August 1, 2017 By Rick M Robinson 2 min read

Follow the money! That is the famous first rule for investigating white collar criminal activity. It should also be the first rule for protecting your organization from a data breach, ransomware attack or other malicious activity.

A basic fact of modern cybersecurity life is that the lone hacker of yore has long since vanished, replaced by sophisticated cybercriminals. And like most other nefarious actors, cybercriminals are in it for the money.

The Sophisticated Ecosystem of Cybercrime

Today’s cybercriminals are supported by a complete ecosystem, the Dark Web, which provides them with everything from sophisticated hacking toolkits to a marketplace where they can readily fence their stolen goods. As Infosec Island reported, the going rate for personally identifiable information (PII) in this marketplace is $20 per record.

Multiply that figure by the millions of such account records that can be stolen in a single breach, and it adds up to an impressive haul for cybercriminals. It is no surprise, then, that 2016 saw a record number of breaches: 1,093 in all — a 40 percent increase over the previous year, according to Infosec Island.

The growing cybercrime threat has led many organizations to make major investments in sophisticated security technology. These solutions can be highly capable, but they are also expensive. And if they are deployed haphazardly — as is all too often the case — they end up providing less protection than they should because they are wasted on guarding assets of limited value.

Keeping Cybercriminals Out of Your Network

The good news is that following the money trail also provides a road map for organizations seeking to protect themselves from money-seeking attackers: Once you know where the money is in your system and how it flows through your network, you know where to concentrate your protective measures.

According to the Infosec Island article, organizations “need to have deep insight into their network in order to best orchestrate and manage solutions, traffic and, in turn, threats.” Without this network visibility, companies are “haphazardly plugging holes — often, too late.”

Put Your Money Where Your Protection Is

Leaders and security teams should take a step back from the technical details of security to evaluate their systems as a whole. Where does money (or valuable data) flow through the network? Where and how is it stored? If you were leading a team of cybercriminals, where would you want to concentrate your efforts to maximize your haul?

Once you can answer those questions, you are ready to concentrate your security defenses where they are needed most, and you can provide those areas with the maximum level of protection.

Download the Ponemon Institute 2017 Cost of Data Breach Study

More from Fraud Protection

PixPirate: The Brazilian financial malware you can’t see

10 min read - Malicious software always aims to stay hidden, making itself invisible so the victims can’t detect it. The constantly mutating PixPirate malware has taken that strategy to a new extreme. PixPirate is a sophisticated financial remote access trojan (RAT) malware that heavily utilizes anti-research techniques. This malware’s infection vector is based on two malicious apps: a downloader and a droppee. Operating together, these two apps communicate with each other to execute the fraud. So far, IBM Trusteer researchers have observed this…

New Fakext malware targets Latin American banks

6 min read - This article was made possible thanks to contributions from Itzhak Chimino, Michael Gal and Liran Tiebloom. Browser extensions have become integral to our online experience. From productivity tools to entertainment add-ons, these small software modules offer customized features to suit individual preferences. Unfortunately, extensions can prove useful to malicious actors as well. Capitalizing on the favorable characteristics of an add-on, an attacker can leverage attributes like persistence, seamless installation, elevated privileges and unencrypted data exposure to distribute and operate banking…

From federation to fabric: IAM’s evolution

15 min read - In the modern day, we’ve come to expect that our various applications can share our identity information with one another. Most of our core systems federate seamlessly and bi-directionally. This means that you can quite easily register and log in to a given service with the user account from another service or even invert that process (technically possible, not always advisable). But what is the next step in our evolution towards greater interoperability between our applications, services and systems?Identity and…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today