Cybersecurity: Encryption, DDOS, SSH Brute Force

Why is Encryption Important

• Encryption secures data by making it unreadable to unauthorized users.
• It protects sensitive information during both storage and transmission.

Avoiding Attackers

• Use strong, unique passwords for every account.
• Enable multi-factor authentication, MFA.
• Avoid clicking suspicious links or downloading unknown files.
• Keep software and antivirus programs updated.
• Regularly back up important files to a secure location.

Website Attacks: DDoS

• Distributed Denial-of-Service (DDoS) attacks involve multiple compromised computer systems attacking a single target.
• The goal is to overwhelm the target, like a server or website, with excessive requests.
• This disruption of service can lead to downtime, loss of revenue, and customer trust issues.
• Attackers may also use DDoS attacks as a distraction while launching other malicious activities, such as data breaches.

Website Attacks: SSH Brute Force

• By brute-forcing SSH login credentials, an SSH Brute Force Attack can be performed to gain access.
• Exploits like these can be used to send malicious files without being noticed.
• Unlike many other tactics used by hackers, brute force attacks rely on existing vulnerabilities.

Website Attacks: Cross Site Scripting (XSS)

• Cross-Site Scripting (XSS) attacks target websites with scripting flaws.
• Malicious code is injected into web applications.
• The injected script can give the hacker access to web app data like sessions and cookies

Solutions to Avoid Attacks on Websites

• Protecting websites from cyberattacks involves using a multi-faceted approach.
• Tactics combines secure coding, encryption, regular software updates, strong authentication, and advanced security tools.
• Taking these steps creates a robust defense against potential threats, which helps ensure user data safety.

Email Attacks: Phishing

• Phishing is a cybercrime where targets are contacted by email, telephone, or text message.
• Attackers pose as legitimate institutions to trick individuals into providing sensitive data.
• Sensitive data includes personally identifiable information, banking and credit card details, and passwords.

Email Attacks: SMiShing

• SMiShing involves using Short Message Service (SMS) to send fraudulent links or text messages.
• Criminals trick users into doing things like calling them.
• Victims may provide sensitive information, such as credit card or account details.
• Accessing a website from a link might unknowingly lead to the user downloading malware, infecting their device.

Email Attacks: Spyware

• Spyware is software that allows criminals to collect users' computer activities without their knowledge.
• Spyware features include activity trackers, keystroke collection, and data capture.
• It often modifies security settings.
• This software can bundle itself with legitimate software or act as Trojan horses.
• Many shareware websites contain spyware.

Solutions to Avoid Attacks on Email

• A key way of securing emails is using strong, unique passwords.
• Strong passwords should include a mix of uppercase and lowercase letters, numbers, and special characters.
• Avoid predictable passwords.
• Password managers can help generate and store complex passwords securely.
• Strong passwords significantly hinder attackers from gaining access to email accounts via brute force or dictionary attacks.

Social Media: Deepfake Profiles

• Creating deepfake profiles is a common social media attack.
• Cybercriminals impersonate legitimate users by mimicking well-known public figures or executives.
• These deepfake profiles may manipulate stock prices, spread fake narratives, and deceive users.
• Tricks may involve encouraging users to divulge personal information, click on malicious links, or engage in fraudulent activities.

Social Media: Malicious Links and Content

• A prevalent social media attack involves gaining access to an account in order to post malicious material or spread malware.
• An attacker will impersonate the account owner to defraud others.
• Targeting high-profile figures takes advantage of large followings.

Social Media: Compromised Accounts

• A prevalent social media attack occurs when an account is compromised.
• Consequences could mean that the attacker can post malicious content.
• Consequence could mean the spread of malware or impersonation of the account owner to defraud others.
• High-profile executive and brand accounts often suffer severely because of the large followings.

Solutions to Avoid Attacks on Social Media

• A collaborative approach of social media users, platform providers, and policymakers is necessary to create a safer online environment.
• Tactics such as strong passwords, privacy settings and user education can mitigate the risks of social media attacks.

Mobile Device Attacks: Jailbreaking and Rooting

• Android and iOS devices have security issues from Jailbreaking and rooting
• Attackers can jailbreak a phone by exploiting operation system weaknesses to start rooting through data.

Mobile Device Attacks: Malicious Apps

• Requires users to download apps onto a mobile device.
• Once the malicious App is granted access to the device's data, it can collect and send data to the hacker.
• Security software can scan for malicious Apps.

Mobile Device Attacks: MitM

• Man in the Middle (MitM) attacks occur when a cybercriminal intercepts communications sending data from one mobile device to another.
• Often happens on devices used for work that connect to Company Wi-Fi.

Solutions to Avoid Attacks on Mobile Devices

• Antivirus and security software is an effective defense mechanism.
• Security applications detect and neutralize threats like malware, spyware, and phishing attacks.
• Tools often provide real-time monitoring and scanning features.

Learn about encryption importance and techniques to avoid attackers. Encryption secures data by making it unreadable. Understand DDoS and SSH Brute Force website attacks, and measures to secure against them.