NITDA Starts 2024 Cyber Security Awareness  Campaign

 

The National Information Technology Development Agency (NITDA) has started the 2024 cyber security awareness campaign.

A statement from the office of NITDA’s Director-General,  Kashifu Inuwa, CCIE, highlighted the growing necessity of this campaign, increased reliance on technology and the rising number of cyber-attacks.

The campaign will focus on raising awareness on critical cybersecurity issues, including: Business Email Compromise (BEC), Smishing and Vishing, Spear Phishing, Securing Personal Information and Public Wi-Fi Security.

The statement read: “October marks Cybersecurity Awareness Month, an opportune time to remind ourselves about the critical importance of protecting our digital lives.

“In an era where our personal and professional activities are deeply intertwined with technology, a robust understanding of cybersecurity is indispensable.

“Cybersecurity refers to the practice of safeguarding computers, servers, mobile devices,electronic systems, networks, and data from malicious attacks.

“It encompasses a wide range of strategies, policies, and technologies designed to protect information from unauthorized access, damage, theft, or disruption.

“As cyber threats continue to evolve and become more sophisticated, the significance of cybersecurity cannot be overstated. It is crucial not only for individuals but also for businesses, governments, and society at large.

“Malware, short for malicious software, is any software intentionally designed to cause damage to a computer, server, or computer network. It includes viruses, worms, trojans, ransomware, spyware, adware, and other malicious programs.

“Malware can disrupt operations, steal sensitive information, and provide attackers with unauthorized access to systems.

“Phishing is a technique used by attackers to trick individuals into disclosing personal information such as usernames, passwords, and credit card details. Attackers often masquerade as trustworthy entities through emails, messages, or websites. Phishing scams can lead to significant financial losses and identity theft.

“Ransomware is a type of malware that encrypts a victim’s files, making them inaccessible until a ransom is paid. Attackers often demand payment in cryptocurrency to unlock the files.

“Ransomware attacks can cripple organizations by denying them access to critical data and systems.

“In MitM attacks, cybercriminals intercept and potentially alter communications between two parties without their knowledge. This type of attack can be used to steal sensitive information, such as login credentials, or to inject malicious content into the communication.”

It stated further: “DoS attacks involve overwhelming a system, network, or server with a flood of traffic, rendering it unavailable to users.

“Distributed Denial-of-Service (DDoS) attacks involve multiple compromised systems working together to launch an attack, making it even more difficult to mitigate.

“Regularly updating your operating systems, browsers, and applications is a fundamental cybersecurity practice. Software updates often contain patches for security vulnerabilities that attackers could exploit. By keeping your software current, you reduce the risk of being targeted by known threats.

“Passwords are the first line of defense in protecting your accounts. A strong password should be at least 12 characters long and include a mix of letters (both uppercase and lowercase), numbers, and special characters.

“Avoid using easily guessable information such as names, birthdays, or common words. Using a unique password for each account is essential to prevent a single breach from compromising multiple accounts.

“Two-factor authentication adds an extra layer of security by requiring two forms of verification before granting access to an account. This typically involves something you know (password) and something you have (a code sent to your phone or email). 2FA significantly reduces the risk of unauthorized access, even if your password is compromised.

“Phishing attacks rely on social engineering to trick individuals into revealing sensitive information. Always verify the source of emails or messages requesting personal information. Check the sender’s email address, look for signs of urgency or threats, and avoid clicking on links or downloading attachments from unknown sources.

“When in doubt, contact the organization directly through an official channel to verify the request’s legitimacy.

“Your home network is the gateway to all your connected devices. Changing the default password for your router, using encryption (WPA3 if available), and ensuring your network is password-protected are essential steps to secure it.

“Additionally, consider setting up a guest network for visitors to keep your primary network more secure.

“Regularly backing up your data is crucial in protecting against data loss from cyber attacks, hardware failures, or accidental deletion. Use external hard drives or cloud-based services to store copies of important files.

“Ensure that backups are encrypted and stored in a secure location to prevent unauthorized access. Technology alone cannot protect us from cyber threats.

“Human vigilance and awareness are crucial. Stay informed about the latest cyber threats and best practices.

“Participate in cybersecurity training and encourage others to do the same. By understanding the basics of cybersecurity and implementing these practices, you can significantly reduce the risk of falling victim to cyber attacks.

“Remember, cybersecurity is a collective responsibility. Together, we can create a safer digital environment for everyone.”