Archives for September 2018

Amazon Joins Trillion Dollar Club

September 18, 2018 by Joseph Martin

It’s official, Apple now has company in the Trillion Dollar Club as Amazon’s stock surged past $2,000, briefly pushing the company’s total value to just over the trillion-dollar mark.

This makes the company’s CEO Jeff Bezos the richest person in the world, with a net worth estimated at around $166 billion dollars.

Amazon started out as just another internet company struggling to turn a profit. Over the years, however, the company has become a true retail powerhouse, and a disruptive force in the industry.

Some analysts predict that the company’s stock price is poised to climb even higher. Brian Nowak, (an analyst at Morgan Stanley) cities some reasons for his continued optimism. These include the company’s rapid growth, their improving business mix and their profit potential. Overall, Amazon’s total value only trails Apple’s by about $100 billion.

The last twelve months have been kind to Amazon, and the company has seen its stock price surge nearly 75 percent. The company is aggressively expanding into new businesses and finding success in doing so, which is exciting investors. Last year, for example, Amazon purchased Whole Foods Market for $13.7 billion, and recently acquired the online pharmacy, PillPack.

While there are only two members of the trillion-dollar club, there are two other companies poised to join their ranks. Both Microsoft and Google’s parent company, Alphabet are currently valued at about $850 billion. A modest nudge in either company’s stock price could push either of them into the trillion-dollar stratosphere.

Although there are a number of analysts who are excited by the stock’s future prospects, there is also some cause for concern. At current prices, the stock is trading at nearly 100 times earnings, which is nearly five times the broader market’s P/E ratio of 21. Then there’s the considerable risk that Amazon may suffer from a regulatory crackdown, given its size and dominance in the market.

Even so, it’s great news, and even better if you already own Amazon stock!

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

Air Canada Customers May Have Had Their Data Exposed

September 17, 2018 by Joseph Martin

If you fly Air Canada and use their mobile app, it may be time to change your password. The company recently announced that between August 22nd and August 24th of this year, they detected “unusual log-in behavior,” and that a small fraction (some 20,000) of their 1.7 mobile app users may have had their data compromised as a result.

The company stressed that no credit card information was compromised, but that doesn’t make the breach much less damaging.

The exposed data included:

Customer name

Physical address

Email address

Phone number

Any information an individual customer added to his or her profile

Worst of all is the fact that passport numbers were also exposed. Using that information, a hacker could easily gain access to the countries that a person has been to, when the passport expires, country of residence, the flight numbers of any flights they’ve taken, their gender, birthday and more.

As is usually the case when events like this occur, Air Canada has apologized to their customers and has reached out to all of their potentially impacted users.

Even if you didn’t get a notification from Air Canada, it would be prudent to change your password as soon as possible.

The company has not released any details about exactly how the breach occurred, and the matter is still under investigation.

Note that in terms of scope and scale, this is a fairly small breach. The 20,000 users represents about 1 percent of the total user base. Even so, the data stolen has the potential to be quite damaging. Even after you change your password, since email addresses were compromised during the breach, be on the alert for phishing emails, as the group responsible may attempt to leverage the information they have to get even more.

Joseph Martin

Tech Support Scammers Are Advertising Online

September 17, 2018 by Joseph Martin

Tech Support scams are nothing new, but they are getting increasingly sophisticated. Worse, tech giants like Google are finding it notoriously difficult to detect them.

A report recently released by the venerable data security firm, Symantec, indicates that tech support scammers are increasingly integrating call optimization into their schemes, which allows them to insert phone numbers into web pages dynamically. Among other things, this allows the scammers to display the phone number of someone who speaks the language of the victim, which makes the whole act more convincing and much more likely to succeed.

In recent years, tech support scams have begun promoting their “services” via ads, where they claim to be legitimate, authorized service centers for companies like Apple, Microsoft, or Dell. The brand recognition and professional presentation combine to put their victims at ease.

They’re so slick and professional, and their “employees” so good at mimicking the employees of legitimate service centers that it can be virtually impossible to tell the real companies from the fake ones.

David Graff, Google’s Director of Global Product Policy had this to say about the matter:

“For many years, we’ve consulted and worked with law enforcement and government agencies to address abuse in this area. As the fraudulent activity takes place off our platform, it’s increasingly difficult to separate the bad actors from the legitimate providers.”

Google is taking steps to try and combat the rising threat. Recently, they’ve made a change to their policy as it relates to tech support companies, only accepting ads from verified third-party support vendors.

Even with this added layer of protection, however, the tech support scam is thriving. Scammers have already begun taking steps to get around the new restrictions by cold-calling their victims. For the most part, this has proved to be a successful tactic for them. However, in at least one instance, where the scammers called the New Zealand Police, it ended quite badly for the criminals.

Joseph Martin

Hacker Requests For Wire Transfers Are Topping Email Scams

September 13, 2018 by Joseph Martin

Business Email Compromise (BEC) attacks are a major threat, costing business nearly three billion dollars a year.

This form of attack primarily targets the C-Suite in order to impersonate them.

In the world of BEC attacks, those that employ requests for wire transfers are almost devastatingly effective.

Asaf Cidon, the Vice President of Content Security at Barracuda Networks, explains why:

“Criminals use business email compromise attacks to obtain access to a business email account and imitate the owner’s identity, in order to defraud the company and its employees, customers, or partners. In most cases, scammers focus efforts on employees with access to company finances or payroll data and other personally identifiable information.”

The attack unfolds when the hacker, pretending to be a company CEO or other high-ranking official requests immediate payment, usually via wire transfer.

Again, per Asaf Cidon:

“The sense of urgency, a request for action, or a financial implication used in BEC schemes tricks targets into falling for the trap. For example, an accountant may receive a fraudulent email request for a wire transfer from the company CEO, which includes a spoofed version of the CEO’s email address and even the CEO’s own email signature.”

According to a 2016 report published by Trend Micro, a successful BEC attack nets the hacker an average of $140,000. Given how easy they are to pull off (and how low-tech), don’t expect this type of attack to show any signs of decline in the foreseeable future.

What makes BEC attacks even more troublesome is the fact that law enforcement officials believe that few attacks of this type are ever reported, and that the losses to business could be up to four times the figure we cited earlier.

Worst of all, these types of attacks appear to be increasing in their frequency. Unfortunately, C-Suite employees are notoriously resistant to basic security training, meaning that there are no easy solutions to this large and growing problem.

Joseph Martin

New Versions Of Ransomware Continue To Wreak Havoc

September 12, 2018 by Joseph Martin

2017 was “The Year of Ransomware.” It saw an incredible number of ransomware attacks and infections, paired with a tremendous number of innovations.

Although 2018 hasn’t seen quite the same level of ransomware activity, it’s still a major threat with one company coming under attack about every ten minutes.

Although there haven’t been as many innovations so far this year, that doesn’t mean they’re not occurring, and some of the new ransomware strains are particularly nasty.

Of interest, this year has seen a rise in ‘Cryptojacking’, which is a variant of a classic ransomware attack where the malware mass encrypts files on the victim’s machine while simultaneously installing cryptocurrency mining software.

This should come as no surprise given the rise in popularity of cryptocurrency, but it does add a disturbing new wrinkle to ransomware attacks. Even after you get your files back, lurking in the background there is a rogue process that’s slowing your system and ultimately putting money into the bank accounts of the hackers.

Most recently, an Obama-themed cryptojacker has been making the rounds.

The ransomware itself is nothing out of the ordinary. It predictably locks your files, demands payment, and installs a Monero miner in the background.

Obama is not the first world leader to unwittingly become the face of ransomware. In 2016, Candidate Trump was featured in a malware strain that proved to be a work in progress. It would infect machines, but didn’t actually encrypt files. It’s unclear if a working version was ever deployed in the wild.

The Obama strain contains code fragments that indicate Chinese origin. There’s circumstantial evidence that leads some security researchers to believe it may be the work of a Chinese hacker known only as “Rocke,” but so far, there’s no definitive proof.

As things stand now, there’s no good defense against this most recent threat, save for continued vigilance.

Joseph Martin

Some Apple iPhone 8’s May Have A Manufacturer Defect

September 10, 2018 by Joseph Martin

Do you own an iPhone 8? If so, you may have problems. Apple has recently reported that a small percentage of iPhone 8s “contain logic boards with a manufacturing defect.

Affected devices may experience unexpected restarts, a frozen screen, or won’t turn on.”

The company has isolated the defect to phones manufactured between September 2017 to March 2018, in Hong Kong, India, Japan, China, New Zealand, Macau, and the United States.

To find out if you’ve got one of the impacted iPhone 8s, head to the company’s website and use the tool they’ve placed there, entering your phone’s serial number. If your phone is one of the defective devices, Apple will repair it free of charge for up to three years after the sale.

Note, however, that some types of damage may incur fees to repair, specifically in the instance of a cracked screen or similar.

Apple’s handling of the issue has so far been quite good. They were quick to acknowledge the mistake and isolate it to a very specific frame of time, and equally quick to create a checking tool. Their repair policy is generous, as is the impressive three-year window.

It’s unfortunate that the manufacturing error occurred. However, the reality is that many companies would not have been as forthcoming as Apple has been, nor as generous with their repair policy.

Kudos to Apple for their handling of the issue. If you’re considering buying a new iPhone, don’t let this hiccup change your mind. Although the company isn’t perfect, you’ll find few companies that can top Apple in terms of taking care of their customers. There’s a reason their customers are more like fans, and companies of all shapes and sizes would do well to emulate Apple as best they can.

Joseph Martin

Most Small Businesses Can’t Recover From Cyber Breaches

September 10, 2018 by Joseph Martin

A new study recently published by Sitchfast Technologies paints a grim picture of the threat landscape for small and medium-sized business. Their key finding? A staggering 60 percent of small businesses that suffer a data breach of any magnitude go out of business within six months. Worse, one business owner in three does not have a plan or safeguards in place to prevent a breach.

The single biggest weak link in the small business landscape is the fact that most employees who work for smaller companies are woefully uneducated about the dangers, how to identify them and how to avoid them. The study noted that among small business employees, more than a third (35 percent ) haven’t changed their passwords in over a year. In addition, 19 percent of small business employees share their passwords with colleagues, with a similar percentage using weak passwords based on personally identifiable information. Put those elements together, and it’s a recipe for disaster.

The authors of the report had this to say on the matter:

“Today’s cyber criminals employ a variety of complex attack methods to exploit business weaknesses and target employees with bad cyber hygiene, whether it’s the CEO or an intern, bypassing the basic security measures most companies have in place.

Until they recognize they are prime targets for hackers and adjust their security strategies, small businesses will continue to fall victim to rampant cyber attacks.”

Unfortunately, there are no easy solutions, but the report clearly points to two areas where you can make immediate improvements:

Currently, 65 percent of small to medium sized businesses have never run a phishing email test.

Only 21 percent of small to medium sized businesses provide cybersecurity training to their employees.

Both of these are incredibly easy to remedy, and if you perform these two simple steps, you’ll be miles ahead of your peers.

Joseph Martin

Vulnerability Found In Major Manufacturers Of Android Phones

September 8, 2018 by Joseph Martin

Researchers operating out of the University of Florida, Stony Brook University and Samsung Research America have made a disturbing discovery. Millions of Android smartphones manufactured by eleven different OEMs (Original Equipment Manufacturers) were found to be vulnerable to attack via AT Commands.

If you’re not sure what an “AT Command” is, you’re not alone. Part of the Hayes Command Set, ATtention Commands were developed in the early 1980s and designed to be transmitted via phone lines to issue commands to modems.

Most people aren’t even aware of the fact that their high-tech smartphones contain a basic modem within them, which allows the high-tech wonder to connect to the internet. While AT Commands have been standardized, many vendors have added custom AT Commands to their devices, and unfortunately, these commands can control a surprising variety of advanced features including the built-in camera and the touchscreen interface.

The AT Commands can be accessed via the phone’s USB interface. This means that a would-be attacker would have to gain physical access to the device, or place a malicious component inside a user’s charger, charging station, or USB dock.

Once a hacker is connected in this manner to the victim’s phone, he could use one of the AT Commands to steal data, unlock the screen, mimic touchscreen events, or even rewrite the phone’s firmware.

The research team has complied a database of phone models and firmware versions that are vulnerable to this type of attack. They have contacted all the vendors, and are continuing their testing.

Initially, the team tested AT Commands via the USB interface. Phase two of the research will test to see if those commands can be issued via WiFi or Bluetooth connections. The team has also published the Shell script they used in their original testing, available on GitHub.

So far, none of the OEMs contacted have released any information or given a timetable for a fix.

Joseph Martin

Security Issues Abound – Texas Voter Registration Records Leaked

September 7, 2018 by Joseph Martin

The great state of Texas has 15.2 million registered voters. Unfortunately, personal details belonging to nearly all of them (14.8 million) have been compromised, but don’t blame the state’s election officials.

This staggering breach was caused by the carelessness of a conservative-focused data firm, ironically named “The Data Trust.” They left their research file completely exposed and unprotected on a server that anyone could access with no password required. It’s hard to see how the exposure could have been more damaging or all-inclusive.

The Single, massive file contained the following details:

Voter name

Voter address

Gender

Voting history for past elections, including primaries and presidential elections

According to the independent New Zealand researcher who discovered it, who goes by the name of “Flash Gordon,” the file also contained indications of voter views on abortion, immigration, the Second Amendment, and whether or not the voter in question trusted Hillary Clinton.

Bill Evans, the VP of the security firm “One Identity,” had this to say about the incident:

“The idea of having a database like this sitting with no password is such an incredible lapse in judgement today. While we all know that keeping up with password best practices can be somewhat annoying – forgetting and resetting them in a broken cycle – it is inexcusable and maybe illegal to leave data that contains personal information like this completely unprotected.

It is a good reminder, however, and call to action for any organization that is storing sensitive data, that it is their responsibility to ensure security, as well as authentication to access it. There are four basic security measures that should be part and parcel of doing business today. Those include end-user education, multi-factor authentication, privileged-access management, and access governance to ensure only the right people have the right access to the right things at the right time.”

Indeed.

Joseph Martin

Hackers Now Targeting Point Of Sale Systems

September 6, 2018 by Joseph Martin

There’s a new threat to point of sale (POS) systems coming out of Russia, according to security researchers from Booz Allen Hamilton. The malware, which they’re calling “RtPOS” isn’t bleeding edge technology, and does not approach the level of sophistication of other recently discovered strains, but that doesn’t mean it should be taken lightly. These strains include RawPOS, MajikPOS, UDPOS, and Treasure hunter.

In its current incarnation, it has a limited feature set and is basically a RAM scrapper. Once deployed, it will watch a PC’s RAM looking for text patterns, which are saved to a local DAT file. Of interest, it doesn’t currently appear to have any sort of networking capability, so when the data is collected and stored, it has no means of actually porting it to a command and control server (yet).

There are two competing theories as to why this software is the way it is. One theory is that it’s simply a rough draft. A work in progress. Although relatively benign in its current incarnation, it would be quite easy for the authors to add enhancements to the code, and possibly to update the software remotely, turning this “nonthreatening” software into a true menace in the blink of an eye.

Another theory is that RtPOS is one part of a multi-part, much more subtle attack. The purpose of the software is simply to infect and collect data, leaving it to a separate process to exfiltrate the data at irregular intervals, which would be more difficult to detect, and unlikely to draw attention.

At present, there’s no clear indication which theory is correct, but both ideas are disturbing. As ever, vigilance is the key. Hardly a day goes by that researchers somewhere in the world don’t discover some new threat. This is but the latest.

Joseph Martin

Amazon Joins Trillion Dollar Club

Air Canada Customers May Have Had Their Data Exposed

Tech Support Scammers Are Advertising Online

Hacker Requests For Wire Transfers Are Topping Email Scams

New Versions Of Ransomware Continue To Wreak Havoc

Some Apple iPhone 8’s May Have A Manufacturer Defect

Most Small Businesses Can’t Recover From Cyber Breaches

Vulnerability Found In Major Manufacturers Of Android Phones

Security Issues Abound – Texas Voter Registration Records Leaked

Hackers Now Targeting Point Of Sale Systems

Contact Info

Navigation