{"id":7011,"date":"2021-05-28T16:12:06","date_gmt":"2021-05-29T00:12:06","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=7011"},"modified":"2021-05-28T16:12:08","modified_gmt":"2021-05-29T00:12:08","slug":"how-to-prevent-malware-attacks","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/","title":{"rendered":"How to Prevent Malware Attacks (7 Ways)"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">The <a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2020_IC3Report.pdf\">FBI IC3<\/a> reports consumer victims reported total cybercrime-related losses of $4.2 billion in 2020, a 69% increase from 2019. Part of these losses resulted from malware attacks \u2014 so let&#8217;s talk about how to stop malware attacks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Knowing how to prevent malware attacks is essential for any business that operates online or handles digital data. Cybercriminals want your data \u2014 it\u2019s a valuable resource that they can use to carry out crimes or sell to other bad guys.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But how big a deal are malware attacks? Big. They\u2019re often used to help carry out cyber attacks that result in data breaches, noncompliance, and many other issues. <a href=\"https:\/\/www.capita.com\/sites\/g\/files\/nginej291\/files\/2020-08\/Ponemon-Global-Cost-of-Data-Breach-Study-2020.pdf\">IBM\u2019s Cost of Data Breach 2020<\/a> reported that the average cost of a data breach was $3.86 million and took 280 days to identify and contain. <a href=\"https:\/\/www.gartner.com\/en\/documents\/3889055\">Gartner\u2019s research<\/a> predicts the global research security market will reach $170.4 billion in 2022. 23% of the data breaches resulted from human error observed IBM.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So, this brings us back to our original question of how to prevent malware attacks. But before we dive into that, let\u2019s quickly recap what malware and malware attacks are in the first place. &nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is Malware and What\u2019s Its Role in a Malware Attack?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Malware is a type of software or code that users create to cause harm or disruptions to others. A malware attack occurs when someone uses one or more types of malware to gain unauthorized access to a target\u2019s device, network, or other resources. The malware infection may cause obvious disruptions or may be stealthy, operating unseen in the background.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Malware can be divided into 10 broad categories based on their programming and uses, or how bad guys distribute or spread them. Some types of malware tend to overlap, and many sophisticated cyber-attacks use more than one type of malware. The following figure shows a quick overview of the different <a href=\"https:\/\/cheapsslsecurity.com\/blog\/10-types-of-malware-your-it-guy-warned-you-about\/\">types of malware<\/a>:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"748\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/types-of-malware-examples-1024x748.png\" alt=\"How to prevent malware attacks starts with knowing what malware is and how it's used to infiltrate your IT environment and steal data\" class=\"wp-image-7014\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/types-of-malware-examples-1024x748.png 1024w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/types-of-malware-examples-300x219.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/types-of-malware-examples-768x561.png 768w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/types-of-malware-examples.png 1205w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption>A figure showing the different types of malware.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s look at a short explanation of these types of malware and how they\u2019re used in malware attacks. After that, we&#8217;ll get to how to prevent malware attacks from being successful against your business.<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li><strong>Trojans.<\/strong> This kind of malware is masked as a software update or app. When the software update is installed, the malware is also installed on your computer. A trojan horse malware can lead to other malware attacks, including ransomware, cryptojacking malware, and spyware.<\/li><li><strong>Viruses.<\/strong> A virus is malware attacking the victim\u2019s computer by piggybacking on other programs. When the host program is run, the virus is activated. After activation, a virus multiplies itself and spreads the infection within the computer. It is also programmed to send itself to other computers in the same network.<\/li><li><strong>Worms. <\/strong>A worm is a type of malware that does not require a human to activate it. A worm is quite dangerous as it can infect, multiply, and send itself to other computers. Due to this, worms spread quickly and are hard to stop.<\/li><li><strong>Spyware. <\/strong>Spyware is a category encompassing many types of malware. Cybercriminals use it to observe and record users\u2019 behaviors and keystrokes to capture sensitive data (such as login credentials).<\/li><li><strong>Adware. <\/strong>Compared to others, adware is often considered a relatively harmless type of malware. Adware collects users\u2019 data, including their browsing and search histories, shopping preferences, and cart details, to sell to advertisers or display targeted ads.<\/li><li><strong>Fileless Malware. <\/strong>Fileless malware does not have its own file for malicious code. It candidly attaches its malicious code to other programs. It is improbable to discover fileless malware due to this feature. This kind of malware often links its code to white-listed programs to avoid detection in a routine scan.<\/li><li><strong>Ransomware. <\/strong>A cybercriminal uses malware to encrypt victims\u2019 data, devices, or IT systems to carry out a ransomware attack. They demand a ransom in exchange for a decryption key. In some cases, they\u2019ll exfiltrate the data to a server they control to use as they please. <a href=\"https:\/\/enterprise.verizon.com\/resources\/reports\/dbir\/2020\/results-and-analysis\/\">Verizon<\/a> describes ransomware as a \u201cbig problem getting bigger.\u201d<\/li><li><strong>Cryptojacking Malware.<\/strong> Cybercriminals use cryptojacking malware to mine cryptocurrencies such as Bitcoin and Ethereum. They create a network of infected computers that run mining programs in the background without the user\u2019s knowledge. As a result, the performance and processing capabilities of the victims\u2019 devices will decrease drastically.<\/li><li><strong>Rootkits. <\/strong>A rootkit is a remote access tool (RAT), often malicious, that provides an attacker with remote administrative access to a target\u2019s device, network, or other IT resources. The criminals can use this access to change or even pull down the infected website.<\/li><li><strong>Botnet malware.<\/strong> Cybercriminals sometimes infect the computer, not for the data stored on that computer but to use it as a puppet to commit some other crime. They build armies of such computers referred to as bots or zombies. These armies work for the criminals per se, or the criminals rent it to others to use maliciously. The bots or the zombie computers are unaware of them being used maliciously.<\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">How to Prevent Malware Attacks \u2014 7 Things You Should Start Doing Now<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Understanding how to stop malware attacks is critical to your organization\u2019s security and sensitive data. Preventing a malware attack boils down to having the processes, policies, and IT security tools in place to prevent them from occurring. However, it also required training your end-users to recognize and respond to common methods cybercriminals use to spread malware.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Use Network and Endpoint Security Tools<\/h3>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-use-right-tools-1024x640.jpg\" alt=\"An abstract illustration of security tools in action\" class=\"wp-image-7016\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-use-right-tools-1024x640.jpg 1024w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-use-right-tools-300x188.jpg 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-use-right-tools-768x480.jpg 768w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-use-right-tools-1536x960.jpg 1536w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-use-right-tools.jpg 1600w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">First on our list of how to prevent malware attacks: use the right tools. Your IT experts should look into every possible route through which a criminal can use malware attacks against your organization\u2019s devices and network. Using a combination of endpoint and network security protection tools is the answer to preventing many malware-related security woes.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Install Antivirus or Anti-Malware Software<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Antivirus and anti-malware tools are useful for identifying and protecting your endpoint devices or larger network against many traditional and new malware-related threats. And it\u2019s easy to see why such tools are necessary considering that <a href=\"https:\/\/www.kaspersky.com\/about\/press-releases\/2020_the-number-of-new-malicious-files-detected-every-day-increases-by-52-to-360000-in-2020\">Kaspersky<\/a> detected an average of 360,000 new malicious files every day in 2020.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Different antivirus and anti-malware tools offer varying levels of protection:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Browser-level protection:<\/strong> Some browsers (like Chrome) have built-in malware protection tools that help to protect you from such threats online. This helps to prevent malware from reaching your device via the browser but doesn\u2019t scan your device for existing threats.<\/li><li><strong>User device-level protection:<\/strong> This tool, which you download onto your mobile device or computer, scans for malware or viruses that may already exist on your device. If it detects any, it\u2019ll notify you so you can choose to quarantine or remove them.<\/li><li><strong>Network-level protection:<\/strong> This type of network appliance guards against malware attacks and other threats that come in through your network\u2019s traffic.<\/li><li><strong>Server-level protection:<\/strong> This software is great for protecting your organization\u2019s servers against viruses and other malware-related threats.<\/li><\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Use A Firewall<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">A firewall is another layer of protection that gives you more robust security of your devices and network. A firewall acts as a barrier between the internet and your IT infrastructure, blocking many types of malware attacks and other malicious activities (both inbound and outbound). They come in hardware and software varieties, although many organizations use both. So, if you\u2019re wondering how to prevent malware attacks, this is a good way to do it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Any unauthorized access to your network is identified, and the traffic is stopped if found malicious by the firewall. A firewall also allows the user to configure what traffic is allowed and what has to be blocked. That means the user can specify the IP addresses or ports that have to be blocked or allowed. While not 100% effective, a firewall can make a lot of difference in protecting your network and devices from malware attacks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Use Encryption to Secure Data In Transit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cybercriminals use every possible opportunity to hijack your data, including the time when it is in transit. The conversation between the website and server, the email correspondence with outsiders,&nbsp; the internal correspondence of the organization can be intercepted and used by the bad guys for their malicious purposes. The enterprise must keep the data-in-transit secure from their prying eyes. Some of the ways to achieve this goal are as follows:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Use SSL\/TLS Certification For Your Website<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">An SSL\/TLS certificate (which enables the secure socket layer or, more accurately, the transport layer security protocol) is a digital certificate that\u2019s a core component of public key infrastructure (PKI). It\u2019s what organizations use to authenticate their servers and establish secure, encrypted connections between their websites and users\u2019 web clients. This is what makes the \u201cHTTPS\u201d appear in your browser\u2019s address bar!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most browsers (including Chrome and Mozilla) brand websites as being \u201cnot secure\u201d if they don\u2019t have TLS certificates installed. The visitors\u2019 trust in your website dwindles when they see this ugly warning in their browser\u2019s address bar. Needless to say, HTTPS plays a pivotal role in a company\u2019s online business.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Use Email Security Tools like S\/MIME Certificates to Protect Sensitive Messages<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Keeping your email data secure is a concern for every business. An email signing certificate or <a href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-s-mime-what-it-is-why-you-need-it\/\">S\/MIME certificate<\/a> is a PKI-based tool that enables you to exchange digitally signed and encrypted emails with other S\/MIME certificate users. It also ensures that recipients know it\u2019s secure, legitimate, and arrived in an unaltered state.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It works by having you (as the sender) encrypt the email using the recipient\u2019s public key, which they can decrypt upon receipt using their corresponding private key. This process ensures data integrity (letting your recipient know you sent it and it hasn\u2019t been altered in any way) and secures your message before it leaves your mailbox.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Using an email signing certificate ensures only your intended recipients can access your messages and prevents outsiders from accessing or modifying your messages. This protects your email data both while it\u2019s in transit and at rest on your recipient\u2019s server until they decrypt it.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Educate Your Employees to Recognize Common Cyber Threats &amp; Scam Tactics<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The security of your organization is only as strong as its weakest link. <a href=\"https:\/\/www.kaspersky.com\/blog\/the-human-factor-in-it-security\/\">Kaspersky<\/a> reports that 52% of the businesses regard their employees as their biggest vulnerability or risk factor. These statistics of human errors are alarming. Regular training of the employees should be done in every organization to raise awareness about cyber security and curb the risk of malware attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No matter how much you spend on cybersecurity tools and IT staffing, if your non-IT employees are not trained to watch out for possible threats, all of those investments still might not help. Cybercriminals target those employees, which is why all employees should be trained regularly in cyber security procedures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cyber awareness training educates users about real-world threats and scams and how to respond to them. This training should cover:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>General cyber security best practices.<\/li><li>Your organization\u2019s cyber and acceptable use policies.<\/li><li>Common types of cyber attacks and online threats (using real-world examples of phishing emails, malicious websites and ads, etc.).<\/li><li>Common tactics cybercriminals use (such as social engineering, <a href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/\">email spoofing<\/a>, <a href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-a-malicious-url\/\">malicious URLs<\/a> or email attachments, etc.).<\/li><li>How they should react or respond to suspicious\/potentially malicious messages and situations.<\/li><li>Who they should reach out to internally (i.e., report a situation to someone in IT) and how to report when something goes wrong.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Here are some quick examples of topics to cover with your employees to help you prevent malware attacks.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Don\u2019t Open Emails From Dodgy Sources<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Phishing is a type of cyber attack cybercriminals love to use. These campaigns incorporate social engineering techniques to manipulate or trick victims into handing over sensitive data or downloading malware onto their devices. This is why users should never open or otherwise engage with suspicious emails.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our article on <a href=\"https:\/\/cheapsslsecurity.com\/blog\/what-is-email-spoofing-an-explanation\/\">examples of phishing emails<\/a> will give you a peek into what fake emails look like.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Beware Phone Call Scams<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Cyber scams can occur online or over the phone. Fake tech support scams continue to rise, according to the <a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2020_IC3Report.pdf\">FBI\u2019s IC3 Report 2020<\/a>. They received 15,421 complaints from 60 countries, and the total loss to victims amounted to $146 million, a 171% increase from 2019. The following figure illustrates the increasing losses sustained by tech support fraud victims:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"717\" height=\"436\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/tech-support-fraud-scams.png\" alt=\"A chart using FBI IC3 data that showcases the increase in losses due to tech support fraud\" class=\"wp-image-7015\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/tech-support-fraud-scams.png 717w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/tech-support-fraud-scams-300x182.png 300w\" sizes=\"(max-width: 717px) 100vw, 717px\" \/><figcaption>Data source: FBI IC3 2020 Internet Crime Report. This chart shows an increase in victim losses over the last three years.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">These scams are an effective way for cybercriminals to get unsuspecting users to download malware onto their devices. They can and will say virtually anything to make you trust them and reveal personal information or download something dangerous. Teach your employees that if they get a call or computer message saying their devices are infected with malware, they should call your IT team immediately.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Don\u2019t Click on Popups or Malicious Links<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Malicious links and popups are one way to get malware on your device. If you see a popup saying your device is infected by malware and the popup asks you to call a certain helpline number, it\u2019s likely a scam. The popup might even want you to click on a particular link for your benefit. If you click on such a link, you might be the next victim of cyber-crime.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Update Your IT Systems, Plugins &amp; Software Regularly<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When developers discover a vulnerability in their software, they release patches or other updates to fix those issues. However, many businesses take these updates for granted and procrastinate. They may wait weeks or months to apply them \u2014 or never apply them at all \u2014 leaving their systems vulnerable to malware and various cyber attacks. &nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybercriminals know this and take advantage of the situation. They can use these unpatched vulnerabilities to attack organizations that haven\u2019t updated their software. Thus, it\u2019s crucial to roll out updates as soon as possible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This applies to everything from software applications to your IT infrastructure\u2019s firmware and operating systems. Additionally, anti-malware or antivirus software also need to be updated regularly. This will give you protection from some of the latest known threats.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Use Secure Authentication Methods<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Continuing on our list of how to prevent malware attacks, we now turn our gaze to authentication. An enterprise can secure its network by using strong authentication methods. Instead of using just passwords, organizations should frame a policy of using more robust authentication methods, including:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Employ Multifactor Authentication (MFA)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Multifactor authentication method involves the use of two or more types of identifying factors that fall within the following three categories:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Something you <strong>know<\/strong> (such as a password or a passphrase);<\/li><li>Something you <strong>have<\/strong> (such as a mobile authentication app, a CAC card, or a physical security token); and\/or<\/li><li>Something you <strong>are<\/strong> (biometrics such as your fingerprint, facial scan, retinal scan, voiceprint, etc.).<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s unlikely that a cybercriminal will have access to two or more of the above identifiers for your account. Thus, MFA enables a higher level of security to prevent malware attacks.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Use Strong Passphrases Instead of Passwords<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Modern secure passwords are incredibly complex, using combinations of uppercase and lowercase letters, numbers, and special characters. They\u2019re difficult to type and even harder to remember (especially when they have <em>dozens<\/em> of them). However, they\u2019re not always hard for computers to guess.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/pages.nist.gov\/800-63-3\/sp800-63b.html\">National Institute of Standards and Technology (NIST<\/a>) says that password length is more important than complexity. This is why the <a href=\"https:\/\/www.fbi.gov\/video-repository\/protected-voices-passphrases-and-mfa-102319.mp4\/view\">FBI recommends using passphrases instead of complex passwords<\/a>. So, instead of using a complex password like Yif38%4vHJXelr, users should opt for a secure passphrase like CandlestickElephant23MoonTusks or GrilledTrickFort900Noon.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Check out this FBI video to learn more:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe title=\"Protected Voices: Passphrases and Multi-Factor Authentication\" width=\"770\" height=\"433\" src=\"https:\/\/www.youtube.com\/embed\/iH28PKBB6wM?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Use Passwordless Authentication Methods<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Passwordless authentication is a lot like it sounds \u2014 it\u2019s a way to authenticate yourself without using a password. That\u2019s because it relies on other methods of identifying and authenticating someone to allow them access to a protected resource. These identifiers include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>One-time PINs (OTP), codes, or links,<\/li><li>Physical pieces of hardware such as tokens or ID cards, or<\/li><li>Client authentication certificates.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The last category allows users to authenticate themselves to your server through the use of PKI digital certificates. So long as their user profiles have the right permissions or authorizations, they can establish a secure connection with the server to access your secure resource or service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Speaking of authentication, this brings us to our next related approach for how to prevent malware attacks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Implement Identity Management &amp; Access Controls<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Identity and access management (IAM) is a framework for authorization and authentication. It\u2019s all about verifying a user\u2019s identity and permissions before giving them access to a particular system. Employees of the organization should have limited access to sensitive data even if they are trustworthy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s considered a good practice to grant limited privileges to the least number of people (i.e., only those who need it to do their jobs). By giving administrative rights to everyone on the network, you increase your organization\u2019s attack surface and risk. Even if you trust everyone on your network, they might make a mistake, leaving the network door open to cybercriminals.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you have admin privileges, use a separate account to browse the net and perform non-administrative duties. Only when you need to perform administrative tasks should you log in to the admin account. This way, you can guard your computer and network better. Additionally, avoid using use your administrative account on an open network. Remember to log out of your admin account when you\u2019re not handling administrative tasks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Download Files, Software &amp; Tools From Official Sources Only<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This brings us to our last item on the list of ways for how to prevent malware attacks. Downloading software or files from dodgy websites and stores is often a source of malware. If your infected device connects to a network, then you\u2019re giving cybercriminals a way to gain access to your network. There, they can move laterally to try to find other vulnerable devices to infect or sensitive information they can steal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is why every company should ensure that the software should come from reliable sources. The software should be signed with a reliable code signing certificate. Companies that use code signing certificates with the highest level of validation avoid displaying these types of messages when desktop users download their software:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"457\" height=\"370\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2019\/03\/code-signing-warning.png\" alt=\"Code Signing Warning\" class=\"wp-image-5486\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">But what about mobile devices? Does your company use mobile or \u201csmart\u201d devices? Mobile and IoT devices can become an easy target for criminals to find a way to your entire network. <a href=\"https:\/\/securelist.com\/mobile-malware-evolution-2020\/101029\/#:~:text=Interestingly%20enough%2C%20the%20share%20of,it%20reached%2014.62%25%20in%202020.&amp;text=Adware%20creators%20are%20interested%20in,malware%20developers%20to%20achieve%20this.\">Kaspersky<\/a> reports that their mobile products and technologies detected the following in 2020:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>5,683,694 malware installation packages,<\/li><li>156,710 new mobile banking trojans,<\/li><li>20,708 new mobile ransomware trojans.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Kaspersky\u2019s report for 2019 and 2020 identifies multiple types of malware among the top mobile threats:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"717\" height=\"435\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/mobile-malware-threats.png\" alt=\"A chart using Kaspersky data illustrating top mobile threats, including multiple types of malware\" class=\"wp-image-7017\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/mobile-malware-threats.png 717w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/mobile-malware-threats-300x182.png 300w\" sizes=\"(max-width: 717px) 100vw, 717px\" \/><figcaption>Data source: Kaspersky Labs.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Although that brings us to the end of the methods of how to prevent a malware attack, there is still one more thing that we think is relevant to this topic.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Create and Maintain Regular (Encrypted) Backups of Your Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Although creating regular backups is not a method to secure your network from malware attacks, it certainly helps when you face a malware attack. That\u2019s because backing up your company\u2019s data and files is not just a good rule of thumb, it\u2019s often a compliance requirement as well.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Following the 3-2-1 data backup rule is a great way to be data-ready in emergencies (like when you\u2019re trying to stop a malware attack or recover from one). The technique, which the U.S. government\u2019s <a href=\"https:\/\/us-cert.cisa.gov\/sites\/default\/files\/publications\/data_backup_options.pdf\">US-CERT, United States Computer Emergency Readiness Team<\/a> recommends, entails the following:<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li><strong>Keep <em>three<\/em> copies of any important files.<\/strong> This includes one primary version and two backup copies.<\/li><li><strong>Use <em>two<\/em> different media types to store your files and data.<\/strong> This approach provides additional projection against multiple hazards.<\/li><li><strong>Always securely store <em>one<\/em> copy of your data at an off-site location.<\/strong> Sometimes, it\u2019s even recommended to keep a copy in a different geographic area in case of a natural disaster.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The following figure shows this technique:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"789\" src=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule-1024x789.png\" alt=\"An illustration of the 3-2-1 backup rule\" class=\"wp-image-7018\" srcset=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule-1024x789.png 1024w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule-300x231.png 300w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule-768x591.png 768w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule-260x200.png 260w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule-87x67.png 87w, https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/3-2-1-backup-rule.png 1196w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption>A figure is showing the 3-2-1 backup rule for data storage.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">By following this technique, you can ensure that you have access to your data through backups in an emergency.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Final Words On 7 Ways To Prevent Malware Attack<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A cybercriminal can attack you from any side, anywhere, anytime, and anyhow. They use different types of malware and deployment tactics to infect your devices and networks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I will leave you with <a href=\"https:\/\/docs.house.gov\/meetings\/IG\/IG00\/20170621\/106152\/HHRG-115-IG00-Wstate-JohnsonJ-20170621.pdf\">a statement by Jeh Johnson<\/a>, the former U.S. Secretary of Homeland Security, as food for thought:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>\u201cCyberattacks of all manner and from multiple sources are going to get worse before they get better. In this realm and at this moment, those on offense have the upper hand. Whether it\u2019s cyber-criminals, hacktivists, or nation-state actors, those on offense are ingenious, tenacious, agile, and getting better all the time. Those on defense struggle to keep up.\u201d<\/em><\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">This is why having strong cyber defenses and cyber-aware employees and users is critical. By following strict preventive measures and educating users, you can reduce the chances of malware attacks &amp; scam techniques being successful against your organization.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The FBI IC3 reports consumer victims reported total cybercrime-related losses of $4.2 billion in 2020, a 69% increase from 2019. Part of these losses resulted from malware attacks \u2014 so let&#8217;s talk about how to stop malware attacks Knowing how to prevent malware attacks is essential for any business that operates online or handles digital<\/p>\n","protected":false},"author":8,"featured_media":7013,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[417],"tags":[452,449],"class_list":["post-7011","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-how-to-prevent-malware-attacks","tag-malware-attack"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Prevent Malware Attacks (7 Ways)<\/title>\n<meta name=\"description\" content=\"Here are 7 tips for how to prevent malware attacks from being successful against your organization, employees and IT environment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Prevent Malware Attacks (7 Ways)\" \/>\n<meta property=\"og:description\" content=\"Here are 7 tips for how to prevent malware attacks from being successful against your organization, employees and IT environment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/\" \/>\n<meta property=\"og:site_name\" content=\"Savvy Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cheapsslsecurities\" \/>\n<meta property=\"article:published_time\" content=\"2021-05-29T00:12:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-05-29T00:12:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-feature.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Savvy Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Savvy Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/\"},\"author\":{\"name\":\"Savvy Security\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\"},\"headline\":\"How to Prevent Malware Attacks (7 Ways)\",\"datePublished\":\"2021-05-29T00:12:06+00:00\",\"dateModified\":\"2021-05-29T00:12:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/\"},\"wordCount\":3540,\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/how-to-prevent-malware-attacks-feature.jpg\",\"keywords\":[\"How to Prevent Malware Attacks\",\"Malware Attack\"],\"articleSection\":[\"SMB Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/\",\"name\":\"How to Prevent Malware Attacks (7 Ways)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/how-to-prevent-malware-attacks-feature.jpg\",\"datePublished\":\"2021-05-29T00:12:06+00:00\",\"dateModified\":\"2021-05-29T00:12:08+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\"},\"description\":\"Here are 7 tips for how to prevent malware attacks from being successful against your organization, employees and IT environment.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/how-to-prevent-malware-attacks-feature.jpg\",\"contentUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/how-to-prevent-malware-attacks-feature.jpg\",\"width\":1600,\"height\":1000,\"caption\":\"how to prevent malware attacks feature image\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/how-to-prevent-malware-attacks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Prevent Malware Attacks (7 Ways)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/\",\"name\":\"Savvy Security\",\"description\":\"Practical cybersecurity advice\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/#\\\/schema\\\/person\\\/1ce9a5743b7f25b5be6e4972864b4493\",\"name\":\"Savvy Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g\",\"caption\":\"Savvy Security\"},\"description\":\"Welcome to Savvy Security, a blog focused on providing practical cybersecurity advice for website owners and small businesses. Our team brings you the latest news, best practices and tips you can use to protect your business...without a multi-million dollar budget or 24\\\/7 security teams.\",\"sameAs\":[\"blogadmin\"],\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/blog\\\/author\\\/blogadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Prevent Malware Attacks (7 Ways)","description":"Here are 7 tips for how to prevent malware attacks from being successful against your organization, employees and IT environment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/","og_locale":"en_US","og_type":"article","og_title":"How to Prevent Malware Attacks (7 Ways)","og_description":"Here are 7 tips for how to prevent malware attacks from being successful against your organization, employees and IT environment.","og_url":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/","og_site_name":"Savvy Security","article_publisher":"https:\/\/www.facebook.com\/cheapsslsecurities","article_published_time":"2021-05-29T00:12:06+00:00","article_modified_time":"2021-05-29T00:12:08+00:00","og_image":[{"width":1600,"height":1000,"url":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-feature.jpg","type":"image\/jpeg"}],"author":"Savvy Security","twitter_card":"summary_large_image","twitter_creator":"@sslsecurity","twitter_site":"@sslsecurity","twitter_misc":{"Written by":"Savvy Security","Est. reading time":"17 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#article","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/"},"author":{"name":"Savvy Security","@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493"},"headline":"How to Prevent Malware Attacks (7 Ways)","datePublished":"2021-05-29T00:12:06+00:00","dateModified":"2021-05-29T00:12:08+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/"},"wordCount":3540,"image":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-feature.jpg","keywords":["How to Prevent Malware Attacks","Malware Attack"],"articleSection":["SMB Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/","url":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/","name":"How to Prevent Malware Attacks (7 Ways)","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#primaryimage"},"image":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-feature.jpg","datePublished":"2021-05-29T00:12:06+00:00","dateModified":"2021-05-29T00:12:08+00:00","author":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493"},"description":"Here are 7 tips for how to prevent malware attacks from being successful against your organization, employees and IT environment.","breadcrumb":{"@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#primaryimage","url":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-feature.jpg","contentUrl":"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/05\/how-to-prevent-malware-attacks-feature.jpg","width":1600,"height":1000,"caption":"how to prevent malware attacks feature image"},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslsecurity.com\/blog\/how-to-prevent-malware-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cheapsslsecurity.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Prevent Malware Attacks (7 Ways)"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslsecurity.com\/blog\/#website","url":"https:\/\/cheapsslsecurity.com\/blog\/","name":"Savvy Security","description":"Practical cybersecurity advice","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslsecurity.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cheapsslsecurity.com\/blog\/#\/schema\/person\/1ce9a5743b7f25b5be6e4972864b4493","name":"Savvy Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4e5539150b16b5af1d22136f03dedda89a96babb3e9b5ceb18c2bde4e1dcba57?s=96&d=mm&r=g","caption":"Savvy Security"},"description":"Welcome to Savvy Security, a blog focused on providing practical cybersecurity advice for website owners and small businesses. Our team brings you the latest news, best practices and tips you can use to protect your business...without a multi-million dollar budget or 24\/7 security teams.","sameAs":["blogadmin"],"url":"https:\/\/cheapsslsecurity.com\/blog\/author\/blogadmin\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/7011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/comments?post=7011"}],"version-history":[{"count":0,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/7011\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/media\/7013"}],"wp:attachment":[{"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/media?parent=7011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/categories?post=7011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/blog\/wp-json\/wp\/v2\/tags?post=7011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}