Loading ...

Category: Phishing

Phishing Protection – Enable This in Office 365 Now

Phishing Protection

Enable This in Office 365 Now

Had a charity notify us that they were getting a ton of phishing attempts to their email every day and wanted to know what we could do for them. They use Office 365, so we looked through the settings and found one called “First Contact Safety Tip” which makes a small banner appear at the top of the email like this:



Contact us to get this setup immediately. 

Safeguard Your Business: The Importance of Security Risk Assessments

Businesses face a growing number of cybersecurity threats. Cybercriminals are constantly evolving their tactics, making it imperative to prioritize their organization’s security. One crucial step in fortifying your business against potential breaches is conducting a comprehensive security risk assessment. Let’s look at the significance of security risk assessments and how they can shield your valuable data from falling into the hands of malicious actors on the dark web. 

Understanding Security Risk Assessments:

A security risk assessment is an in-depth evaluation of your organization’s digital infrastructure, systems, and processes. It aims to identify vulnerabilities and potential threats that could compromise the confidentiality, integrity, and availability of your sensitive data. By analyzing your current security measures, a risk assessment helps you gauge your organization’s resilience to cyber threats, enabling you to implement targeted mitigation strategies. 

Why Security Risk Assessments Matter:

  • Proactive Threat Identification: Hackers often exploit vulnerabilities that go unnoticed until it’s too late. A security risk assessment enables you to proactively identify and address potential weak points in your network, applications, and data storage. By uncovering vulnerabilities before cybercriminals do, you can take preventive measures to mitigate risks and prevent unauthorized access.
  • Compliance and Regulatory Requirements: Depending on your industry, you may be subject to various compliance regulations that mandate data protection measures. Conducting a security risk assessment ensures that your business aligns with these requirements, helping you avoid costly penalties and reputational damage.
  • Data Protection and Client Trust: Data breaches can have severe consequences, including financial loss, legal ramifications, and damage to your brand’s reputation. By investing in security risk assessments, you demonstrate your commitment to protecting your clients’ sensitive information, fostering trust and long-term relationships.
  • Dark Web Threat Mitigation: The dark web has become a thriving marketplace for stolen data, offering cybercriminals a platform to sell and exploit compromised information. By conducting regular security risk assessments, you can identify vulnerabilities that may expose your data to the dark web. This knowledge empowers you to implement robust security measures, reducing the likelihood of your data being discovered and abused in illicit activities.

Securing your organization’s digital assets is of paramount importance.  By conducting regular security risk assessments, you gain crucial insights into potential threats and vulnerabilities, which allows you to implement targeted security measures. 

Protect your data from ending up on the dark web with a proactive and comprehensive approach.  We can help!

Understanding the Dark Web

The Dark Web is a part of the internet that requires special software to access. Often used by individuals who are looking to conceal their identities and activities, it has become the ideal environment for cybercriminals seeking to carry out illicit activities. They can move anonymously in this part of the internet often engaging in criminal activities such as the sale of stolen data, hacking tools, illegal drugs, counterfeit documents, and even illicit services.
 
Why Should You Be Aware of It?
 
While the Dark Web may seem distant and irrelevant to your everyday business operations, it poses serious risks that can have far-reaching consequences. Here’s why you need to be aware of it:

  1. Stolen Data Trade: The Dark Web serves as a marketplace for cybercriminals to sell stolen data, including usernames, passwords, financial information, and sensitive business data. By purchasing this data, hackers can launch targeted attacks against organizations like yours, leading to data breaches, financial loss, and reputational damage.
  2. Credential Stuffing and Account Takeovers: Cybercriminals often utilize compromised login credentials from data breaches to carry out credential stuffing attacks. By leveraging automated tools, they attempt to gain unauthorized access to your business accounts. Once inside, they can exploit your resources, compromise customer data, and cause significant disruption.
  3. Sale of Exploit Kits and Malware: The Dark Web provides a platform for the sale of malicious software, exploit kits, and hacking tools. These tools can empower cybercriminals to launch sophisticated attacks against your business, including ransomware, phishing campaigns, and network infiltration.
  4. Insider Threats and Employee Monitoring: Employees with malicious intent may leverage the Dark Web to collaborate with external criminals or sell sensitive company information. Awareness of the Dark Web can help you implement appropriate security measures to detect and mitigate insider threats.
  5. Reputational Damage: In the event of a data breach or cyberattack, information about your business may end up on the Dark Web. This can severely damage your reputation, erode customer trust, and lead to potential legal and financial repercussions.

What Can You Do?
To protect your business from the risks associated with the Dark Web, we recommend the following actions:

  1. Strengthen Your Security: Implement robust cybersecurity measures, such as multi-factor authentication, strong password policies, regular software updates, and network monitoring. Conduct security awareness training for your employees to educate them about the dangers of the Dark Web and how to identify potential threats.
  2. Dark Web Monitoring: Engage with Farmhouse Networking to incorporate Dark Web monitoring solutions. These services scan the Dark Web for mentions of your business’s critical information and alert you if any compromised data is discovered.
  3. Incident Response Planning: Develop an incident response plan that includes protocols for handling potential Dark Web-related incidents. This plan should outline steps for containing, investigating, and recovering from a data breach or cyberattack.
  4. Regular Vulnerability Assessments: Perform periodic vulnerability assessments and penetration testing to identify and address potential weaknesses in your network infrastructure and applications.

The Dark Web is a part of the internet that requires special software to access. Often used by individuals who are looking to conceal their identities and activities, it has become the ideal environment for cybercriminals seeking to carry out illicit activities. They can move anonymously in this part of the internet often engaging in criminal activities such as the sale of stolen data, hacking tools, illegal drugs, counterfeit documents, and even illicit services.
 
Why Should You Be Aware of It?
 
While the Dark Web may seem distant and irrelevant to your everyday business operations, it poses serious risks that can have far-reaching consequences. Here’s why you need to be aware of it:

  1. Stolen Data Trade: The Dark Web serves as a marketplace for cybercriminals to sell stolen data, including usernames, passwords, financial information, and sensitive business data. By purchasing this data, hackers can launch targeted attacks against organizations like yours, leading to data breaches, financial loss, and reputational damage.
  2. Credential Stuffing and Account Takeovers: Cybercriminals often utilize compromised login credentials from data breaches to carry out credential stuffing attacks. By leveraging automated tools, they attempt to gain unauthorized access to your business accounts. Once inside, they can exploit your resources, compromise customer data, and cause significant disruption.
  3. Sale of Exploit Kits and Malware: The Dark Web provides a platform for the sale of malicious software, exploit kits, and hacking tools. These tools can empower cybercriminals to launch sophisticated attacks against your business, including ransomware, phishing campaigns, and network infiltration.
  4. Insider Threats and Employee Monitoring: Employees with malicious intent may leverage the Dark Web to collaborate with external criminals or sell sensitive company information. Awareness of the Dark Web can help you implement appropriate security measures to detect and mitigate insider threats.
  5. Reputational Damage: In the event of a data breach or cyberattack, information about your business may end up on the Dark Web. This can severely damage your reputation, erode customer trust, and lead to potential legal and financial repercussions.

What Can You Do?
To protect your business from the risks associated with the Dark Web, we recommend the following actions:

  1. Strengthen Your Security: Implement robust cybersecurity measures, such as multi-factor authentication, strong password policies, regular software updates, and network monitoring. Conduct security awareness training for your employees to educate them about the dangers of the Dark Web and how to identify potential threats.
  2. Dark Web Monitoring: Engage with Farmhouse Networking to incorporate Dark Web monitoring solutions. These services scan the Dark Web for mentions of your business’s critical information and alert you if any compromised data is discovered.
  3. Incident Response Planning: Develop an incident response plan that includes protocols for handling potential Dark Web-related incidents. This plan should outline steps for containing, investigating, and recovering from a data breach or cyberattack.
  4. Regular Vulnerability Assessments: Perform periodic vulnerability assessments and penetration testing to identify and address potential weaknesses in your network infrastructure and applications.

Why 2FA is Necessary for Business

Businesses are face an increasing number of cyber threats. To protect sensitive data and prevent hackers from gaining access, implementing stronger security measures is crucial. One such measure is 2-factor authentication (2FA). Let’s look at the importance and security benefits of 2FA for businesses.
 

Enhanced Account Security:

2FA adds an extra layer of security to the traditional username and password login process. By requiring users to provide a second form of authentication, such as a unique code sent to their mobile device, it significantly reduces the risk of hackers from gaining access. Even if a hacker manages to obtain a user’s password, they would still need the second factor to gain access.
 

Mitigation of Password-related Risks:

Passwords are often the weakest link in security systems. Many users tend to reuse passwords across multiple accounts or choose weak and easily guessable ones or re-use the same password while incrementally changing a digit or two. With 2FA, even if a password is compromised, the additional authentication factor acts as a safeguard, making it significantly harder for attackers to gain access.
 

Protection Against Phishing Attacks:

Phishing attacks, where attackers trick users into revealing their login credentials, are a common threat to businesses. 2FA provides an additional layer of defense against such attacks. Even if a user unknowingly falls victim to a phishing attempt and enters their credentials on a fake website, the second authentication factor would prevent the attacker from accessing the account.
 

Compliance with Industry Regulations:

Many industries, such as finance, healthcare, government contractors, and e-commerce, are subject to strict data protection regulations. Implementing 2FA helps businesses meet compliance requirements and avoid potential penalties. It demonstrates a commitment to safeguarding sensitive customer information and builds trust with clients.
 

Cost-Effective Security Measure:

Implementing 2FA does not require significant financial investment. Many 2FA solutions are readily available and can be easily integrated into existing systems. Considering the potential financial and brand reputation damage caused by a security breach, the cost of implementing 2FA is minimal compared to the benefits it provides.
 
In an era where cyber threats are constantly evolving, businesses must prioritize security measures to protect their valuable data. 2-factor authentication offers a simple yet effective way to do so. 

If your company is interested in implementing 2FA across the entire organization, then contact us for assistance.

How is Malware Delivered?

Malware

Read a recent study on the origins of malicious software aka malware. Here are the highlights:

Current Malware Statistics

29% – Malware is previously unknown to security vendors due to the continued efforts of malware creators to hide the software or make it undetectable.

88% – Malware is delivered to people’s inboxes and some of it bypassing normal SPAM filters.

8.8 Days – Time before regular antivirus vendors have discovered the malware and added it to their lists for detection.

$50 – The cost of a pre-fabricated malware kit that can be bought currently on the dark web.

“The most common type of malicious attachments were: documents (Word – 31%), archive files (ZIP & RAR – 28%), spreadsheets (Excel – 19%) and executable files (EXE – 17%).”

What can be done?

A multi-tiered approach to security remains the best solution:

  • Moving from traditional antivirus to Enhanced Detection & Response (EDR) software to go beyond lists of know infections to behavior tracking of software
  • Moving from traditional SPAM filters to Email Advanced Threat Protection which scans each email and opens each attachment to see if there is any malicious activity cause by them
  • Moving from traditional router to a business class firewall with Intrusion Prevention System to monitor traffic for suspicious activity
  • Employee training is also key to keep your staff aware of immerging trends and threats 


If your company is looking to enhance your network security posture, then contact us for assistance.

Number of Credentials Exposed Increased by 429%

Hacked - Grants Pass, OR

A company named Arctic Wolf, a leader in enterprise security operation centers, published a report that states that the number of corporate credentials with plaintext passwords on the dark web has increased by 429% since March.

There are also startling statistics on the increase in email phishing attempts and the use of unsecure public wireless connections. These numbers are like due to the Work From Home employees using their own insecure computers and cyber criminals trying to take advantage of the trend. It appears that security measures that are used in the office need to be extended to the Work From Home network as well. 

If your company is currently or is going to have Work From Home users, then contact us for assistance.

Local Church Hit By Ransomware

Got a call a couple weeks ago from a local church:

“we came in and open the computer and we have ransomware on there. We can’t even get to any of our stuff. It’s telling us to email somebody and so that they can free up the computer.”

How does this happen?

Generally these things happen because people click on things they shouldn’t. Whether in an attachment in email from someone they don’t recognize, a link in social media that sounds too good to pass up, or an advertisement for something they can’t live without. Once the user gives permission for something to open or run on their computer the game is over and the hacker wins.

What to do when it happen?

  • Stop using the computer.
  • Leave the computer alone! Do not carry out any further commands, including commands to Save data.
  • Do not close any of the computer’s windows or programs. Leave the computer alone.
  • Leave everything plugged in and do not turn off the computer or peripheral devices.
  • If possible, physically disconnect the computer from networks to which it is attached.
  • Call us immediately. Write down any unusual behavior of the computer (screen messages, unexpected disk access, unusual responses to commands) and the time when they were first noticed.
  • Write down any changes in hardware, software, or usage that preceded the malfunction.
  • Do not attempt to remove a suspected virus! Let the professionals do the dirty work.

How to prevent this from happening?

Layers of protection is the simple answer. A good antivirus installed to stop the bad programs from running, DNS filtering to keep users off of bad sites / advertisements, a good backup of all data to recover when this does happen, and most important of all EDUCATION – teaching users what safe internet usage looks like and having policies in effect to train them can mitigate 60-70% of infections. 

If your company is would like to discuss the layers of security you have in place, then contact us for assistance.

Is this really SPAM?

Thought that I would share a recently received new SPAM email variant that could easily be overlooked and possibly be a scammer looking to take your money. This one is strange to me and I wanted to share my insites.

Starting from the Top

Look closely at the From portion of the email:

This email is from a legitimate email marketing firm called AWeber. The SPAMMER is actually using a website designed to help bypass SPAM filtering to deliver mail. There is also the fact that the email is form someone that I don’t do business with. Always fight the urge to look at things that are not yours.

Stick to the Subject

Now to take a look at the Subject line of the email:

The email marketing firm this SPAM is sent from is required that you confirm someone who is joining your email campaign. Guess I would have to agree to be scammed by this person.

And now the rest…

The final thing that caught my eye was the title of the email campaign in the email:

The enticing title “Clickbank – 30k project” sounded interesting. By clicking on the button I would confirm my existence as a real person and would likely kick off a communication from someone who is likely an “African Prince” with a money making opportunity. Hope this little tutorial helps you detect other phishing attempts in the future.

If your company is having trouble with SPAM or phishing, then contact us for assistance.

Received Hacker Email

Hacker Email

Here is a recent email that I received from a “hacker” that was threatening to expose some secrets. It was an obvious fake email, but I wanted to take the time to educate on how to know a fake when you receive one:

Hacker Email Exposed

Strange Email Address: This email comes from “auf@cesco.com.br” which is an address unknown to me and the domain itself ends in BR which stands for Brazil which again I don’t do business in Brazil so why would someone from there be emailing me.

Poor English: It starts out with the over-friendly greeting and continues with “I hack your computer” then just doesn’t stop. This was likely something typed into Google Translate then pasted into an email.

They Have Everything: Unless you really have something to hide, then this should not scare you. You need to assume that anything that you post online is public information anyways – there are no secrets on Facebook.

Invalid Help: They offer to help with acquiring Bitcoin to pay them in then offer a site to find local ATMs that have this feature. They have no understanding of the area or what local banking services are available. If they know everything about me then they know where I live and could easily look up the local economic structure.

Internet Extortion: They are using extortion tactics to try and scare me into action. They are trying to “sell” me information security for $120, but if I gave into their demands then my email address would become an even more valuable asset as they would have someone they could regularly extort for funds.

What To Do

  1. Unless you have something to hide, ignore the threats. If you do have something to hide then I suggest you quit so that no one can have anything against you.
  2. Forward these emails to me. Include the “header” information by copying it from the File > Properties menu in Outlook as this will help to track down where they are from.
  3. Farmhouse Networking will alert the proper authorities about the malicious activity to help shut these scammers down.

If your company is receiving tons of SPAM or hacker email, then contact us for assistance.

Branded Email using Custom Domain Name

There are many reasons your business needs to use a branded email address using a customized domain name. Let’s look at what the top ones are:

Branded Email Establishes Legitimacy

Customers want to trust a companies before they choose to give their business to them. This is the number one reason businesses should use branded email – not only does it give your business a deeper level of branding, but it establishes the business' legitimacy. This is because your email is often the customer’s first impression of you, especially if email or print marketing had an email for contact. It makes your business look professional and can set it apart from the competition. Phishing schemes are a very real concern these days and many of these fake emails come from people trying to pose as a legitimate business. The best way for your customer to know if the email is really from you or a potentially dangerous location, is by the email address' domain name. If the customer can look at the sender address and see your business’ domain, they will feel more confident clicking links or replying back with sensitive information.

Branded Email Builds Your Brand

A business can never have too much company branding. From business cards to bumper stickers to coffee mugs, there are branding opportunities everywhere. This should includes your business email too. Every time your employees send an email, it reinforces your business brand to the customer. It not only reminds the customer that you have a website, but gives them a peek into what your company is all about.

Branded Email Separates Company Departments

Having a branded email allows you to create multiple email addresses or email aliases for different departments and company objectives. This is a huge benefit as yourname@mycompanyname.com may not always the best address to email or your business may not want the customer to directly contact your employees. It helps compartmentalize the work and make sure that the right person / department receives the correct emails. You can create emails like support@mycomanyname.com, info@mycompanyname.com, sales@mycompanyname.com and many others that can point to one or more members of the organization. It also helps the customer, by pointing them to the right email address for the issue they need addressed.

Branded Email Isn’t Expensive

With Office 365’s Hoste Exchange service your business can add as many individual email addresses and email aliases to your company's branded domain on an as needed basis, access email from anywhere across all major platforms, get industry leading anti-malware / anti-spam filtering built in, send email attachments up to 150MB in size and get 50GB of storage per mailbox. Prices start at just $4 per user per month. Microsoft manages the email server and Farmhouse Networking handles the setup / administration of the rest, which making it simple for you to have a professional branded customized business email address.

If you don’t have a branded email address, now is the perfect time to get one. Small businesses often think they don’t need one or can’t afford it, but that is simply not true. Help your business by setting up a branded email today by giving us a call or email to let our Office 365 experts get your business started on the path to better branding.

Archives

Categories

Plant a Seed @ 541-761-9549
233 Rogue River Hwy #873 Grants Pass, OR 97527
Mon-Fri: 9:00am-5:00pm
support@farmhousenetworking.com
© 2016-2023- Farmhouse Networking. All rights reserved
Terms and Conditions Privacy Policy

Evaluation Signup

[contact-form-7 id="452" title="Free Network Evaluation"]
And God will generously provide all you need. Then you will always have everything you need and plenty left over to share with others. As the Scriptures say,
“They share freely and give generously to the poor. Their good deeds will be remembered forever.”
For God is the one who provides seed for the farmer and then bread to eat. In the same way, he will provide and increase your resources and then produce a great harvest of generosity in you. - 2 Corinthians 9:8-10