Bookmarks by rusini siyara

Bookmarks by rusini siyara https://padlet.com/rusinisiyarait/Bookmarks Made with swagger en-us 2022-05-17 18:58:49 UTC 2022-05-24 21:38:39 UTC hello@padlet.com 01. Shoulder Surfing rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2189193740 What is a shoulder surfing attack -

A shoulder surfing attack describes a situation where the attacker can physically view the device screen and keypad to obtain personal information. It is one of the few attack methods requiring the attacker to be physically close to the victim to succeed.

Example -

when someone watches over your shoulder to nab valuable information such as your password, ATM PIN, or credit card number, as you key it into an electronic device.

How to prevent

Eliminate passwords
Add a privacy screen to your devices
Always be aware of your surroundings
Use biometric authentication instead

]]> 2022-05-18 09:22:26 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2189193740 02. Dumpster Diving rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2189198301 What is a Dumpster Diving attack -

“Dumpster diving” means searching the trash for useful information. The trash may be in a public dumpster or a restricted area requiring unauthorized entry. Dumpster diving depends on a human weakness: the lack of security knowledge. Many things can be found in dumpster diving

Examples -

CDs, DVDs, hard drives, company directories, and so forth.

How to prevent -

Have a documented equipment decommissioning process.
Use the appropriate secure storage media deletion process.
Educate employees.
Use locked trash and recycling bins, or keep refuse in a secure area until it is ready to be picked up. Use trusted equipment recyclers.
Make shredding convenient.

]]> 2022-05-18 09:26:22 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2189198301 03. Dictionary Attack rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2189198841

What is a dictionary attack -

A dictionary attack is a method of breaking into a password-protected computer, network, or other IT resource by systematically entering every word in a dictionary as a password.

Example -

A website fails to ensure that its password length and complexity requirements are secure enough. As a result, some users select extremely easy to guess passwords , like “abc123” or “987654,” the first passwords often tried in a dictionary attack. In any attack, these accounts will be the first to be compromised.

How to prevent -

Use a random password generator.
Use biometric identification if possible.
Change your passwords frequently.
Stay away from words and easy to guess number combinations.

]]> 2022-05-18 09:26:46 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2189198841 06. Wire sniffing rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2189200218

What is Wire sniffing attack -

Sniffing attacks refer to the theft or interception of data by capturing the network traffic using a packet sniffer.

Examples -

Active sniffing, Passive sniffing

How to prevent -

Avoid unsecured networks.
Encrypt your message with a VPN.
Network scanning and monitoring.

]]> 2022-05-18 09:28:01 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2189200218 05. Rule-Based Attack rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2189201159

What is Rule-Based Attack -

A rule-based password attack is a way of focusing a password cracking technique when an attacker knows which rules passwords in a particular system are based on, such as “alphanumeric and eight characters long.”

Example -

Hashcat

How to prevent -

Create strong, multicharacter passwords.
Use elaborate passphrases.
Create password-building rules.
Avoid common passwords.
Use unique passwords for every account.
Use password managers.

]]> 2022-05-18 09:29:01 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2189201159 04. Brute Forcing Attack rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2189242730
What is Brute Forcing Attack -

A brute force attack is a hacking system that uses trial and error to crack passwords, login credentials, and encryption keys. It's a simple yet dependable tactic for gaining unauthorized access to individual accounts and organizations’ systems and networks.

Examples -

The hacker tries multiple usernames and passwords, frequently using a computer to test a wide range of combinations until they find the correct login information.

How to prevent -

Create strong, multicharacter passwords.
Use elaborate passphrases.
Create password-building rules.
Avoid common passwords.
Use unique passwords for every account.
Use password managers.

]]> 2022-05-18 10:04:08 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2189242730 07. MITM rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2197374406 What is MITM -

A man-in-the-center attack is a type of eavesdropping attack, where attackers interrupt a current communique or statistics transfer. After placing themselves within the "center" of the transfer, the attackers pretend to be each legitimate participant.

Examples -

In 2017, credit score company Equifax removed its apps from Google and Apple after a breach resulted in the leak of personal data. A researcher found that the app did not consistently use HTTPS, allowing attackers to intercept data as users accessed their accounts.

How to prevent -

Avoiding WiFi connections that aren’t password protected.
Paying attention to browser notifications reporting a website as being unsecured.
Immediately logging out of a secure application when it’s not in use.
Not using public networks (e.g., coffee shops, hotels) when conducting sensitive transactions.

]]> 2022-05-24 08:57:09 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2197374406 08. Replay Attacks rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2197420218 What is a Replay Attack -

A replay attack happens once a cybercriminal eavesdrops on a secure network communication, and intercepts it, so fraudulently delays or resends it to misdirect the receiver into doing what the hacker desires. The additional danger of replay attacks is that a hacker does not even want advanced skills to decrypt a message when capturing it from the network.

Examples -

A staff member at a company asks for a financial transfer by sending an encrypted message to the company's financial administrator. An attacker eavesdrops on this message, captures it, and is now in a position to resend it.

How to prevent -

Using OTP
Adding a timestamp that’s only valid for a short amount of time can also prevent a hacker from launching a replay attack.
Ensuring you only access websites that use HTTPS protocol helps protect data and avoiding public or free Wi-Fi also helps you stay protected online.

]]> 2022-05-24 09:35:52 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2197420218 09. Rainbow Table Attack rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2197432740
What is Rainbow Table Attack -

A rainbow table attack is a password cracking method that uses a special table to crack the password hashes in a database.

Examples -

A hacker finds a vulnerability in a company’s Active Directory and is able to gain access to the password hashes. Once they have the list of hashes they execute a rainbow table attack to decrypt the hashes into plaintext passwords.

How to prevent it -

Eliminate passwords.
Use salting.
Use biometrics.
Monitor your servers.
Don’t use outdated hashing algorithms.

]]> 2022-05-24 09:47:47 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2197432740 10. Distributed Network Attack rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2197443710
What is Distributed Network Attack -

This type of attack takes advantage of the specific capacity limits that apply to any network resources. Such as the infrastructure that enables a company’s website. The DDoS attack will send multiple requests to the attacked web resource, with the aim of exceeding the website’s capacity to handle multiple requests and preventing the website from functioning correctly.

Examples -

Volume Based Attacks, Protocol Attacks, Application Layer Attacks

How to prevent -

Monitor and analyze network traffic.
Strengthen their security posture.
Monitor traffic.
Establish a DDoS attack response plan.

]]> 2022-05-24 09:58:33 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2197443710 11. Credential Stuffing rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2198289651
What is Credential Stuffing attack -

Credential stuffing is a cyber-attack in which credentials obtained from a data breach on one service are used to attempt to log in to another unrelated service.

Examples -

According to an FBI security advisory obtained by ZDNet, between January and August 2020, hackers used a bulk load of credential pairs to conduct more than $3.5 million fraudulent check withdrawals and ACH transfers from a mid-sized financial institution in the US.

How to prevent -

Use Multi-Factor Authentication (MFA).
Use a CAPTCHA.
Use device Fingerprinting.
Use Rate-Limit Non-Residential Traffic Sources.
Block Headless Browsers.

]]> 2022-05-24 20:42:51 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2198289651 12. Keyloggers rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2198298563
What are Keyloggers -

A keylogger is software or hardware capable of recording input from a computer keyboard and intercepting keystrokes without the user’s knowledge.

Examples -

Revealer Keylogger, Ardamax Keylogger

How to prevent it -

Use a 2-Step Verification.
Install Software Updates.
Use Key Encryption Software.
Avoid Downloading Crack Software.
Avoid Downloading Crack Software.

]]> 2022-05-24 20:54:15 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2198298563 13. Phishing rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2198308709 What is Phishing -

Phishing is a type of social engineering attack in which cybercriminals trick victims into handing over sensitive information or installing malware.

Examples -

Email phishing, Spear phishing, Whaling attacks, Smishing and vishing

How to prevent -

Thinking Twice Before Clicking.
Installing An Anti-Phishing Toolbar.
Verifying A Site’s Security.
Checking Online Accounts Regularly.
Using Firewalls.

]]> 2022-05-24 21:07:03 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2198308709 15. Traffic Interception rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2198311877 What is a Traffic Interception attack -

Interception attacks allow unauthorized users to access our data, applications, or environments and are primarily an attack against confidentiality. Interception might take the form of unauthorized file viewing or copying, eavesdropping on phone conversations, or reading e-mail, and can be conducted against data at rest or in motion.

Examples -

Eavesdropping on communication, Wiretapping telecommunications networks, Obtaining copies of messages for later replay.

How to prevent -

Using Encryption
Traffic Padding
Use Firewalls
Keeping backups of system configuration data properly.

]]> 2022-05-24 21:11:01 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2198311877 16. Password Spraying rusinisiyarait https://padlet.com/rusinisiyarait/Bookmarks/wish/2198323552 What is Password Spraying -

Password spraying is a type of brute force attack. In this attack, an attacker will brute force logins based on a list of usernames with default passwords on the application.

Examples-

An attacker will use one password (say, Secure@123) against many different accounts on the application to avoid account lockouts that would normally occur when brute forcing a single account with many passwords.

How to prevent -

Brute force presentation should be on both field.
Use multi-factor authentication.
The admin managed application should force users to change their password on first login with default password.

]]> 2022-05-24 21:26:17 UTC https://padlet.com/rusinisiyarait/Bookmarks/wish/2198323552