The Optus and Telstra cyber attacks and the importance of Cyber Security

What is a cyber security attack?

Whenever a system or network is accessed by a third party without proper authorisation it is referred to as a cyberattack, with the individual or team behind the breach referred to as a hacker or cyber attacker. 

Cyber attacks can have a number of undesirable outcomes for companies, including anything from data theft impacting customers, through to internal embezzlement and loss of money. The sting on the business bottom line, reputational damage and loss of customer base are just some of the negative effects a cyber attack can have on a company.

Types of cyber attacks

Increasingly, there are more varieties of cyber attacks being created by hackers and discovered by Cyber Security Professionals. While there are several types of attacks commonly carried out, here’s the top three.

• Malware

A malware attack is a frequent go-to for hackers and refers to the malicious software viruses including ransomware, spyware and trojans. 

The basic tactic of malware is to seek out vulnerability in a network or system. Generally it will be triggered by a user clicking on a link, which sets off the download of an email attachment. In the case of ransomware, a user’s access to different components of their network or systems will be blocked.

Spyware comes in the form of software, which when downloaded can steal all of a user’s data, often without user knowledge, with trojan viruses posing as genuine software and resulting in the same outcome.

• Phishing 

Another heavily used approach by hackers is known as phishing. Cyber criminals essentially pretend to be a known and trusted contact, writing and sending emails to users. If the user opens and reads the email and clicks on the link within it, this will result in the hackers gaining access to the user’s accounts and associated data. Malware can also be installed via this tactic. While some attempts at phishing may be very obvious, there are many becoming more sophisticated and harder to detect. 

• SQL injection 

Cyber criminals are increasingly using Structured Query Language (SQL) injection as their doorway to gaining system access to manipulate databases. Administrative rights can also be accessed with this approach. 

Essentially, the hacker injects code into what they determine to be a vulnerable search function box on a website, which if not protected, will force the system server to display important data.