Internal Threats
Unsafe Internet Use
Unsafe internet use is an internal threat because staff already have some access to the organisation's systems, so what they download, visit or open can bring malware inside or lead them into a phishing trap.
How the risk gets in
A download from an unofficial source can hide harmful software. For example, an employee may download a free file-conversion tool from an advert instead of the official supplier, and the installer also places malware on the computer.
A visit to an untrustworthy website can install malware or show a fake login page designed to steal details. Harmful links and attachments also arrive in email, chat apps and text messages. Receiving a message is not enough on its own: someone has to click the link or open the attachment before the malware can install.
Signs a website is untrustworthy
| Sign | What it suggests |
|---|---|
| A domain name that copies a well-known brand, with a small change such as a different ending or an extra word | The site may be pretending to be a brand you know. |
| Random numbers, letters or characters after the domain name in the URL | Fake sites are often generated quickly in bulk, so the address was not chosen by a real business. |
| Spelling and grammar mistakes, text speak such as u for you, or pages that do not work properly | The site may be rushed or fake, rather than a professional service you can trust. |
| No HTTPS or padlock | Anything sent to the site is not encrypted, so it could be read on the way. |
These signs matter because they show the site may be trying to trick you, or may not keep your data safe.
Reducing the risk
Organisations use filtering to block known bad sites, scan incoming mail for harmful links and attachments, train staff to check addresses and padlocks, and set clear rules about what can be downloaded and from where. Together these make it harder for an internal mistake to become a malware infection.
Practise this
Pearson BTEC Digital Information Technology · Internal Threats