Cyber Security: think your business is too small to be a target? Think again!!!

This week, I tackle a myth that's dangerously popular among small business owners: the belief that their enterprises are too minor to attract cybercriminals. Let's dive into a real-life tale from about 20 years ago that illustrates why this mindset can be a costly mistake.

The Moment That Changed Everything

About 20 years ago, we were in the process of moving our toner deliveries to Royal Mail. We were therefore receiving lots of emails from them. Unfortunately, I opened one such email with an attachment. The screen immediately went black, and a message popped up demanding ￡3500 in bitcoin within 24 hours or all our data would be permanently erased!!!

Wow what a moment!!!

Our IT manager luckily had seen something similar before. His advice was to pay the ransom. I was dubious but he said they have a reputation of restoring data once they’ve been paid. If they had a reputation for not doing so no one would pay. I took his advice and later that night found myself in a dodgy pub with a very dubious gentleman who sold me ￡3500 of bitcoin.

The Reality of Cyber Threats

You might think that cyber criminals are only interested in large companies or those with huge financial assets. After all, that's where the big bucks are, right?

Think again.

Botnets: The Invisible Threat

Recent reports have shown that cyber criminals are casting their nets wide, targeting businesses of all sizes, from independent shops to global enterprises. And they're doing it with the help of something called "botnets." The criminals have got significantly more sophisticated since our simple ransomware attack.

You may have heard about the rise of malicious botnets, and you're probably wondering "what on earth is a botnet, and why should I care?"

Botnets are the secret weapons of cyber criminals. They're armies of compromised devices, all under the control of a single malicious puppeteer. These can be anything from your computer to your smart fridge. Yes, even your fridge can be turned into a cyber weapon.

A new report observed "massive spikes" in the activity of these botnets, with over a million devices involved in malicious activities at one point. To put it into perspective, that's a hundred times the usual levels of botnet activity.

Usually, there are around 10,000 devices doing naughty stuff each day, with 20,000 being the highest number researchers had seen. But in December 2023, things got crazy. The number shot up to 35,144, and two weeks later, it rose even further to 43,194. That's a lot of compromised devices.

And it didn't stop there; the researchers saw the biggest spike yet, hitting a whopping 143,957 distinct devices being used at the same time. In fact, on the 5th and 6th of January there were spikes of more than a million devices!

Why are they doing this?

These botnets are being used to scan the internet, searching for weaknesses in websites, servers, and even email systems.

Think of the internet as a fortress with many doors and windows. These cyber criminals are looking for unlocked doors and open windows to sneak in. They focus on specific "ports" that serve as entry points.

Protecting Your Business

What can you do to protect yourself from these cyber threats?

It's all about strengthening those doors and windows. Here are a few simple steps:

1. Keep your software, operating systems, and applications up-to-date. Regular updates often fix vulnerabilities.
2. Install a good firewall and reliable antivirus software to protect your devices.
3. Educate your employees about cyber security best practices, such as avoiding suspicious links and emails. (ensure you take your own advice)
4. Enforce strong, unique passwords for all your accounts and devices.
5. Regularly back up your data to the cloud or anywhere off site to prevent loss in case of a cyber-attack.
6. Keep an eye on your network for any unusual activity.
7. Consider hiring a cyber security expert to assess and enhance your security measures.

Final Thought: Navigating the murky waters of cyber security might seem daunting, but it's imperative for protecting your business's future.

Please don’t find yourself in a dodgy pub...! if you need any help or advice with the above please reach out. I know lots of highly reputable IT companies I can recommend.

Let's ensure your business is fortified against these digital threats.

Join the Conversation: How are you protecting your business against cyber threats? Share your strategies and learn from others in the comments below.

?

?