Question

You work for an electrical contractor headquartered in Kapolei that focuses on commercial and industrial solar projects. The business has about 40 employees, mostly working in sales and installations, with some accounting, warehouse, and executive personnel.  The office is relatively small but your customers are fairly large corporations. You have recommended a number of improvements to secure the IT infrastructure in the office, but the CEO doesn't think your company is big enough for hackers to care about. You want to present an example showing why your company should be concerned.

First, view the video (Ted Talk - James Lyne "Everyday Cybercrime and what can you do about it) for some background on cyber attacks, how they work, and what they look like. (Note: The "Blackhole" software mentioned in the video has been used to deploy the Zeus and Citadel trojans which you may learn about in your research.) Next, use the web to research a cyber attack on a company called Fazio Mechanical Services (This is a real company). Finally, draft a brief memo (at least 400 words) to your boss describing what happened with Fazio, how it happened, and why your company should be concerned.

Answer 1

Hey!

Answer - The Cyber Attack On Fazio Mechanical Services

• It was a cyber attack that happened on the company in the year 2013.
• The company was responsible for making heater,refrigerators etc for the stores.
• The breech was aimed at the customers of the store called TARGET.
• It was the cyber attack in which the credit card information and personal information of more than 110 million customers was compromised.
• The attack was the E-mail malware attack at Fazio .
• According to the reports it is said that the stealing of the information started two months after the malware that was planted in the company.
• The malware that was found used for the attack was Citadel which is password stealing bot program .

How It Happened

• The attack was done with the help of the E-mail malware attack that was planted in the company.
• The attackers waited for 2 months before they started stealing all the personal information of the customers in the TARGET about their credit card detail and their personal data.
• The loophole of the attack to happen was that the company used the anti-virus that was freeware and was not bought.
• The anti-virus was no doubt was very good for detecting the malwares but it does provide the facility of real-time protection component.
• The freeware anti-virus was also for only single user and not for the corporate use for that they have to buy the anti-virus.
• So the present anti-virus could function efficiently which resulted in the cyber attack in the company which in turn paid a huge loss to the TARGET store.

Concerns

• It can be concern for our company as though our company is not that huge but the customers which we are dealing are quite important and huge companies.
• So,if any mishap happen ,it would not only affect our company but them also and in turn we would lose our all the customers and may have to pay the huge fine also to our customers companies.
• Hence,there should be very tight security system in the company so that there should be no breeches.
• For now ,our company is not big enough but in future it will grow than there will also be a risk of cyber attack that's why we should already have a strong security system in our company for these attackers.
• So that we can provide a good quality service to our customers and their information is also secure with us.
• We should learn from history, and should invest in our security system and beware of these hackers and attacks.

Hope it helps!

Please give me an upvote if you liked the answer. It will encourage me to write more such answers

Thank you!