13 Jul 3 Social Media Threats Your Brand Needs to Watch Out For
By Spencer Wolfe
For all the same reasons marketers love social media—its ease of use, low cost, and high number of users across the globe—so too do cybercriminals and scammers. As marketers continue to leverage social media, security becomes increasingly more important.
The biggest companies on earth are turning to social media to engage with customers, drive business, and have their voices heard. There are millions of dollars being made on social media each day—making it a prime target for exploitation and extortion.
Most social media pros encounter scams or fake profiles frequently enough that they are not easily fooled. But can you the same for your executives? For every person in your organization? For your customers?
According to the cybersecurity firm Norton, 40 percent of social media users have fallen victim to cybercrime on social media, and one in six users believe their accounts have been compromised. A recent McAfee study found that employees experience far more cybercrime on social media than any other business platform. That includes email, the place most people usually keep their eyes peeled for scams and “phish-y” messages.
When it comes to social media, employees, customers, and brands themselves all face security risks.
1. Brand risks
Corporate-owned accounts are the flagship for any modern organization operating on social. For many companies, they are at higher risks than a website because social profiles are so visible and valuable.
An account impersonating a brand isn’t necessarily bad. But anything that account does, especially engaging with customers, can impact the actual brand. On the playful side of the spectrum is a parody account, which, depending on the industry, some companies don’t mind.
In the middle of the spectrum is an impersonator hijacking your hard-won social media popularity for any sort of shady activity, like piracy or selling counterfeit goods. These accounts steal clicks and impressions, confuse consumers and erode your share of voice.
On the dangerous end, an impersonator account can engage with customers as if they are the genuine brand and deliver phishing links or malware exploits. The cost here is huge: customers who associate the attack with your brand likely won’t be doing business with you.
Losing control of a branded account is every social media marketer’s worst nightmare. It’s happened to the best of them: Associated Press, CENTCOM, Chipotle, the NFL,Delta, Crayola, NewsWeek, and the University of Michigan. Such an attack can turn into a PR nightmare, costs countless dollars in damage control or lost business, and erode customer trust.
2. Employee risks
Everyone at your organization is on social media. You likely have built out policies for users or even employee advocacy programs. But what happens if they click something they shouldn’t or post something out of line?
Fake executive accounts
Fake executive accounts, like fake brand accounts, are building blocks for other types of threats. A fake executive may slander the company online or engage with employees at the company to launch attacks (think of a fake CFO account sending a virus disguised as compensation paperwork to new hires via LinkedIn).
Spear phishing is the oldest trick in the book. Originally associated with email, spear phishing involves sending a bad link, such as a phishing or malware attack, appended to a carefully crafted message.
Both the spray-and-pray approach (attach every trending hashtag you can fit) and the highly-targeted approach (use all the publicly available personal details from the target profile to craft a nastily specific message) are effective on social media.
These attacks, if they get as far as breaching a corporate network, can cost huge amounts of money, create bad press, and anger customers.
Internal policy violations
For any marketing team that is not operating their executive’s or high-profile employee’s account, enforcing and regulating internal social media policies is a challenge. Any time an executive says something controversial or off-brand, it’s on the PR team to clean it up. View Full Article >>