Ransomware, phishing, Trojan horses. Cyber threats are becoming ever more present and hackers more sophisticated. Data theft, reputational damage, blackmail, espionage and data destruction can no longer be ignored. You need to take some steps to protect your computer from hackers. Here are some important tips on how to protect your devices and keep them safe.
How to protect your computer and/or smartphone or tablet from hackers
Don't forget the importance of the physical security of your devices. Lock your computer or smartphone when you are not using it! The first step to protecting your device is to never leave it unattended. Also, disable lock screen notifications and Bluetooth. Thieves could use them to break into your device's system. Protecting your device from theft is just as important as the following tips.
Connect to a secure network
If you are connected to the internet, hackers could gain access to your computer. So make sure you connect to all websites with SSL/TLS and harden and make sure you secure the devices that come with overly permissive factory default configurations, e.g. IoT devices, routers, etc.
Activate and configure a firewall
A firewall is used to control the flow of information between your computer and the Internet, similar to a router. It prevents the disclosure of your personal data by creating a gateway. It will also warn you if hackers try to penetrate your computer system.
Most operating systems include a built-in firewall, as do most routers. This means you don't need to worry about setting it up as your device is already protected. But you can increase your computer security by creating a strong password that locks your firewall against any attempt to disable it.
Use antivirus and antispyware
Installing antivirus and keeping it up to date is a crucial step in protecting your computer. Also install an antivirus app on your mobile phone. Make sure you keep it up to date.
But antivirus cannot eliminate all threats. In fact, this software is based on a database of already known malware listed in an internal registry. This means that they cannot detect brand new malware.
Spyware is software designed to monitor the activities of your employees on their computers in order to gather clues that are useful for stealing data. The software aims to spy on the company in order to obtain important secret information such as patents or contracts.
Remove unnecessary software
Hackers can attack your computer by exploiting software vulnerabilities. The less software you have, the less vulnerable your computer is. Therefore, remove unnecessary software after you have confirmed that it can be safely removed. Also disable non-essential services and disable unnecessary default functions to eliminate multiple attack vectors.
Follow the PoLP (Principle of Least Privilege)
In most cases of malware infection, the malware can only be executed under the rights of the logged-in user.
To protect your device and minimise the impact the malware can have if it successfully infects your computer, you should have two types of user account:
A standard account with the minimum of functions for everyday activities;
An administrator with full operating rights on the system, who you log in to when you need to install or remove software or change system settings on your computer.
Use a secure web browser
Web browsers installed on new computers usually do not have secure default settings. Therefore, securing your browser is a crucial step in improving the security of your computer as more and more attacks are exploiting web browsers. Make sure you are using a trustworthy one and avoid unnecessary plugins/add-ons that could attack hackers.
Update frequently
Most software vendors release updates to patch or fix vulnerabilities, errors and weaknesses (bugs) in their software. And very often, hacking the software uncovers these bugs. To prevent hacker attacks, it is therefore crucial to download updates as soon as possible.
Vulnerabilities can also be present in the firmware. A firmware is a utility software designed to provide secondary functions for your devices (e.g. the ability to connect your device to any type of printer or to support a microphone or headphones).
Activate automatic updates whenever possible so that you don't have to think about it.
Use best practices for security
Only create strong and unique passwords
The password is the first line of defence against intruders and is also the most cost-effective tool for protecting your device and the easiest to set up. However, it will only be effective if you follow a few basic rules. For more tips on passwords, check out this article on password best practices.
Beware of phishing and ransomware attacks
Education is the best defence to protect your computer and phone from phishing or ransomware attacks and stop hackers on your computer. Read our articles on social engineering (phishing, spear phishing, whaling, smishing and vishing) and learn how to recognise and avoid these techniques. Take our email security and privacy awareness course and spread the word!
Use two-factor authentication
Two-factor authentication (or 2FA) acts as a second layer of protection after your password. Many websites offer to use it to secure your account and restrict access to you. Sure, 2FA adds some delay to your connection, but the benefits are huge.
Do not use illegal software
It could jeopardise your data and computer security and even break the law. hackers often use illegal software to gain access.
Make backups
Use backup software to schedule many backups per week, depending on your level of computer activity. Include all the devices and software you use in your backup area and make at least two copies:
The first on an external hard drive (hard drive, USB stick, NAS...) ;
A second on a cloud storage platform such as Mailfence documents.
Ideally, you could add a third copy on another external hard drive to store offsite to protect your files from damage that could affect your home or business.
