1. Tackling Cyber threats together
Sean O’Neil

2. What is Cyber Crime? Of course you know what a cyber criminal looks like!

3. POTENTIALLY ALL OF THEM!
Which of these is a cyber threat?
Smart fridge anecdote…
Own staff/insider
Chip in hand
Social engineering.
Frying pan
USB stick in car park
POTENTIALLY ALL OF THEM!

4. But what are some of the biggest threats?
•Insider Threat: theft/fraud/data breach i.e. deliberate non malicious act
•Malware by phishing attacks
•Data Breach
DDoS
•Social Engineering leading to scams
Theft/fraud by Customers or vendors.
Ultimately it depends on the business, how it is set up, the infrastructure and the policies and procedures, and protect mechanisms in place.
Does your BCP include no use of IT or loss of data!

5. Individual targeted cyber crimes
Phishing s:
fake Invoices, attachments & links. i.e. new vendors, changes to current vendors,
Examples:
Apple [little mix]
Vouchers - Supermarkets, on line stores, leading to fake websites
Account updates – amazon, Sky, Virgin, Utilities.
Advice – any unsolicited s. Do not press that link; simply delete. Go via normal website. Send to phishing address for company
Software scam:
Microsoft/BT router/system faults –
Dunstable case £4500.
mainly older people bank accounts emptied, threats etc.
July 74 yrs lost £65k, 83 yrs lost £45k; same every month; majority starts with approx. £200.
Advice – Do not engage, go via normal website.

6. Business targeted Cyber crime
Mandate fraud – originating from Phishing s, infecting servers & computers with virus, banking Trojan, key loggers.
Examples: Bedford company lost £100K put 27 staff at risk. Numerous solicitor companies targeted loosing between £50-150k a month.
14 companies in Luton loosing £1M in September. Bedford company lost £438k in Jan 2017
Bedford company had windows 365 compromised with poor PW, invoices sent out with new bank details. 6/17 lost £36k.
Solicitor companies being targeted – Luton March 2017, Bedford Dec
Advice - Slow down, check via second source. Get copy of our advice.
2. Ransomware – poor set ups, lack of updates,
Examples: Luton Hotel attacked over New year – pay and enter suckers list.
NHS – Windows 7 no updates, computers at Lister hospital. Other hospitals shut down as precaution.
Advice – Have cyber incident on your BCP/DR. Plan with IT dept./managed services. Ensure 2x back ups, have details of local IT repair company
23 in a Million phishing s are successful
5.5 Billion in 2011 attacks world wide
42% increase in a year to £7.8 Billion in 2012
People don’t rob banks with shotguns, they now hire a hacker – lower risk and jail time if caught
Peelian Principle – First duty of any Constable is to Prevent Crime

8. CBR - Free service to all local businesses, organisations, charities, vulnerable people
Offering a review of current practices
Suggesting improvements to ICT/physical security
Leading to greater ability to reach ‘cyber essentials’ accreditation - Minimum standard suggested for government contracts in the future.
CiSP/ regional
Cyber Trust group
POC
Sean O’Neil
Cyber Security Advisor (2219)
Bedfordshire Police Headquarters,
Woburn Road, Kempston, Bedfordshire, MK43 9AX
(+44)
(free electronic book giving basic advice)