Attacks on login credentials (password-based attacks)
Any attempt to crack a password constitutes a cyberattack. The goal is to compromise the user’s password. There are a number of different types of attacks used for this purpose:
- Brute-force attacks: The attacker manually or automatically tries a series of password combinations. Solution: Use strong passwords that include special characters and a mix of uppercase and lowercase letters.
- Dictionary attacks: The attacker uses a dictionary to try to guess passwords. Solution: Rewrite words creatively, recombine them, and add numbers and special characters.
- Social engineering attacks: Attackers attempt to steal the target’s password by using tricks and deception to obtain it. Solution: Share this information and train the relevant personnel.
To Do:
Actively minimize any risk of your password being compromised. Establish strong password policies for your organization. Passwords should be at least 8 characters long and include a mix of letters and/or numbers, with a random sequence that is difficult to guess. A password manager can be helpful. Two-factor authentication also enhances security.
Successful password attacks can be prevented by implementing strict policies within the company. YISP and regular updates provide basic protection. However, measures such as YISP cannot address the issue of lost passwords in general, as this is a matter of personal behavior.
