What is Scareware: You’ve probably seen the pop-ups — “Warning! A virus has been detected on your computer. Download VirusBlaster to clean and remove it.” The malware that infects your computer is the program that pop-up is trying to trick you into downloading. Scareware can come in a variety of…
Tag: password
Common security threats – SQL Injection
What is SQL Injection: If a website has an input box or entry form (like when you’re entering your username and password or your credit card number if you’re buying something), then an attacker can try inserting structured query language code to gain access to or make changes to the…
Common security threats – DDoS
What is Distributed Denial of Service Attack: There is only so much traffic a computer system can process before it starts to slow down and becomes overwhelmed. By gaining control over a large number of hijacked systems and devices (referred to as a botnet), attackers can direct massive amounts of…
Common security threats – Password Cracking
What is Password Cracking: A login and password aren’t what most people think it is. It’s a complicated set of processes that can involve multiple systems, secure transport to and from the servers, a trusted network of server identity assurance and revocation, code to evaluate the complexity of the user-generated…
Single-Factor (password only) Authentication: It’s NOT Enough Nowadays!
Dell SecureWorks Counter Threat Unit(TM) (CTU) researchers discovered malware that bypasses authentication on Active Directory (AD) systems that implement single-factor (password only) authentication. Threat actors can use a password of their choosing to authenticate as any user. This malware was given the name “Skeleton Key.” CTU researchers discovered Skeleton Key…