Cybercrime and SMEs: what you really should know about hacking!

 Four tips for spotting trouble

Cybercrime is an increasing threat to SMEs. Why? Because SMEs generally lack the resources, knowledge and/or access to knowledge required to recognise threats and protect against them. Smaller firms are consequently all too easy targets. So what's the answer?

This makes SMEs cyber resilient!
Handen van een hacker. Kijk hoe CyberSterk je helpt om hacks in het mkb te voorkomen.

No fewer than 67 per cent of Dutch SMEs think that they aren't attractive targets for cyber-attackers. So says insurer Allianz, who carried out a survey in collaboration with the Ipsos research agency. However, the truth is that all organisations big and small are attractive targets for cybercriminals. Of the many forms of cybercrime, one of the most problematic for SMEs is hacking. That's where someone gets access to someone else's computer or system. When done without the permission of whoever owns the data, hacking is a criminal offence. If you're curious to know what the other two most common forms of cybercrime affecting SMEs are, check out our whitepaper.

Most Dutch SMEs' websites are insecure and therefore very vulnerable to hacking, according to research by BDO Advisory and Perfect Day. Around the world, there are an estimated 720 million hacking attempts a day. More than half (53 per cent) of organisations with fewer than five hundred staff have been affected by hacking or digital intrusion in the last year.

How can you recognise hacking?

Insurer Centraal Beheer has formulated a number of examples to help you recognise hacking in practice. Four of them are summarised below.

  1. Your computer is behaving strangely - If weird screens pop up, your e-mail keeps hanging or staff are having problems logging in, alarm bells should be ringing. It's very important that staff know that those things may be signs of trouble, and report them straight away. Act promptly and investigate the problem (or get an expert to look into it).

  2. There's unusual activity on your network– Has someone logged in from an odd location? Are you generally seeing more data traffic than normal? If you have your systems continuously monitored by an expert, you know immediately when you've been hacked. When an issue's detected, act quickly, before the hacker can penetrate deeper into your systems.

  3. Hackers are messing with your website – Has someone placed links on your website, pointing to their own site? Or been sending spam from an e-mail address in your domain? If so, you should think about arranging for your website to be monitored; it can save you some unpleasant surprises.

  4. Your data surfaces outside your organisation – Were you on the point of signing a contract with a new partner, only to be undercut by a rival who seemed to know the price you'd agreed? That might mean you've been the victim of online industrial espionage. You'd be well advised to have all your customer data analysed for vulnerabilities.

Did you know that…

…some people hack computers just for fun? That's one of the findings of a study by Veiliginternetten.nl. Five per cent of youngsters in the Netherlands have had a go at hacking. …hackers can help you improve your security? 'Ethical hacking' is where a hacker looks for vulnerabilities in hardware and software, but, instead of exploiting any weakness, tells the owner about them. …data is sometimes stolen by 'shoulder surfing'? That's where a crook gets hold of confidential information by sneakily looking at a screen they're not supposed to see. It's a growing problem, because more people are using laptops in public places. Want to know more about making your business cyber-resilient? Take a look at our whitepaper: Making SMEs cyber-resilient