Serious Discussion What are the most common attack vectors for Home users?

[Azazel]

What it's best to look out for.

 

[LennyFox]

@Azazel

The low paranoia solution is blocking risky file extensions in user folders (old SWH). When you add this to Defender or Avast free, it is really hard to get infected.

 

[ScandinavianFish]

Pirated and cracked software, game cheats/hacks, mod menus and skin changers, executables and "games" sent via Discord, etc.

 

[Freki123]

Attachments in email. Mails (with .pdf or other documents) claiming the be tax return, vouchers, UPS bills...

 

[TairikuOkami]

Click on the link! Followed by VBScript and PowerShell 5. At least MS is finally deprecating VBScript, if only they would do the same with PS5.

 

[LennyFox]

Click on the link! Followed by VBScript and PowerShell 5. At least MS is finally deprecating VBScript, if only they would do the same with PS5.

I understand your complaint about keeping obsolete scriptors alive in Windows so long for backward compatibility reasons.

In SWH the default for SRP to block risky file extensions running (vbs, hta, jar, etc) was to apply to standard users only. In WHHL the deafult is to apply these to Admins also. This proofs no home user needs them anymore (otherwise @Andy Ful would not have made this change).

Therefor I fully agree with you. In stead of keeping all those old version scriptors alive for backward compatibility reasons, the default should be to disable them for home users and allow admins to enable them through group policy when they need it.

 

[Azazel]

@Azazel

The low paranoia solution is blocking risky file extensions in user folders (old SWH). When you add this to Defender or Avast free, it is really hard to get infected.

Do you believe cyberlock will be sufficient for these or simple windows hardening could a good addition to cyberlock?

 

[Digmor Crusher]

Do not use Cyberlock and Simple Windows Hardening at the same time. One or the other is all you need.

 

[Practical Response]

What it's best to look out for.

Social Engineering. This sums it up now days. The perps need to "and the key words are " (trick you/allow) their infection privileges.
Be diligent in scanning documents and files that you have downloaded before execution, check those website addresses before clicking them, same with links/URLs on social media, email, ect, upload them to Virus Total and check them.

Keep all your personal stuff backed up on external devices, do this incrementally. Create system images store offline as well as a "just in case".

Chances that Trinity from Matrix will hack your network and router as a home user are quite slim, you are not lucrative enough for a skilled hacker to chance on you.

As another forum member around here states "stay safe but not paranoid"