Skip Ribbon Commands
Skip to main content

How To Stop a Hacker

Limiting business exposure to cyber crime

Andrew Walman

09/03/2017

More than half of UK businesses suffered from some form of cybercrime attack in 2016.

With the rise of ransomware as a way for criminals to make money from viruses, and more connected devices being used in business than ever, the likelihood of your business suffering due to cybercrime is higher every day. If you haven’t been hacked already – you will be soon.

 

Encounter rates for significant malware categories

Trojans are the most encountered malware through 2015, the exploits through which ransomware is then planted.

From 2016 Trends in Cybersecurity – Microsoft

Thankfully, there's some easy steps you can take to ensure your business never gets hacked:

  • ​Turn off all your PCs, laptops, servers and phones
  • Move your business to a cabin in the woods

You may find customers are reluctant to visit your cabin, particularly in the winter months. And the bank may not accept smoke signals as a means of communication. So how do you secure your business against hackers without going off-grid?

 

​1: Prepare To Be Hacked​​

It's inevitable. At some point in the future, even with the best cyber-security in the world, your company will be hacked. Virtually every large corporation in the world – including those whose business it is to combat hackers – has been hacked, and chances are, if you haven't been hacked already, you will be soon. Make sure you minimise potential losses be being prepared:

  • Check your backups: make sure you are backing up all your business data, and that these backups are kept separate from your regular data – either physically (such as removable media) or virtually (using a cloud backup system). Retain multiple backup points, and ensure critical data is backed up several times a day. If you do get hacked, the simplest way to recover is simply restore from backup, than to try and cleanup corrupted files or work out what's missing. With a ransomware attack, restoring from backup is often the only option – other than paying up.
  • Have a disaster recovery plan: with a good backup regime in place, work out how you would respond to an attack – which systems to recover first, which employees need to take action, how to communicate with your customers and staff. Rehearse the plan regularly, and improve it as systems change.
  • Know your data: work out where you have vulnerable/sensitive data, and what can be done to reduce its vulnerability. Delete old records and files – you don't want to be securing anything you don't need, nor explaining to customers that last bought from you 10 years ago, why their personal data has been compromised. Compartmentalise your data so it can't all be accessed using the same method or username. Ensure the most sensitive data is harder to access, is encrypted, and access is audited.
 

2: Reduce Your Exposure

Hackers go for the easy targets. Make things hard for them, by reducing your "attack surface" and actively looking for vulnerable spots that could be exploited - then remove them.  

  • Outsource your utility IT: Email is the primary source of malware within any organisation. Your company gains no competitive advantage by maintaining and securing its own email infrastructure, its just a sinkhole for IT resources and money. By outsourcing your email system to a specialist provider, you benefit from an email system that is constantly updated to be secured against the latest threats, is designed to be highly available – and will be more economical than trying to achieve the same features in-house. The same goes for other "utility" systems, such as backup, telephony, and archiving.
  • Secure your endpoints: PCs, mobiles, laptops, Macs – they all connect to your company infrastructure, and increasingly, they don't fall under company control as people bring their devices into the workplace, work from home, or use their mobile for business emails and apps. Make sure every device that connects to your network is patched, has the latest anti-virus signatures, uses encrypted storage, and only allows authorised people to use it – if not, don't let it connect. Consumer devices (non-domain) are twice as likely to encounter threats as enterprise machines (2016 Trends in Cybersecurity – Microsoft).
  • Don't forget the backdoor: or more usually, the front door, as people walk into your reception, and attach whatever they like to an open network port, USB slot, or just slurp your WiFi. It's easy to concentrate on the online threats, and forget the physical security – often a hacker can steal far more, with less effort, by walking into a business than they can sat at home. And hackers don't have to be strangers – the biggest threats can come from within your own staff, who know where your most valuable data is.​
 
 
Malware and unwanted software encounter rates for domain-based and non-domain computers

Consumer devices are more than twice as likely to encounter malware than enterprise devices​.

From 2016 Trends in Cybersecurity – Microsoft

3: ​Take Advice

By reading this far, you’ve already shown you’re open to new ideas about how to protect your business. The next step is to engage an IT consultancy to further improve your cyber security. As consultants, we’ve seen many types of business, many threats, and many attacks. We can bring our experience of securing against hackers, recovering from attacks, and reducing threats to your company.

Fuse can implement the technologies needed to reduce your exposure to threats, and to recover quickly from a successful attack – often for far less than recovering from an attack without these technologies in place.

 

You can never stop every hacker. You can prevent your business suffering from hacking.

Contact us today to discuss how.

​​​
​​

 About us

Fuse Collaboration Services is a Cloud Solution Provider and Microsoft Gold Partner specialising in delivering SharePoint, Skype for Business, and Azure cloud-based solutions. Based in Northampton, UK.

Microsoft Gold Partner Logo showing 5 competencies

Read more

 Latest Tweets

 Latest Blog

 

 

Have you forgotten about the WannaCry Cyber Attacks already?1785<p class="lead"> The NHS cyber attacks were less than two weeks ago yet it feels like it’s been far longer. So much has happened since and if updating your IT infrastructure was on your agenda but has now been put to one side due to other tasks taking priority read on...</p><p> Nobody in the IT world wants to say “I told you so” following &#160;the recent events but the NHS cyber attack should&#160;have made Managing Directors globally, &#160;sit up and listen to their IT advisors. Everyone knows that technology evolves at an alarming pace and our generation has seen the fastest change in this… at least until we land on Mars. </p><p> This means instead of ignoring the IT gurus, we should be taking on board their advice and expertise, particularly around cybersecurity; trust us, it’ll save you money in the long run. Why are we not listening to the experts who thankfully know everything about ransomware, patch management, nibbles, craplets and&#160;DOS attacks? (High five if you know any of that!)</p><p> Put it this way&#58; If a doctor told you that you had a hole in your heart requiring immediate surgery, otherwise it’s game over, you would agree to it being patched up immediately, right? The health of your business is just as critical. The body of your business is reliant on your IT infrastructure for keeping your business profitable whilst also allowing the lunchtime google sessions! Your out of date software, your lack of adequate back up and your ancient operating system are causing holes that are potentially lethal for your business. </p><p> Hackers are more advanced now than ever before , potentially sitting In your system undetected for, on average, over two hundred&#160;days. You need to be ready with the most up-to-date defences you can. The most frustrating part of what has recently happened is that there will be companies out there who will listen to the news, read it in the papers and yet still take the risk, genuinely believing that it will happen to them. If it hasn’t already been drilled in, take a look at a breakdown of last years’ statistics&#58;</p><p> <a href="http&#58;//www.hackmageddon.com/category/security/cyber-attacks-statistics/">http&#58;//www.hackmageddon.com/category/security/cyber-attacks-statistics/</a></p><p> Still don’t think you’re at risk?</p><p> If the cost implication of a hack doesn’t shock you in to action (and after reading these five case studies from top corporate losses I think it will - <a href="https&#58;//hotforsecurity.bitdefender.com/blog/top-5-corporate-losses-due-to-hacking-1820.html">https&#58;//hotforsecurity.bitdefender.com/blog/top-5-corporate-losses-due-to-hacking-1820.html</a>), then what about the other crippling effects of a hacking that, ultimately, could have been prevented?</p><p> Your reputation would take a hit, especially if thousands of customer’s valuable data including their full names, logins, passwords, e-mails, home addresses, purchase history, and credit card numbers are stolen. It’s a company’s responsibility and legal requirement to keep this information safe. Your customers may jump ship to another competitor, meaning a further hit on your profitability. </p><p> In 2016, two thirds of large UK businesses were hit by a cyber breach or attack. Could this number have been reduced? We know it can.</p><p> Fuse Collaboration are experts in the following&#58;</p><ul><li>Cyber Security - ask us about a free cyber security assessment</li><li>Automated Patch management - find and block those holes&#160;</li><li>Back up and disaster recovery - don't let an attack stop your business</li><li>Azure and Office 365 - Migrate to the cloud and away from ageing infrastructure</li></ul><p> Our services include a bespoke combination of business consulting, infrastructure design, SharePoint development and managed services and as a certified Microsoft Gold Partner you have that added reassurance that your business is in the right hands.</p><p class="well well-lg lead"> Any upgrades to your infrastructure can be phased in over a time suitable to your users, business demands and your budget. Our team are experts in delivering what you want - call us on 01604 797979</p>l.ozier@fusecollaboration.com | Louise Ozier | 693A30232E777C6675736563735C6C2E6F7A696572 i:0#.w|fusecs\l.ozier24/05/2017 23:00:002017-05-24T23:00:00Z31/05/2017 16:20:3526https://www.fusecollaboration.com/ourblog/Pages/Forms/AllItems.aspxhtmlFalseaspx

 Contact us

Our address
12-14 Brookfield, Duncan Close
Moulton Park, Northampton
NN3 6WL
P: +44(0)1604 797979
Contact Us