To conclude our three-part Expert Series blog on cybersecurity, this final segment will discuss discovering you are a victim of a cyberattack, and best practices for responding.
If you missed the first two parts of this series, please refer to our previous blogs about the basics of cybersecurity and general cybersecurity tips. Continue reading for advice on responses to a cyberattack from Faizel Dakri, our Chief Information Officer with extensive experience in the information technology and the banking industry.
Cybersecurity — Detecting an Attack
How can you tell if you’ve been a victim of cyberattacks?
Hackers are very good at hiding their tracks; however, there are some basic steps you can take to detect when you’ve been attacked. An awareness of your digital footprint is key to being able to effectively monitor your computers and accounts. Once you know the extent of your digital presence, it is time to start monitoring and look for indicators of compromise. For example, subscribing to alerts from your online banking platform whenever money is paid would be a good way to keep tabs on your accounts. Even reviewing your bank statements for any unusual activity can uncover an attack. Pay attention to your computer anti-virus scans to see if your machine is clean, or if it is constantly removing unwanted software. Here is a list of common indicators that signal a hack:
- Your computer is running unusually slow
- You are not able to open the files on your PC
- You find new software on your PC or new toolbars/plugins in your browser
- You find yourself locked out of some accounts
- There are unrecognized websites in your browser’s history
- You notice some transactions that you don’t recognize while reviewing your bank statements
- You see emails sent from your account that you didn’t send
- The list of previously connected wi-fi networks shows one you don’t recognize
Cybersecurity — Responding to an Attack
Even if you follow good cybersecurity hygiene, are careful and deliberate when reading and replying to emails, use strong passwords, etc., you might still find yourself a victim of a cyberattack. What can you do in response?
What can you do if you feel your computer has been hacked?
If you think you’ve been a victim of a cyberattack and your computer has been compromised, the first thing you should do is disconnect the computer from any sort of network, including wireless networks. If you have antivirus software, you should do a scan as well. It might be tempting to erase everything and start over (and that is an option). However, if you can have the machine examined, the more data you can preserve, the better the chance of determining the extent of an attack or how much damage was done.
What can you do if you feel your accounts have been compromised?
If you can determine which accounts have been compromised, the first thing you should do is change the passwords on those accounts and all your other accounts with the same password; if you’ve been locked out of them, you should try to reestablish access, whether by a backup means or by contacting support directly.
If you are utilizing online banking or treasury services, many of these systems have alert options that can notify you when certain events happen. For example, the Wallis 360 platform has many configurable alerts that can keep you abreast of what is happening in your accounts. You can monitor those accounts for unusual or unexpected transfers or payments. If you think your Wallis 360 business banking account has been compromised, please contact our Treasury Management Team at Wallis Bank at 713.580.9990. If you think your personal Wallis Bank account has been compromised, please contact our Electronic Banking Team at 713.935.3791.
What can you do if you suspect you’ve been hacked at your workplace?
The first thing you should do, in this case, is disconnect your computer from the network, if possible, and notify your IT department. Many companies also have an Incident Response Plan to prepare for cyberattacks so, if your company has one, it is a good idea to familiarize yourself with it so you can be prepared in the event you suffer a breach or hack.
If you feel your personal information has been compromised, what should you do?
It is important to inform your local law enforcement. If you feel your identity has been stolen, you should also file a report to the FTC.
If you think a hacker has remote access to your computer, you should disconnect it from the network and disable wi-fi to prevent it from communicating with the attacker. At this point, you should investigate the computer by taking it to someone that specializes in investigating cyberattacks, and in the case of data loss; someone that can recover data if it’s still available.
For more information and tips on how you can protect yourself from a cybersecurity attack, please visit –
https://www.fdic.gov/resources/consumers/consumer-assistance-topics/cybersecurity.html
https://www.sba.gov/business-guide/manage-your-business/stay-safe-cybersecurity-threats
https://www.consumer.ftc.gov/articles/protect-your-personal-information-and-data
- Ⓒ Wallis Bank, All rights reserved.
-
Equal Housing Lender 
- Privacy Notice Disclosures