We live in an age of ubiquitous connectivity; but our always-on, mobile-centric lives also expose us to risks. For many people, the biggest threat to their personal and professional data is phishing , remotely deployed malware , and other online risks.
However, cybercriminals don’t miss an opportunity to use their weapons with much more rudimentary and traditional techniques. Shoulder surfing , or looking over someone’s shoulder, has existed for much longer than smartphones and laptops. Just ask anyone who has had their credit card PIN or phone card details stolen by unscrupulous passersby. But today, there are many more opportunities to profit.
Most of us dismiss shoulder surfing . We think we’d be able to spot someone lurking with their eyes glued to their screen, but bad actors only need to get lucky once; and we give them plenty of opportunities throughout the workday, especially now that society is opening up again. In fact, we’re really exposed in informal settings like bars, cafes, and restaurants.
What could happen if the cybercriminal finally gains access to one of our online accounts?
According to ESET, a cybersecurity expert, in Cybersecurity News , they could change logins and then extort you to regain access, use brute-force techniques to try to access other accounts with the same email address and usernames, steal your personal information to use in subsequent identity theft or phishing attempts, access and divert funds to their own accounts, and troll or intimidate you by posting inappropriate content from your account.
The impact of an account hijacking like this can last for many months. If cybercriminals have managed to steal funds and personal information, you may experience a barrage of phishing attempts in the following months. Recovering lost funds and restoring credit scores can take even longer. Therefore, ESET offers five tips below to help you avoid this.
5 Tips to Avoid “ Shoulder Surfing”
- Never reuse passwords across all accounts and use a password manager to store unique and strong credentials. Enable multi-factor authentication (MFA). But choose an authenticator app (for example, Google Authenticator, Microsoft Authenticator) instead of an SMS code option. ITS Infocom with Cisco Duo protects your workforce with simple and powerful access security.
- Always be vigilant when logging into your accounts in public . This could mean avoiding working on airplanes, trains, in airports, hotel lobbies, and similar crowded places. Or, at the very least, working with your back to a wall. ITS Infocom, with monogoto’s private LTE security, offers you secure cloud-based cellular network service.
- Use a privacy screen on laptops to ensure that anyone trying to spy on your screen from any angle cannot. To mitigate this, regular awareness campaigns should be conducted within the company.
- Turn off on-screen notifications for messages, emails, and alerts. If one arrives and it wasn’t from you, investigate immediately.
- Never leave any device unattended in a public space. And make sure they are locked with a strong passcode.
Written by: Carlos Trujillo – Senior Pre-Sales Engineer
