Preterion's Content Management

Tag: security

  • Not Using 2FA? Malvertisers Can Trick Even IT Pros into Giving Up Passwords!

    Not Using 2FA? Malvertisers Can Trick Even IT Pros into Giving Up Passwords!

    Attacks on our private information seem to come from everywhere. The worst thing is that perpetrators have thought of a new way to access your data by the time you feel you are on top of the security your devices need.

    Where does it stop?

    Awareness helps. The type of attack we talk about in this blog is particularly insidious because it can even trick seasoned IT professionals who actively look for malware. If they can be fooled, what hope do the rest of us have?

    Malvertisers are particularly crafty with their attacks. Let’s look at their latest strategy to take over your devices.

    What is a Malvertiser?

    Distributing malware via online advertisements is the purpose of malvertisers. With advertising being a critical source of income for websites, malvertising takes advantage of these growing pathways to reach large online audiences.

    Malvertisers use a range of strategies, with the result always being to either direct a user to a malicious server or to get them to download malware onto their device. Online vendors are aware of malvertising strategies and work to prevent their attacks however this is not easy to accomplish.

    Let’s go Phishing

    Malvertisers use Phishing Kits to lure you in. They are an open-source tool that enables them to create websites specifically for phishing, demonstrating the lengths attackers will go to access your devices and information.

    You have seen the types of websites they create, straightforward websites with funny cat pics, trashy stories about celebrities, or blog posts with sensational headlines. These sites are all designed to get you to click on fake adverts that will take you to phishing websites where the aim is to get you to give them your password.

    Simulated Login Websites

    A new practice, the Browser In The Browser (BITB) Attack, has been uncovered and documented by mr.d0x. See his in-depth explanation about BITB attacks here.

    Essentially, the BITB attack involves the malicious player building a website that has a registration and login pop-up that mimics those used for a cloud service like Office365, Facebook, and Google, to name a few. They do this so well that it is likely to fool an IT professional.

    It looks so realistic because the pop-up they create has the correct URL, and it looks exactly like the actual window you would use to log in with Facebook and Google. This enables the attacker to collect usernames and passwords to hack accounts.

    If you are suspicious about a window you plan to use to log in, try dragging the window. If you can move it to the edge of the browser, it’s real. If not, then you know it is fake.

    How to Safeguard Against a BITB Attack

    The ONLY way to ensure you are safe against this type of attack is to always use two-factor authentication for all of your online platforms. The reason why 2FA is successful is that if you are a victim of such an attack, the attacker will need the code to access your account, which of course, goes to you and ensures they are locked out.

    A Few Last Words

    Always think about security with your online presence. The little extra time it takes to implement and use security measures like two-factor authentication is worth spending. Imagine the time, inconvenience, and cost of being successfully hacked. Prevention is undoubtedly worth the effort.

    Availability BPA business continuity Business Process Automation Cybersecurity disruption email scams employees Geeks Innovation Internal Security Policies password protection phishing productivity ransomware removal Recovery risk SaaS security Server Uptime SLA Software as a Service Tech Glitches threats Updating Hardware

  • Tech Glitches: How to Avoid Impacting Productivity

    Tech Glitches: How to Avoid Impacting Productivity

    Technology is going to glitch; some days more than others and odds are that your productivity will be impacted when it does. Glitches can originate from an internal or external source and can cost you in both time and money.

    Can they be avoided? We think that at the very least malfunctions or attacks can be minimized and here is how.

    Tech Issues That Could Already Be Affecting Your Productivity

    Tech issues that you are not aware of can be slowing down your employees, simple problems that can easily be rectified.

    • Unintentional loss of data: Unreliable technology, blackouts, and employee errors cause data loss, one of the most common issues that contributes to the productivity loss of your employees. When staff must restart projects, and redo tasks because items are not saved – they waste time having to retrieve data.
    • Ad hoc employee access: Do you have a logical filing system that staff can easily follow to access the files they need? Do they know where the software they use is kept and how to use it? Monitor your systems, talk to your staff and hold regular training sessions, and create documentation so that employees can seamlessly conduct their work.
    • Computer shutdowns: Are some of your systems or technology outdated? Are they prone to shutting down in the middle of important tasks or freeze just before a document is saved? Update software and technology to enable employees’ productivity with workstations that work.
    • Slow/unreliable network connections: Apart from holding workers back, a slow internet connection can significantly affect productivity. In the current marketplace, reliable and fast internet is easy to access in most areas and there really is no reason to stumble along with a subpar connection.
    • Lack of spam filters: When inboxes fill up with spam, workers slow down dealing with it and run the risk of accidentally downloading a virus. With a spam filter in place, the time spent by employees checking emails is dramatically reduced.
    • Delays in tech repairs: Downtime caused by technology breakdowns. Minimise the amount of time it takes to fix technical issues. Ideally have an IT company on speed dial who can fix breakdowns immediately.

    The Bare Minimum of Protection

    There is a minimum of protection that you should have in place, more is better depending on your business, size, and network configuration.

    If you are not at least doing these things, you are seriously at risk of a crisis:

    Back it up

    Make it a habit to back your files up every day, even better automate the process so you don’t need to remember. Make it easy to recover your files, this helps to mitigate the interruption to productivity.

    Check backups regularly

    Automation is great but fallible, regularly check your backups to ensure they are complete and viable. It needs to be recoverable in case of a crisis. You don’t want to find out your backup is corrupt when you need it in an emergency.

    Store backups safely

    The next step to having a backup of your data is to store at least one copy offsite. Robberies, natural disasters, and fires can be devastating, even more so if you lose all of the data you need to begin trading again.

    Don’t catch a virus

    Install virus protection on your system, you may need an assessment by an expert to implement the solution that gives your network the most comprehensive coverage. Regularly check to make sure that your virus protection is always turned on and keep updates current.

    Configure your firewall

    Regardless of the size of your business, you need to always have a firewall in place. People attack business networks for lots of reasons, sometimes just simply because they can. Preventing an attack is much easier than needing to recover from one.

    Install security patches

    Security patches are an essential part of your system. They are created to address reimagined viral attacks, new attacks, and loopholes that you are not already protected against. Simply update them as soon as they are available for maximum protection.

    A Few Last Words

    Productivity through technology is often overlooked. These simple ways of boosting your productivity are easy to implement and can make a real difference to your bottom line.

  • Your PEOPLE May Be Your Business’ Weakest Security Link

    You may not realise this but a high percentage of security breaches in business’ are connected to or caused by people within an organisation. In 2020 the statistics showed that 38% of breaches were attributed to human error in Australia, and instead of decreasing this metric is on the rise.

    Knowing this and understanding how these breaches occur are the first steps to ensuring the security of your business data. Human error is random, potentially making users the weakest link. So, let’s have a look at the most common ways people create risk at work with simple actions.

    Why Attackers Target Employees

    Why are employees the most vulnerable? Cyber attackers like to use social engineering to exploit human behaviour and coax a monetary return for themselves through employee error or negligence. Usually, through phishing, they engage with employees using malicious intent.

    Employees are more likely to open emails by rote and download harmful content without realising it when they are busy or distracted.

    Attackers may:

    • Install Ransomware that encrypts company files and data until a ransom is paid.
    • Facilitate the theft of source codes, the personal details of employees, and client information.
    • Engage in blackmail.
    • Engage in industrial espionage.
    • Damage the company’s brand and reputation.
    • Disrupt services or production.
    • And more.

    Where You May Be Most Exposed

    The risks attackers exploit are often easy to plug. These are the three areas where breaches using employees may happen.

    Maintain Passwords as a Secure Gateway

    We need a password for almost everything we interact with online. Trying to maintain them as unique and keeping track of them all is a mammoth task, and this is where users often become apathetic.

    When passwords are stolen or broken, hackers can access your data. It is in your best interest to inform your staff about the potential hazards and establish a companywide policy for regular password revision to reduce the risk.

    Warn About the Dangers of Phishing

    Phishing attacks are often preventable – if only that person doesn’t open this link in that email. Seems easy, yet it still happens far too often. Attackers target login credentials, company data, and financial details, usually through email.

    Employees need to be aware of what potential phishing emails look like, that they are primarily emotional manipulation, and what to do if a communication they receive seems suspicious.

    Updating Protection is an Easy Fix

    Malware can be dealt with using robust security software, yet users fail to install solutions (on all devices), and if it is in place, don’t take the necessary steps to keep it up to date.

    Attackers are continuously refining and redeveloping their attacks. To stay current, patches and updates are developed and if they are not installed your security is compromised.

    Taking a moment to update is an easy fix.

    Reducing Business Wide Vulnerabilities

    Addressing the problem across your business to reduce your vulnerability can be as simple as:

    1. Providing in-depth training to employees that includes the different types of risks and how they may present.
    2. Conducting risk assessments regularly on your employees to ensure they are following the prescribed security protocols.
    3. Devising incentive schemes to encourage employees to think about security.
    4. Regular Vulnerability Assessment and Penetration Testing (VAPT).

    A Few Last Words

    With more people working from home in 2020/21, attacks in general have increased to take advantage of home systems that may not have optimal protection because businesses had to quickly pivot to stay afloat.

    We have more time to plan now and one of the issues that always needs to be top of mind for your business is security, regardless of where your workers are located and the devices they use.

    Your security needs depend on the size of your business, but you will always have people working for you. Support them in creating security awareness and you are already starting to reduce your risk.

  • Is Full Ransomware Removal & Recovery Possible? A Comprehensive Guide

    Ransomware Removal & Recovery: A Comprehensive Look

    Ransomware – it’s a major concern for both individuals and businesses. When it breaches your defenses, you’re immediately locked out. And so, we ask: Can we achieve 100% ransomware removal and recovery?

    First, let’s see where attacks usually come from.

    Ransomware’s Entry Points: Stay Alert

    As our protective measures get smarter, so do the attacks. Ransomware has many infiltration paths:

    • Crafty phishing emails with harmful attachments.
    • Drive-by downloads: you visit an infected site, and voila – malware sneaks in.
    • Via instant messaging on the web.
    • By exploiting vulnerable web servers. The list keeps growing, so we must remain vigilant. But, what should we do if ransomware breaches our defenses?

    Ransomware Hits: Act Immediately

    Ransomware’s global threat is growing, and the cost to businesses may skyrocket to $20 billion. In response, 32 nations, including Australia, launched the Counter Ransomware Initiative. The Initiative focuses on cyberattack resistance, disrupting cybercriminal operations, and fighting illicit financial activities. Moreover, Australia introduced the Ransomware Action Plan in 2021.

    If ransomware infects your network, follow these crucial steps:

    1. Isolate: Contain the damage. Disconnect infected computers ASAP.
    2. Identify: Understand your enemy. Use tools or IT expertise to identify the malware.
    3. Report: Alert the authorities. Their specialists will guide your response.
    4. Plan: After resolving the crisis, assess and bolster your defenses to avert future attacks.

    Ransomware Removal & Recovery: Myth or Reality?

    The debate continues: can we completely remove ransomware? With constant evolution and no universal decryptor, it’s tricky. Experts recommend a thorough wipe of all storage devices and restoring from a pre-infection backup.

    Some might opt for System Restore, but it may miss hidden viruses. Thus, backups are the safer bet.

    In Conclusion: Ransomware’s Persistence

    Ransomware isn’t going anywhere soon. Our best defense? Prevention. Keep malware out of your system to protect your data and avoid costly disruptions. With this knowledge, you’re better equipped to combat and recover from a ransomware attack.