 |
Cyber security expert Etay Maor warns about the changing threats of cyber criminals.
Photo: Toh Ee Ming
|
SINGAPORE — When cyber-security expert Etay Maor tested a hacking tool in his home, he was surprised to discover 16 household appliances trying to connect to his Internet. Upon expanding the range to the nearby vicinity, it easily picked up more than 100 devices in the neighbourhood , from Bluetooth devices to fitness trackers, all connected to the Internet.
Innocuous as they may seem, these “smart” appliances could give cyber-criminals a playground to wreak havoc by taking control of your devices, or eventually provide a gateway into stealing personal information in your home system.
Mr Maor, 37, who is IBM Security’s executive adviser and who was in Singapore for a conference earlier this week, warned that with people being increasingly plugged in to smart devices, tech-savvy hackers could move beyond laptops and mobiles to infiltrate their networks.
“With companies offering more (services) like online banking, and with the Internet of Things, there’s going to be (greater) threats and attack vectors for criminals,” he told TODAY.
Earlier this month, the Cyber Security Agency here reported that Singapore was a “prime target” for cyber-criminals, with 16 waves of online attacks hitting the Republic’s shores since April last year. This comes even as there is an outcry over the move to disallow Internet surfing on civil servants’ work computers that are used to access the Government’s internal networks.
 |
| https://blog.digicert.com/smart-home-security-2016/ |
Attacks may come in many forms, ranging from “overlay attacks” which replicate applications such as banking apps, to malware that records videos of users’ screens, Mr Maor said.
While the malware used is still largely the same, what has changed is how readily tools are available online, and cyber-criminals may get them “for sale or rent within seconds”, he added.
Attacks are also increasingly being customised to local contexts, where criminals design malware using the local language, or conduct intelligence operations to suss out how companies work.
Now, even ordinary individuals without specialised skills may band together to form a “collaborative and supportive community” to create sophisticated attacks. Remaining anonymous, they exchange tips freely, seek advice in underground forums, and rate each other’s skills , said Mr Maor.
Increasingly, these shady figures are going beyond targeting financial institutes to stealing personal data or records from healthcare organisations and insurance firms, he added.
