Munhu Akanyanya Kurwiswa: tsvaga kuti ndiani anonyanya kunangwa revatsotsi vepamhepo mukambani yako

Nhasi kune vazhinji vagari veKhabrovsk izororo rehunyanzvi - zuva rekuchengetedzwa kwedata remunhu. Uye saka tinoda kugovera chidzidzo chinonakidza. Proofpoint yakagadzirira chidzidzo chekurwiswa, kusasimba uye kuchengetedza data remunhu muna 2019. Kuongorora uye kuongororwa kwaro kuri pasi pekucheka. Zororo rakanaka, madzimai nevarume!

Chinhu chinonyanya kufadza pamusoro pekutsvagisa kweProofpoint inguva nyowani VAP. Sekutaura kunoita ndima yekutanga: "Mukambani yako, haasi munhu wese ari VIP, asi munhu wese anogona kuve VAP." Acronym VAP inomirira Munhu Akarohwa Zvakanyanya uye chiratidzo chakanyoreswa cheProofpoint.

Munguva pfupi yapfuura, zvave zvichigamuchirwa kuti kana kurwiswa kwemunhu kukaitika mumakambani, anonangidzirwa zvakanyanya kune mamaneja epamusoro uye mamwe maVIP. Asi Proofpoint inotaura kuti izvi hazvisisiri izvo, nokuti kukosha kwemunhu mumwe kune vanorwisa kunogona kuva kwakasiyana uye kusingatarisirwi zvachose. Nokudaro, nyanzvi dzakadzidza kuti ndeapi maindasitiri akarwiswa zvakanyanya gore rapfuura, uko basa reVAP rakanga risingatarisirwi, uye ndezvipi kurwisa kwakashandiswa kune izvi.

Vulnerabilities

Vainyanya kurwiswa ibazi redzidzo, pamwe nekudyara (F&B), uko vakanyanya kushungurudzwa vaive vamiriri vefranchise - mabhizinesi madiki ane hukama nekambani "hombe", asi aine huwandu hwakadzikira hwehunyanzvi uye kuchengetedza ruzivo. Zviwanikwa zvavo zvegore zvaigara zvichirwiswa zvine hutsinye uye 7 kubva pazviitiko gumi zvakakonzera kukanganisa kwedata rakavanzika. Kupinda mukati memakore nharaunda kwakaitika kuburikidza nekubira maakaundi ega ega. Uye kunyange nzvimbo dzakadai semari uye hutano hwehutano, dzine mitemo yakasiyana-siyana uye kuchengetedza zvinodiwa, yakarasika data mu10% (yemari) uye 20% (yehutano) yekurwisa.

kurwisa

Iyo yekurwisa vector inosarudzwa zvakananga kune yega yega sangano kana kunyange chaiyo mushandisi. Zvisinei, vatsvakurudzi vakakwanisa kuziva maitiro anonakidza.

Semuyenzaniso, nhamba yakakosha yemakero eemail akakanganiswa akazove akagovaniswa mabhokisi etsamba - angangoita ⅕ ehuwandu hwehuwandu hweakaundi anotapukirwa nekubirwa uye kushandiswa kugovera malware.

Kana ari maindasitiri pachawo, masevhisi ebhizinesi anouya pekutanga maererano nekusimba kwekurwiswa, asi huwandu hwese hwe "kumanikidza" kubva kune vanobira hunoramba hwakakwira kune wese munhu - huwandu hushoma hwekurwiswa hunoitika pazvimiro zvehurumende, asi kunyangwe pakati pavo, vanhu makumi manomwe vakacherekedza. kukanganisa uye kuedza kukanganisa data % yevatori vechikamu muzvidzidzo.

Ropafadzo

Nhasi, pakusarudza vector yekurwisa, vanorwisa vanonyatsosarudza basa rayo mukambani. Chidzidzo ichi chakawana kuti mamaneja epasi-akaundi maakaundi aive pasi peavhareji ye8% mamwe maemail kurwiswa, kusanganisira mavhairasi uye phishing. Panguva imwecheteyo, kurwiswa kunonangwa kune makondirakiti uye mamaneja kazhinji zvishoma.

Iwo madhipatimendi anonyanya kukurumidza kurwiswa pamaakaundi emakore aive budiriro (R&D), kushambadzira uye PR - vanogashira 9% mamwe maemail ane hutsinye kupfuura avhareji kambani. Munzvimbo yechipiri ibasa remukati uye masevhisi erutsigiro, ayo, kunyangwe ane njodzi yakanyanya index, zvakadaro inosangana ne20% kushomeka kurwiswa muhuwandu. Nyanzvi dzinoti izvi zvinokonzerwa nekuoma kwekuronga kurwisa kwakanangwa pamayuniti aya. Asi HR uye accounting zvinorwiswa zvishoma kazhinji.

Kana tikataura pamusoro pezvinzvimbo, vanonyanya kurwisa nhasi vashandi vedhipatimendi rekutengesa nemaneja pamatanho akasiyana. Kune rumwe rutivi, ivo vanosungirwa kupindura kunyange kune tsamba dzinoshamisa sechikamu chebasa ravo. Kune rimwe divi, ivo vanogara vachitaurirana nevemari, vashandi vezvigadziriso uye vekunze makondirakiti. Naizvozvo, a hacked sales maneja account inobvumidza iwe kuti uwane yakawanda inonakidza ruzivo kubva kusangano, uine mukana wakakura wekuita mari.

Nzira dzekudzivirira

Proofpoint nyanzvi dzakaona 7 mazano anoenderana nemamiriro ezvinhu aripo. Kune makambani ane hanya nezvekuchengetedzwa kwavo, vanopa zano:

• Shandisa dziviriro yakatarisana nevanhu. Izvi zvakanyanya kubatsira pane masisitimu anoongorora network traffic ne node. Kana basa rekuchengetedza richinyatsoona kuti ndiani ari kurwiswa, kangani anogamuchira maemail ane hutsinye, uye zviwanikwa zvaanogona kuwana, zvino zvichave nyore kune vashandi vayo kuvaka dziviriro yakakodzera.
• Dzidzisa vashandisi kushanda nemaemail akashata. Sezvineiwo, ivo vanofanirwa kugona kuziva phishing meseji uye vataure kune chengetedzo. Zvakanakisisa kuita izvi uchishandisa mavara akafanana neayo chaiwo sezvinobvira.
• Kuitwa kwematanho ekuchengetedza account. Izvo zvinogara zvichikosha kuyeuka zvichaitika kana imwe account ikabiwa kana maneja akadzvanya pane yakaipa link. Kuti udzivirire mumamiriro ezvinhu aya, software yakasarudzika inodiwa.
• Kuiswa kwemaemail ekudzivirira masisitimu nekuongorora kwemavara anouya uye anobuda. Mafirita akajairwa haachatarisi nemaemail ephishing anogadzirwa nehumwe hunyanzvi. Naizvozvo, zvakanakisa kushandisa AI kuona kutyisidzira, uye zvakare kuongorora maemail anobuda kudzivirira vanorwisa kubva kushandisa akakanganisa maakaundi.
• Kuparadzaniswa kwezviwanikwa zvewebhu zvine njodzi. Izvi zvinogona kubatsira zvakanyanya kumabhokisi etsamba akagovaniswa asingakwanisi kuchengetedzwa uchishandisa multi-factor authentication. Mumamiriro ezvinhu akadaro, zvakanakisisa kuvhara chero zvisungo zvinofungira.
• Kuchengetedza masocial media account senzira yekuchengetedza mukurumbira wemhando kwave kwakakosha. Nhasi, chiteshi uye masocial media maakaundi ane hukama nemakambani zvakare ari pasi pekubira, uye zvakakosha mhinduro dzinodiwawo kuvadzivirira.
• Mhinduro kubva kune vakangwara mhinduro vanopa. Tichifunga nezve huwandu hwekutyisidzira, kushandiswa kuri kukura kweAI mukugadzira phishing kurwiswa, uye zvakasiyana-siyana zvezvishandiso zviripo, zvechokwadi hungwaru mhinduro dzinodiwa kuti uone uye kudzivirira kutyora.

Acronis nzira yekuchengetedzwa kwedata remunhu

Nehurombo, kuchengetedza zvakavanzika data, antivirus uye spam sefa hazvichakwane. Uye ndosaka imwe yenzvimbo dzakanyanya kuvandudzwa yeAcronis budiriro yedu yeCyber ​​​​Protection Operations Center muSingapore, uko masimba ekutyisidzira aripo anoongororwa uye zviitiko zvitsva zvakaipa pane network yepasi rose zvinotariswa.

Iyo Cyber ​​​​Protection pfungwa, iyo iri pamharadzano yecyber kuchengetedza uye nzira dzekudzivirira data, inoreva tsigiro yevashanu vectors yecyber chengetedzo, kusanganisira kuchengetedzeka, kuwanikwa, kuvanzika, chokwadi uye kuchengetedza data (SAPAS). Zvakawanikwa neProofpoint zvinosimbisa kuti nharaunda yemazuva ano inoda kuchengetedzwa kukuru kwedata, uye nekudaro, ikozvino pane kudiwa kwete chete kwekuchengetedza data (iyo inobatsira kuchengetedza ruzivo rwakakosha kubva mukuparadzwa), asiwo yehuchokwadi uye yekuwana zvidzoreso. Semuenzaniso, Acronis mhinduro dzinoshandisa zvinyorwa zvemagetsi nekuda kwechinangwa ichi, kushanda pahwaro hwe blockchain technologies.

Nhasi, masevhisi eAcronis anoshanda paAcronis Cyber ​​​​Infrastructure, iyo Acronis Cyber ​​​​Cloud Cloud nharaunda, uye zvakare shandisa iyo Acronis Cyber ​​​​Platform API. Nekuda kweizvi, kugona kuchengetedza data zvinoenderana neSAPAS nzira inowanikwa kwete chete kune vashandisi veAcronis zvigadzirwa, asiwo kune ese ecosystem yevadyidzani.

Vashandisi vakanyoresa chete ndivo vanogona kutora chikamu muongororo. Nyorera mu, Munogamuchirwa.

Wakambosangana nekurwiswa kwakanangidzirwa kune "vasingatarisirwe" vashandisi pane network vasiri "VIP zvachose"?

• 42,9%Hongu9

• 33,3%No7

• 23,8%Hatisati tazviongorora5

21 vashandisi vakavhota. 3 vashandisi vakaramba.

Source: www.habr.com