Six Steps To A More Secure Network

When phishers successfully duped several business executives last month by pretending to be the Internal Revenue Service or the Better Business Bureau, it took the problem of cybercrime to a whole new level.

The criminals have gotten smarter by not only using agency logos in their fake e-mails, but also including executives' names and companies. So just how can VARs make sure their clients don't get stung by cybercriminals?

Masiello says VARs need to be vigilant in making sure their customers are educated and use the latest security measures to avoid similar social engineering scams in the future. The key to preventing social engineering crime from spreading is to rely on multiple layers of protection, he says.

"There's really nothing specific one can key on because they've gotten so good at crafting messages. They have few if any grammatical errors and they could have the right logo," he says. "It's trying to establish trust. If it doesn't look like it came from your IT department, or eBay or the Better Business Bureau, then people won't buy into it. It's more than botnet identification. Having multiple layers of defense is key."

And, being a managed services company, MX Logic feels, of course, that an MSP can best provide that protection. "A managed services piece sits outside the company's corporate infrastructure. If there is a denial-of-service attack, the managed service absorbs it, as opposed to a client or desktop solution. Even if you're stopping it with an appliance, you're still paying for it on bandwidth," he says.

Do IT Smarter, a San Diego-based MSP that sells its managed services to other resellers and directly to some legacy end users, says it's been about three years since one of its customers has fallen prey to cybercrime. But that's no accident. The company uses four levels of protection to make sure customers don't even receive scam e-mails or other threats.

"We have protection at the desktop, the server, the firewall/perimeter, and we use MX Logic for e-mail filtering," says Lane Smith, president of Do IT Smarter. "That could be the most important one nowadays. If you can keep that stuff 100 percent away from your network in the first place, you're much better off. Especially when you have to keep all your e-mail now with new compliance requirements."

Do IT Smarter also regularly reminds customers not to open suspicious e-mails, he says.

"Part of our relationship with customers is that level of training as well. We teach them not to even open spam anymore. If you do open something, never log into anything generated from an e-mail," Smith says.