{"id":77508,"date":"2024-04-24T12:37:42","date_gmt":"2024-04-24T04:37:42","guid":{"rendered":"https:\/\/version-2.com\/?p=77508"},"modified":"2024-04-18T12:43:16","modified_gmt":"2024-04-18T04:43:16","slug":"even-legitimate-websites-can-become-traps-and-small-home-offices-need-to-be-prepared","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2024\/04\/even-legitimate-websites-can-become-traps-and-small-home-offices-need-to-be-prepared\/","title":{"rendered":"Even legitimate websites can become traps, and small\/home offices need to be prepared"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\"\"<\/p>

One\u2019s personal digital life may be a threat to business. Small offices and home offices need proper prevention.\u00a0 <\/span><\/em><\/p>

Heads of small or home offices most likely know how difficult it is to set boundaries between work and their personal lives. One minute you are doing taxes, and the next, you are browsing the internet looking for leisure-time activities for your family.\u00a0<\/p>

Having basic cybersecurity knowledge, you also probably know that sometimes you need to be careful out there. Clicking URLs mentioned in unfamiliar emails could bring trouble, and downloading new apps from unknown sources with no background information isn\u2019t a good idea either.<\/p>

But, what if a legitimate website that you or your employees have been regularly visiting gets compromised? How do you secure your cherished small office when downloading a legitimate application, or when its update suddenly turns out to be malicious?<\/p>

ESET researchers have recently discovered such a campaign<\/a>, which abused several legitimate websites to spread spyware which targeting a wide group of users coming from India, Taiwan, Hong Kong, Australia, and the United States. Facing such elaborate attacks, small offices and home offices need to take a prevention-first approach<\/a>.<\/p><\/div>

Interesting target<\/h3><\/header>

While, compared with large enterprises, small offices and home offices do not work with such large amounts of data or money, unfortunately, this can create the false impression that they are not interesting targets for cybercriminals. But the opposite is true.<\/p>

Considering the massive numbers of small offices and home offices globally<\/a>, in combination with their limited budgets for cybersecurity<\/a>, they make appealing targets for threat actors who aim campaigns at indistinct groups of people or businesses, rather than some corporate giant.<\/p>

Therefore, it is no surprise that 31% of businesses <\/a>with fewer than 10 employees surveyed in the UK during the winter of 2022 – 2023 experienced a cyberattack or a security breach in the past 12 months.<\/p>

There are 5.28 million such businesses<\/a> in the UK, which means that, theoretically, 1.64 million small offices and home offices experienced a cyber incident within a single year.<\/p><\/div>

Multi-staged attacks<\/h3><\/header>

ESET researchers discovered a cyberespionage campaign<\/a> well-suited to paint the picture. Since at least September 2023, cybercriminals have been victimizing Tibetans through a multi-staged attack that combines several techniques in order to install spyware on victims\u2019 devices. Researchers attribute this campaign to the China-aligned Evasive Panda APT group<\/a>.<\/p>

Shortly before the 2024 Kagyu Monlam Festival, which is held annually by Tibetan Buddhists in India, cybercriminals abused a website that belongs to the Kagyu International Monlam Trust. Expecting a higher visitor rate ahead of the upcoming festival, the attackers placed a malicious script on the site which showed a fake error page to users. This enticed them to download an \u201cImmediate Fix.\u201d However, the file was in fact a malicious downloader for both Windows and macOS.<\/p><\/div>

\"\"<\/div>
A fake graphic rendered by the JavaScript.<\/div><\/div><\/div><\/div><\/div><\/div><\/div>

The same threat actors also compromised a website belonging to a software development company, based in India, that produces Tibetan language translation software. The attackers placed several trojanized installers there for legitimate software that deployed the same malicious downloaders.<\/p>

These malicious downloaders were designed to download and install backdoors, which can avoid normal authentication procedures and allow access to a system.<\/p>

When successful, the downloaders compromised devices with a malware capable of receiving commands to collect information about files and running processes and sending them to attackers.<\/p><\/div>

Small offices dealing with big attacks<\/h3><\/header>

For average users, these advanced multi-staged attacks will be most likely difficult to spot. It is not hard to imagine a user clicking on a link that is part of a warning message coming from a trusted website. And there is no possibility for humans to discover that a legitimate software they are about to download was trojanized.<\/p>

Considering their limited options in such situations, small offices and home offices need to be smart about their safety.<\/p>

This means protecting your business as much as possible, and leaving the rest to professional tools that can minimize the threat landscape in a way that average Joes cannot.<\/p>

Here are preemptive measures that businesses can take: <\/strong><\/u><\/p>

Educate yourself and your employees \u2013<\/strong> Some attacks are difficult to spot, but it does not mean that awareness training is useless. There are plenty of threats in cyberspace that can be easily avoided if you and your employees stay vigilant.<\/p>

Use strong passwords or passphrases \u2013<\/strong> Minimum length should be 12 characters<\/a>, with a wide variety of letters, special characters, lower\/upper cases, etc. Hard to remember? Switch to passphrases!<\/a> They are longer, yet easier to remember.<\/p>

Stay on top of software updates \u2013 <\/strong>For cybercriminals it is not uncommon<\/a> to exploit previously known vulnerabilities simply because users do not update their software.<\/p>

Split your network into segments \u2013<\/strong> For small offices and home offices, network segmentation does not have to be difficult<\/a>. For example, use a guest Wi-Fi for devices that only need the internet to operate, then use VLANs to split a network into two segments \u2013 private and work.<\/p>

Back up your data \u2013<\/strong> If everything fails and your systems get compromised, it is essential to have an effective backup strategy<\/a> to run your business without unnecessary delays.<\/p><\/div>

Professional protection<\/h3><\/header>

Adopting the previous measures, you can cover some attack vectors, such as brute-force attacks against passwords or exploitation of known vulnerabilities. But the threat landscape is way bigger.<\/p>

To cover all small office and home office needs, ESET now delivers its new all-in-one protection, ESET Small Business Security<\/a><\/p>

ESET Small Business Security offers:\u00a0 <\/strong><\/p>