Cyber Attacks: How to protect yourself

Australian small business owners are being warned to upgrade their computer systems against cyber-attacks from "digital gangsters" who are targeting workplaces.

"It's happening to people every day," Michael Kamitsis, a digital protection specialist with MLK Group, told A Current Affair.

"We've been in business for 13 years and we've dealt with tens-of-thousands of computers. There's probably a handful of businesses I've seen who I can confidently say they will be ok when it comes to an attack."

READ MORE: Nine Network under attack by cyber hackers, threatening news services nationwide

Nigel Phair, a lecturer in Cyber Safety at UNSW, said 'serious organised criminals' were behind the attacks.

"There is a range of cyber criminals out there seeking to do Australian businesses harm," he said.

"Invariably it's serious organised criminals that are involved in this. They are the ones with the technical know-how.

READ MORE: 'State actor' could be behind Nine Network cyber attack, tech expert says

"They're the ones with the patience and they're also the ones seeking the big payday."

The most common type of hacking is ransomware.   

Ransomware is a virus that gets onto a computer - usually through an infected email attachment - before spreading to other devices on the same network.

READ MORE: Sophisticated cyber scam that lost financial planner $50K

The virus cripples the network by locking files and information behind a password.   

The hackers will then demand money in exchange for the password.

"You'll get a pop-up that says 'Hello, I'm Mr Hacker', just to let you know you have 48 hours to make a payment to me," Mr Kamitsis said.

READ MORE: A new age of criminal investigation: Cryptocurrency and the NSW Cyber Crime Squad

Ransoms are almost always demanded in cryptocurrency like bitcoin.

"No one should ever pay a ransom demand," Mr Phair said emphatically.

"A part of the reason why criminals pick on Australians is we're low hanging fruit. We often pay up. If people stopped paying up the ransom, they would go elsewhere and take other jurisdictions."

READ MORE: How Aussies are making themselves easy targets for online crooks

Recently the most common ransom for Aussie small businesses has been for one bitcoin - around $74,000.

"The reality is bitcoin is the money laundering vehicle of choice, it's completely unregulated," Mr Phair said.

But larger ransoms do happen.

READ MORE: QR Check-Ins worry cyber security and tech experts amid COVID-19

This month computer giant ACER received a ransomware demand for $50 million.

If you are targeted, you should report the attack to the Australian Cyber Security Centre.

"It's part of the Australian Signal Directorate. That's where you get advice on how to protect your organisation," Mr Phair advises.

Mr Kamitsis says business owners who are unsure if they are properly protected should conduct a digital "health-check".

This is a professional service where IT experts attend your workplace to assess your computer network.

Risks are identified and solutions can be considered.