Kaspersky Share Tips Protect Your Business From Bruteforce Attacks

Illustration of the Bruteforce attack (photo: SoSafe)

JAKARTA - Based on findings from Kaspersky, Vietnam, Indonesia, and Thailand recorded the highest number of gross attacks in Southeast Asia during the first half of 2024, with more than 8.4 million, 5.7 million, and 4.2 million attacks, respectively.

Meanwhile, Singapore has more than 1.7 million incidents, the Philippines has more than 2.2 million, and Malaysia with the lowest number of gross attacks, which is more than 1 million attacks.

This attack could be very detrimental for individuals, companies, or organizations. Therefore, some security measures are needed to protect your company.

To that end, global cybersecurity firm Kaspersky recommends some action tips to avoid a bruteforce attack:

Use a strong and unique password. Don't use the same password on multiple websites, social media accounts, or financial accounts. Consider using password managers.

Apply two-factor authentication (2FA). Consider using tools such as the authentication app.

Do not expose remote desktop/management services (such as RDP, MSSQL, etc.) to public networks unless absolutely necessary and always use strong passwords, two-factor authentication, and firewall rules for such services.

Monitor access and traffic by having visibility on the network to find unusual activity, and control user access as needed and requirements to minimize unauthorized access risk and data leakage.

Prepare a security operations center (SOC) using the SIEM tool (information management and security events), to monitor and analyze information security incidents.

Use the latest Threat Intelligence information to have deep visibility of cyber threats targeting your organization and provide the most comprehensive and up-to-date information to your InfoSec professionals about potential malicious actors and their TTPs.

If the company does not have a special IT security function and only has a general IT admin that may not have the specialist skills needed for expert-level detection and response solutions, consider subscribing to manageable security solutions.

For very small business protection, use a solution meant to help you manage cybersecurity without even involving IT administrators.