot a particular phishing email or a particular type of malware and then finally an analysis being able to get a report to see who's clicking on that and then to be able to give them additional training on any subjects they may be needing training on we recommend that you keep your business secured based on three main security areas one technology put the technology in place to protect all your assets specific technologies for specific threats we also recommend training your people your people are your first line of defense and can protect your environment from a lot of bad attacks and then finally business continuity we want to make sure that you have a robust backup solution that's cloud-based as well as a email continuity solution that backs up your email and keeps it secure thank you for joining our tech talk we hope you've learned some things about email security and phishing we hope you join us for our next session thank you