A possible lesson from a bank’s second data breach, and more.
Welcome to Cyber Security Today. It’s Wednesday, June 22nd, 2022. I’m Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com.
 |
 |
 |
A U.S. bank has acknowledged a second recent hack. Flagstar said this one happened in December and led to the theft of personal information of 1.5 million customers. The earlier one was a ransomware attack in January involving the theft of data of 1.4 million customers. The bank said it only learned about the December intrusion recently, and at the beginning of this month how big it was. But according to a commentator at the SANS Institute for security training, this discovery of the second data theft might have been detected earlier. That’s because while there was an investigation of the ransomware attack, it isn’t clear that included a look at the bank’s overall security gaps. If it had, the December attack might have been found sooner. That’s why any expert investigation of the causes of a security incident should include a wider look at possible security gaps.
Speaking of ransomware, once double-extortion gangs get into an organization they cherry-pick the data they want to steal and threaten to disclose. According to researchers at Rapid7, they prefer financial data, customer data or healthcare patient information. That makes sense: This is often the most sensitive data that corporations, hospitals and clinics have, and therefore the most likely they would want to pay a ransom for. The report reminds IT leaders that protecting sensitive data with strong encryption is one of the best ways to protect against any data theft. So is network segmentation.
Think your firm has been seeing more payment fraud attempts recently? You’re not alone. Canadian small businesses recently surveyed said attempted fraud by text messages, email and social media platforms went up 30 per cent during the pandemic. Fraud attempts through online retail sites or apps went up 25 per cent. On the other hand, 51 per cent of those surveyed said they are more aware of how to recognize payment fraud scams. Almost the same number said their firms are more aware of how to protect themselves. The survey was done for Payments Canada, which is responsible for the physical infrastructure used by payment systems.
Here’s a different look at Canadian online scan numbers: Since 2017 Canadians have lost $380 million to online scammers. The three most hit provinces were Ontario, Alberta and British Columbia, with residents or businesses reporting around $3 million a year in losses in each province. Manitoba was a close fourth. Investment and romance scams were the most common tactics, with extortion coming third. The numbers come from an analysis of reports from the Canadian Anti Fraud Centre by a website called SocialCatfish. To protect yourself don’t give money or personal information to someone on the internet who you haven’t met in person.
Finally, here’s another warning about scanning and using QR codes: Security researchers say crooks are getting around two-factor login authentication on the Discord discussion platform by abusing QR codes. It works like this: A target is sent a messaging asking them to authenticate with the included QR code. If the victim falls for this scans the code, it logs in the attacker and bypasses two-factor authentication. Beware of a QR code or a link to a code unexpectedly being sent to you.
That’s it for now Remember links to details about podcast stories are in the text version at ITWorldCanada.com. That’s where you’ll also find other stories of mine.
Follow Cyber Security Today on Apple Podcasts, Google Podcasts or add us to your Flash Briefing on your smart speaker. Thanks for listening. I’m Howard Solomon