Chimera ransomware’s scary tactics

by Complete Care IT, LLC | December 29, 2015

The threat of being infected by malicious software is part and parcel of spending time on the internet, and no sooner have the antivirus and security software programs released an update or new patch than cyber criminals are scrambling for ways to circumvent them. In addition, as end users become savvier to the tricks and scams used to steal our data, money or identities, new tactics are employed to try and fool us. And that includes Chimera, a new strain of ransomware which has recently been uncovered.

Business is booming in the world of cyber crime, and scammers, extortionists, phishers and hackers are constantly on the lookout for new ways to exploit our fears and naivety in order to boost their bank accounts, steal our data, or simply cause us mayhem for their own twisted pleasure. One of worst types of malware for playing with our emotions – and therefore increasing the likelihood of us capitulating to its demands – is ransomware. If you don’t know how this program works, read on for an introduction.

If your computer has been infected by ransomware, the first sign that something is wrong is normally discovering that you are unable to open one or more of your files. That’s because the malware encrypts them, rendering them completely inaccessible. The next thing you see will be a ‘ransom note’, either in the form of an email or a notice that appears directly on your screen. You will be told that if you want to see your files again you will need to pay a sum of money. After making payment you will (allegedly) be sent a code that will allow you to decrypt your files.

Some types of ransomware up the fear factor even further by pretending that the FBI, CIA or other national law enforcement or government agency is behind the ‘kidnapping’. You will be told that your files are being held hostage because you have downloaded pirated software or files, or visited an illegal or illicit website – such as those depicting extreme pornography or threatening national security. Regardless of whether or not you are guilty of any of the above – be it a visit to an x-rated website, or downloading a pirated copy of the latest episode of The Walking Dead, your first instinct is probably to panic. The thought of no longer having access to any of our information, files or data is enough to make most of us break out into a cold sweat. If you haven’t backed up, everything from your vacation pictures to your company’s data could be lost for good.

The problem for ransomware creators, however, is that many users have wisened up to their tactics, and are refusing to pay, instead calling in an IT specialist to try and restore their encrypted files. This has left cyber criminals needing to find a way to boost ‘trade’. And that is where Chimera comes in. Christened by the Anti-Botnet Advisory Centre – a part of Germany’s Association of the Internet Industry – unlike previous forms of ransomware, which were indiscriminate when choosing their victims, this latest threat primarily targets businesses.

An employee will receive an email, purporting to be an application for a job within your firm, or some kind of corporate deal. This email will include a link ostensibly to the applicant’s resume or to details of the offer, but will in fact go to an infected file stored in Dropbox. Chimera then infects the user’s computer and encrypts any local files. Once the PC has been rebooted, the ransom note will be displayed on the desktop. Payment is usually set at around $680 USD, which must be paid in Bitcoins. And in order to further scare the victim into paying, the note will also state that failure to make payment will result in the user’s files being published online.

If there is a slight silver lining to the Chimera cloud, it is that the Anti-Botnet Advisory Centre has not found any proof that files have been published – at least not yet. In fact, it is still unknown whether the ransomware does actually take the encrypted files or if it is just an empty threat. Regardless, it is still a threat which could easily convince many users to pay the ransom. And should Chimera make good on its threats, the ramifications for a business are huge – and that’s without taking into consideration the nightmare of having your files encrypted in the first place. With Chimera targeting businesses of all sizes, and random employees within the business at that, isn’t it time you took another good look at your organization’s security posture?

Contact us today and talk to one of our security experts. We’ll be more than happy to help ensure that your small or medium-sized business isn’t taken hostage by Chimera or any other type of ransomware.

Published with permission from TechAdvisory.org. Source.

2016’s possible security problems

by Complete Care IT, LLC | December 28, 2015

As shown by recent high-profile hacking scandals – targeting everyone from Sony Entertainment to the extramarital-affair-facilitating website Ashley Madison – cyber crime shows no sign of disappearing any time soon. In fact, experts predict that 2016 is going to be an even busier year for cyber criminals, hackers and scammers. So what do you need to know in order to be able to keep your small or medium-sized business safe next year? Here we take a look at what could be in store.

If you think that only big corporations and prominent organizations are targeted by cyber criminals, you are making a deadly mistake. It might be tempting to sweep cyber crime under the carpet and assume that you are flying below the average hacker’s radar, but that simply isn’t true. In fact, it’s the polar opposite, since smaller enterprises are actually far more likely to be at risk than larger ones, owing to their typically less sturdy security postures.

So where does that leave you as a small or medium-sized business owner or manager? Does it mean you need to be taking your cyber security even more seriously? You can bet your bottom dollar it does, as industry experts predict that 2016 is only going to become more of a minefield when it comes to online crime.

The headline trend that IT security professionals pinpointed this year was that no longer were criminals hacking into websites purely to bolster their bank accounts. 2015 has seen the emergence of another strain of hackers, launching cyber attacks as part of a moral crusade. These people are not purely after money although in some cases this may also be a contributing factor – instead, their claimed motivation is revenge, or righting what they perceive as wrong. It is this diversification in the hacking community that has led security watchers to predict that, as we enter 2016, we are likely to see some different behavior from hackers.

Among the unpleasant predictions being made, a number of experts agree that hacks of a destructive nature will be on the rise. The fact that hackers are using attacks for retribution rather than simple monetary gain means that a wider cross-section of organizations may well find themselves being preyed upon, all the way from government agencies – traditionally ignored by hackers – to online retailers and other commercial websites.

Remember when Snapchat got hacked back in October 2014, and the hackers threatened to make public as many as 200,000 photos? Well, the bad news is that apps are going to continue to be targeted. In particular, those mobile apps that request access to your list of contacts, emails and messages can, in the wrong hands, be used to create the kind of portal that enables a cyber criminal to steal data or gain access to a company’s entire network. All this means that in 2016, hackers could be taking advantage of apps to do more than just steal your social media photos – they might have in mind the takedown of your entire company.

As a local business owner, social engineering – a means of tricking an individual into disclosing revealing or personal information about themselves or their company – is something you definitely need to be concerned about. You might pride yourself on being too savvy to fall for a cyber criminal’s tricks, but what about your employees? Can you be sure that each and every one of them exhibits the same amount of self control, cynicism, and wariness that you do? Not only that but, as we enter a new era of online threats, the criminals that use social engineering are growing in confidence and creativity. Dodgy emails from a bizarrely named sender containing a link to an unheard-of website are yesterday’s news. Modern social engineering is highly evolved and extremely cunning, and has the potential to convince even the most streetwise internet user.

How confident are you that your entire team of employees would be completely infallible in the face of a stealth attack from a seemingly innocent source? Could you trust them to restrain from divulging not only their personal details but also information pertaining to your company? Multiply the number of employees in your company by the number of phone apps they potentially use, and add to that the fact that any one of them could at any time be targeted by a social engineering scam, and the end result is a less-than-perfect security posture.

The sad fact is that there are people who want to do you harm – regardless of whether you hold confidential information about celebrity salaries, or are privy to a database full of cheating spouses. People, no matter how well meaning or vigilant, are the weakest link in any security chain, which means that ensuring your business’s safety necessitates educating your staff and ensuring that your network is impenetrable.

Professional training and a vulnerability assessment are two great places to start, so why not get in touch with us? We’ll make sure your business is as hack-proof as it can be.

Published with permission from TechAdvisory.org. Source.

The link between big data and profit

by Complete Care IT, LLC | December 25, 2015

Big data. You may have heard of it; after all it’s been putting in an appearance at boardroom meetings across the globe for some time now. But what actually is big data? And what does it mean when applied in a business environment? More importantly, what can it do and how can it help your organization to succeed? And getting down to the nitty-gritty, does the term big data actually mean anything – or is it just another empty industry buzz word? The good news is that it’s not, and using big data can actually help drive profit. Read on to learn more.

So, we’ve established that big data is causing a stir and creating a buzz in companies that are in the know. In fact, it’s become hip to bandy about the phrase whenever one is trying to impress their boss, senior management or fellow co-workers. But like any lingo or jargon that is currently cool, it really doesn’t count for a whole lot if it doesn’t mean anything, particularly in the workplace.

The good news is that, unlike some of the more hackneyed expressions thrown around by those colleagues that are so desperate to impress their seniors, big data does actually mean something. And, more to the point, it can help your business thrive. Big data can help you achieve that end result that everyone in business is chasing: profit.

This is why big data is trending so sharply at the moment – after all, every owner or manager of a small or medium-sized business wants to grow their bottom line. Times are hard in many industries: increasing competition from abroad, the threat of the internet to bricks-and-mortar stores, a difficult economic climate – the list goes on. But what if something as simple as using your business’s data could push you heads and shoulders above the competition, and help turn around that downwards or flatlining arrow on your sales chart and point it upwards in the direction of success?

But before we get to that; what actually is “big data”? Why is it big? Well, we may have said that using data to grow profit is simple but, in actual fact, it’s really not as easy as all that. Big data is used to refer to various sets of data that are so huge and so complex that the traditional methods of processing data are virtually useless. Database management tools and other processing applications become redundant and are just not up to the task of capturing, storing, searching for, sharing, transferring, analyzing, and visualizing data.

Instead of looking at separate small sets of data, big data – as the name implies – looks at larger sets that contain far more information. This enables anyone analyzing the results to cross-check the sets and pinpoint trends, both positive and negative, across the entire business. As a result, owners and managers can make more informed decisions that affect the company in a more beneficial way than is possible by merely looking at small, isolated sets of data.

Big data therefore plays a valuable role in strategy and planning, and also helps troubleshoot worrying or problematic trends that threaten the performance and profitability of the business. Put simply, using big data to assist in making decisions for your company is about being able to see the bigger picture (to use another tired corporate buzz phrase). Decisions made with all the facts at hand will naturally help increase revenue, as opposed to blindly feeling in the dark and making changes to one area or department that may negatively affect another.

There are a number of ways that you can use big data analytics to make better decisions and increase profit. Crucially, it allows you to see what really makes your customers tick. Nowadays many businesses offer different ways for their customers to communicate with them. From email to a website, to phone calls and human interaction, all of these present you with meaningful information about your clients’ behavior. Knowing what your customers rely on you for, how they interact with you, and where they may hesitate or stumble when using your services, provides a wealth of knowledge just waiting to be mined. However, a lot of this data is unstructured and therefore cannot be analyzed using traditional means. That’s where big data comes in: it can help you uncover the information you need to really understand your customers.

Of course it goes without saying that a deeper understating of your customers can help you grow your customer base, increase repeat business, heighten customer loyalty, and reduce bounce rates and the number of dissatisfied customers. But that’s not all – analyzing this data will allow you to develop new products or services, create stronger, more effective marketing campaigns, and create an all-round better experience for the people that matter most – the people you serve.

Want to learn more about big data, and find out how it can have a seriously positive impact on your business’s revenue? Talk to us today – we have the knowledge and experience to help you really get the most out of your company’s intel.

Published with permission from TechAdvisory.org. Source.

Interruption insurance for businesses

by Complete Care IT, LLC | December 22, 2015

Natural disasters have increased exponentially in the last few years – something that has resulted in a number of small and medium-sized business owners turning to business interruption insurance for protection. Covering many scenarios that regular business insurance simply ignores, adequate protection can be the make-or-break factor when it comes to surviving a natural or manmade catastrophe.

So why do small and medium-sized organizations tend to forego business interruption insurance policies? Chances are it, like so many things, comes down to cost. But can you really afford to ignore the additional protection that interruption insurance offers, or is it safe to cut corners and hope that your regular business insurance will have you covered in the event of a disaster?

While an interruption insurance policy may cost you anywhere from $750 to $10,000 or more (the cost is normally dependent on the size of your business), the fact is that your standard insurance policy will not cover you completely when a catastrophe strikes.

Take for example the spate of superstorms that have ravaged the United States over the past decade. From Hurricane Katrina to the more recent Sandy, small businesses and enterprises throughout the US have been left devastated after feeling the wrath of Mother Nature. While a best-case scenario may entail losing a few days sales during a power outage, at the other end of the scale you could find yourself dealing with a destroyed warehouse, an office that no longer has a roof, or thousands of dollars worth of stock destroyed by flooding.

And the reality is that your regular insurance is probably not going to reimburse you for storage or relocation costs if you need to move operations elsewhere, temporarily or otherwise. The majority of policies will only cover the loss of, or damage to, physical items like stock, equipment and property. They will usually not cover you for any loss in profit if a disaster means that you need to temporarily cease trading. On the other hand, tightly drawn up business interruption insurance should cover you in the event you need to move. It should also cover a decrease in sales due to power failures that shut your communication lines down, as well as a drop in profits due to delays in the delivery of stock or equipment.

Think the chances of a natural disaster affecting you are still slim despite the scenes of chaos and devastation reported in the media? Consider that a recent survey conducted by insurance giant Allianz found that there are now typically 600 major incidents per year – compare that to the previous 400 per annum and it doesn’t take a mathematician to figure out that disasters are on the rise.

So, as a small or medium-sized business owner, what do you need to know before you consider purchasing interruption insurance? If you’re thinking of adding interruption coverage to your existing policy, first record your current net income – but watch out because, if your net profit is high, you might be hit by a low per-incident limit. You could find your insurer has limited your coverage and left you inadequately protected.

Is business booming? If you are undergoing rapid growth, keep records spanning many months so you have proof of revenue increase. Without this, you will not be able to forecast month-on-month profit growth and your insurer might cap coverage at the rate of the previous year’s profit, not at your accelerated one. Be aware, too, that the type of interruptions you want protection for should reflect the areas covered in your general business policy. If your existing policy doesn’t include coverage for fire damage, neither will your interruption insurance.

There are many other aspects of an interruption policy to take into account – such as add-ons that protect you in the event of a power outage (something that standard policies normally don’t normally cover), and knock-on effects caused by a disaster at your supplier’s end.

Once you have taken out interruption insurance, should you have to use it then the most important aspect for you will be getting reimbursed. Crucially, you need to be able to provide your insurer with as many details concerning profit loss as possible. Consider storing files electronically, either offsite or in the cloud. That way, if your office or store is destroyed, you’ll still have access to your documents – and a far greater chance of recovering your losses.

If you’d like to learn more about protecting your data, files and documents, as well as about business continuity planning to help you get back up and running should disaster strike, please get in touch with our team today.

Published with permission from TechAdvisory.org. Source.