Threats facing digital marketing

Question 1

What is the difference between commodity and bespoke attack?

Answer 1

Commodity: use of tools openly available, implemented by competent user. (Ex; software that scans for known vulnerabilities)

Bespoke: specifically designed for an attack domain for organised crime and states (Ex; Zero day vulnerability)

Question 2

How do attacks occur on firms?

Answer 2

1. DDOS (distributed denial of service) attack, multiple systems are infected in order to target single system causing denial of service attack.
2. Ransomware (common in NHS)
3. Supply chain attack

Question 3

How are attacks imposed on users?

Answer 3

1. Phishing: fake emails, install software, visit website through luring (Made by Botnet)
2. Ransomware: malware downloaded (e-mail link)
3. Speed Phishing: target specific individual (CEO)
4. Browser hijacking: redirected from page you view
5. Bogus participants: fake identities/business
6. Fake site: contain malware or fraudulent

Question 4

How do attacks occur on the IoT?

Answer 4

• 2013/2014: DDOS attack which involve IoT devices include TVs and at least on fridge.
• security of devices has not been of main focus
• 25% of spam was sent from IoT devices
• simple attacks, based on default passwords

Question 5

How does the management of IoT devices make attacks more likely? (LIMUA)

Answer 5

1. Locating devices where accessible to hackers
2. Identical devices, means vulnerability can be exploited on a large scale
3. Mass scale, Devices are deployed/connected
4. upgrading them might not be available
5. Awareness from users is lacking, of problems/Hijacking due to no obvious signs

Question 6

WHO carries out attacks on the web?

Answer 6

1. Hacktivists: e.g. Bradley Manning, Edward Snowden. Insider/outsiders of the firm. Use Wikileaks to publish the case.
2. Criminal organisations: firms are lucrative, they try to extort money, extract data, sell secrets.
3. Careless and comprised employers and insiders. the dark web is a source of tools and marketplace for stolen details.

Question 7

What are some general solutions to cyber attacks? (COKS)

Answer 7

1. Conscious care behaviour
2. Organisational policies
3. Knowledge sharing
4. Security collaboration (reduces cost and improves performance)

Question 8

What are the percentages of financial fraud losses by type?

Answer 8

1. Payment card (75%), 46% e-commerce
2. Remote Banking (22%)
3. Cheque (3%)

Question 9

How does attacks using data in transit work?

Answer 9

1. Interception of data in transit “Man in the middle”
2. Eavesdropping, theft of details (passwords)
3. both internal and external
   e. g. spoof wifi-networks, use of virtual private networks