Today telework is widespread.

A large part of the enterprises, large and medium to small, take advantage of this practice to remain as active as ever despite the containment of populations and the drastic reduction of social and human interactions. If in a sense it presents much more, the fact remains that the disadvantages are pervasive. In particular, rampant cybercrime. With each connection to the company's computer network, it is a new risk that the company must face.

This article will also interest you: Multinationals are adapting to combat cyber threats related to telecommuting

To fight the threat, we must first know it. It is necessary to determine what can be a risk and what can be more serious than a simple, innocuous click. This article to we will give you some situations that may present themselves as the main threats that lurking telework.

1- Ransomware

It is one of the most obvious forms of cybercrime in the last 2 years. Ransomware in French ransomware is malware used by hackers to take a network or computer system hostage. The aim is to make the user inaccessible to the contents of his terminal in exchange for demanding payment of a ransom. In recent years this method has done a lot of havoc. It continues to be used as much and to pose so many problems to any type of organization. Lately, hackers are no longer just demanding the ransom payment in exchange for the decryption key. They impose the payment against which they could disclose sensitive information that they could have collected on the infected system. Payments are usually required in bitcoin. If the rule is that affected companies and organizations do not pay the ransom demanded, it is clear that ransom payments increase because often it costs less than being a system that is generally affected. That is why it is one of the most feared scourges.

2- Phishing

Phishing is one of the most famous practices in the cybercrime industry. In a certain point of view, it is something that is within the reach of anyone who is not necessarily an expert in hacking. Its simplicity makes it effective despite the years and despite the awareness. Indeed phishing presents itself as a way to ask the user himself to disclose this information without any pressure. It is enough just for the hacker desire that the identity of an organization or a person or even a known social networking platform, in an email or text message sent to targeted Internet users. It's texting or his emails are usually accompanied by attachments or links that push the user to a platform typically managed by hackers. Of course for this to work, the platform will have to inspire confidence in the user. This is what hackers do by copying the visual identity of several known sites. In this way, it invites the user to enter his personal data. This is why you are usually asked to be wary of messages or emails of unknown origin or that promise you gains that you know you do not deserve. To continue it must be said that phishing is a scourge. This is a practice that is almost used in all known cybercrime campaigns.

3- Denial-of-service attacks

Abbreviated denial-of-service (DDOS) computer attacks generally aim to cripple a computer server where enterprise network is built by multiplying requests to flood targeted terminal. It is a form of cyberattack widely used with the intention of sabotaging.

4- Cyber espionage

Regardless of the sector, as soon as it is competitive and high in economic value, espionage should be relied upon. In the IT sector, cyberespionage is something quite common. In this period of covid-19, several cases were recorded. Attempts to implement the mission formulas to produce a vaccine have multiplied for quite some time and continue elsewhere. This may be for an industrial, political or purely financial purpose. Some also do it for simply activist hacking.

5- Malware

Computer Viruses are the oldest enemies of digital solution users. Today there are all kinds and for any other malicious activity. Hackers use it for several reasons and purposes. This may be to spy for example, to steal confidential information, to sabotage or for example to take hostage as we explained above in the case of ransomware. Today it is easy to get them without even having the skills to design them. Indeed, there is indeed and virtual market for their marketing but also their use see their outsourcing.

Now access an unlimited number of passwords:

Businesses have grown.

They continue and will continue to grow as they go along. On top of that, IT solutions to manage business activities are multiplying. Computers, smartphones, tablets, computer servers have become essential today in the management of an entrepreneurial business. Yet these objects are not totally safe. Not that they are from the dangerous basis to use, simply is that under certain conditions with bad intentions, people try to take advantage of their vulnerability. We must therefore think about securing our computer tools, which have become necessary in our daily lives.

This article will also interest you: Fighting domestic WiFi network piracy: some ways to get there

Ashwin Krishnan, an expert at SecureDynamics, says: "The corporate definition of terminal, or Endpoint, has changed dramatically over the years. The term traditionally referred to desktops, which could be secured by anti-virus software and firewalls. Today, the term covers a wide range of devices used in business activity, from PCs and laptops to company-owned smartphones and employees to connected objects (IoTs). And in this context, the historical approach to terminal security is no longer enough. ».

Moreover, with a good security policy for terminals, companies are able to ensure that all of their digital information and IT assets are fully protected. "To develop this policy, companies need to consider what level of security is required at the terminals, and whether terminal security tools must maintain tight lockdown of devices, or provide lighter protections, to give employees some individual freedom. Ashwin Krishnan notes. But above all else, the company must be able to put into practice 3 good methods that universally can improve their safety.

1 – Discover assets

Today we are witnessing an explosion of remote collaboration. Telework has become a necessity conditions where social interactions have literally diminished. Under these conditions, employees often use computer tools that do not essentially meet the required safety standards under specific conditions. To have a better understanding of all this movement, one would of course have to make an inventory of all the devices that are used in the professional setting. This clearly excludes access to the computer network or any other company resources to specific devices. "Some devices may never touch the enterprise network itself and access the cloud directly to integrate with SaaS applications. In this case, a secure (CASB) or equivalent cloud access gateway may be required. It's important to get full visibility of all the devices that connect to the company's applications and data before you do anything else— after all, it's impossible to secure what you don't know is. ashwin Krishnan.

2. Set up a profile of computer tools

In second place, IT managers must try to master the behavior of each terminal. They must also document each connection of its devices, the duration of its connections, the applications used when it was connected, the data they were able to access, and the data they shared. The software used must be categorized into a category of those that have been updated to those that have not been updated. In addition, it must make an assessment of the computer risks that may potentially emanate from one terminal to another, either in the event of a security breach or system compromise.

3. Secure end-user computer tools

"Once the terminals are identified and their profiles established, IT teams need to understand how existing security products can be used to protect them. Next-generation antivirus is still widely deployed, combining signature lists, to detect known threats, and artificial intelligence techniques for new threats. This technology has evolved into host detection and response (EDR), which produces alerts, reports, and helps respond to security incidents. This is a necessary defense mechanism to manage end-user terminals. Note, however, that IT teams will need to develop a different policy for employee-owned devices. This may, for example, require an agent to be installed on their devices or ask them to use a VPN before accessing the company's assets. ashwin Krishnan.

Now access an unlimited number of passwords:

During the year 2020, the world is hit by a pandemic that affects for the sectors of activity COVID-19, because of its mad spread has forced general containment in several countries.

One of the consequences of this containment has been the widespread adoption of remote collaboration. Remote collaboration means increased uses of the Internet. And of course that says repeated use of the Internet says great exposure to cyber malice. Indeed, acts of cyber malice have multiplied in 2020. Looking at what we are seeing, we can say that in 2020 we should expect this resurgence of the wave of cybercrime.

This article will also interest you: Computer attack against the Vaccine of CoVid-19

"In 2020, we experienced wave after wave of COVID-19 outbreaks and observed failure after failure to implement what we knew to be effective preventive measures. Similarly, in December 2020, the SolarWinds malware attack put as many as 18,000 systems and countless confidential files at risk. In both cases, some of the benefits may be due to fatigue or complacency. Anyway, we can and must do better. The good news is that we can mitigate the risk of cyberattacks by following some key lessons that COVID-19 has (or should have) taught us. explains Stéphane De Jotemps, Regional Vice President of Sales France at Skillsoft.

One way or another, the coronavirus pandemic has provided a better understanding of what can be called cybersecurity. As a result, there were 8 important points to remember in the fight against cybercrime in relation to the covid-19

1- Nothing is 100% safe

Indeed, there is no denying that computer security specialists and all it systems managers have been very neglected about some of the weaknesses of the computer programs we use all day long. With what we are experiencing today, it is clear that steps must be taken to accentuate all practices to facilitate their improvement in the security of the supply chain.

2- Beware of all that we share

Cyber criminals are on the lookout. At the slightest opportunity they are ready to steal your personal information or your financial information. Avoid making your personal and financial data too easily accessible. Simply protect your

3- Beware of attachments in emails

One of the favorite gateways for cyber criminals are attachments. Thanks to it, they can simply inject malicious code into your terminal in order to spy on you or take your computer system hostage. This is why you are advised not to open the unknown correspondence emails. And especially attachments when you don't know the recipient.

4- Split computer networks by segment

You should avoid using a code without checking at the base also is safe. It is also recommended to remotely create a software supply chain.

5- Equip yourself with protection

At the slightest vulnerability, you'd have to be sure that there are hackers ready to invade you."Cover exhibits with strong firewalls and ongoing threat detection programs. Stop harmful SQL injections. Web forms are a preferred entry point for intruders who want to insert SQL commands. Without being detected, hackers can access databases and make malicious changes to them. Explains Stéphane De Jotemps.

6- Be exemplary

Find a way to mobilize your best. It may be competition days but it will have to be able to test not only the ability of your staff to deal with the threat but also improve their knowledge.

7- Creating a safe and healthy environment

It is recommended to encrypt and encode all information whether sensitive or sensitive to a more or less sensitive scope. Take the trouble to develop the security of your software from the very beginning of creation to implementation to use.

8- Cleaning up your IT environment on a regular basis

Constantly update your operating system and software.

Now access an unlimited number of passwords:

1 – Adopt a password management policy

The password is essential for protecting the computer system or terminal. This is the first obstacle that and hacker faces when he attempts an intrusion. However, the mismanagement of passwords today the easy task to cyber criminals. This seems quite understanding when you have to use passwords on multiple accesses or multiple accounts.

The work becomes quite difficult, in fact, average users tend to neglect the diversification of the password depending on the account used or the requested access. Yet it must be a reflex. Because if the same password is used in all accesses, then it would be enough for the hacker to discover it to have access to everything. It is for this reason that tools exist to facilitate the management of different passwords in accordance with the different accesses that are requested. The password manager. They should be used because they are created to make it easier to use multiple passwords for a single person. This reduces the possibility of forgetting, but also allows to be able to consist of solid passwords without having to confuse them or forget them.

The password manager also protects you from certain malware such as keystroke recorders, because with each connection the fields automatically filled.

2- Using the cloud for backups

It is important to be able to safeguard your information. Especially at a time when ransom programs are proliferating more and more.Back-ups on somewhat external physical hardware can be useful in case of computer attacks.However you will not be immune to a potential material crash. While in the cloud, security is improved and you will be able to access your data from any device for a transition if your computer system is available. The advantage of online backups is not only material but also secure.

3- Make updates

Some high-impact computer attacks have been caused by the neglect of updates. The advantage of their deployment is that they reduce IT risk by fixing security vulnerabilities. That is why they are constantly recommended. It's even better to schedule on ending the automatic update."Most computer security experts recommend updating your software or operating systems quickly. But users may be tempted to wait a bit before performing them, to be sure to get feedback from other users, ensuring the reliability and security of this new update.

This is a mistake too often made. It is important to follow the recommendations of software vendors and make updates when required. Why? Simply because installed software can contain security vulnerabilities that hackers can exploit. Software solution developers have a strong interest in fixing these security vulnerabilities when they are detected and launching an update procedure. But sometimes users aren't always aware of requests for software updates. Users often turn off app notifications or don't use certain apps for a long time, so no update alerts are released. described the security company Avira, in a recent blog post.

Now access an unlimited number of passwords: