Understanding the motivation.
WHAT PEOPLE ASSUME
That attackers target businesses they have a reason to target.
WHAT IS ACTUALLY TRUE
Almost all attacks are automated and indiscriminate.
Software scans the internet for vulnerable sites and exploits whatever it finds.
WHAT THAT MEANS
Your site is targeted because it exists, not because of who you are.
A small business site is attacked as often as a large one.
WHAT ATTACKERS WANT
To send spam from your server To host malicious files To insert links or redirects To steal customer or payment data To use your resources To demand payment
WHAT THEY RARELY WANT
Your specific business information.
WHY THIS MATTERS
"Nobody would bother attacking us" is the most common and most dangerous assumption.
WHAT PROTECTS YOU
Not obscurity. Keeping software updated and access controlled.
