The State Private Communications and Information Protection Service has made recommendations to strengthen cybersecurity, from Russian hackers to private companies.
According to Ukrinform, the State Special Communications Service reported in a Telegram.
The service recommends investing in the simplest protection methods.
“The most popular methods of cyber attack by Russian military hackers are: phishing emails that allow them to obtain credentials to gain access to information systems; sending malware aimed at stealing data or destroying infrastructure; use of known vulnerabilities.”
It is possible to protect or minimize the risks of these cyber attacks by following the cyber hygiene rules, the responsible attitude towards the password use policy, and timely software updates.
Experts also recommend examining the weaknesses of your cyber defense and strengthening them. Hackers are constantly conducting intelligence operations in Ukraine, finding the weakest points in the defense of companies and attacking them.
“There is no 100% secure system. However, the lower the cost for hackers to hack your system, the higher their motivation will be,” he said.
Experts emphasize that the safety of the company depends on each employee. Hackers can also attack a company or institution through employees by stealing their data. Military and government figures are in special danger. For these categories of people, cyber hygiene should become a habit №1.
The physical security of critical information infrastructure users is as important as the protection of their accounts.
Russian hackers can use the credentials of users located in temporarily occupied territories. Companies should be aware that the physical security of their employees is also an investment in their cybersecurity, especially among critical infrastructures.
The State Special Communications Service reminded that Ukraine’s top cybersecurity companies and the world’s leading solution providers, together with their teams, introduced layered cybersecurity for government and business. Any company in Ukraine can apply for CERT-UA and it will be useful for protection against DDoS attacks, security monitoring, migration to cloud environments, deployment of modern cyber threat protection systems for their workstations and servers, etc. can receive targeted assistance in matters.
As Ukrinform reported on April 12, Viktor Zhora, Deputy Head of the State Special Service for Digital Development, Digital Transformations and Digitization, said that with the onset of full-scale Russian aggression, cyberattacks against Ukraine’s critical infrastructure were recorded three times more than before. same period of last year.