Your small business clients have a significant susceptibility to spoofing and clickjacking cyberattacks, a new survey finds.
Software-as-a-service (SaaS) cybersecurity company CyberCatch randomly sampled 1,850 small- and medium-sized businesses (SMBs) in Canada across 10 industry segments. Spoofing (84.3% of SMBs vulnerable), clickjacking (73.3%) and sniffing (26.8%) were the Top 3 vulnerabilities for SMBs in their website, software or web applications, CyberCatch found.
Spoofing is caused from weaknesses that allow a website to accept invalid data, so an attacker could send scripts to fool the web server to produce usernames, passwords or even the entire customer database, CyberCatch explains in its inaugural Small and Medium-Sized Businesses Vulnerabilities Report (SMBVR), released Jan. 19. Or an attacker could spoof the content on the website and redirect traffic to an attacked-controller site and steal user credentials or install malware or ransomware.
Clickjacking allows attackers to insert stylesheets, iframes, text boxes or layers and “hijack” a webpage or portions of a webpage to trick users and steal user credentials or account secrets for easy intrusion to…
