094 90 48200     Get SUPPORT

Aniar IT Services Blog

Even Amazon Can Be Hacked

Even Amazon Can Be Hacked

In 2018, Amazon was struck by a considerable attack, with hackers taking funds from approximately 100 seller accounts, according to a Bloomberg report. Between May and October 2018, Amazon sellers were struck approximately 100 times, draining funds from the seller control platform to augment their own funds. According to the investigation, the first fraudulent transaction took place on May 16, 2018, with an undisclosed amount being stolen. The hackers utilized phishing attacks in order to scam their targets.

“Unknown Hack”

On May 8, 2019, almost a year to the day after the first transaction was made, an Amazon spokesperson claimed that the company had completed investigating the compromised accounts, and had been the victim of an “extensive” fraud. The extent of the fraud was large enough where two banking companies, Barclays and Prepay Technologies (who is a partial subsidiary of Mastercard) are caught up in the crime.

Ultimately, Amazon neglected to disclose the true scope of the hack, but a report by Bloomberg indicated that over one billion dollars were dispersed to merchants in 2018 via Amazon Capital Services U.K. While there is currently no figure provided by the company, if large portions of that money was subverted, it could rank as one of the largest hacks in the history of online commerce, and certainly the biggest fraud that has involved Amazon. 

Amazon, which has a business model built to be largely automated, has done a remarkable job of keeping personally identifiable information from being hacked over the years, but in today’s threat-persistent culture, even the most secure companies can have situations happen to them that jeopardize their ability to complete financial and information transactions, regardless of how much they invest in cybersecurity.

Phishing Attacks

Just because this article mentions a major fraud involving the world’s largest online retailer in no way means that hackers have moved on from trying to hack small businesses. Small businesses face the majority of hacking attacks, mainly because they have the least amount of security to thwart. In fact, if Amazon can fall victim to phishing attacks, it’s not a stretch to believe that your company is susceptible. With millions of phishing messages sent every day, many of which target small businesses, having a strategy to educate your staff is extremely important.

The best way to go about doing that is to be proactive. Getting your staff to understand that they are on the front lines of a never-ending cyberwar and what they need to learn in order to keep themselves, and your organization free from the serious risks that come from falling victim of phishing attacks. Some things you can prioritize:

  • Annual education and training - Have a comprehensive plan in place to educate new and current staff that is updated and required annually.
  • Having strong passwords - Since phishing is a form of social engineering, the hackers on the other end of the phishing attack are simply looking for access. Having strong passwords will keep them out much longer than weak ones. 
  • Avoid shadow IT - Make it clear that all software has to pass through IT first, before it is downloaded onto a workstation. It may seem inefficient at first, but the company will be better off vetting a software solution before it gains access to your organization’s network.
  • Provide cloud storage - When people are constantly on the move and have a lot of responsibilities, they will often upload their work into their personal cloud-based file storage. This can be risky behavior, even if the employee’s motives are solid. Keep your company’s data hosted on its own infrastructure.

With these four tips you can go a long way toward protecting your business, and your staff, from the detrimental characteristics of a phishing attack.

If you need help with your organization’s cybersecurity, or if you simply want some help outlining a strategy to use, contact the IT professionals at Aniar IT Services today at 094 90 48200 .

Tip of the Week: Using Digital Signage
Windows 7 and Windows Server 2008 R2 is Finally Lo...
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Monday, October 14 2019

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Tip of the Week Security Technology Best Practices Business Computing Privacy User Tips Cloud Productivity Email Network Security Innovation Google Hosted Solutions Workplace Tips Internet Microsoft Data Hackers Tech Term Hardware Managed IT Services Communications Efficiency Software Windows 10 Data Backup Communication IT Support Smartphones Business Mobile Devices Computer Small Business Cloud Computing Data Recovery Gadgets Smartphone Malware Mobile Device VoIP Android IT Services Cybersecurity Outsourced IT Backup Network Internet of Things Collaboration Browser Artificial Intelligence Users Miscellaneous Server Spam Windows Business Management Office 365 Chrome Saving Money How To Phishing Information Router BDR Computers Business Continuity Upgrade Applications Word Passwords Cybercrime Managed Service History Microsoft Office Paperless Office Money Facebook Staff Remote Monitoring Blockchain Settings Data Security Data Protection Data Storage Social Media Holiday Windows 7 Display Mobile Device Management Connectivity Two-factor Authentication Vulnerability Operating System Encryption Ransomware Infrastructure BYOD Law Enforcement Save Money VPN Password Telephony Scam Private Cloud IT Plan Managed IT Processor Website Automation Business Intelligence OneNote Telephone System Update Virtualization Vendor Unsupported Software Help Desk Botnet Machine Learning Disaster Recovery Digital Signage Managed IT services Cryptocurrency Identity Theft Government Training Redundancy Voice over Internet Protocol Education Software as a Service Telephone Systems Spam Blocking Wi-Fi Quick Tips Social Engineering Access Control Bring Your Own Device Sports Avoiding Downtime Augmented Reality IT Management CES Comparison App Virtual Assistant Fraud Meetings Human Resources Apps Keyboard Google Docs Google Drive Content Management Screen Mirroring eWaste Thought Leadership Specifications IT Infrastructure Health Amazon Tip of the week Employer-Employee Relationship Firewall Bandwidth Trending Manufacturing Audit Password Management Physical Security Social Hypervisor Root Cause Analysis MSP Net Neutrality Charger Hosted Computing HaaS Remote Workers Big Data Servers Bing Wireless Internet Data Breach Entertainment Cast Warranty Legal Investment Employee Amazon Web Services Accountants Windows Server 2008 Unified Threat Management Password Manager Nanotechnology Virtual Reality NIST HBO Vendor Management File Sharing ISP Wireless Charging Inventory Managed IT Service Public Cloud HVAC HIPAA USB Telecommuting Hard Drive Computer Care Project Management Printer Criminal ROI Wireless Data loss Mobile Computing Business Mangement Smart Tech Skype Cabling Computer Fan Digital Signature Outlook Saving Time Cryptomining Google Apps Managed Services Provider Software Tips Electronic Medical Records Wire Travel Remote Work Patch Management Bitcoin YouTube Mouse Addiction Tools Work/Life Balance GDPR Google Search Online Shopping Cortana Smart Office Alert Gmail Start Menu Cables FENG Safe Mode Security Cameras Credit Cards PDF Frequently Asked Questions Recovery Procurement Remote Worker Database Workers Sync Multi-Factor Security OLED Networking Shortcuts Data Management Save Time Evernote Cleaning WiFi Batteries Microchip Millennials Remote Computing 5G Document Management Camera Recycling Devices Default App Smartwatch Excel Employee/Employer Relationship Wiring Business Technology Authentication Biometric Security Solid State Drive Enterprise Content Management Mobility Virtual Machine Downtime Proactive IT Practices Flash Virtual Private Network The Internet of Things Windows 10s Search Engine Cache Value Workforce Windows Server 2008 R2 Hacker Printers Budget Fun Customer Relationship Management Competition IP Address Customer Service Hard Drives Mobile Office Domains Twitter Emergency Search Compliance Windows 10 Personal Information Public Speaking CrashOverride Regulation Presentation Using Data Financial Lithium-ion battery Company Culture Managed Service Provider Wireless Technology Tech Support Hiring/Firing IBM Safety Productivity Managing Stress Marketing