Friday, September 25, 2020

Know Where to Find Your Digital Risk

Approximately 250 years ago Samuel Johnson said, “The next best thing to knowing something, is knowing where to find it.” This is quite a fitting quote from the author of A Dictionary of the English Language and equally fitting today when it comes to understanding your digital risk.

 There’s a great deal of intelligence organizations can find on the deep and dark web.  Credit card numbers, bank account information, patient information and intellectual property are widely known to be for sale on forums. Now some of the intelligence is more eye opening. We’re seeing W-2 forms , and employee credentials available, making any organization ripe for tax fraud or account takeover, respectively.

One of the most popular marketplaces on the dark web for such information is AlphaBay. Not only is information related to a company’s assets available, but information about new techniques to compromise targets is for sale as well. One of the latest is a tool to bypass SMS account verification, making multi-factor authentication that relies on SMS vulnerable.  On such forums you can also find configuration files for credential stuffing tools, like Sentry MBA, that are created for account takeover of specific companies. There are dozens of marketplaces on the dark web and competition for business is steep. In fact, some less popular marketplaces offer botnets devised to spam AlphaBay users with advertisements or special promotions in an attempt to entice them to switch forums. Not all dark web sources are as readily accessible as AlphaBay, of course. Some require human analyst expertise to also gain access to closed sources to get the most relevant view of the risks.

But for all the notoriety of these marketplaces, it is also important to remember that criminal activity isn’t limited to the dark web, particularly given the fact that some countries don’t extradite cybercriminals. With minimal consequences, bad actors have no incentive to hide. As a result, cybercrime is an Internet-wide problem, almost equally present on the deep and open web. Deer.io is a prime example. This all-in-one outsourced online shop provides hosting, design (based on WordPress-like templates) and a payment solution. Additional items for sale on the marketplace include:

  • Bot-registered social media accounts (usually sold in bulk), typically with the intent of supporting social media spam and artificially increasing the popularity of other accounts/posts
  • Stolen, legitimate social media accounts, which are advertised in small quantity but at higher prices compared to bot-registered accounts
  • “Coupons” to services that artificially increase the popularity of social media accounts or posts
  • Stolen accounts from other services including banks, payment, and gift and loyalty cards
  • Dedicated servers and domain names

The point is that criminal forums exist everywhere so focusing only on the dark web won’t give you a comprehensive view of your digital risk. Furthermore, it isn’t enough to simply detect mentions of company assets and concerns. You need context behind the information you see posted to have a better understanding of the actual risk to your organization. This requires a combination of technology and people.

 

MOST READ

Volunteering for Humanity: The phase III clinical trials in the Kingdom

The phase III clinical trials are being conducted in the Kingdom in collaboration with Abu-Dhabi based G42 Healthcare using a vaccine developed by Sinopharm...

Plans to improve electricity, water services discussed

Electricity and Water Affairs Minister, Wael bin Nasser Al-Mubarak, received here today the representative of the third constituency of the Northern Governorate at the...

SCE launches training course for radiological and nuclear emergencies

The Supreme Council for Environment (SCE)’s CEO Dr. Mohammed Mubarak bin Dainah, launched the national training course on responding to radiological and nuclear emergencies. The...

The aftermath of a historic night for BRAVE CF and Arab MMA

BRAVE Combat Federation’s vision of globalizing the sport started within the Arab world, which was often overseen by many other organizations, and to provide...

KHK MMA dominates at BRAVE CF 41 with four huge victories

BRAVE Combat Federation hosted the first of three groundbreaking events last Thursday in the Kingdom of Bahrain, with seven bouts taking place behind closed...

Gulf Air Appoints Bahraini Country Manager in Kuwait

Gulf Air, the national carrier of the Kingdom of Bahrain, announces that it has appointed Mr. Mohamed Ibrahim Al Hamer as a Country Manager...

Loan payment deference to help citizens, SMEs

The banks’ response to defer loan payments until the end of the year is a continuation of the initiatives in the financial and economic...

Driver License and Vehicle Certificates Can Now Be Issued Via Bahrain.bh!

Having earlier introduced a number of traffic services such as Payment of Traffic Conventions and Issuance of International Driving Licenses, the National Portal bahrain.bh...

Education Minister participates in virtual meeting

Minister of Education Dr. Majid bin Ali Al Nuaimi participated in the Arab Education Ministers meeting on endorsing the document of developing education in...

The National Medical Taskforce for Combating the Coronavirus (COVID-19) provided an update on the COVID-19 response in the Kingdom

The National Medical Taskforce for Combating the Coronavirus (COVID-19) today held a press conference at the Crown Prince Centre for Training and Medical Research...

Bahrain exports BD190 Million Worth of Products of National Origins during August 2020

The Information &eGovernment Authority (iGA) issued its foreign trade report of August 2020, encompassing data on the balance of trade, imports, exports (national origin),...

Gulf Air Resumes Direct Flights to Dhaka

Gulf Air, the national carrier of the Kingdom of Bahrain, announces that it has resumed its direct flights to and from Dhaka’s Hazrat Shahjalal...

Health Ministry: target of 6000 volunteers reached

A total of 6000 people hailing from different nationalities have volunteered for the phase III COVID-19 vaccine clinical trials. The Ministry of Health has announced...

HH Shaikh Nasser bin Hamad receives INJAZ Bahrain Board Chairperson

Representative of His Majesty the King for Humanitarian Work and Youth Affairs His Highness Shaikh Nasser bin Hamad Al Khalifa received Board Chairperson of...

Adherence to precautionary measures national responsibility

President of the Supreme Council of Health and Chairman of the National Medical Taskforce for Combating Coronavirus (COVID-19) Lieutenant-General Dr. Shaikh Mohammed bin Abdulla...