User Information

First Name

Last Name

Email Address

Dealership -- Select a Dealership --Alligator Alley H-DAtlanta H-DAvalanche H-DDesert Wind H-DHigh Octane H-DHuntington Beach H-DJet City H-DManchester H-DMotor City H-DMotown H-DOld Glory H-DPalm Beach H-DPatriot H-DRawhide H-DRiverside H-DRockstar H-DRockstar Powersports BrandonRockstar Powersports BrooksvilleRockstar Powersports St. PeteStars and Stripes H-DSummit H-DThe Motorcycle CompanyVolcano H-DWoodlands H-D

Start Training

Understanding Phishing

Phishing is a deceptive cybercrime where attackers trick people into revealing sensitive information. They often pose as a legitimate entity—like a bank, a coworker, or a service provider—to gain your trust. The ultimate goal is to steal information like passwords, credit card numbers, or social security numbers.

Common Types of Phishing Attacks:

• Phishing

  This is the most common form, characterized by mass, untargeted attacks. The attacker sends thousands of generic emails hoping a small percentage of recipients will fall for the scam.
  
  Real-World Example: A fake email from a major bank claiming your account has been locked due to "suspicious activity" and asking you to verify your details.

• Spear Phishing

  A highly targeted attack aimed at a specific individual or organization. Attackers often gather personal information from social media or company websites to make the email seem more convincing and personal.
  
  Real-World Example: A fake email from your HR department with a subject like "Urgent: Update Your Payroll Information." The email is sent only to employees and uses your name and specific job title to seem legitimate.

• Whaling

  This is a highly targeted attack that specifically goes after senior executives or high-level employees. The attacker impersonates a CEO or CFO to trick an employee into an urgent, confidential task like an unauthorized wire transfer.
  
  Real-World Example: An email that appears to come from your CEO while they are traveling, instructing you to handle a time-sensitive wire transfer for a "confidential acquisition."

• Smishing and Vishing

  These are phishing attacks that happen outside of email. Smishing uses text messages (SMS) and Vishing uses phone calls (voice). Both rely on the same social engineering tactics as email.
  
  Real-World Example: You receive a text message (Smishing) from an unknown number saying, "Your bank account has been locked. Click this link to unlock it." Alternatively, you receive a phone call (Vishing) from someone pretending to be from your bank, asking you to "verify your account details" over the phone.

Phishing Statistics:

Phishing remains one of the most significant threats to corporate security.

• Approximately 90% of all data breaches are caused by phishing attacks.
• In one study, 76% of organizations experienced a successful phishing attack in the past year.
• The average cost of a successful phishing attack is estimated to be $4.65 million per incident.

Continue to Password Security

Password Security & Common Traps

Your password is the first line of defense for your personal and professional accounts. However, hackers use clever tactics to steal your login credentials. By being aware of these traps, you can protect yourself and your company from a security breach.

Common Password Compromise Methods:

• Fake Login Pages

  Attackers create websites that look nearly identical to a real company's login page—like for a bank, social media, or a company portal. They will then send you a link to this fake page, often via a phishing email. When you enter your credentials, they are immediately stolen by the hacker. Always check the URL of a login page carefully for misspellings or extra words.

• Credential Stuffing

  This happens when hackers take a large list of usernames and passwords stolen from a data breach on one website and try to "stuff" them into accounts on other websites. If you reuse the same password for multiple accounts, a breach on one site can lead to all your accounts being compromised. This is a highly effective attack because so many people reuse passwords. It's estimated that 80% of hacking-related breaches leverage stolen or weak passwords.

• Keylogging

  A keylogger is a type of malware that records every keystroke you make on your keyboard. This means that anything you type—from emails and documents to login credentials and credit card numbers—can be captured by the attacker. This malware is often delivered through malicious email attachments or downloads from untrustworthy websites.

The Cost of a Password Breach:

The consequences of a password compromise are significant for both individuals and companies.

• In 2024, the average cost of a data breach reached a staggering $4.88 million, with compromised credentials being a leading cause.
• A security study found that 86% of data breaches involve the use of stolen credentials.
• Breaches that involve stolen credentials take the longest to identify and contain, averaging 292 days. The longer a breach goes undetected, the higher the financial and reputational cost.

Continue to Training

Multi-Factor Authentication (MFA)

Multi-factor authentication, or MFA, is a crucial security measure that requires users to provide two or more verification factors to gain access to a resource such as an an application, online account, or VPN. Instead of just a password, MFA adds a second layer of security, making it exponentially more difficult for a hacker to access your account even if they have stolen your password. This is why MFA is often referred to as a "second line of defense."

There are three primary categories of authentication factors. The first is something you know, such as a password or a PIN. The second is something you have, which could be your smartphone, a physical token, or a security key. The third is something you are, which includes biometric data like a fingerprint, a face scan, or a voice print. The core principle of MFA is to combine at least two of these different factors, ensuring that a single compromised piece of information isn't enough to grant a hacker access.

The most common form of MFA today uses your phone. After entering your password, you might be required to enter a code sent via SMS text message, approve a push notification from an authenticator app, or enter a one-time password generated by an app like Google Authenticator or Microsoft Authenticator. While SMS-based MFA is widely used, it is generally considered less secure than using an authenticator app or a physical security key, as text messages can sometimes be intercepted by determined attackers.

The benefit of MFA is that even if a hacker successfully steals your username and password through a phishing email or a credential stuffing attack, they will be stopped at the next step. They don't have the second factor—your phone, fingerprint, or physical key—so they cannot log into your account. This single step can prevent the vast majority of account takeovers and significantly reduce the risk of a major data breach.

Given the high costs and severe consequences of a data breach, implementing MFA is one of the most effective and affordable ways to protect our company's information. It is a simple security step that provides a robust barrier against the most common cyber threats. Using MFA on your work accounts and your personal accounts is a simple way to protect yourself from getting hacked.

Continue to Training