Common Cyber Terms Explained
To better understand the landscape of cyber insurance, it’s essential to be familiar with some common cyber terms:
Phishing: Phishing is a type of cyber-attack where attackers impersonate a trustworthy entity to trick individuals into revealing sensitive information, such as usernames, passwords, or financial details. These attacks often occur through deceptive emails or messages that appear legitimate.
Example: An event contractor receives an invoice that appears to be from a trusted supplier they frequently work with. The email and invoice look genuine, using the supplier's branding and usual tone, but the bank account details are different from previous invoices. The difference in bank details was not identified, and payment was made. Later, they realise the payment went to a fraudulent account set up by the attacker, who was impersonating the supplier to divert funds.
Ransomware: Ransomware is a form of malicious software (malware) that encrypts a victim’s data, rendering it inaccessible until a ransom is paid to the attacker. Ransomware attacks can severely disrupt business operations and lead to significant financial losses.
Example: An event contractor falls victim to a ransomware attack where all their client files, including contract details and designs, are encrypted. The attackers demand a ransom to decrypt the files, leaving the company scrambling to either pay the ransom or attempt costly data recovery solutions.
Data Breach: A data breach occurs when unauthorised individuals gain access to sensitive or confidential data. Data breaches can result from hacking, malware attacks, or even human error. They often lead to significant legal and financial repercussions.
Example: An event organiser's system is hacked, exposing sensitive client information such as credit card details and personal addresses. The organiser is then required to notify all affected clients and may face lawsuits or regulatory fines for failing to protect that data.
Malware: Short for “malicious software,” malware refers to any software intentionally designed to cause harm to a computer system, network, or device. This category includes various types of harmful programs, such as viruses, worms, Trojans, and ransomware.
Example: A contractor downloads a file from an unfamiliar website, believing it to be a helpful document template. Instead, they install malware that tracks their keystrokes, capturing sensitive data such as client passwords and financial information, which are then sent to cybercriminals.
Denial-of-Service (DoS) Attack: A DoS attack aims to make a system or network unavailable by overwhelming it with traffic, causing it to crash or become unresponsive. This can disrupt normal business operations and lead to financial losses.
Example: An event organiser experiences a DoS attack on their website during peak booking season, making it impossible for clients to view or book services online. This results in lost business opportunities and frustrated customers.
Cyber Crime: Cybercrime encompasses a broad range of criminal activities that involve a computer or a network. This can include everything from identity theft to cyberbullying to corporate espionage.
Example: A cybercriminal manages to breach the firewall of a company’s HR system by exploiting a vulnerability in third-party HR software. They steal confidential staff records, including personal contact details, salaries, and health information. The group then sells this data on the dark web, where it can be used for identity theft or fraud.