(Opening music plays, followed by the sound of a sarcastic “Oh, joy”)
Hello, hello! Welcome to the thrilling world of brand threats and fraud! I’m your host, a delightful combination of Jimmy Carr, Rowan Atkinson, Ricky Gervais, and Lee Evans. And today, we’re going to dive into the fascinating realm of cybercrime. Because, you know, what’s more exciting than reading about how to protect your brand from cyberattacks? (Said no one ever)
But seriously, folks, this stuff is important. You see, companies’ social media profiles are being imitated by cybercriminals to steal your sensitive information. Ah, those scoundrels! They’re like the digital equivalent of your mate who’s always “borrowing” your Netflix password. (Rowan Atkinson’s Mr. Bean face)
The good people at Fortra have put together this rather lengthy report, which I’ll summarize for you. Essentially, it says that cybercriminals are getting more sophisticated, and you should do these things to protect yourself:
1. Set up alerts for suspicious domain registrations. Because who doesn’t love a good game of “spot the fake website”? (Jimmy Carr’s deadpan)
2. Get your email security in order, with things like DMARC, DKIM, and SPF. I mean, it’s not like you have anything better to do than read about email security protocols all day. (Lee Evans’ chuckle)
3. Have a plan to take down fake websites quickly. Speed is your friend, unless you’re a speed camera operator, in which case, speed is your enemy. (Ricky Gervais’ witty remark)
4. Check your domains regularly, or you might end up like that bloke who lost his car keys… in the park… in 1997. (Rowan Atkinson’s silly grin)
And that’s just the beginning! We’ve also got fake social media profiles to contend with. Because, of course, cybercriminals love social media almost as much as your auntie who posts cat pictures all day. (Jimmy Carr’s dry wit)
The report goes on to say that social media threats are up 60% since the previous quarter, with a peak of 160 incidents in May 2024. I mean, that’s just peachy. It’s like your personal identity is the new Pokémon, and everyone wants to catch it. (Ricky Gervais’ sarcasm)
But fear not, dear reader! There are ways to protect yourself:
1. Use intelligent monitoring tools that can detect fake accounts faster than a millennial can spot a brunch opportunity. (Lee Evans’ witty remark)
2. Have guidelines ready for when you detect a threat. Because, let’s face it, when disaster strikes, nobody wants to be the one who has to fumble for the instruction manual. (Rowan Atkinson’s comical distraction)
3. Get verified on social media. Ah, those blue ticks are like digital badges of honor, aren’t they? (Jimmy Carr’s cheeky grin)
4. Assemble a dedicated team to tackle social media threats. Because, you know, one person can’t do it all… unless that person is a superhero. (Ricky Gervais’ deadpan)
And finally, we have the rise of dark web markets selling tools to infiltrate companies. Ah, those delightful cyber orchestrators! They’re like the dystopian equivalent of your next-door neighbor who always “borrows” your lawnmower. (Lee Evans’ chuckle)
So, what can you do to protect your IT landscape?
1. Consider your end devices as the first line of defense. Because, you know, those end devices are like the unsung heroes of the cybersecurity world. (Jimmy Carr’s wry remark)
2. Take the “trust no one” approach. It’s like the digital equivalent of the famous phrase “don’t talk to strangers.” (Ricky Gervais’ deadpan)
3. Test your defenses regularly. Ah, the old “break a few eggs to make an omelette” approach. (Rowan Atkinson’s silly face)
4. Divide your network into segments. Because, let’s be real, who needs a treasure trove of corporate secrets just waiting to be plundered? (Lee Evans’ chuckle)
There you have it, folks! The report concludes that the cybercrime landscape is like a big game of cat and mouse. But don’t worry, just remember: cybersecurity is like erectile dysfunction – it’s all about staying on top of it. (Jimmy Carr’s boom)
That’s all for today, folks! If you’ll excuse me, I’m off to look for my next exciting adventure… in the world of brand threats and fraud! (parody of a Harry Potter owl flying sound)
(Closing music plays)
Brand Threats and Fraud Report 2024: Protecting Companies from Counterfeit Channels
Digital threats have reached an all-time high, with cybercriminals using sophisticated tools, fake social media profiles, websites, and domains to obtain sensitive information from companies. Sean Bell, a Senior Solutions Engineer at Fortra, provides expert advice on comprehensive protection measures against these threats.
According to Fortra’s Threat Intelligence team, cybercriminals are increasingly targeting companies’ social media profiles to obtain sensitive information. The team analyzes hundreds of thousands of data points worldwide every quarter, monitoring domains, social media platforms, and marketplaces on the dark web.
The Fortra report, “Brand Threats and Fraud Report 2024,” highlights the alarming increase in domain identity theft, social media attacks, and the use of sophisticated tools to infiltrate organizations. Analysis of the second quarter of 2024 shows a 20 percent increase in domain impersonation attacks, with 73 imitations per company per month.
Cybercriminals use tactics such as creating domains that closely resemble the real domain of a well-known organization or website. They change one letter, use special characters, or use similar spellings to make the domain appear almost identical. This tactic aims to deceive users into revealing sensitive data such as login information, credit card details, or other personal information.
Protecting Against Domain Impersonation
To protect against domain impersonation, companies can take the following measures:
- Set up alerts for any new domain registrations that look suspiciously similar to yours, including common typos.
- Implement Domain-based Message Authentication, Reporting and Conformance (DMARC), Domain Keys Identified Mail (DKIM), and Sender Policy Framework (SPF) to secure your email communications.
- Develop a plan to take down fake websites quickly, as speed is crucial in preventing further damage.
- Regularly check which domains you own to prevent loss of control.
The number of fake websites has also increased by 55 percent, with these websites using sophisticated design elements and security certificates to appear legitimate. To protect against counterfeits, companies should promote their brand online, be on the lookout for suspicious certificates, build relationships with takedown teams, and work with payment processors to identify and stop the flow of money to fake websites.
Social Media: A Popular Gateway
Social media threats have increased by 60 percent, with a peak of 160 incidents in May 2024. This increase is consistent with the growing sophistication of AI-powered impersonation tools and automated attack methods. Threat actors use these technologies to create more compelling fake profiles and generate targeted content that bypasses traditional detection methods.
To keep your social media presence safe, consider the following measures:
- Utilize intelligent monitoring tools that can detect fake accounts faster than any human.
- Have guidelines ready for when threats are detected, ensuring everyone knows what to do.
- Get verified on social media platforms to increase trust and credibility.
- Assemble a dedicated team that knows the social media landscape inside and out.
Cybercriminals Improve Their Tools
The dark web has seen a 21 percent increase in tools offered to infiltrate companies. This shift from traditional credit card theft to sophisticated corporate attack tools signals a strategic reorientation among cybercriminal groups, who have recognized that compromising corporate networks promises potentially greater profits.
Protecting your IT landscape starts with the following steps:
- Consider end devices as your first line of defense and rely on sophisticated Endpoint Detection and Response (EDR) systems.
- Adopt a “trust no one” approach, even if it feels paranoid, to prevent unauthorized access.
- Test your defenses regularly to identify vulnerabilities before they are exploited.
- Segment your network to prevent lateral movement in case of a breach.
These trends indicate a mature cybercrime ecosystem in which attackers are becoming increasingly sophisticated and targeted. Organizations must take a proactive stance and go beyond traditional perimeter defense to implement comprehensive security programs that include threat hunting, intelligence gathering, and rapid response capabilities.
The data suggests that successful defense strategies will increasingly rely on automation, artificial intelligence, and cross-functional collaboration between security, legal, and business teams. Security teams that adapt to these evolving threats while maintaining operational agility will be best positioned to protect their organizations from current and emerging cyber risks.
Sean Bell is a Senior Solutions Engineer at Fortra and has nearly ten years of experience in digital risk protection and email security.
Image source: Fortra
