Chris Smith – ITS News

Cybersecurity Awareness Month : Password Security Tips

Here are a few password security tips that you should adhere to for good security practices.

1. 1. Use multifactor authentication (MFA) where
    possible to protect valuable data and content.
  2. Consider using a password manager program to
    ensure that you have long and unique
    passwords for every website and service.
  3. Change the factory default passwords on your
    devices such as WiFi routers, or any other smart
    devices.

Cybersecurity Awareness Month : Password Management – 2 Min Video

This is a 2 Minute video of Kevin Mitnick, KnowBe4’s Chief Hacking Officer, as he shares his tips on password management, best practices and his method of creating passphrases.

Cybersecurity Awareness Month : The Red Flags of Rogue URLs

Spotting malicious URLs is a bit of an art. The examples represented here are some of the common tricks used by hackers and phishers to fool users into visiting malicious websites. The methods shown here could be used by legitimate services, but if you see one of these “tricks” you need to make sure you’re dealing with the organization you think you are.

Look-a-Alike Domains

Slight Misspellings

- - - - Microsoftnline
        <v5pz @ onmicrosoft . com>
      - www.llnked in.com

Brand name in URL, but not real brand domain

- - - - ee.microsoft.co.login-update-dec20.info
      - www.paypal.com.bank/logon?user=johnsmith@gmail.com
      - ww17.googlechromeupdates.com/

Brand name in email address but doesn’t match brand domain

- - - - Bank of America
        <BankofAmerica@customerloyalty.accounts.com>

URL Domain Name Encoding

- - https://%77%77%77.%6B%6E%6F%77%62%654.%63%6F%6D

Shortened URLs

- - When clicking on a shortened URL, watch out for malicious redirection. https://bit.ly/2SnA7Fnm

Domain Mismatches

- - Human Services.gov
    <Despina.Orrantia6731610@gmx.com>
    https://www.le-blog-qui-assure.com/

Strange Originating Domains

- - MAERSK
    <info@onlinealxex.com.pl>

Open Redirectors

URLs which have hidden links to completely different web sites at the end.

- - t-info.mail.adobe.com/r/?id=hc347a&p1=evilwebsite .com

Cybersecurity Awareness Month : 20 Ways to Stop Mobile Attacks

Don’t let your guard down just because you’re on a mobile device. Be just as careful as you would on a desktop!

WiFi

- - - - Don’t allow your device to auto-join unfamiliar
        networks.
        
        Always turn off WiFi when you aren’t using it or
        don’t need it.
        
        Never send sensitive information over WiFi unless you’re absolutely sure it’s a secure network.

Apps

- - - - Only use apps available in your device’s official
        store – NEVER download from a browser.
        
        Be wary of apps from unknown developers or
        those with limited/bad reviews.
        
        Keep them updated to ensure they have the
        latest security.
        
        If they’re no longer supported by your store,
        just delete!
        
        Don’t grant administrator, or excessive privileges
        to apps unless you truly trust them.

Browser

- - - - Watch out for ads, giveaways and contests that
        seem too good to be true. Often these lead to
        phishing sites that appear to be legit.
        
        Pay close attention to URLs. These are harder to
        verify on mobile screens but it’s worth the effort.
        
        Never save your login information when you’re
        using a web browser.

Bluetooth

- - - - Disable automatic Bluetooth pairing.
        
        Always turn it off when you don’t need it.

Smishing (phishing via SMS)

- - - - Don’t trust messages that attempt to get you to
        reveal any personal information
        
        Beware of similar tactics in platforms like What’s
        App, Facebook Messenger Instagram, etc.
        
        Treat messages the same way you would treat
        email, always think before you click!

Vishing (voice phishing)

- - - - Do not respond to telephone or email requests
        for personal financial information. If you are
        concerned, call the financial institution directly,
        using the phone number that appears on the
        back of your credit card or on your monthly
        statement.
        
        Never click on a link in an unsolicited commercial
        email.
        
        Speak only with live people when providing
        account information, and only when you initiate
        the call.
        
        Install software that can tell you whether you are
        on a secure or fake website.

Cybersecurity Awareness Month : Social Engineering Awareness Tips

Here are a few social engineering awareness tips to remember that will help protect you.

1. 1. Criminals won’t just email you, they’ll use SMS,
    phone calls, or even knock on your door. Remain
    vigilant at all times.
  2. Don’t jailbreak your phone or sideload apps from
    non-approved app stores.
  3. Lock your computer when leaving it unattended.

Cybersecurity Awareness Month : Free Course “2021 Your Role: Internet Security and You”

From our Partners at Knowbe4: This free course is being offered during Cybersecurity Awareness Month.

https://training.knowbe4.com/modstore/view/845a6a97-bc8e-4592-8182-ff17ffa8ed70

Cybersecurity Awareness Month : Email Phishing Red Flags

Take a look at this sample email of some Phishing Red Flags to be cautious about.

Hover over the link. The link may not take you to the site the email content says it will.
The email tells you to click a link or open an attachment.
The is a sense of urgency to the email (Example: “Do the now”)

Cybersecurity Awareness Month :Free Course “2021 Social Engineering Red Flags”

Cyber Security Awareness Month: Phishing Awareness Tips

Phishing Awareness Tips

1. Make sure you read the full email address of the sender. If the email address looks suspicious, report it.

2. Hover over all URL links before clicking on them to make sure they are legitimate.

3. Any email with a URL or file attachment should be considered high risk.

Welcome to Cybersecurity Awareness Month October 2021!

In our uber-connected world, it seems like cybercriminals and malicious links creep around every corner. News stories of ransomware attacks and data breaches costing millions of dollars fly past our feeds almost constantly. We get it; it can be overwhelming. With so much information bombarding us, it can be hard to focus on the right actions to take to keep information secure. That’s why we’re recognizing Cybersecurity Awareness Month this October by sharing tips to stay cyber secure, both at work and at home. To turn away cyber attacks, a little knowledge teamed with critical thinking skills can go a long way!

Stay tuned to our blog site this month as we will be sharing weekly information provided by our InfoSec training service partner KnowBe4. The list below is what will be shared over the month of October.

- Free Interactive Course: Social Engineering Red Flags
- Free Interactive Course: Your Role: Internet Security and You
- Expert-led videos on pretexting and password management
  infographics on avoiding social engineering and cybercrime
- Cybersecurity awareness tip sheets