Cyber threats rise during festive season, experts warn
The festive season, a time of joy and relaxation, also acts as a magnet for cyber threats as organisations and individuals alike become more vulnerable to digital attacks. Two prominent voices in the security sector have highlighted the heightened risks during this period and have shared insights into staying protected.
The Information Technology - Information Sharing and Analysis Center (IT-ISAC) has issued an advisory aimed at assisting organisations in bolstering their cyber defences during the holidays. Scott C. Algeier, Executive Director of IT-ISAC, emphasised the significance of this period, noting that cyber attackers are especially active as key personnel, including executives and analysts, often take time off. "The holidays are a stressful time for network defenders," Algeier remarked. To counteract this, the advisory offers practical measures at little to no cost, such as enhancing employee awareness of phishing and scams, conducting response drills despite limited staffing, auditing access controls, and sharing guidance on avoiding threats like malicious domains and business email compromise schemes.
Algeier stressed the urgency for companies to prepare and mitigate the stress by implementing these strategies. "A bit of planning can take away some of the holiday stress network defenders experience," he asserted, acknowledging the increased challenge of preventing, identifying, and responding to security incidents during this season.
On the consumer front, Lee Barney, General Manager of Tech Security at TPG Telecom, cautioned Australians about increasingly sophisticated tactics employed by hackers during the holidays. Barney pointed out the growing prevalence of AI-driven tools, such as deepfake technologies, which can create convincing fake videos and phone calls. These tools enable hackers to impersonate relatives and exploit people's emotions to extract money, often targeting vulnerable individuals.
The increased online activity, from shopping to video calls, adds to the susceptibility, providing hackers with more opportunities, Barney warned. "The festive season should be a period of joy, but hackers are particularly active, employing new sophisticated tactics," he noted. Barney advised caution with unexpected messages or unusual demands, particularly those involving urgent requests for financial assistance.
Barney recommended verifying the authenticity of such messages by asking specific questions or using pre-arranged codewords before taking any action. He also advised against clicking links in unsolicited communications and highlighted the risks of using outdated devices, which are more susceptible to breaches.
By increasing vigilance and employing up-to-date technology, individuals can enjoy a more secure holiday season, Barney suggested. He added, "By staying alert and taking these precautions, the public will enjoy a safe and secure holiday season." Barney's extensive experience in international security management reinforces the pragmatic advice he offers, focusing on removing complexity and ensuring significant buy-in from corporate leadership to achieve robust security infrastructures.
As both Algeier and Barney highlight, the holiday season is a critical time to heighten awareness and implement safeguards against the increased threat of cyber attacks. The digital landscape demands vigilance and proactive measures to protect both organisations and individuals from those seeking to exploit the holiday spirit for malicious gain.
