Bank of America Custom Supplement - S8

A cyber glossary
Cyber security is a fast-moving field and difficult to track partly because
criminals use new techniques and tools all the time. Here are some of the
sometimes confusing terms you might not recognize:
Business email
compromise:
The targeted individual is
contacted through their
work email in an effort
to trick the target into
sending funds.
Internet of Things:
The global network of
connected or "smart"
devices, each containing
embedded technology
used to communicate
information to other
devices using the cloud.
In simple terms, it's
every device connected
to the internet and
designed to "talk" with
other devices. The IoT
includes everything from
traditional computers
and smartphones to
automated thermostats
and heating, ventilating
and air-conditioning
systems; security systems
including sensors and
cameras; intelligent
lighting; telephone
equipment; credit-card
terminals; smart speakers;
smart traffic controls;
fleet management
systems; and electronic
toll collection systems.
8

Malware:
Software - including
spyware, banking
malware, ransomware
and adware - designed
to infiltrate personal and
company-owned phones
and computers.
Man-in-the-middle
threats: A cyber
criminal intercepts
communications between
two parties - a dealership
and financial institution,
for instance, or between
two dealerships - in an
effort to intercept a wire
transfer, steal data or
load malware onto a
computer system.
Network spoofing:
Cyber criminals set up
fake Wi-Fi hubs with the
goal of prying passwords
and personal details from
unsuspecting people.

Phishing: A form of
social engineering
in which seemingly
legitimate messages
are sent via email or
messaging platforms to
gain access to systems
or data or to install
malware (malicious
software).
Ransomware:
A sophisticated extortion
system. Malware is
delivered through links
in and attachments
to email messages,
then it is loaded onto
a company's computer
system. Ultimately the
leaders of a business are
presented a ransom note
typically threatening to
freeze or destroy data on
the computer network if
demands for payment are
not met.
Smishing:
Cyber criminals utilize
SMS and messaging apps
to scam people out of
their data and money or
prompt them to install a
malicious app.

Social engineering:
A term used to
describe all attempts
to psychologically
manipulate or trick people
into providing confidential
information or performing
actions with the goal of
acquiring data or money.
Rather than physically
hacking into a computer
system, these criminals
use information available
on social media to take
advantage of victims,
exploiting their natural
human tendencies and
emotional reactions in
order to gain access to
a computer system.
Spyware:
Malware specifically
designed to allow the
criminal to spy on a
computer user, capturing
keystrokes used for user
IDs, passwords and other
information.
Vishing:
A cyber criminal
impersonates a legitimate
source, or utilizes tactics
such as robocalls, to scam
people out of data and
money over the phone.
Bank of America Custom Supplement

Table of Contents for the Digital Edition of Bank of America Custom Supplement
