By Simone Brew, Managing Director of Matthews Folbigg Lawyers
As we approach the end of the year and staff begin to take a much-needed break for the holiday season, it is essential to stay vigilant about cyber security risks.
The Increase in Cyber Attacks over the Holiday Season:
In 2021, Cisco identified in their Cyber Security Threat Trends report that phishing attacks had a 52% increase during the holiday period. There are numerous reasons why we see spikes in cyber attacks over the holidays.
On one hand, in most industries, the December/January period is a typically a period where businesses are quieter and more relaxed, and staff take time off. As businesses become understaffed and employees begin to become more relaxed, it is inevitable that staff will become complacent with cyber security practices. Additionally, the use of out of office messages indicates to cybercriminals ideal periods where a delayed response may make an attack easier to execute.
On the other hand, in industries such as retail, the increase in sales and customer demand puts added pressure on resources. This often results in an influx of temporary workers and the use of additional systems, increasing the avenues for vulnerabilities.
Law Firms are a Primary Target:
In the lead up to the holidays, the New South Wales Law Society and Lawcover have warned law firms that there is already a significant escalation in cybercriminals contacting lawyers to steal money from their firm’s Office and Trust Accounts. A common scam being executed involves a cybercriminal pretending to be from the bank and requesting the law firm’s security or PIN code. Interestingly, the cybercriminals are often quite knowledgeable about the firm’s accounts, making it more difficult for the lawyers to identify the scam.
Tips to Stay Protected:
- The bank will never ask for passwords, security codes or PINs over the phone. If you receive a call requesting this information, do not provide it over the phone.
- If you have been emailed bank account details, phone the business to confirm before paying funds electronically. Use the phone number that is on the business’ website, rather than the phone number in the email.
- Do not ignore bank account alerts, this is often the first indication that an attack is being attempted.
- Be aware of unusual or suspicious emails, SMS, phone calls, especially if requesting sensitive information. Remember to check and verify the sender’s email address and check for typos or grammatical errors.
- Inspect any links or attachments before clicking or opening them. If in doubt, do not click it and delete it.
- Check with your business’ IT and cyber security team for their operating hours over the holiday season.
- Be aware of using free/unsecured public Wi-Fi or accessing confidential information out of the workplace.
By staying vigilant and adopting smart cybersecurity practices, you can reduce your cyber risk and enjoy a more secure holiday season.
Get in touch today
Matthews Folbigg Lawyers has a specialist team dedicated to Cyber Security. If you would like more information or advice in relation to cyber security, contact our cyber law team using the contact form below.
