Realtime attack maps

• https://securitycenter.sonicwall.com/m/page/worldwide-attacks
• https://cybermap.kaspersky.com/
• https://threatmap.fortiguard.com/ (firewall)
• https://threatmap.checkpoint.com/ (endpoint)
• https://threatmap.bitdefender.com/ (endpoint)
• Spam - https://talosintelligence.com/ebc_spam
• DDOS https://horizon.netscout.com/

​

Cyber Security

Wisconsin Child Support Enforcement Association

Fall 2023 Conference

It is not a question of “IF”

It is a question of “WHEN”

How are you attacked?

• Compromised Credentials (Weak or Stolen Passwords)
• Poor Encryption
• Malicious Insiders
• Misconfiguration / Patching
• Ransomware
• Man in the Middle (wireless, web)
• Phishing / Whaling / Spear Phishing
• Social Attacks (Trust Relationship)

​

Examples of Scams - Social Engineering

• Emergency Scams- Relative is injured, stuck in jail or otherwise needs help.
• Credit Scams- Banking, retail and Credit Card scams
• Tech support scams- Imitate technical support personnel from a reputable company
• Lottery and sweepstakes scams- Notify victims that they have won a large sum of money in a lottery or sweepstakes
• Charity donation scams- Pretend to represent a legitimate charity or non-profit organization and ask for donations
• Investment Scams- Promise high returns on investments with little or no risk, in exchange for your money/information

Is it getting better or worse?

The FBI tracked over 100,000 identity theft and personal data breaches.

​

Fraud, Identity Theft and other cyber attacks.

​

**Note this is only REPORTED events.

Reported Cyber Attacks by Type

Source: https://seon.io/resources/global-cybercrime-report/

Phishing

300,497

Non-Payment/Non-Delivery�51,579

Extortion

Personal Data Breach 58,859

Tech Support

��� Score� Yourself

1. Car Insurance
2. Health Insurance
3. Cyber Insurance
4. Home / Renter Insurance
5. Paper copies of critical information
6. Fire extinguisher at home
7. Fire extinguisher in car
8. Emergency Cash
9. Data Backups
10. Isolated Data Backups
11. Life Insurance
12. First aid kit at home
13. First aid kit in your car
14. Paper maps in your car

​

​

​

​

• Physical safety measures like fire extinguishers, and copies of important documents prepare us for unforeseen events.

​

• Life and Health insurance provide financial protection, cybersecurity protections shield ourselves and our loved ones from cyber threats.

​

• Cyber Security entails adopting preventive measures and tools to navigate the digital landscape securely.

​

CYBER-SAFE RULES 1-6

1. When in doubt get help from someone trusted!�
2. Slow down and read!�
3. Be suspicious of phone calls and other electronic social interaction.  �We trust other – unfortunately, bad guys take advantage of that. 

​

• EMAIL SAFETY
1. Create separate emails for junk, banking and social interaction.
2. Avoid clicking on email attachments & links - even from people you trust. Their account could have been hacked. 
3. Always check the FROM address. 
4. When in doubt CALL the sender or just delete the email.
5. REPORT PHISHING EMAILS to your email provider
6. Watch out of deals that look too good to be true

​

• Plan to be hacked.  Do you have all the info you need to cancel accounts �and reset passwords without your computer or phone? Could you contact your service providers if you lost your phone and/or computer?�
• PAY ATTENTION TO PASSWORDS (Next Slide)

Passwords - Brute Force Hacks

*1 Some older systems couldn’t handle anything longer than 14 characters. ��*2 Many older systems will “split” a password if it is longer than 14 characters (which functionally makes it 28 characters).

*3 if you are using a system that cannot support 15 characters, change the password more frequently.

https://www.security.org/how-secure-is-my-password/

CYBER-SAFE Passwords

STRENGTHEN YOUR PASSWORDS WITH THESE TIPS �

1. Longer is stronger: Passwords with at least 16 characters are hardest to crack.
2. Hard to guess: Use a random string of mixed-case letters, numbers and symbols. If you need to memorize a password, create a memorable “passphrase” of 5 – 7 unrelated words. Get creative with spelling and/or add numbers or symbols
3. One of a kind: Use a unique password for each account.
4. Use a password manager. Remembering lots of different unique long passwords is not possible. Writing down passwords can result in “lost passwords” and theft. Reusing passwords is a bad idea. So just get a password maanger.

CYBER-SAFE Passwords

1. ALWAYS set passwords to 16 characters or more (if you can). The longer it is the harder it is to crack (brute force). It takes 8 years to crack 10 character password, 12 characters is 77,000 years, 14 characters is 710 million years, and 16 characters is 6.5 trillion years (the better the computer the shorter the time). This is why LONGER PASSWORDS ARE BETTER.
2. For the few critical ones, use a password that is easy to remember but hard to guess.
3. Don’t reuse passwords
4. Use a password management tool to to track passwords such as: BitWarden, Keeper, Dashlane, 1password. **If you use a password manager, each account can have a completely random password!
5. Change passwords at least annually.
6. Change passwords if you suspect the password is compromised.
7. Enable two factor (also called multi-factor) wherever possible (SMS “text” to access, fingerprint or email confirmation) – or app based 2factor. Fingerprint or face-print are examples of a another “factor” also.
8. Never use easily guessable passwords such as “password”, “1234” or “qwerty”

CYBER-SAFE RULES 7-9

7. Web Surfing Security
1. Watch for anything fake (i.e., misspelled website names - it could simply be misspelled by ONE letter!)
2. Watch out of deals that look too good to be true
3. Avoid sharing personal information on social media that could match security challenge questions.  Don’t share trip information online - thieves can use it to know when to break in while you are away.
4. Don’t use Debit card or eChecks to buy anything online.  DO use a Credit Card, PayPal or One time Cash Credit card.  Only buy from trusted websites.
5. Turn on Two Factor (Two Step) Login wherever you can (banks, cellphone company, email services etc)
6. Only shop at known reputable online stores�
8. Devices (computers, smartphones, security systems, cameras…)
• Disconnect a suspected compromised device or turn it off as soon as possible.
• Physically destroy or fully wipe data on any device you are returning, throwing away or donating.
• Replace/upgrade devices that no longer have updates (end of life)
• Secure every smartphone – add a pin/password and turn off geotagging, only use secure wifi.  Don’t install suspicious apps.
• Install Anti-Virus/Anti-Malware on Android devices and PCs
• Update/Patch everything - cameras, refrigerators, laptops, smartphones - they all need software updates, but make sure the update is from a legitimate source!
9. Never share your credit-card, bank routing number or social security numbers.

​

CYBER-SAFE RULES 10-15

10. Get $1mil in Identity Insurance. Consider services such as: Aura, IdentityGuard, CompleteID, LifeLock, or IdentityDefense.  Be sure the service is reputable and provides $1mil or more insurance.�
11. Techy Stuff
1. Don’t use unsecure WiFi unless you always use VPN.
2. Consider a VPN service if you travel a lot (Expresss VPN, SurfShark, NordVPN, ProtonVPN (free) or Pia).
3. Consider DNS Security.  Add OpenDNS, Quad9 or others for your home router/firewall (nearly all are free for home use). See slide

​

• Back Up your data!  Use a USB drive, external drive and/or services like: iDrive, BackBlaze, Microsoft Onedrive backup, Internxt, Livedrive or Carbonite (for less than 5gb of data Sync is free).�
• Secure your IRS and Social Security Accounts.
• Watch out for Malicious SMS/MMS smartphone text messages with links.
• Remember to help others stay safe online! A hacked family member or co-worker can do serious damage.

​

DNS Services (techie, requires router and/or device changes)

Questions and Answers