The Three Social Engineering Hacks your Company Should Prevent Now

News provided by

Sep 07, 2022, 12:39 ET

AUSTIN, Texas, Sept. 7, 2022 /PRNewswire/ -- Since 2020, Google has identified and delisted 2 million websites for launching phishing attacks—an army of nefarious websites that Cisco says have hit 86 percent of all global companies. In today's climate, Integris warns companies to prepare for these three types of new attacks:

#1: Fake But Realistic Requests

Hackers can research your company well enough to play the role of a new potential customer or an existing vendor in your system. They'll ask you to download their RFP or enter their new banking information into your system so that they can pay your latest invoice. With a few clicks, your employees could download a worm into your system or open your bank account to thieves.

How to fix it:

Require researching the person or company before fulfilling the request.

#2: Social Media Extortion

Most people know better than to put their contact information and emails on social media accounts set to "public." That information is all a hacker needs to set up an account in your employee's name on damaging websites, like child porn sites. Hackers can use that "proof" to extort employees into giving up their corporate passwords.

How to fix it:

Teach employees to only use in-app messaging on social media sites and never give out their personal or professional emails.

#3: AI-Assisted Spoofing

Hackers can sample your CEO's voice using AI technology, then use that sample to call up your accounts receivable department. "Add this new vendor to the system, and transfer this money," they may say, sounding precisely like your CEO. When employees realize it wasn't your CEO making that call, the money will be gone without a trace.

How to fix it:

Ask for code words, account numbers, or other forms of two-factor verification. No exceptions.

For more information on how to prevent cybersecurity breaches, visit the Integris website at www.integrisit.com/blog.

About Integris:

Integris is a premium, national, managed IT services provider, dedicated to helping our customers stay one step ahead of their IT infrastructure and data safety needs. Integris offers strategic IT consulting services, hardware and software management, networking, a 24/7 service desk, on-site troubleshooting/installations, cybersecurity monitoring, backup solutions, and more. Founded in 2021 from the merger of several like-minded MSPs, Integris offers clients the power of a national network, with the personal service of a nearby, local-market MSP. With 500 employees now serving 1200 clients in 10 states and counting, Integris looks forward to rapid expansion across the US. For a list of current locations, visit: www.integrisit.com.

SOURCE Integris IT