Cybersecurity Topic 2: Malware, Email and Internet Safety

Malware is malicious software that cybercriminals use to steal sensitive data (user credentials, financial information and so on) or cause damage to an organization’s systems (e.g., ransomware and wiper malware). It can be delivered to an organization in a number of different ways, including phishing emails, drive-by downloads and malicious removable media.

By attending this online training you will gain knowledge on the below topics:

1. Be suspicious of files in emails, websites and other places
2. Don’t install unauthorized software
3. Keep antivirus running and up to date
4. Contact IT/security team if you may have a malware infection
    

Phishing attacks are the most common method that cybercriminals use to gain access to an organization’s network. They take advantage of human nature to trick their target into falling for the scam by offering some incentive (free stuff, a business opportunity and so on) or creating a sense of urgency. In this topic you will learn about:

1. Trusting unsolicited emails
2. Do not send any funds to people who request them by email, especially not before checking with leadership
3. Always filter spam
4. Install antivirus and firewall program and keep them up to date
5.  <!--[endif]-->Do not click on unknown links in email messages
6. Beware of email attachments. Verify any unsolicited attachments with the alleged sender (via phone or other medium) before opening it
7. Remember that phishing attacks can occur over any medium (including email, SMS, enterprise collaboration platforms and so on)

Almost every worker, especially in tech, has access to the internet. For this reason, the secure usage of the internet is of paramount importance for companies.Some important content included in the online training:

1. The ability to recognize suspicious and spoofed domains (like yahooo.com instead of yahoo.com)
2. The differences between HTTP and HTTPS and how to identify an insecure connection
3. The dangers of downloading untrusted or suspicious software off the internet
4. The risks of entering credentials or login information into untrusted or risks websites (including spoofed and phishing pages)
5. Watering hole attacks, drive-by downloads and other threats of browsing suspicious sites