253.777.0763    Get SUPPORT

Graemouse Technologies Blog

Even Amazon Can Be Hacked

Even Amazon Can Be Hacked

In 2018, Amazon was struck by a considerable attack, with hackers taking funds from approximately 100 seller accounts, according to a Bloomberg report. Between May and October 2018, Amazon sellers were struck approximately 100 times, draining funds from the seller control platform to augment their own funds. According to the investigation, the first fraudulent transaction took place on May 16, 2018, with an undisclosed amount being stolen. The hackers utilized phishing attacks in order to scam their targets.

“Unknown Hack”

On May 8, 2019, almost a year to the day after the first transaction was made, an Amazon spokesperson claimed that the company had completed investigating the compromised accounts, and had been the victim of an “extensive” fraud. The extent of the fraud was large enough where two banking companies, Barclays and Prepay Technologies (who is a partial subsidiary of Mastercard) are caught up in the crime.

Ultimately, Amazon neglected to disclose the true scope of the hack, but a report by Bloomberg indicated that over one billion dollars were dispersed to merchants in 2018 via Amazon Capital Services U.K. While there is currently no figure provided by the company, if large portions of that money was subverted, it could rank as one of the largest hacks in the history of online commerce, and certainly the biggest fraud that has involved Amazon. 

Amazon, which has a business model built to be largely automated, has done a remarkable job of keeping personally identifiable information from being hacked over the years, but in today’s threat-persistent culture, even the most secure companies can have situations happen to them that jeopardize their ability to complete financial and information transactions, regardless of how much they invest in cybersecurity.

Phishing Attacks

Just because this article mentions a major fraud involving the world’s largest online retailer in no way means that hackers have moved on from trying to hack small businesses. Small businesses face the majority of hacking attacks, mainly because they have the least amount of security to thwart. In fact, if Amazon can fall victim to phishing attacks, it’s not a stretch to believe that your company is susceptible. With millions of phishing messages sent every day, many of which target small businesses, having a strategy to educate your staff is extremely important.

The best way to go about doing that is to be proactive. Getting your staff to understand that they are on the front lines of a never-ending cyberwar and what they need to learn in order to keep themselves, and your organization free from the serious risks that come from falling victim of phishing attacks. Some things you can prioritize:

  • Annual education and training - Have a comprehensive plan in place to educate new and current staff that is updated and required annually.
  • Having strong passwords - Since phishing is a form of social engineering, the hackers on the other end of the phishing attack are simply looking for access. Having strong passwords will keep them out much longer than weak ones. 
  • Avoid shadow IT - Make it clear that all software has to pass through IT first, before it is downloaded onto a workstation. It may seem inefficient at first, but the company will be better off vetting a software solution before it gains access to your organization’s network.
  • Provide cloud storage - When people are constantly on the move and have a lot of responsibilities, they will often upload their work into their personal cloud-based file storage. This can be risky behavior, even if the employee’s motives are solid. Keep your company’s data hosted on its own infrastructure.

With these four tips you can go a long way toward protecting your business, and your staff, from the detrimental characteristics of a phishing attack.

If you need help with your organization’s cybersecurity, or if you simply want some help outlining a strategy to use, contact the IT professionals at Graemouse Technologies today at 253.777.0763.

Tip of the Week: Using Digital Signage
Windows 7 and Windows Server 2008 R2 is Finally Lo...


No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Sunday, August 25 2019

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Upgrade Managed Service Sports Telephone Systems Machine Learning Business VPN Hard Drive Scam Router Phishing Network Authentication Gadgets Flexibility Managed IT Services Computer Outsourced IT Social Media Social Engineering Data Storage Passwords Botnet Communication Two-factor Authentication Password Management Education OLED Wi-Fi Managed IT Services Thought Leadership Server Applications Artificial Intelligence Virtualization Gmail Managed IT Data Security Enterprise Content Management How To Password Smartphone Update Software as a Service Collaboration CES Supercomputer Amazon Internet Word Virtual Reality Data loss Automation Infrastructure Alert Windows Backup Solid State Drive Innovation Users Software Unsupported Software Communications Augmented Reality Data Hardware Mobile Computing App Computer Care BDR Microsoft Office Google Saving Time Telephony Public Cloud Spam Blocking Law Enforcement Bandwidth Data Backup Cryptocurrency Blockchain Staff Privacy Best Practices Ransomware Google Apps Employer-Employee Relationship Settings Spam Miscellaneous IT Plan Microsoft Tech Term Paperless Office Data Recovery Government Mobile Devices Cloud Computing Processor Business Management Office 365 Business Continuity Browser YouTube Data Protection Redundancy Human Resources Chrome Proactive IT Facebook Cybercrime IT Support Content Management MSP Encryption Windows 7 Access Control VoIP IT Services Google Docs Sync Wireless Security Computers Apps Money Disaster Recovery Saving Money Google Drive Advertising Business Computing Workplace Tips BYOD Business Intelligence Email Fraud Workforce Cloud Connectivity Identity Theft Help Desk Emails Data Breach Private Cloud Telephone System Telecommuting Virtual Assistant Twitter Trending Administrator Multi-Factor Security Tip of the week Small Business Tip of the Week Keyboard Android Cortana Comparison Remote Monitoring Productivity Malware Training Bring Your Own Device Mobile Device Management Windows 10 User Error Website Information Avoiding Downtime Hackers Recovery Network Security OneNote Voice over Internet Protocol Smartphones IT Infrastructure Health Save Money Mobile Device IT Consultant Servers Quick Tips Meetings Operating System Efficiency Technology Hosted Solutions IT Management Cybersecurity Networking Vulnerability Net Neutrality Security Cameras Digital Signage User Tips Holiday Camera Internet of Things Display Windows 10

Newsletter Sign Up