A watering hole attack is one of the most dangerous because the risk is hidden within an otherwise legitimate website. Hackers identify websites visited the most by their intended victims.
Hackers then find vulnerabilities in those websites and embed the website with malicious software. This enables the criminals to target a particular group of companies or a specific industry.
Employees should only access forms and documents from their production systems or the Company’s intranet. Employees in need of a document they do not have access to, should email National Escrow Administration at firstname.lastname@example.org rather than surf the web and risk falling victim to a watering hole attack.
As a result, the onus is on everyone to protect their computers and networks by learning more about cyberattacks. Below are several tips. Keep in mind these are only some of the steps that can be taken and not a complete list:
Install Software Patches and Updates: Watering hole attacks take advantage of software vulnerabilities in common applications, like operating systems and browsers. Updating software and browsers regularly reduces the risk of an attack. Always comply with any update notices from the FNF Information Security Office or system administrators.
Protect your online activities: When criminals are unable to track commonly used websites, they do not know which ones to plant their malware in. Be sure to utilize the VPN when working off of the Company’s secure network. Social media sites can also be infected.
Stay informed: One of the best defenses against hackers is an informed user. Users who know what the newest threats are know how to avoid becoming a victim. Take the time to understand the risks and how to avoid them.
As demonstrated all year long, the hackers and the organizations they belong to have proven that any website can contain a watering hole attack. Remain vigilant and be cyber smart.
Article provided by contributing author:
Diana Hoffman, Corporate Escrow Administrator
Fidelity National Title Group
National Escrow Administration