Cyber Security Services
Enterprise Breach Security Assessment
“Malware” is the general term covering all the different types of threats to your computer safety such as viruses, trojans, ransomware and so on. The most basic, common and most successful method is through opening of a malicious email attachment, downloading a file that performs some malicious actions on the local computer.
Typically, malware is delivered from external sources. It’s often made to look like it has originated from a known trusted source.
An unsuspecting internal user that clicks on a link or executes malicious code delivered via a phishing attack can be easily compromised and used as a pivot point to attack other systems, users or data in the internal network.
Anybody can be fooled into clicking on a malicious link they think came from a Facebook friend, LinkedIn connection, or what looks like an internal email.
A successful external attack can quickly become a broader internal attack, compromising many systems without any warning.
Common signs of an attack
The most common warning signs to be aware of include:
- Receiving an email asking you to download software or click on a link for more information;
- Receiving an email asking you to follow a link and enter your credentials;
- Pop up boxes start appearing on your screen that are requesting you to answer a simple question;
- New icons appear on your computer screen; or
- Your computer becomes slower than usual.
Malware breakout penetration test
The ideal preparation for an attack is conducting a Malware Breakout Penetration Test. This test will identify:
- The likely path malicious code will travel through your systems both internally and externally;
- Show the outcome and likelihood of a successful phishing campaign;
- Find the vulnerabilities in your desktop deployment;
- See how easily ransomware could spread in the network and what can it see;
- Identify advanced persistent threats;
- Review the security of your Active Directory deployment;
- Review the effectiveness of your mail filtering and endpoint protection solutions; and
- Ensure your logging and event management solutions are alerting you on suspicious activities.
We strongly recommend bolstering internal security controls by implementing actionable recommendations.
