This Friday, November 24, the Internet becomes a feast for online shoppers looking to make the most of Black Friday deals. But this date also encourages hackers to prey on the unwary.

Official or verified portals usually do not cause problems when making online purchases. However, when the customer does not take a moment to ensure that the site displays the browsers’ security lock, they can put themselves in danger.

On this date, although the offers in many stores started weeks ago, customers tend to be dazzled by the variety of products and prices on the Internet. This dispersion is the perfect ally for those who clone pages and offer them as official, impersonate corporate identities, and send malicious emails with extraordinary offers.

To avoid being a victim of a scam, it is essential to verify the site; It must be the official page of the store where you want to buy. In this way, the client avoids being directed to fraudulent sites.

The security of personal data, bank cards and passwords is the responsibility of the buyer. In this sense, it is recommended not to provide this data to people who are not qualified for the online procedure, who do not belong to the store or whose attitude raises suspicions.

During browsing, the use of two-factor authentication, as well as biometric access to the different query pages, strengthen people’s security.

In order to speed up purchases, making a prior list of the items of interest helps you be more efficient and focus on the items with the most sales. This way, it takes less time to add them to the shopping cart and then make the final decision.

It is important to previously consult the promotions, discounts, and returns policies of the store where you are interested in purchasing. And once you have purchased a product, keep the invoice, as it will be the only means of claiming if necessary. Also, for a return for a defective item.

The digital era makes a variety of applications and websites available to buyers to facilitate the search, such as Amazon Assistant, Google Shopping, Keepa, CamelCamelCamel, among others. They make price comparisons on the spot and make the job easier.

M.Pino

With information from international media and news agencies

(Referential image source: Unsplash+, in collaboration with Getty Images)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Black Friday purchases without risk of scams apareció primero en Bitfinance.

Cybercriminals are carrying out attack techniques that are up to 15 years old to find and exploit vulnerabilities and security gaps in the systems of companies and organizations.

This is one of the conclusions reached by Barracuda Networks in a recent report called ‘Threat Spotlight’, where it points out that malicious agents use these techniques to install malicious programs, interrupt the operation of devices or steal confidential information.

The security solutions company has commented that cybercriminals “quickly” take advantage of the new opportunities that are presented to spread their malicious campaigns on the computers of companies and organizations. One of them took place in December 2021, when there was a Log4J flaw. That is, a remote code execution (RCE) vulnerability that allows malicious agents to execute arbitrary Java code, taking control of a target server.

Due to this bug, Barracuda Networks has concluded that there was an increase in cyberattacks exploiting this vulnerability, reaching 150 % more attacks of this type the following year.

The company has commented that attackers know that the types of attacks that have been successful in the past can also work today, and to do so, they focus on weaknesses that in most cases have existed for years. To reach this conclusion, his team of researchers has carried out an analysis for three months of ID data detection, a tool that is used 24 hours a day, 7 days a week in the company’s Operations Center (SOC).

First, it has indicated that cyberattackers have tried to gain control of vulnerable systems using techniques that date back to 2008, that is, 15 years ago. Thanks to them, they can take advantage of web servers that are misconfigured to obtain data such as application codes or files that they should not have access to.

Attackers exploit bugs in programming languages

Another of the attackers’ targets are bugs in the programming languages ​​that developers use to create applications included in operating systems, on the web, or in ‘middleware’. That is, the ‘software’ system that provides common cloud functions and services for applications.

In this case, cybercriminals take advantage of user actions, such as when they add a product to their ‘online’ shopping cart or when they enter their personal data and press the ‘Send’ button, to send that information to an external server. If your Common Gateway Interface (CGI) configuration is configured incorrectly, the attacker will be able to gain remote control of the system, and you will be vulnerable to malicious code injection.

The cybersecurity company has commented that another of the main objectives of the attackers is to get hold of sensitive and protected information through vulnerable servers, such as passwords, user lists, contact information. In this case, they use improperly legitimate processes to find out how many computers have an active IP connection. Thus, this action can help plan and prepare large-scale malicious campaigns.

Finally, Barracuda Networks has qualified that malicious actors try to generate chaos in a general way, interrupting services and altering the data packets of the ‘online’ traffic. Thus, they manage to saturate the communication channels and the destination servers. The company has recognized that security flaws “have no expiration date and the risk is that, over time, they may be more difficult to locate and mitigate”, so they are reduced to vulnerabilities embedded in a system or in an application. , in the words of the senior SOC Manager, Offensive Security at Barracuda XDR, Merium Khalid.

Source: dpa

(Reference image source: Unsplash, in collaboration with Shubham Dhage)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Cybercriminals resume 15-year-old attack techniques apareció primero en Bitfinance.

Cybercriminals know the importance of the data uploaded daily on the Internet, and their attacks are becoming more sophisticated. Given the increase in crimes such as phishing, scams, ransomware, the fact of having an advisor in computer forensics becomes more relevant.

The role of a forensic expert is to collect all the pertinent electronic information in a particular case. You must obtain and analyze said data, in addition to processing and presenting it in court, if applicable.

Its function is based on the meticulous investigation of digital evidence, in search of clues to establish responsibilities in a cyber crime.

Computer forensics collects data such as emails, messages sent by the WhatsApp social network, text messages, digital files, documents with electronic signatures.

In this discipline, as in any other, scientific techniques are studied for collecting electronic evidence, keeping files in custody, preserving content, among others.

Faced with some gaps in information and regulation in cybersecurity, computer experts consider it necessary for both companies and individuals to redouble efforts to protect their data, through backup copies, careful selection of the information they share and store, carry out audits, establish firewalls, strengthen their passwords, among the most common recommendations.

M.Pino

Click the link to subscribe for free to our news and media group on Telegram: https://t.me/G_ELSUMARIO_News

Source: informáticaforense

La entrada Computer forensics gains relevance in a digitized world apareció primero en Bitfinance.