{"id":48364,"date":"2021-02-02T07:00:00","date_gmt":"2021-02-02T15:00:00","guid":{"rendered":"https:\/\/umbrella-staging.marketops.umbrella.com\/?p=48364"},"modified":"2021-10-21T10:16:55","modified_gmt":"2021-10-21T17:16:55","slug":"small-businesses-are-facing-big-cybersecurity-challenges-in-2021","status":"publish","type":"post","link":"https:\/\/umbrella.cisco.com\/blog\/small-businesses-are-facing-big-cybersecurity-challenges-in-2021","title":{"rendered":"Small Businesses Are Facing Big Cybersecurity Challenges in 2021"},"content":{"rendered":"\n

For small business owners, much has changed in the past few years \u2013 a widespread shift to remote work, a growing push for companies to use cloud apps, the general embrace of cloud data storage. In this brave new world, one thing has remained constant: For small businesses, strong cybersecurity is essential. After all, these organizations usually have limited budgets and small IT teams. This can make them a juicy target for bad actors.<\/p>\n\n\n\n

In order to help address this problem, Cisco Umbrella created the 2021 Security Outcomes Study for Small to Midsize Businesses<\/a>. Designed to help security or IT teams in small to midsize businesses create a strong cybersecurity strategy, this report uses data provided by 850+ professionals to determine which cybersecurity practices have the greatest impact on security outcomes and objectives.<\/p>\n\n\n\n

However, understanding why certain cybersecurity strategies work for small businesses and why others don\u2019t requires knowing the challenges facing this vertical. That\u2019s what we\u2019ll be discussing in today\u2019s blog.<\/p>\n\n\n\n

The Ever-Changing Landscape of Small Business Cybersecurity<\/h2>\n\n\n\n
\"A<\/a><\/figure><\/div>\n\n\n\n

Did you know that 47% of small businesses say that they have no understanding of how to protect themselves against cyberattacks? That statistic is even more alarming when you know that 43% of all cyberattacks target small businesses.1 <\/sup>The fact is, most small businesses just aren\u2019t set up to do things securely. And adding remote work and the need for effective cloud security to the mix only makes things more complicated for small business owners.<\/p>\n\n\n\n

For example, many small businesses use free or unmonitored cloud services to share files between employees working remotely. But unmonitored file sharing can lead to data loss and \u2013 depending what data gets exposed \u2013 regulatory breaches. Employees working from home may also do things on their devices that they wouldn\u2019t have done in the office, like listening to podcasts or music, visiting risky websites, or checking personal emails. In these cases, a single pop-up asking to reconfirm a login and password for something like O365 can provide a phishing site with access to company O365 credentials.<\/p>\n\n\n\n

Small businesses need to adjust their cybersecurity strategies to accommodate for this increase in cloud activity. After all, cybercriminals have certainly made changes to take advantage of this.<\/p>\n\n\n\n

The Evolution of Cyberattacks<\/h2>\n\n\n\n

The past two years have seen a dramatic shift in cyberattack patterns, with more phishing attacks taking place than in prior years. And it\u2019s likely that this trend will continue as the use of cloud-based resources becomes more mainstream.<\/p>\n\n\n\n

What\u2019s more, in the second half of 2020, Cisco Umbrella researchers observed four major cyberthreat trends:<\/p>\n\n\n\n

Trojans and Droppers Getting a Second Life<\/strong><\/h3>\n\n\n\n

Most small business owners think of cyberattacks as a simple, one-step malware infection. However, today\u2019s Trojans and droppers are challenging that perception. That\u2019s because these attacks consist of an initial infection followed by a later compromise.<\/p>\n\n\n\n

Trojans are malware programs that compromise systems by misleading users as to the nature of the program. Once installed, Trojans typically create a backdoor that bad actors can use to exfiltrate data, execute a Distributed Denial of Service (DDoS) attack, or spy on users. Today\u2019s Trojans can also serve as the vehicle for further attacks, delivering a malicious payload through the backdoor that can lead to another infection.<\/p>\n\n\n\n

Droppers also result in multiple compromises. Designed to install additional malware, these programs can result in subsequent ransomware or backdoor compromises that occur after the initial infection.<\/p>\n\n\n\n

The Occurrence of More Multi-Stage Attacks<\/strong><\/h3>\n\n\n\n

While a well-timed cyberattack can take down a network in a matter of hours, these attacks are often the result of sophisticated, multi-stage compromises. A user might click on a link in an email that takes them to a dangerous website. This website drops malware on their machine, but the malware won\u2019t act for hours or days. Instead, this malicious program will establish an infrastructure that allows it to exfiltrate large amounts of data or execute a catastrophic final attack that small businesses without adequate cybersecurity can\u2019t repel.<\/p>\n\n\n\n

The Rise of Cryptomining<\/strong><\/h3>\n\n\n\n

Cryptomining uses computing resources to mine cryptocurrencies like bitcoin. A quick internet search will reveal dozens of stories of individuals using their own technology to legally make money cryptomining. Unfortunately, bad actors often take a short cut and operate their own cryptomining enterprises at small business owners\u2019 expense.<\/p>\n\n\n\n

These bad actors will use malware covertly installed on a computer or webcryptominers embedded in website codes to mine cryptocurrency. These programs eat up CPU resources as they run in the background, slowing machines and websites to a crawl for end users.<\/p>\n\n\n\n

The Escalation of Pandemic-Themed Campaigns<\/strong><\/h3>\n\n\n\n

Oftentimes, criminals will execute cyberattacks by preying on the fears or uncertainty of users. The pandemic made this easier than ever, as attackers tailored phishing emails to address users\u2019 concerns about COVID-19 stimulus packages, vaccine rollouts, and rapid testing. Attackers mimicked government agencies, HR departments, healthcare institutions, and news sources to obtain sensitive information and take advantage of users. For many small businesses with employees separated from on-premises cybersecurity solutions, these attacks proved catastrophic.<\/p>\n\n\n\n

What Drives New Cyberattacks<\/h2>\n\n\n\n

Using data from the Cisco Umbrella global cloud architecture<\/a>, our team was able to see what threats were trending in specific regions, industries, organizations, and verticals. This data showed that small businesses aren\u2019t immune to these cyberattacks. In fact, our research indicates that 62% of small businesses have been attacked!<\/p>\n\n\n\n

This vulnerability has many causes. A lack of funding, lack of comprehension, or general belief that cybercriminals only target large enterprises means that many small businesses don\u2019t prioritize cybersecurity in their strategic planning. But the truth is that cybercriminals often start with small businesses before moving up the chain to larger targets.<\/p>\n\n\n\n

Small businesses that have recently gone remote also make juicy targets, since attackers can take advantage of the chaos caused by a quick pivot in business operations. The recent uptick in phishing attacks illustrates this point perfectly \u2013 compromising users outside of their comfort zones is easier than targeting users relying on familiar cybersecurity protocols.<\/p>\n\n\n\n

Unique Cybersecurity Challenges Affecting Small Businesses<\/h2>\n\n\n\n

Unfortunately, the consequences for a cyberattack can be severe for small businesses. A large enterprise suffering a data breach might have to weather negative press, a damaged reputation, and maybe legal action. A small business suffering a data breach, on the other hand, often doesn\u2019t exist long enough to weather these consequences. Stolen passwords, compromised financials, reduced brand reputation, lengthy downtime \u2013 the fallout of a cybersecurity incident can quickly drive small business under.<\/p>\n\n\n\n

What\u2019s more, small businesses face key problems when tackling cybersecurity challenges:<\/p>\n\n\n\n