How To Protect Your PC From Ransomware

Ransomware encrypts your files and ask for payment in return for a key to unlock your files. However, there is no guarantee that the said key will work. Can your files survive an infection? Yes, provided that you have the right backup strategy.

A Brief Overview

Ransomware is a type of malware that can lock you out of your computer unless payment has been made. Although most criminals consider an attack much like a typical transaction, there are a few ransomware authors who seem to enjoy in making their victims suffer. There are victims who made the payment but have nothing to decrypt since their files were already go to begin with.

These days, there is an increasing number in attack vectors. Plus, many criminals now disguise the ransomware in unvetted software and apps. Sometimes, they are transmitted through spear-phishing attacks, wherein they target people within an organization particularly those who have higher chances of clicking on suspicious links.

Protect Your Backups

When your system has been compromised with ransomware, you have the option to pay the ransom and cross your fingers that you can get your files back. Or, you can also not pay and find ways to reconstruct your computerfrom your backups. The first option is a bit problematic due to logical, financial, ethical, and moral reasons. Fortunately, there are steps you can take to help make sure that you can recover effortlessly from a ransomware attack.

Three Guiding Principles

Always assume that ransomware will delete or encrypt everything you can access from your PC.

In case you back up to an external or internal hard drive that is always connected to your computer, or the cloud, think that those files are dead. They are just of value for a more conventional or old fashioned disaster such as a hard drive failure. There is nothing wrong with this kind of back up for conventional threats, however, it should not be your only line of defence to help you protect your data.

Disconnect your backup from your network.

A great weapon that you can use against ransomware is to use a backup media that you could air gap, which means it is totally disconnected from the internet and the computer. For instance, in case you back up to an external hard drive, just connect it during your regular scheduled back up. Once done, disconnect it again right away. Your local storage drive must not be kept attached to the network. By doing so, your backups will unlikely be encrypted once the ransomware executable is loaded to the network.

Rely on the versioning.

Even if you immediately disconnect the external drive, there is still no guarantee that it will be protected. It’s because your system may already have an infection with malware if you run a backup. Versioning is an important method that you can use to make sure that you can recover from a ransomware attack. It is helpful to use a backup tool that works by saving several timestamped versions of your many files. Once you restore your computer, you will have the option of going back as far as possible, at a time before your files were infected.

Call SpartanTec, Inc. in Columbia and let our team set up a comprehensive data backup and recovery strategy for your business.

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Devices Attached To Corporate Networks Are Being Targeted

Grim news comes out of Russia, as reported by Microsoft.  The tech giant has been tracking the activities of a Russian hacking group that goes by the name of Strontium. Their other names include APT28 and Fancy Bear.

Microsoft has confirmed that the group was behind a new attack that took place in April of this year (2019).

This is the group that claimed responsibility for both the attack on the Democratic National Committee during the run up to the 2016 election and the NotPeya attacks against the Ukraine in 2017.

In addition to targeting political groups in Europe and North America, Strontium members have been upping the stakes by compromising large numbers of popular IoT devices such as VOIP phones, printers, security cameras and the like. They have been using those devices to breach corporate networks.

The company had this to say about their recent findings:

"The investigation uncovered that an actor had used these devices to gain initial access to corporate networks.  In two of the cases, the passwords for the devices were deployed without changing the default manufacturer's passwords, and in the third instance the latest security update had not been applied to the device.

Once the actor had successfully established access to the network, a simple network scan to look for other insecure devices allowed them to discover and move across the network in search of higher-privileged accounts that would grant access to higher-value data."

Fortunately, Microsoft was able to stop this attack in its tracks early on, but the motives behind it remain cloudy and uncertain.  Even so, Microsoft has committed itself to closely monitoring the activity of this group in particular. In the past year, they have sent out more than 1,400 notifications to global corporations and nation states about the activities of the group.

It is incredibly likely that this group will be at the forefront of whatever attacks the Russians have planned to influence the outcome of the 2020 US Presidential election.

Keep your corporate network safe from possible online breaches. Call SpartanTec, Inc. in Columbia to identify vulnerabilities and help you secure your network.

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Microsoft Seeks To Replace Text Passwords With Biometrics

For almost as long as computers have existed, various companies have promised that passwords would eventually be a thing of the past.

Over the years, a variety of different technologies have been introduced that promised to kill the humble and ubiquitous password.  Everything from biometric sensors to facial recognition have been attempted.

To date, none of those technologies have delivered on their promise.

True, most of these new technologies have found niches in the market and have been embraced by a growing percentage of the population. However, invariably, these other technologies are used in tandem with text-based passwords rather than replacing them.  If Microsoft has anything to say about the matter, that may finally change.

The most recent Windows 10 update makes it easier than ever to log into devices and a variety of online services without having to worry about passwords at all.  The secret to the company's success lies in the fact that Windows Hello has just received FIDO2 certification, which means that Hello PINs and biometric signatures are now seen as secure authenticators.

The official press release from the FIDO Alliance, reads, in part, as follows:

"FIDO2 is a set of standards that enables easy and secure logins to websites and applications via biometrics, mobile devices and/or FIDO Security Keys. FIDO2's simpler login experiences are backed by strong cryptographic security that is far superior to passwords, protecting users from phishing, all forms of password theft and replay attacks."

In an accompanying statement release by Microsoft, the company observed that "no one likes passwords (except hackers)."

While all of that is true, it remains to be seen whether this latest attempt to dethrone the text-based password will succeed or not.  Even if it does, if the past is any sort of guide at all, it's only a matter of time before clever hackers find the chinks in the armor of this new paradigm.

Call SpartanTec, Inc. if you need the managed IT services from a professional IT consultant. 

 

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Popular Fitness Site Endures A Customer Information Breach

Do you frequent the website bodybuilding.com?

If so, be advised that the site has been breached.

According to a recent statement by the company behind the site, the breach occurred in February, 2019 and had its origins in a phishing email the company received back in July of 2018.

A detailed account of the incident was published on the company's help center and contained most of the elements we've come to expect when things like this happen:

• The company is very sorry that it happened
• "Certain" customer/member information may have been compromised
• The company has been working with law enforcement and has brought in a third party to assist with the forensic investigation, which is ongoing

The company also stressed that while partial payment account numbers were compromised, no full debit or credit card information was at risk. That is because the site only stores the last four digits of payment cards if and when a given user opted to have the data stored by the website.

Again in keeping with the common response to incidents like these, Bodybuilding.com reported that in exercising an abundance of caution, they are force-resetting all user passwords.  If it's been a while since you've logged on, just be aware that the next time you do, you'll be prompted to change your password.

As to the specific data that was compromised, according to the latest information posted by the company, the following information was accessed by unknown third parties:

• User name
• The email address you used to sign up for the service
• Your billing and/or shipping address
• Your phone number
• Your order history
• Your birthday
• Any correspondence that may have occurred between you and the site administrators
• Any other information you included in your profile

As ever, if you're using the same password on this site that you use on some other, be sure to change both immediately. Try hard to break the habit of using the same password across multiple web properties.

Call SpartanTec, Inc. for more information on how to secure your passwords and other personal or company information. 

 

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Latest Scam Involves People’s Social Security Numbers

There's a new scam making the rounds, and it's a particularly nasty one involving your social security number.  That’s why it’s always a good thing to get in touch with your IT consultant for updates on the latest scam trends. Here's how it works:

You may get a robocall seemingly from the government, claiming that there's a problem with your Social Security number. The call also states that your account has been flagged for suspected fraudulent activity.

You'll be given a number with instructions to call back and speak to a government agent in order to get help resolving the issue and prevent your arrest.

Needless to say, given the importance of your Social Security number and the looming threat of legal action and possible arrest, a significant percentage of people will call back. They will be desperate to resolve the matter quickly before things escalate.

Of course, the reality is that Social Security numbers cannot be suspended.  This is merely the hook this breed of scammers are using to get people to call them and get help resolving an issue that doesn't actually exist. With so much at risk, it is critical to make sure your IT consultant Columbia gives you important updates on how to secure your data.

If you make the mistake of calling back, you'll be pressured for your name, date of birth, and banking information. In addition to those of course, you will be asked to verify your Social Security number for security purposes.  Essentially then, those who get roped into this scam wind up giving the person on the other end of the line everything they need to steal their identity and empty their bank account.

While anyone of any age can be targeted by the scam, it seems to be impacting older Americans in disproportionate numbers, which makes this group of scammers even more despicable than most. That’s why actions to improve information security must always be taken.

As ever, vigilance is the key to staying safe.  If you get a call like this, don't call back at all.  If you feel tempted, don't call the number you get via the robocall. Rather, look up the number of your local Social Security office and begin your inquiry there.  In short order, you'll confirm for yourself and your own peace of mind that there is indeed nothing to it.

Call SpartanTec, Inc. if you want to know how to keep your company’s confidential information safe and secure.

 

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Malware In Documents Is Latest Hacker Trend

There is a new Threat Spotlight released by Barracuda Networks. One of the biggest trends in 2019 (where threats against businesses of all sizes are concerned) now takes the form of poisoned documents attached to emails. With this threat in hand, it is critical that businesses get in touch with their IT consultant to steer clear of these threats.

The company analyzed more than 300,000 email samples collected over the past twelve months.

They discovered that the frequency of document-based malware attacks increased markedly during the first quarter of 2019, with nearly sixty percent of poisoned files taking the form of documents. This rapid increase signals the need for businesses to reach out to their IT consultant Myrtle Beach.

As Jonathan Tanner of Barracuda Networks put it:

"For the past couple of years, script files were a very popular attack method.  The percentage of these sort of files declined drastically, however, and was a significant source of the increase of documents as an infection method...

Documents are a natural evolution from script files, since the languages used are also the ones used for documents - namely VBScript and JavaScript.  The same attacks could be converted to the document-based ones with only slight modifications.  The script authors had already become very adept at obfuscation techniques, so these could contribute greatly to document-based malware where scripting is already more common and thus deeper inspection of the script itself is required."

The good news is that most antivirus software is quite good at detecting malicious files, making it easier to preserve information security.  Of course, the weakest link in the equation isn't detection software, its users.  In light of the evolving threat, education is more important than ever. Although to date, the majority of employees have been stubbornly resistant to educational measures designed to reduce the rate at which employees will click on and open documents received from un-trusted or even unknown sources.

As a business owner, that will likely be one of your great challenges in the year ahead.  The more wary you can make your employees about opening files from people they don't know, the safer your network is bound to be.

Get in touch with SpartanTec, Inc. for more information.

 

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Facebook Inadvertently Saves Millions Of User Credentials In Text File

By now most, if not all, of the people you know are into social media and on Facebook in particular. However, with the recent discovery, you may want to change your password. According to a recent report by KrebsOnSecurity, hundreds of millions of usernames and passwords on Facebook were stored in a plain text file. The file was reported to have been accessed by 20,000 facebook employees. A reason why IT consultants always advise changing passwords every now and then.

The sheer number of user credentials stored in the text file is just screaming data breach all over it. And the fact that it has been accessed by Facebook employees more than 9 million times makes it vulnerable to abuse. However, upon investigation, there had been no abuse or misuse of the data stored in the text file as stated by Facebook software engineer Scott Renfro. He added that the user credentials were accidentally logged but it was without risk.

This incident it the latest in a series of security-related issues being faced by the social media giant. The company, however, is taking steps to prevent such cases in the future. While this gives little consolation to the people who were affected by other incidents last year, it definitely is a step in the right direction. On the other hand, IT consultant Columbia normally advise against using the same password or one password for multiple accounts on social media and other websites.

According to Facebook’s official statement, users have nothing to worry about unless they receive a notification from the company. If users to get a notification, it will most likely be regarding a request for password change. Despite the efforts that Facebook is taking to protect its users, we must always remain vigilant with how we manage out passwords. After all, it is our information security that we are talking about when it comes to use credentials.

Want to keep your business secure from hackers? Call SpartanTec, Inc. today to get overall protection.

 

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

New Thunderbolt Flaw Could Leave Door Open For Hackers

During the 2019 NDSS security conference, a Thunderbolt flaw called Thunderclap was revealed. The revelation highlighted a potentially huge problem for major operating systems such as Windows, Mac, Linux, and FreeBSD. The newly announced vulnerability could be exploited by hacker, distorting how Thunderbolt-based devices connect with a targeted system. That’s why businesses must be careful enough and have their IT Consultant ready to provide ample information regarding how to secure data against these kinds of hardware flaws.

Thunderbolt is a type of hardware interface that was a product of a joint project set forth by Apple and Intel. Some devices like keyboards, chargers, and more use the Thunderbolt interface to connect to computers. Originally, Thunderbolt was only to be used on Apple devices. However, with the release of newer iterations, Thunderbolt became available for use on different operating systems. Hiring an IT Consultant Columbia would give you the advantage your business needs to avoid problems from these sorts of vulnerabilities.

To sum it all up, Thunderclap is basically a convergence of different security flaws in the interface. Upon closer inspection, the main flaw comes from the way operating systems’ actions when introduced with new hardware. Operating systems normally trust a new hardware whenever it is installed so it is ready for use. However, hackers could take advantage of this through bypassing the IOMMU or Input-Output Memory Management Unit set in place by the operating systems.

Action to remedy this problem has been quite slow. Thunderclap was discovered in late 2016 but OS developers weren’t as keen on providing a fix. At the moment, the problem is still around. It is only a matter of time before some major hacking incidents happen through the exploitation of these flaws. It’s also one reason why businesses should always protect their data with IT services to improve their overall information security.

Is your company in need of a complete technology solution provider? Call SpartanTec, Inc. Today.

 

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Nvidia Releases Driver Update To Patch Security Issues

A lot of people all over the world use Nvidia graphics cards due to its popularity in terms of performance. Recently, the company released its first security patch for this year. For users of certain models, the update is an important one as it addresses eight security flaws that could leave users vulnerable against attacks. It is a lot easier to have managed IT services do the updates if you run a business and use Nvidia video cards.

Although the security issues the patch addresses aren’t rated critical, they are still rated high priority. This means Nvidia users should not forgo this update. The patch will protect systems from attacks such as remote code execution, denial of service, and escalation of privileges.

In line with such attacks, it is critical that businesses hire managed IT services Columbia to ensure that computer systems are always up to date with the latest security patches. The patch will be applicable for Nvidia’s GeForce, Quadro, Tesla and NVS graphics cards. Newer graphics cards aren’t included on the list due to their more advanced architecture. Older units, however, need the update to keep the computer system they are installed in safe.

There are different ways on how to install the update depending on the type of system you’re running. The update could be found on Nvidia’s site directly. For Windows users, the update could be done through the control panel. Users may also install the GeForce Experience app which would alert the user of any updates for the installed video card.

Regardless of the severity of the security flaws, patches must be installed immediately the moment they are released. It is one way of protecting the computer system as well as reinforcing the information security protocols in the system.

If your business needs IT services, go to the experts. Call SpartanTec, Inc. today.

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Hidden Microphone In Google Security Device Puts Company In Hot Water

Tech giant Google has recently found itself in a tight spot over what they claim as an oversight on their security device, Nest Guard. Users of the security device found a microphone tucked inside the device but was not listed on the spec sheet. Consumers were shocked to know about this, fearing for their own security. It’s one reason why people should also go for a reputable IT Management company to deal with sensitive information alike.

Google, however, said that it was an honest mistake and that its purpose was far from that of any wiretapping incidents we often hear on the news. The company claimed that the mic was utilized for the Google Assistant functionality, which would make Google’s failure to declare this information look more like an oversight. However, consumer groups aren’t buying in on Google’s explanation. For a huge company like Google, it would be hard to imagine that this so called “oversight” could happen.

On the other hand, Google Assistant would be a nifty addition to Nest Secure, but all functionalities should be disclosed to consumers beforehand. Although no cases of data recording and misuse has surfaced, it’s still an alarming fact that there is one component in the security system that could record data without consumers realizing that it was there in the first place.

It wouldn’t have been much of a big deal if only Google had disclosed the presence of a microphone in its security device. Users would still have loved it either way. However, with today’s increasing risk on information security, reputable IT management Columbia is always necessary for private individuals and businesses alike.

The undisclosed microphone inside Google’s Nest Guard has highlighted the concerns that surround information security and how companies approach it. Regardless if its components, huge companies like Google should have been more transparent at disclosing information about their products. And they should be more careful the next time around if case was indeed just an oversight.

Want overall protection for your business on the internet? Call SpartanTec, Inc. today.

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Hackers Sweep Through And Destroys All Data From E-mail Provider VFEmail

It’s terrible news for VFEmail and its users. The e-mail provider has recently been the target of hacking attacks that had all of its data destroyed. All of the company’s data from its servers in the US were wiped clean. The recent attack not only is a huge blow for VFEmail, but for the information security of its users as well.

If you’re among the users of VFEmail, expect all your data is lost. Everything from your recent e-mails to archived information has been undermined. The company spokesman confirmed that all the disks on the servers were formatted and that no trace of data could be recovered. Backups were also wiped clean, leaving the information security Columbia of its users on the edge.

There were no signs of the hackers locking files and asking ransom. They went straight for the files and deleted everything, inflicting total damage. They were successful at it too. Despite efforts of the company in attempting to retrieve the lost data, things aren’t quite looking so good. And even if they do manage to recover some data, it won’t be enough to do a complete restoration. Users would end up with little to no data back after this incident.

The company’s main website is currently up and running. However, some of its other domains remain inactive. Users that try to login to their e-mail will be greeted with an empty account like it was newly created.

This hacking incident is not the first time the company experienced attacks. Back in late 2015, the company had a major DDoS attack where the hackers, Armada Collective, asked for ransom in exchange for stopping the attacks. However, this time, the hackers weren’t keen on gaining money but simply to wreak havoc.

The attacks on the company signifies the utter need for information and computer security within companies regardless of size.

Want to protect your company from hackers and online intruders? Call SpartanTec, Inc. today to get full protection.

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove

Apple Goes Through Rough Patch Over Preps For Its Paid News Service

Apple is slowly going down a different path from its roots. The tech giant is looking at newer avenues to expand its empire. Due to the increasingly saturated smartphone market, it’s only fitting that Apple newer computer services if it wants maintain its dominance in the market.

The company has a lot going for its Apple Store. They are developing a host of new features and services that will widen Apple Store’s already diverse ecosystem.

On the list of Apples new premium services is a news aggregation service which is dubbed the “Netflix for News.” Subscribers of the service can get unlimited access to all content that is being provided by partner providers.

Apple is set to launch this service over the next month. However, everything isn’t going smoothly as planned primarily because of Apple’s terms. Content providers aren’t too keen on pushing content into Apple’s new premium service because of this. The tech giant wants to have 50% of the overall revenue generated by subscriptions. The remaining half of the revenue is then allocated to content providers, which is then divided depending on which content was most accessed and had users engaged.

To top it off, Apple also doesn’t want to share customer data with the publishers that supply the content. It’s highly unlikely that this move is mainly for information security Columbia. It’s quite obvious that Apple wants to dominate by keeping resources within its circle alone.

The company has been in talks with major publishers like the New York Times. Apple is still looking to attract more publishers to join the bandwagon of major publisher. However, that is yet to unfold. If not enough publishers show interest on Apple’s news aggregation service, it could well be dead even before it could launch.

Apple will undoubtedly have the upper hand in its supposed partnership with different media outfits. However, its stance on user data may just be a double edge sword. On one hand, it could give the company more benefits in the long run. Although, it is unclear if the company is doing it partly due to information security. Apple CEO Tim Cook might already have a bright solution for this but we’ll have to wait until then.

Need a well rounded IT service provider? SpartanTec, Inc. has the solution! Give them a call today!

SpartanTec, Inc. Columbia, SC 29201 (803) 408-7166 http://manageditservicescolumbia.com/

cities served:
Columbia, West Columbia, Cayce, St Andrews, Lexington, Oak Grove