apple – Page 4

Fake Symantec Blog Post Is Spreading Mac Malware

December 14, 2017 by Joseph Martin

Sometimes hackers opt for a stealthy approach. Other times, their attempts are downright brazen. That’s definitely the case with a newly launched malware campaign that seeks to spread “Proton Mac,” a strain of malware designed to steal passwords from Mac users.

The hackers registered a domain very similar to Symantec’s blog, mirrored its content and then created a fake post about a new version of CoinThief, which was moderately successful back in 2014.

After going into a bit of faux analysis about this nonexistent threat, the post recommended downloading a nonexistent piece of software called “Symantec Malware Detector” which it claimed was the best means of protecting against the new version of CoinThief. Unfortunately, “Symantec Malware Detector” is actually Proton Mac in disguise.

It’s a good scam, and it’s proven to be highly effective thus far. Its effectiveness is due in no small part to the fact that references to the post have been tweeted, initially by fake Twitter accounts, and later, by a growing number of legitimate ones.

Although the fake blog is quite good, it doesn’t stand up to intense scrutiny. For one thing, the email address used to register the domain isn’t a Symantec address. For another, their SSL certificate comes from Comodo, rather than Symantec’s own certificate authority. Unfortunately, the overwhelming majority of users don’t look that closely at websites they visit, so they are unlikely to recognize the fake for what it is.

If you have downloaded “Symantec Malware Detector,’ then you’ve got Proton Mac running on your machine right now.

It’s designed to log your username and password in plain text, sending this and any other PII (Personally Identifiable Information) on your machine to a hidden file. It will also capture browser auto-fill data, keychain files and the like, and send all of this to the hackers controlling the software.

If you have been infected, you should treat all online passwords as having been compromised and change them immediately, once you have verified that the malware has been completely removed from your system. Enabling two-factor authentication will also help make you more secure.

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

Bug in macOS Could Allow Hackers Root Access

December 13, 2017 by Joseph Martin

Do you own a Mac? Is it running Apple’s latest macOS, the “High Sierra?” If so, be extra careful with who you allow access to your machine.

A security flaw recently discovered by a developer named Lemi Orhan Ergin can easily allow anyone unfettered access to everything on your machine, and by extension, give them an easy “in” to whatever network it’s connected to. All they need is physical access.

Exploiting this vulnerability is a lesson in simplicity. All a hacker has to do is enter “root” in the username field, leave the password field blank, and press Enter.

Done.

They now have total access.

Needless to say, this is a large and rather glaring security issue and one which Apple will be remedying in the near future via a patch. Until they do, however, be aware that the physical security of your Mac is of paramount importance. Leaving your workstation unsecured and unattended, even for a few minutes, is all it would take to lose control over all the files on your machine and give a hacker access to the even more sensitive data lurking elsewhere on your company’s network.

Unfortunately, as bad as this security flaw is, it’s not the only recent stumble by Apple. Just last month, the company had to issue an emergency patch to fix a flaw that affected encrypted volumes, where the password hint section was displaying the actual password in plain text.

To try this exploit out for yourself to verify how easy it is to use, simply do the following:

Open your machine’s System Preferences and select “Users and Groups”

Click on the lock icon, which will allow you to make changes. You’ll get a username and password box at this point

Type in “root” in the username field

Move the cursor into the password field and hit enter

That’s all there is to it.

Until Apple issues their patch, the best thing you can do is leave your machine on and lock your workstation when you step away. At least that way, the hacker would have to know your current password in order to gain access.

Of course, they could simply power the machine off and reboot, but that would take a bit more time, during which they could be discovered.

It’s far from perfect, but for the time being, it’s the best protection you have.

Joseph Martin

Apple Devices Can Get Viruses

December 11, 2017 by Joseph Martin

Are you under the impression Apple devices are exempt from viruses and hacking?

A great deal of Apple users consider Apple systems safer to use than Windows because of the “built-in” security Apple programs into their devices. But Windows operating systems also come with similar existing security to prevent hackers and viruses. So why is there a difference in virus vulnerability?

So here’s the deal:
In their advertising, Apple markets its systems as not needing third-party antivirus software. In reality this “built in” virus protection is identical to what’s inside a Windows PC. It possesses the same flaws and loop-holes as any other operating device.
So, if Apple and Windows both have the vulnerability to be hacked, why is Windows suffering the most?

What separates the two operating systems’ security is the basic fact that hackers are still more familiar with Windows computers and their security loopholes.
Additionally, Windows is easier to hack and can have a potentially bigger pay-off for hackers. As Apple operating systems become more popular, hackers will familiarize themselves with the OS platform.

This will in turn will lead to more viruses made specifically more Apple.

So what can you do to protect your computer?
While there may be fewer Apple systems infected overall, there is missing data on the exact number of Apple systems that contain viruses, such as malware.

Since most Apple users do not install security software that scans and reports malware, many viruses stay under the radar.

Unlike Apple users, most Windows users download security software which results in more accurate reporting.

Even if Apple is safer from than Windows without third-party security software, there is still a risk of “catching” a virus through programs such as Java, Flash or Adobe.

Our advice: Don’t rely on Apple’s built-in security! Invest in another sources of anti-virus protection to keep your computer safe.

Joseph Martin

Be Careful Of Downloads – Google Play Store Sees Malware Increase

November 28, 2017 by Joseph Martin

Google’s Play Store is under siege. In recent month, there has been a sharp spike in malware campaigns launched against the store, with a shocking number of poisoned apps slipping past Google’s robust system of checks designed to prevent, or at least minimize such occurrences.

The spike in poisoned apps has been reported by three different security companies: Dr. Web, McAfee and Malwarebytes.

According to the latest McAfee report, 144 Play Store apps have been identified as containing malware. To give you a sense of the scope and scale of the attack, McAfee analyzed a sample of 34 of the malicious apps and found that they had been downloaded between 4.2 million and 17.4 million times.

Of the malware strains found to be present on the Play Store, far and away the most common is Grabos, which is designed to push fake notifications that trick unsuspecting users into installing other apps. Based on the observed behavior, it’s likely that Grabos’ authors generate revenue based on the number of installs achieved. Based on the sheer number of downloads, it’s a model that’s paying handsome dividends for the hackers.

The second most common malware strain identified in the McAfee report is AsiaHitGroup, which utilizes an IP blacklist to specifically target users in Asian countries. This malware was initially found in an app named “QR Code Generator,” and once it infects a user’s machine, it will download a second-stage threat in the form of an SMS Trojan, which auto-subscribes infected users to premium phone numbers using SMS text messages.

Since its initial discovery in QR Code Generator, the AsiaHitGroup malware has been found in a variety of other apps, including alarm clock, photo editor, and internet speed test apps.

The security firm Dr. Web found a third distinct malware strain called Android.RemoteCode.106.origin, which was found to be embedded on nine different Play Store apps that had been downloaded between 2.37 million and 11.7 million times.

This campaign opens an “invisible” browser page that shows ads and is the least intrusive of the malware strains found. It’s likely that the hackers controlling this one get paid via ad impressions which are spoofed on the invisible browser window.

In addition to these, ESET has identified a fourth threat, having identified eight different apps that are infected with the MazerBot banking Trojan. This one is potentially the most damaging of the recently identified threats.

Google’s Play Store is clearly a fair bit more dangerous currently than its users are accustomed to. Be very careful when downloading apps until Google can beat back these recent attacks.

Joseph Martin

Apple Is On Track To Become A Trillion Dollar Company

November 25, 2017 by Joseph Martin

Recently, Apple’s stock closed at $175.88, giving it a market valuation slightly above $900 billion. A Drexel Hamilton analyst named Brian White predicts that over the course of the next twelve months, the company’s stock could be trading as high as $235 per share, and at that price, Apple’s market valuation would be over one trillion dollars, making it the only trillion-dollar company on the planet.

“With a market cap of over $900 billion, we believe Apple is on its way to becoming a ‘trillion dollar baby’ as reflected in our price target. We were the first on Wall Street to project that Apple would reach a $1 trillion market cap as reflected by a price target; our current price target of $235 equates to approximately a $1.2 trillion market cap.”

Mr. White is not alone. Another analyst, Amit Daryanani, working for RBC Capital Markets, has made a similar prediction, stating:

“In our view, Apple’s quarterly results will be less important this summer as investors are focused on the iPhone 8 this fall, along with the company’s raised capital distribution initiative, depressed valuation, and potential new innovations. We believe Apple remains among the most underappreciated stocks in the world.”

If you don’t yet own stock in the company, now would probably be a great time to buy. As Apple edges closer to the one-trillion-dollar threshold, it’s sure to generate an increasing number of headlines, which will increase interest in the company and push the stock price higher still, hastening the day when it hits the mark.

If you already own a stake in the company, hold onto it, and if you concur with Daryanani’s assessment, add to it as you’re able. You could soon be the proud owner of a tiny slice of investment history.

Joseph Martin

Apple’s New Face ID May Have Been Compromised

November 24, 2017 by Joseph Martin

Tech companies of all shapes and sizes have been on the hunt for the “Holy Grail” of security features since before the rise of the internet. So far, a number of strategies have been developed, but none have proved to be successful. Hackers have found ways around each and every one to date.

Apple recently made another attempt when they released their new iPhone X, complete with a new “ultra-secure” Face ID security feature, which was touted during the new phone’s September launch event. During that event, Apple’s Senior VP of Worldwide Marketing, Phil Schiller, had this to say about the new feature:

“Apple engineering teams have even gone and worked with professional mask makers and makeup artists in Hollywood to protect against these attempts to beat Face ID.”

Unfortunately, the new feature has proved to be somewhat less “ultra-secure” that was originally advertised. Just one week after Apple’s announcement, the Vietnamese security firm Bkav was able to unlock the iPhone X using a mask.

It cost the company roughly $150 to create the mask, which was built using a combination of 2d images, a bit of makeup and a few 3D-printed components, with special attention paid to the areas around the eyes, cheeks, and nose (which was printed on a 3D printer).

A spokesman for Bkav had this to say about their efforts:

“Many people in the world have tried different kinds of masks but all failed. It is because we understand how AI of Face ID works and how to bypass it. You can try it out with your own iPhone X, the phone shall recognize you even when you cover a half of your face. It means that the recognition mechanism is not as strict as you think, Apple seems to rely too much on Face ID’s AI. We just need a half face to create the mask. It was even simpler than we ourselves had thought.”

All that to say, don’t put too much faith in the new “ultra-secure” Face ID feature. It’s far from the bullet-proof security feature the company touted it as being.

Joseph Martin

New iPhone X May Be Susceptible To Burn-In

November 22, 2017 by Joseph Martin

Apple’s new iPhone X is a technological marvel that boasts the best display in the industry today, featuring Super Retina OLED display technology and offering a mind-boggling 1,000,000 to 1 contrast ratio.

Unfortunately, there’s a problem, as revealed by a new support document the company released on the iPhone X. In it, Apples states that users may experience shifts in hue and color, and burn-in with the new display, especially if they maximize the phone’s brightness and keep the same image displayed for long periods of time.

According to the support document itself:

“If you look at an OLED display off-angle, you might notice slight shifts in color and hue. This is a characteristic of OLED and is normal behavior. With extended long-term use, OLED displays can also show slight visual changes. This is also expected behavior and can include ‘image persistence’ or ‘burn-in,’ where the display shows a faint remnant of an image even after a new image appears on the screen. This can occur in more extreme cases such as when the same high contrast image is continuously displayed for prolonged periods of time. We’ve engineered the Super Retina display to be the best in the industry in reducing the effects of OLED ‘burn-in.'”

The company also recommends a simple workaround users can employ to minimize the chances of this occurring. If it’s something you’re concerned about, simply adjust your phone’s brightness as follows:

• Go to Settings, and then into General

• From General, tap Accessibility, and then Display Accommodations

• Adjust to taste from there

Another simple thing you can do would be to set your phone to auto-lock after a shorter period of time. To make changes to that feature:

• Go to Settings

• From there, select Display & Brightness

• Then, go to Auto Lock and set whatever time period you deem appropriate

While neither of these is perfect solutions, they will certainly get the job done for the overwhelming majority of users.

Joseph Martin

Latest iOS Version May Have Bug That Changes Your Letters

November 20, 2017 by Joseph Martin

If you’re using an Apple device running iOS 11.0.3 or 11.1, you may have noticed some oddities when sending text messages. For reasons that aren’t quite clear, the letter “I” is being replaced by the characters “A[?].” It’s not a game-breaking bug, but it is annoying, and if you’re not paying attention, it can make for some rather mystifying text messages.

Fortunately, Apple is on the case, and the company has announced that they’ll have a fix for the issue in their next release. If you’d rather not wait, there are several things you can do in the meantime to work around the issue. In no particular order, these are:

• Simply disable Apple’s predictive text auto-correct feature. If you rely on it frequently, this may slow you down some, but is probably the most straightforward approach to take at the moment.

• Install a third-party keyboard app because these use their own predictive text features.

• Or, take Apple’s recommendation and set up a text replacement rule (essentially replacing “I” with “I”).

If you opt for this last approach, you’ll want to go into your phone’s settings, look under the general tab, then keyboard, and choose “Text Replacement.”

Tap the plus sign (+), then, for “phrase,” type in an upper case “I”. For a shortcut, type a lower-case “I.”

Save that change, and you should be all set.

To reiterate, this isn’t a huge deal, and it’s hard to see how this could cause anything but a bit of annoyance and perhaps a few scattered miscommunications. Even so, if you send more than a handful of text messages during the course of a typical business day, it’s probably worth spending a few minutes implementing one of these simple workarounds until Apple can ride to the rescue with a permanent fix.

Joseph Martin

Granting Photo Access In iPhone Might Allow Unauthorized Photographing

November 14, 2017 by Joseph Martin

An Austrian software engineer named Felix Krause has made a disturbing discovery about iPhones using iOS11. Once an app has been given permission to access the device’s camera, it can take pictures and videos without alerting the user and upload them to the internet in real time.

Unfortunately, there are a lot of apps that users grant camera permissions to. Basically, any time you upload an avatar or post a picture with an app, you’ve got to give it camera permissions to do that.

Krause documented his findings in a short video presentation. As long as an app with camera permissions was in the foreground, it could snap photos literally every second, all without the user being alerted to what was going on.

Krause was quick to point out that he wasn’t naming names, and so far, at least, there are no known instances of malicious apps abusing this flaw, nor are any legitimate apps misusing it to anyone’s knowledge. The simple fact that it is possible, though, opens the door to a whole host of malicious apps that could, and that’s disturbing.

For the moment, there are really only two ways to address the issue: either go in and modify all your apps’ permissions so that they no longer have camera access, or use lens covers to make it so that your front and back cameras can’t record anything unless you specifically want them to.

Longer term, there are a number of things Apple could do to address the issue. The two simplest fixes would be introducing expiring permissions for apps to allow for more precise user controls, or introducing LED lights that would activate any time the camera was in use, thus giving the user a clear visual marker.

In any case, for the moment, it’s important to know that your phone may be watching and/or recording you.

Joseph Martin

5 Keys for Switching from an iPhone to an Android Phone

April 7, 2017 by Joseph Martin

Are you considering switching teams by turning in your Apple iPhone for an Android phone? Well if you hope to make the transition as smooth as possible, here are five key points to help you along the way.

A Seamless Switch – Whether you are using Microsoft Exchange or Google Apps, be sure you are able to successfully transfer your email, contacts and calendars. It’s always a good idea to keep this info backed up just in case you run into any problems along the way.
Analyze Your Apps – Your iOS apps are obviously no good on your new Android phone, so plan ahead. Be sure to find the Android version of any apps that are crucial to your personal or professional life before making the switch. Don’t leave yourself faced with last minute panic when you are left without the apps that you need.
Tune In – Transferring your music over should be nothing to beat yourself up over. Simply transfer your music over from iTunes to Google Music using the music manager option in your iTunes.
Camera Keepers – Be sure to download any videos and pictures you want to keep to you computer. From there, simply upload them to your new Android phone. You can also use a wireless cloud sharing service to transfer files wirelessly between the devices.
Text Transfer – If you have important text messages you want to keep, try using the iSMS2droid app or Samsung Kies program to restore you iPhone backup data.

One final word to the wise. If you are switching over from an iPhone to an Android, take the opportunity to upgrade. To make the transition as smooth as possible and stay happy with your decision, go with a higher-end model such as the Samsung Galaxy.

Joseph Martin

Fake Symantec Blog Post Is Spreading Mac Malware

Bug in macOS Could Allow Hackers Root Access

Apple Devices Can Get Viruses

Be Careful Of Downloads – Google Play Store Sees Malware Increase

Apple Is On Track To Become A Trillion Dollar Company

Apple’s New Face ID May Have Been Compromised

New iPhone X May Be Susceptible To Burn-In

Latest iOS Version May Have Bug That Changes Your Letters

Granting Photo Access In iPhone Might Allow Unauthorized Photographing

5 Keys for Switching from an iPhone to an Android Phone

Contact Info

Navigation