Simply having a device connected to the internet makes you a potential target to a host of cybersecurity threats. While many have grown to love and rely on technology as it advances, cyber threats have also evolved equally quickly. With cybercrime accounting for 26.8% of all crimes in Singapore, securing your devices means having the freedom to use technology with confidence.

A firewall helps you do precisely that. It acts as the first line of defence between your system and the internet. The moment you’re connected to the internet, you are constantly sending and receiving information in small data units called packets. It blocks or allows network traffic based on a set of predefined or dynamic rules. A firewall goes a long way in protecting you and your family from cyber attacks.

What is a firewall and how does it work?

A firewall either blocks or allows network data traffic depending on a pre-defined or dynamic set of regulations. The function of a firewall is to protect networks and computers against unauthorised access from potentially dangerous actors. Acting as a gatekeeper that monitors and examines incoming and outgoing traffic, it protects your devices from harmful or potentially unwanted content and communication.

3 reasons why you need a firewall

For home network protection, firewalls are the first line of defence.They are so important to the digital health of your systems that most operating systems today come with a built-in firewall. However, using a third-party firewall application provides you with better control options and more consistent results. This is particularly important for home devices because of the sensitive nature of data stored in them.

A firewall is an effective tool for preventing and managing cyber threats, loss of data, and unauthorised network use. Here, we look at the top 3 reasons why you should have one.

Reason #1: Protects you from malicious activity

A firewall inspects the traffic going into and out of your network so that it can look for and block any unwanted internet traffic, along with viruses, worms, spam, etc. They also let you maintain a list of known good and malicious applications so that they can block the malicious applications and enable the good ones.

In addition, they log intrusion attempts and other violations so that you can investigate attempts made by unauthorised users to access your system, along with other suspicious activity.

Reason #2: Prevents unauthorised remote access

The worst thing that could happen to your system is for someone to take remote control of it. Singaporeans learnt this the hard way in 2018, when the nation suffered its largest-ever data breach in history when 1.5 million patients of SingHealth’s outpatient clinics had their personal information stolen.

Firewall security measures are one of the most basic cyber protection tools that are used to prevent data breaches. Network security firewalls filter out incoming traffic to prevent malicious files from being downloaded and block attackers from accessing sensitive systems.

A firewall, such as the one found in ESET Internet Security, can help you prevent this by disabling remote desktop access, thus preventing interceptors from taking over your system. Without a firewall, it is easier for malicious actors to gain access to your system.

Reason #3: Helps you keep a lookout for vulnerabilities

Prevention is always better than cure. It’s a good idea to proactively stay one step ahead of attackers, by making sure that you have no vulnerabilities in your home network and router-connected smart devices that they can exploit.

Having a feature like ESET Smart Security Premium’s Connected Home helps you achieve that easily. It can identify vulnerabilities in your home network, such as open ports or a weak router password, and even suggest options on how to fix any possible issues.

At home, we’re usually connected to our home network on our smart devices. This could potentially be a weak link for hackers to take advantage of, if these devices are not properly secured. Connected Home keeps you and your loved ones safe by allowing you to test all your router-connected smart devices for vulnerabilities such as weak passwords. Then, it takes the guesswork out of fixing these issues by providing suggestions on how you can resolve them.

Furthermore, you will be able to see the list of devices that are connected to your home network, and get notifications whenever a new device is detected.

The rise of online and mobile banking has made managing finances easy and convenient. This includes paying bills, depositing checks, and transferring money, so naturally it has become increasingly popular over the years. According to research from Finder in 2019, one in five adults in Singapore currently has an account with a branchless bank.

However, there’s a big concern to keep in mind when banking online: security. Having your personal financial information and bank account hacked can give rise to unnecessary headaches. Money could be drained from your account via fraudulent wire transfers, or an identity thief could use the stolen information to exploit your credit cards. In fact, this growing security concern is reflected in the fact that 34% of Singaporean customers do not trust digital banks with personal data security.

Making your online identity and activities more secure doesn’t take too much effort at all. The following five tips will help keep you more secure online.

Tip #1: Choose strong and unique passwords for every login

When it comes to online security, Singaporeans seem to be prefer sticking to the same passwords. In fact, between 50-70% of Singaporeans don’t change their passwords, and if they do, they only do so when prompted by their online accounts.

Sticking to the same passwords makes it easy for hackers to gain access to your online accounts by getting a batch of username and password combinations and attempting those combinations until they find the right one. The best way to protect your data and prevent a breach from having a cascading effect on your life is to choose and set a unique password for each specific online account that you have.

While it can be a tough task to remember multiple passwords, it’s essential to do this to protect your online accounts. You can also delegate the job of remembering passwords to a password manager. A password manager such as the one included in ESET Smart Security Premium, helps you store your passwords into a digital vault and keeps them safe from prying eyes. The only password you need to remember is a master password that unlocks the password manager itself.

Tip #2: Steer clear of public Wi-Fi

The same things that make publicly available Wi-Fi so desirable are what make them so dangerous. These networks require no authentication to get a connection and make for an amazing opportunity for cybercriminals to access unsecured devices on the network.

Hackers may infiltrate poorly secured public Wi-Fi networks to distribute malware, monitor victims’ traffic and redirect them to fraudulent login pages. Sometimes attackers will set up a malicious network (an “evil twin” or “spoof”) to trick users into logging into a network with a similar or same name. From there, they can launch attacks to steal personal information, corrupt data and more.

In such cases, the best way to protect your online banking information is to either avoid public Wi-Fi altogether, or use a virtual private network (VPN) to create a secure and private network.

Tip #3: Use secure payment gateways

Whipping out a credit card to complete an online transaction has become second nature in today’s digital age. With your love for online shopping unlikely to go away anytime soon, it is important to practice safe payment habits, including the use of a secure payment gateway, to prevent malicious actors from reaching your financial data and money.

Payment gateways such as PayPal use data encryption and anti-fraud technology to keep customers’ details safe. These protocols also prevent the merchant from obtaining your card details. Look out for these payment options the next time you make an online purchase.

Tip #4: Don’t fall prey to clickbait

Clickbait often comes in the form of a combination of misleading and sensationalised text along with a false thumbnail to encourage visitors to click on a link. These often contain links to phishing websites that aim to steal your credentials. Also, clickbait may redirect you to malicious domains which can infect your computer with malware. This malware can potentially be used to encrypt your financial information and keep it hostage, denying you access to it.

Now that you know what clickbait is, avoid clicking on them or suspicious website links. In general, don’t ever click links in emails or websites unless they’re from a source known to you.

While clickbait is an infamous carrier of malware, you can stay safe by employing an anti-malware solution such as ESET NOD32 Antivirus. Software like these promote system security by scanning the system for malicious behaviour and restricting redirects to malicious websites through inspection of the malware code.

Tip #5: Turn off the ‘save password’ feature in browsers

Your browser knows a lot about you, courtesy of your history and cached files. Many browsers offer some kind of password storage solution as well.

However, it’s safer to not store passwords in your browser. If a hacker takes control of your computer remotely, they will easily be able to gain access to your online accounts. Storing passwords in a browser also makes your accounts vulnerable to people who might want to snoop around on your computer when you aren’t around.

To enhance your online security, disable the autofill and the ‘save password’ settings. Also, use a reputable VPN so that your internet browsing activities are carried out anonymously.

With so many of our everyday activities now taking place online, the number of online accounts you have to juggle can be overwhelming. In theory, no one wants to get their online accounts hacked, especially when their personal information is at stake. In practice, however, Singaporeans are largely careless with online password security, with 50-70% of them using the same password across multiple online accounts.

Now that working from home and outside the safe confines of the office intranet is the norm, the number of passwords you need may have significantly increased. If even one of those accounts is compromised in a data breach, it doesn’t matter how strong your password is, hackers can easily use it to get into your other accounts.

The safest method to save them, however impractical it sounds, is to memorise all your passwords. But with password measures being ridiculously complex (passwords should be long, contain an uppercase letter, a number, and a special character), memorising all of them can be a tough task. The solution is to offload that chore to a password manager, which offers a safe vault for all your passwords across all your online accounts.

What is a password manager?
Despite the increase in data breaches, Singaporeans still practise poor password hygiene and are in the habit of storing their passwords on a computer, writing them down, and using the same passwords for both work and personal accounts. 

The overarching reason behind such behaviour is the difficulty of generating and remembering strong passwords. However, you can ease this burden by automating both those tasks with the help of a tool called a password manager. A password manager can provide a secure, automated, and digital way to both generate strong passwords and save them for you. It can generate a strong, new password whenever you create an online account or are trying to change a password, as well as store your passwords securely.

Password managers don’t just stop there. They also come in handy for storing other vital and sensitive information such as credit card information and bank details. All users have to do is store all this information in the password manager and secure it with one master password, similar to a master key.

Why do you need to use a password manager?
Passwords are stolen and guessed all the time. In fact, a variant of the malware Mirai unsettled Singaporeans in 2019 by targeting system vulnerabilities through brute-force attacks, a method where hackers try out various combinations of usernames and passwords in an attempt to correctly guess yours.

That’s not all. Singaporeans are also experiencing a rise in phishing scams on websites and emails where threat actors try to trick them into handing over their password. Although websites are meant to scramble your passwords whenever you enter them, not all websites use strong algorithms to do it, which makes it easier for hackers to unscramble your password.

This is where password managers can help you by generating long and complex passwords that are infuriatingly tough for hackers to unscramble. Apart from that, password managers also relieve you of the daunting task of remembering multiple different passwords for your online accounts, and protect you from harm arising from a data breach, acting as a powerful way to keep out hackers.

Password managers also provide autofill options that allow you to obscure your passwords from onlookers and prevent credential stuffing attacks, where hackers use your user login details stolen from other less secure services or sites to log into other sites in hopes of gathering sensitive or personal information that can be used in other scams or attacks.

What makes a password manager safe?
Password managers enable users to practice good security hygiene by making every password unique and sufficiently complex. However, the underlying reason is that password managers, such as the one in ESET Smart Security Premium, make use of what is known as the zero-knowledge security model. What zero-knowledge security means is that while the password manager tool knows your passwords, the organisation that made it does not.

This model comprises 3 layers, namely the encrypted data of the users, the tool’s password (which is not stored on the system), and the security key. These layers of defence all rule out any exposure to passwords and greatly reduce the risk of a password being stolen or being obtained by a cybercriminal. To learn more about password managers, click here.

BRATISLAVA, PRAGUE – ESET Research continues its regular series into demystifying Latin American banking trojans, this time with a deep dive into Ousaban (aka Javali) malware. According to ESET telemetry, Ousaban is active only in Brazil, although some sources claim it is active in Europe as well. The malware is primarily focused on stealing credentials from financial institutions and, untypical for a Latin American banking trojan, from popular email services too. ESET named this malware family by combining two words – “ousadia”, which means “boldness” in Portuguese, and “banking trojan”, because Ousaban earned its notoriety for boldness from using sexually obscene images as part of its distribution vector.

ESET has been tracking this malware family, while observing signs of active and continuous development, since 2018. The backdoor capabilities of Ousaban are very similar to those of a typical Latin American banking trojan – simulating mouse and keyboard actions and logging keystrokes. Ousaban is also no exception to the typical behavior of Latin American banking trojans in attacking users of financial institutions via overlay windows crafted specifically for the targets. In contrast, however, Ousaban’s targets include several email services, for which it has overlay windows ready as well.

“Ousaban is delivered mainly through phishing emails using a distribution chain that is quite straightforward. The victim is misled into executing an MSI attached to the phishing email. When executed, the MSI launches an embedded JavaScript downloader that downloads a ZIP archive and extracts its contents, consisting chiefly of a legitimate application, an injector and the encrypted Ousaban. Using DLL side-loading, the banking trojan is ultimately decrypted and executed,” explains Jakub Souček, coordinator of the ESET team that investigated Ousaban.

From a technical perspective, Ousaban’s persistence mechanism is also worthy of note. “Ousaban either creates a LNK file or a simple VBS loader in the startup folder, or it modifies the Windows registry Run key,” reveals Souček. “Furthermore, Ousaban protects its executables with binary obfuscators and enlarges most EXE files to approximately 400 MB, likely to evade detection and automated processing.”

For more technical details about Ousaban, read the blogpost Ousaban – Private photo collection hidden in a CABinet on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.

Simple Ousaban distribution chain

COVID-19 has made us rethink the way we work, adjusting how we socialise, and adapting to contact tracing regulations. With a new reliance on our mobile devices in multiple aspects of our lives, mobile security vulnerabilities, exploits, and threats have evolved significantly during the pandemic.

There have been numerous reported cases of fake, malicious mobile applications imitating contact tracing applications that give attackers access to smartphone data or encrypt devices for ransom. With mobile devices and apps becoming increasingly important in a contactless world, they have started receiving extra attention from cybercriminals. As a result, cyber threats against mobile devices have gotten more diverse. Let’s look into the types of mobile security threats and how you can protect yourself and your loved ones.

Top Mobile Security Threats

1. Malicious applications & websites

Mobile malware has grown more prevalent alongside the increasing capabilities of our mobile devices. In Singapore, the rise of mobile malware is considered one of the top threats in the country’s cybersecurity landscape.

Like desktops, most mobile devices today have internet access. This allows threat actors to target them through malicious apps and websites, resulting in data theft, data encryption, surveillance, etc.

Furthermore, these apps come in a range of different types. The most infamous among these smartphone apps are trojans that pose as popular apps only to try to obtain private login credentials illegally.

2. Mobile ransomware

In line with the nationwide rise in ransomware incidents, CSA received 61 reports of mobile-targeted attacks in 2020, a considerable number of which were mobile ransomware. The number represented a sharp surge in ransomware incidents reported to CSA.

The mobile ransomware variant has grown to be particularly damaging due to the increased usage of mobile devices in Singapore. It encrypts personal data and files on your mobile device and then demands a ransom to release the decryption key that can restore access to the encrypted data.

3. Phishing

One of the most common attack vectors, phishing, enables other forms of cyberattacks. Most of them begin with a phishing email containing a malicious link or attachment containing malware. In fact, 70% of incidents reported to SingCERT by members of the public occurred via phishing attacks. On smartphones, phishing attacks can exploit a range of media for delivering malicious links and attachments, which include email, SMS, trojan apps, and even social media platforms.

4. Man-in-the-Middle (MitM) attacks

Man-in-the-Middle (MitM) attacks revolve around attackers intercepting your network to eavesdrop and modify the data being transmitted. While this form of attack is possible on different systems, mobile devices are particularly susceptible to it. Unlike desktops, where web traffic uses encrypted HTTPS for safe communication, mobile devices do not use such encryption for services such as SMS. As a result, these messages can be easily intercepted through malicious mobile applications using unencrypted HTTP and can be used to transfer personal information.

5. Advanced jailbreaking & rooting techniques

Jailbreaking, much like rooting, is a term for gaining root (admin) access to the underlying operating system (OS) of the device. It involves taking advantage of vulnerabilities in your mobile device’s OS to gain admin access to it. This increased permission enables threat actors to access more data and inflict greater damage than others with limited permissions can.

How to protect yourself from mobile threats

As the mobile landscape rapidly expands and diversifies, the scope for newer threats keeps rising too, prompting a need for mobile security solutions. This is especially true as remote working arrangements make these devices a more popular and crucial component of work. An effective mobile threat defence solution needs to be able to detect and respond to a variety of different attacks while providing a positive user experience.

For more robust mobile protection, ESET Mobile Security provides anti-malware, app-lock, and anti-theft features, along with offering a 360-degree view of security across mobile devices.

At the same time, don’t neglect to protect your desktops and laptops either. Powerful antivirus software such as ESET Smart Security Premium and ESET Internet Security can keep your devices safe from ransomware attacks and data breaches.