For managed services providers (MSPs), malware is an unwelcome predator\u2014one that stands to put both their customers\u2019 reputations and their own on the line. This devastating cyberattack can come in many shapes and sizes, but the end goal is always the same: to compromise workstations, laptops, servers, or computer networks and gain access to or damage business-critical data.<\/p>\n
According to a report from\u00a0IBM X-Force Incident Response and Intelligence Services<\/a>\u00a0(IRIS), the first half of 2019 saw a 200% increase\u00a0in malware attacks compared to the last half of 2018. Resolving and recovering from these destructive attacks is not only time-consuming\u2014it\u2019s also expensive. IRIS estimates that victimized organizations spend an average of 512 remediation hours to recover and lose over $200 million in the process.<\/p>\n Fortunately, knowledge is power. MSPs must become intimately familiar with the types of malware in existence, as well as the tactics designed to mitigate against them. With these insights in hand, MSPs will be better equipped to outsmart even the most cunning hackers.<\/p>\n Malware<\/a>, short for \u201cmalicious software,\u201d is an umbrella term for dangerous programs that cybercriminals use to target their victims. There are many different varieties of malware, including:<\/p>\n Protecting your customers\u2019 networks and computers from attacks requires a multi-pronged approach that stops attackers at every angle. Here are six tactics to consider as you develop your security strategy:<\/p>\n An out-of-date system means one thing: vulnerabilities. As attackers become more sophisticated and researchers become more diligent, vulnerabilities in popular software, operating systems, end-user applications, and even security software are discovered every day. Attackers wait patiently to exploit these vulnerabilities and gain access to your customers\u2019 IT infrastructure in one fell swoop.<\/p>\n To combat these attackers, vendors push out new updates, also known as\u00a0patches<\/a>, at a rapid rate. Keeping up with these repairs for numerous customers and devices can be challenging for even the most advanced MSP. While some platforms, including Microsoft, have begun leveraging automated software updates, this isn\u2019t universal. It\u2019s up to MSPs to remain vigilant and leverage a sophisticated patch management system. These tools are designed to monitor for missing patches and notify admins as soon as a missed patch is identified.<\/p>\n With robust patch protection in motion, MSPs can rest assured their customers\u2019 infrastructure is as up-to-date as possible.<\/p>\n Email is an inevitable part of business culture. It allows employees to communicate quickly and efficiently with their teams, clients, and customers alike\u2014but on the other hand, it\u2019s also favored by cyber attackers. According to\u00a0Verizon\u2019s 2018 Data Breach Investigation Report<\/a>, 92.4% of malware is delivered via email.<\/p>\n As an MSP, email security is no joke. Fortunately,\u00a0email security software<\/a>\u00a0has evolved to<\/p>\n serve two purposes\u2014defend against email-based malware attacks, and also ensure\u00a0email continuity<\/a>\u00a0through a cloud-based email archive. This archive will help ensure employees have access to their email even if the infrastructure fails. From a prevention standpoint, machine learning and threat intelligence are leveraged to help identify and block email-based malware before it enters an employee\u2019s inbox.<\/p>\n Web protection systems<\/a>\u00a0have earned a negative reputation among some companies. Employees see them as a threat to their independence and a test of their trust. In reality, these filtering systems are designed to protect and empower employees by ensuring they don\u2019t inadvertently put their entire system at risk.<\/p>\n With these platforms in hand, MSPs can control, monitor, and enforce web filtering\u00a0all via a single computer screen. This allows them to block potentially harmful websites that could contain malware, spyware, and other dangerous software. When employees navigate to a site, the web filtering software will identify the site, its content, and its URL all in real-time. Within a matter of milliseconds, the tool will determine whether the site can be viewed or must be blocked to comply with predefined rules and company policies. In addition, MSPs can set up a notification system that alerts administrators as soon as an employee attempts to access a blocked website. Other customizable features include time-based browsing rules, web policies specific to devices or users, and more depending on the software.<\/p>\n Effective cybersecurity is a community responsibility. But to truly build a culture of security, education is key. In a survey of attendees at the 2017 Black Hat security conference,\u00a0approximately 84% of respondents<\/a>\u00a0whose company had experienced a cyberattack attributed at least part of it to human error.<\/p>\n MSPs must empower their customers with the insights they need to make smart, secure decisions day-in and day-out. This can involve explaining what malware is, how it works, and what red flags customers should keep an eye out for. Malware pop-ups or emails may contain text like, \u201cCONGRATULATIONS! Your banner ID #12345 has won an hourly contest. Click here.\u201d They can also be subtler and more convincing, posing as Windows or another trusted provider seeking your login details for an update. Encourage your customers to proceed with caution and always raise any suspicious content up the flagpole before clicking.<\/p>\n In many ways, firewalls are your first line of defense against attackers. Firewalls act as a filtration system, scanning packets for malicious code or threatening attack vectors. Should a data packet be flagged and labeled a security risk, the firewall prevents it from entering the network or reaching your computer.<\/p>\n Firewalls can take the shape of hardware or software. The hardware options are often built into routers to intercept traffic moving between the broadband router and user devices. Software options are programs that monitor the traffic going in and out of your customers\u2019 computers. Due to the extensive array of cyberattacks, it can be difficult for any type of firewall to filter out each and every threat attempting to gain access. Pairing firewalls with other security programs and hardware is a must.<\/p>\n This final tactic isn\u2019t designed to\u00a0prevent malware<\/a>\u00a0from entering your customers\u2019 network\u2014rather,\u00a0encryption<\/a>\u00a0is a way to protect your customers\u2019 data in the event of an attack. An encryption system scrambles sensitive data using mathematical calculations to turn data into a ciphertext of unreadable characters. The original data can only be revealed with a key generated by the encryption algorithm, allowing it to remain hidden from everyone but the authorized parties. If an attacker manages to enter the network, they\u2019ll find themselves face-to-face with a wall of meaningless jargon.<\/p>\n In a sense, database encryption should be redundant, only becoming necessary if access controls and other security measures fail. However, adhering too closely to this mindset is a clear vulnerability, as these other security measures aren\u2019t failsafe. MSPs can help businesses understand that databases need additional safeguard protections in place.<\/p>\n As hackers become more creative and innovative in the art of attack, MSPs must step up to the plate with equally creative and innovative protection practices and policies. Patch updates, cloud email security initiatives, URL filtering, education, firewalls, and multi-layer encryption are just a few of the many ways to protect your customers\u2019 data and safeguard your reputation as a security leader.<\/p>\n How you use each of these tactics is up to you as an MSP. The most important thing is to have a plan, put it in place, and get your customers on board. With the right cybersecurity strategy, 2020 has the potential to be your best year yet.<\/p>\n","protected":false},"excerpt":{"rendered":" Read about how to leverage six effective enterprise malware protection techniques to keep your MSP customers safe from attack.<\/p>\n","protected":false},"author":24,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-5324","post","type-post","status-publish","format-standard","hentry","topic-security"],"acf":[],"yoast_head":"\nGetting to know you: the many faces of malware<\/h2>\n
\n
Six tactics to keep your customers\u2019 data safe from malware<\/h2>\n
1. Keep all systems, software, and applications up-to-date at all times<\/h3>\n
2. Make email monitoring a top priority<\/h3>\n
3. Put constructive web or URL filters into play<\/h3>\n
4. Educate customers on the risks and warning signs<\/h3>\n
5. Put firewalls into effect<\/h3>\n
6. Encrypt critical files and folders<\/h3>\n
Putting enterprise malware protection into play<\/h2>\n