Are your passwords stored securely?
1 August 2019
Smart Home Automation
Information Security
The use of malware designed to harvest consumers’ digital data – known as password stealers – has seen a significant rise in 2019. According to Kaspersky’s data, the number of users targeted by the stealers peaked from less than 600 000 in the first half of 2018 to over 940 000 during the same period in 2019.
Password Stealing Ware (PSW) is a major weapon in the cybercriminals’ toolkit to sabotage users’ privacy. This malicious type of software grabs data directly from users’ web browsers using various methods. Quite often, this information is sensitive and includes access details for online accounts as well as financial information – like saved passwords, autofill data and saved payment card details.
In addition, some families of this type of malware are designed to steal browser cookies, user files from a specific location (for example, a user’s desktop) as well as app files, such as messenger services. One of the most widespread stealer Trojans was multifunctional Azorult, detected on the computers of more than 25% of all users who encountered Trojan-PSW type malware in the examined period.
“Modern consumers are increasingly active online and understandably rely on the Internet to carry out many tasks in their daily lives. This fills their digital profiles with more and more data and details and makes them a lucrative target for criminals as they could be monetised in numerous ways afterwards. By securely storing passwords and credentials, consumers can use their favourite online services in confidence that their information will not be put at risk. This should also be supported by installation of a security solution as one can never be too careful,” notes Alexander Eremin, security researcher at Kaspersky.
Kaspersky recommends that consumers follow this advice to ensure their passwords and other credentials remain secure:
•Do not share passwords or personal information with friends or family as they could unwittingly make them vulnerable to malware. Do not post them on forums or social media channels.
•Always install updates and product patches to ensure protection from the latest malware and threats.
•Start using a reliable security solution that is designed to securely store passwords and personal information, including passports, driver's licences and bank cards.
Read more about how cybercriminals use malware to steal passwords and other confidential information on www.securelist.com
Further reading:
Now barcode scanners pose a cyber risk for warehouses
Integrated Solutions Information Security Logistics (Industry)
Modern warehouses are more than simple storage spaces; they are complex ecosystems built on multiple technologies and devices. Kaspersky discovered a new cyberattack vector in a widely used barcode scanner that could expose supply chains.
Read more...
The US $1,5 million scam that never looked like a scam
News & Events Information Security
Attackers compromised a company’s Microsoft 365, quietly took control of the conversation and let the firm authorise fake payments itself. By the time anyone realised, a US$ 1,5 million cryptocurrency investment had already disappeared.
Read more...
You can do everything right and still get breached
Editor's Choice Information Security AI & Data Analytics
A particularly nasty truth sits at the centre of cybersecurity in 2026. You can do everything right and still lose if the organisation holding your identity number, banking information, medical history, or biometric data gets breached.
Read more...
Paxton officially launches PaxLock Pro2
Paxton
News & Events Access Control & Identity Management Products & Solutions Smart Home Automation
Paxton’s wireless access-controlled door handle is engineered to withstand the most demanding environments, while maintaining a sleek, contemporary design. It includes a new Privacy Button, and offers up to 55 000 operations on a single set of batteries.
Read more...
Seeing a breach is one thing, but stopping it is another
BlueVision
Editor's Choice Information Security Security Services & Risk Management
Spending business budgets on breach alerts without the wherewithal to stop them is essentially an investment in expensive noise says Christo Coetzer, managing director of BlueVision.
Read more...
Why your cloud journey must start with a gear lock mindset
Infrastructure Information Security
Many business leaders fall into a false sense of security, assuming that because they are using a world-class cloud services provider, their data security is automatically bulletproof. This is a dangerous misconception.
Read more...
Visibility, governance and process transformation
Editor's Choice Information Security Asset Management
South African organisations continue to invest heavily in digital transformation initiatives, but for many, the challenge is no longer adopting new technologies. Instead, the challenge is ensuring existing systems, applications, and data sources work together effectively.
Read more...
Security has an identity problem
Access Control & Identity Management Information Security
Cybersecurity discussions have mainly focused on defence, including stronger firewalls, tighter network controls, and better endpoint security. However, in today's world, those traditional defences have become less relevant.
Read more...
Modernising ‘smart’ ports
IoT & Automation Information Security Transport (Industry) Logistics (Industry)
A modern port is part of a much larger digital trade ecosystem where all systems need to work together. If one part of that ecosystem is disrupted, the impact can quickly move through the supply chain.
Read more...
Reinventing cybersecurity
NEC XON
News & Events Information Security Commercial (Industry)
NEC XON helps a workforce solutions leader reinvent cybersecurity with an AI-enhanced XDR solution to keep pace with increasingly devious cyberattack techniques, including fileless malware, lateral movement, and credential misuse.
Read more...
printer friendly version