Deception technology crucial to unmasking data theft

March 2024 Information Security, Security Services & Risk Management


Iniel Dreyer.

The ‘silent theft’ of data is an increasingly prevalent cyber threat to businesses, driving the ongoing leakage of personal information in the public domain through undetected attacks that cannot even be policed by data privacy legislation. As the term implies, the exfiltration of data from corporate networks is often done without even the target themselves being aware of the attack. In such cases, cybercriminals only want to steal personal information—without being detected. This data is then sold for a tidy profit.

While the Protection of Personal Information Act (PoPIA) in South Africa was designed to safeguard personal data from theft, misuse, and malicious activities, the legislation cannot be applied to undetected and thus, unreported attacks.

Unlike a ransomware attack, the ‘silent theft’ of data does not involve financial extortion and the encryption of information. Instead, hackers steal valuable data from organisations to sell on the dark web. This illicit practice is largely behind the proliferation of spam calls and marketing that flood ordinary people's lives, not to mention the increase in banking fraud.

Lack of alignment

The gap between PoPIA's aims and companies’ approaches to data protection can be found in the lack of alignment between the business and IT divisions' goals. The business, which has certain legal requirements to meet in terms of data privacy, must be able to rely on the IT division to ensure compliance.

Unfortunately, the two divisions often talk past each other, resulting in the acquisition of technology tools and solutions that ultimately do not meet business needs. Since the money has been spent, companies tend to try to reverse-engineer the solutions to make them work, which is often when things go wrong.

Most organisations only realise they have been compromised when they are asked for a ransom, so ‘silent theft’ continues undetected. That is because most organisations do not have the right security tools in place to detect this type of attack.

To defeat attackers whose aim it is to stay on a corporate network for as long as they can before being caught, organisations must look towards deception technology, which will help them respond proactively to an infiltration before any real damage is done. With data theft, it is crucial to be proactive as, once the information is stolen, nothing can be done about it.

Fooling the hacker

Deception technology deploys honeypots, which are fake assets and systems on an organisation’s network that a hacker perceives as a real system. These decoys can imitate any IT equipment or applications and typically have a vulnerability that makes them tempting to attack.

When attacked, honeypots will alert the network administration team that an intrusion has been detected. Deception technology can also detect the origin of the attack, where access was gained to the network, and the type of device used to carry out the hack. This allows IT teams to take the necessary steps to prevent the attackers from causing any real harm.

It is key that companies have a security framework and posture in place, and must understand what products they have and whether these meet their specific requirements for cyber resiliency. Cyber resiliency enables companies to defend against cyberattacks, and part of this is proactive data management to prevent unauthorised access to sensitive data.

A backup and recovery strategy is not enough to stop the ‘silent theft’ of data. A more proactive stance should be adopted through the deployment of deception technology. However, organisations must ensure that they engage a competent service provider to implement and support cyber resiliency within their environment.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
From QR code to compromise
Information Security News & Events
A new attack vector involves threat actors using fraudulent QR codes emailed in PDF attachments to bypass companies' phishing security measures by requiring users to scan the code with their mobile phones.

Read more...
Boost revenue streams for MNOS
News & Events Security Services & Risk Management Financial (Industry)
ReveNet has introduced its new solution, designed to safeguard and potentially boost revenue streams in an increasingly challenging landscape for MNOS. The new platform combines advanced analytics and is built on trust, transparency, and sustainability principles.

Read more...
Organisations fear AI-driven cyberattacks, but lack key defences
Kaspersky Information Security News & Events Training & Education
A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence in cyberattacks, with 56% of surveyed companies in South Africa reporting a rise in cyber incidents over the past year.

Read more...
Vodacom Business unveils new cybersecurity report
Information Security IoT & Automation
Cybersecurity as an Imperative for Growth offers insights into the state of cybersecurity in South Africa, the importance of security frameworks in digital resilience and the latest attack methods adopted by cyberattackers.

Read more...
Smart surveillance and cyber resilience
Axis Communications SA Surveillance Information Security Government and Parastatal (Industry) Facilities & Building Management
South Africa’s critical infrastructure sector has to step up its game regarding cybersecurity and the evolving risk landscape. The sector has become a prime target for cybercriminals on top of physical threat actors, and the consequences of an incident can be far-reaching.

Read more...
NIS2 compliance amplifies skills shortages and resource strain
Information Security Security Services & Risk Management
A new Censuswide survey, commissioned by Veeam Software reveals the significant impact on businesses as they adapt to this key cybersecurity directive, with 95% of EMEA businesses siphoning other budgets to try and meet compliance deadline.

Read more...
Cybersecurity needs 4,7 million professionals
Information Security
Despite all the efforts organisations worldwide put into preventing cyberattacks, global cybercrime has snowballed to $9,2 trillion in 2024 and is expected to grow by another 70% to $15,6 trillion by the end of a decade.

Read more...
SA company develops world-first safe K9 training for drug detection
Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
Autonomous healing systems are the future
Infrastructure Information Security AI & Data Analytics
Autonomous healing software, an emerging technology, is gaining traction for its potential to transform how organisations manage software maintenance, security, and system performance.

Read more...