Technology News

Microsoft Outlook is Rolling Out New Design Changes

September 21, 2018 by Joseph Martin

Microsoft is making some long overdue and welcome changes to Outlook to include the Windows and the Web-based version.

People who use either one will now see a “Coming Soon” option that allows users to toggle between the version they’ve got now, and the new and improved version with the changes.

As to those changes, they fall broadly into three groups:

Better Organization – The improved Outlook offers intelligent technology, specialized icons, visual changes and a “highlights” feature that are all designed to help you manage your time better and provide a greater level of focus on your daily and weekly activities.

Improved Speed and Efficiency – The redesign is sleeker and faster. Using it will allow you to schedule meetings, read and act on emails and write new emails much more quickly than the old version.

More Customization – Hotmail users know only too well that Outlook on the web has lagged behind its competitors in terms of customization, and the redesign seeks to change that. Microsoft is playing a bit of catch up here, but any improvements on this front are welcome indeed. Among other things, you can now apply additional themes, personalize your inbox and simplify the ribbon.

There’s no word yet on how long the new features will be offered as an opt-in option, but of course, at some point, the company will mandate the change.

On balance, these are good changes. Perhaps more modest than long-time users would like to have seen, but again, any changes to one of the oldest email systems still around have to be counted as a positive.

Kudos to Microsoft for keeping Outlook reasonably up to date, and here’s hoping that the user base embraces them. which we hope hope will encourage the company to make additional improvements.

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

Microsoft Allowing More Time For Major Windows 10 Updates

September 20, 2018 by Joseph Martin

Microsoft has been making two major Windows 10 releases every year, giving businesses 18 months before they need to move to the next update. This plan and schedule is part of the company’s “Windows as a service” paradigm, designed to ensure that Windows 10 gets new features, as opposed to the company’s former practice of a new Windows release every three years.

In most respects, the new paradigm has to be regarded as the superior approach, but unfortunately, the pace is a bit too fast for some businesses. High level executives have pushed back, asking for more time and flexibility to update the OS, so they can be sure that business critical apps work with the latest update.

Microsoft has heard, and more importantly, they’ve listened. However, business owners didn’t get everything they wanted. Here’s the scoop:

The company is planning to release a series of cloud-based tools that will make app compatibility testing easier, and has agreed to give IT admins more time to update. As things stand now, all currently supported feature updates of Windows 10 (Enterprise and Education editions) are supported for 18 months. The company is expanding that to 30 months, but only for their September release. The March updates will still only be supported for 18 months.

While not a perfect solution, it does give everyone some of what they wanted. Businesses will have an extra year to apply the latest features if they stick to the September cycle, while firms that don’t need the extra time can simply continue on as they are.

Jared Spataro, the Corporate VP of Microsoft 365 summarized the changes this way:

“You’ve been talking, and we’ve been listening. We recognize that it takes time to both upgrade devices and operationalize new update processes. Today’s announcements are designed to respond to your feedback and make it easier, faster, and cheaper to deploy a modern desktop.”

On the whole, this is very good news indeed.

Joseph Martin

Tech Support Scammers Are Advertising Online

September 17, 2018 by Joseph Martin

Tech Support scams are nothing new, but they are getting increasingly sophisticated. Worse, tech giants like Google are finding it notoriously difficult to detect them.

A report recently released by the venerable data security firm, Symantec, indicates that tech support scammers are increasingly integrating call optimization into their schemes, which allows them to insert phone numbers into web pages dynamically. Among other things, this allows the scammers to display the phone number of someone who speaks the language of the victim, which makes the whole act more convincing and much more likely to succeed.

In recent years, tech support scams have begun promoting their “services” via ads, where they claim to be legitimate, authorized service centers for companies like Apple, Microsoft, or Dell. The brand recognition and professional presentation combine to put their victims at ease.

They’re so slick and professional, and their “employees” so good at mimicking the employees of legitimate service centers that it can be virtually impossible to tell the real companies from the fake ones.

David Graff, Google’s Director of Global Product Policy had this to say about the matter:

“For many years, we’ve consulted and worked with law enforcement and government agencies to address abuse in this area. As the fraudulent activity takes place off our platform, it’s increasingly difficult to separate the bad actors from the legitimate providers.”

Google is taking steps to try and combat the rising threat. Recently, they’ve made a change to their policy as it relates to tech support companies, only accepting ads from verified third-party support vendors.

Even with this added layer of protection, however, the tech support scam is thriving. Scammers have already begun taking steps to get around the new restrictions by cold-calling their victims. For the most part, this has proved to be a successful tactic for them. However, in at least one instance, where the scammers called the New Zealand Police, it ended quite badly for the criminals.

Joseph Martin

Hacker Requests For Wire Transfers Are Topping Email Scams

September 13, 2018 by Joseph Martin

Business Email Compromise (BEC) attacks are a major threat, costing business nearly three billion dollars a year.

This form of attack primarily targets the C-Suite in order to impersonate them.

In the world of BEC attacks, those that employ requests for wire transfers are almost devastatingly effective.

Asaf Cidon, the Vice President of Content Security at Barracuda Networks, explains why:

“Criminals use business email compromise attacks to obtain access to a business email account and imitate the owner’s identity, in order to defraud the company and its employees, customers, or partners. In most cases, scammers focus efforts on employees with access to company finances or payroll data and other personally identifiable information.”

The attack unfolds when the hacker, pretending to be a company CEO or other high-ranking official requests immediate payment, usually via wire transfer.

Again, per Asaf Cidon:

“The sense of urgency, a request for action, or a financial implication used in BEC schemes tricks targets into falling for the trap. For example, an accountant may receive a fraudulent email request for a wire transfer from the company CEO, which includes a spoofed version of the CEO’s email address and even the CEO’s own email signature.”

According to a 2016 report published by Trend Micro, a successful BEC attack nets the hacker an average of $140,000. Given how easy they are to pull off (and how low-tech), don’t expect this type of attack to show any signs of decline in the foreseeable future.

What makes BEC attacks even more troublesome is the fact that law enforcement officials believe that few attacks of this type are ever reported, and that the losses to business could be up to four times the figure we cited earlier.

Worst of all, these types of attacks appear to be increasing in their frequency. Unfortunately, C-Suite employees are notoriously resistant to basic security training, meaning that there are no easy solutions to this large and growing problem.

Joseph Martin

New Versions Of Ransomware Continue To Wreak Havoc

September 12, 2018 by Joseph Martin

2017 was “The Year of Ransomware.” It saw an incredible number of ransomware attacks and infections, paired with a tremendous number of innovations.

Although 2018 hasn’t seen quite the same level of ransomware activity, it’s still a major threat with one company coming under attack about every ten minutes.

Although there haven’t been as many innovations so far this year, that doesn’t mean they’re not occurring, and some of the new ransomware strains are particularly nasty.

Of interest, this year has seen a rise in ‘Cryptojacking’, which is a variant of a classic ransomware attack where the malware mass encrypts files on the victim’s machine while simultaneously installing cryptocurrency mining software.

This should come as no surprise given the rise in popularity of cryptocurrency, but it does add a disturbing new wrinkle to ransomware attacks. Even after you get your files back, lurking in the background there is a rogue process that’s slowing your system and ultimately putting money into the bank accounts of the hackers.

Most recently, an Obama-themed cryptojacker has been making the rounds.

The ransomware itself is nothing out of the ordinary. It predictably locks your files, demands payment, and installs a Monero miner in the background.

Obama is not the first world leader to unwittingly become the face of ransomware. In 2016, Candidate Trump was featured in a malware strain that proved to be a work in progress. It would infect machines, but didn’t actually encrypt files. It’s unclear if a working version was ever deployed in the wild.

The Obama strain contains code fragments that indicate Chinese origin. There’s circumstantial evidence that leads some security researchers to believe it may be the work of a Chinese hacker known only as “Rocke,” but so far, there’s no definitive proof.

As things stand now, there’s no good defense against this most recent threat, save for continued vigilance.

Joseph Martin

Some Apple iPhone 8’s May Have A Manufacturer Defect

September 10, 2018 by Joseph Martin

Do you own an iPhone 8? If so, you may have problems. Apple has recently reported that a small percentage of iPhone 8s “contain logic boards with a manufacturing defect.

Affected devices may experience unexpected restarts, a frozen screen, or won’t turn on.”

The company has isolated the defect to phones manufactured between September 2017 to March 2018, in Hong Kong, India, Japan, China, New Zealand, Macau, and the United States.

To find out if you’ve got one of the impacted iPhone 8s, head to the company’s website and use the tool they’ve placed there, entering your phone’s serial number. If your phone is one of the defective devices, Apple will repair it free of charge for up to three years after the sale.

Note, however, that some types of damage may incur fees to repair, specifically in the instance of a cracked screen or similar.

Apple’s handling of the issue has so far been quite good. They were quick to acknowledge the mistake and isolate it to a very specific frame of time, and equally quick to create a checking tool. Their repair policy is generous, as is the impressive three-year window.

It’s unfortunate that the manufacturing error occurred. However, the reality is that many companies would not have been as forthcoming as Apple has been, nor as generous with their repair policy.

Kudos to Apple for their handling of the issue. If you’re considering buying a new iPhone, don’t let this hiccup change your mind. Although the company isn’t perfect, you’ll find few companies that can top Apple in terms of taking care of their customers. There’s a reason their customers are more like fans, and companies of all shapes and sizes would do well to emulate Apple as best they can.

Joseph Martin

Hackers Make More Money Than Is Spent On Cybersecurity

September 5, 2018 by Joseph Martin

Quick question – how much do the world’s cyber criminals make every sixty seconds?

If you guessed a quarter of a million dollars, you’d be wrong. If you doubled that value, you’d be wrong again.

According to research conducted by RiskIQ, cybercriminals are raking in a cool million dollars per minute, compared with businesses spending $171,233 per minute on security measures. It’s a lopsided battle, and businesses aren’t winning.

Some other interesting tidbits culled from the company’s research. Every sixty seconds:

Four new potentially vulnerable web components are discovered.

A new website appears running the CoinHive cryptocurrency mining script.

1.5 companies fall victim to a ransomware attack, with an average cost to the victimized company of $15,221.

In addition to that, RiskIQ discovered that a site running the CoinHive script was deleted every ten minutes, and that a new phishing domain appears about every five minutes.

Raef Meeuwisse, a security researcher and author, had this to say about the report and its findings:

“Cybercrime and cybersecurity co-exist in a constant cycle of innovation. As one particular criminal trend towards a particular technique increases, so the security functions create or strengthen the required defenses.

However, it is evident at both the level of personal and organizational cybersecurity that spending is unusually low. In fact, most of these cybercriminals are not going after the hard targets with great defenses, they are targeting the low hanging fruit – and there is still far too much of it.”

The simple truth is that until and unless we start taking cybersecurity more seriously, and until the aforementioned “low hanging fruit” ramps up spending to properly secure their systems, we can expect to see the number of cybercrimes continue to increase. Unfortunately, despite the crimewave, there doesn’t seem to be much motivation to do that.

Joseph Martin

High Frequency Audio Computer Monitors May Expose Screen Activity

September 4, 2018 by Joseph Martin

It may sound like something straight out of a science fiction movie, but recently, researchers have made a disturbing discovery. Using nothing more than an off-the-shelf microphone, it’s possible for an attacker to determine what content you’re viewing on your computer monitor.

The researchers tested a variety of LCD screens (with both LED and CCFL backlighting) and observed that the high-pitched noise made by the monitors changed as the content displayed on the screen changed.

The research team tested a variety of methods of recording audio data from the monitors in question, and found that they could capture sufficient data with a few methods. First, a smartphone positioned near the screen, second a compromised smart virtual assistant (like Google Home or Amazon’s Alexa), and third, using a parabolic microphone from up to ten meters distant.

Even more disturbing, the researchers discovered that an attacker could correctly identify the website a victim was looking at with up to 97 percent accuracy if the microphone was close to the monitor, and with 90.9 percent accuracy with microphones placed at some distance.

Worst of all, subtle changes in the pitch of your display screen make it possible for hackers to identify what specific characters are being displayed with an accuracy that ranged from 88 percent (more distant microphones) to 98 percent (microphones in close proximity to the monitor). This makes it entirely possible to glean passwords and other sensitive information.

Granted, this is an extremely exotic form of attack that requires a great deal of advance preparation by the attacker. Because of this, it’s unlikely that it will see widespread use anytime soon. Even so, it’s something that a careful and determined hacker could do right now using off the shelf technology, and there’s very little the victim could do to prevent it.

While we’re unlikely to see equipment manufacturers take the necessary steps to mask acoustic emanations, robust on-site physical security measures would make detection of this type of attack fairly easy.

Joseph Martin

Android Malware Could Access Your Pictures And Calls

September 1, 2018 by Joseph Martin

Android users have a new threat to contend with, according to a sixteen-page whitepaper outlining a new malware strain.

The paper was published by a group of security researchers working for Bitdefender. They identified a robust new strain of malware called “Triout.”

According to the report, although they just discovered the malware a month ago, there are indications that it has been in use since at least mid-May of this year.

Among other things, it can:

Steal call log data

Collect and steal SMS messages

Record every call taking place on the phone

Upload recordings of those calls to a remote server

Send the phone’s GPS coordinates to a remote server

Upload a copy of every picture taken with the phone’s camera to a remote server

Hide from the user’s view

These are robust, highly advanced features that require extensive, detailed knowledge of the Android OS. Typically, malware of this type is used by nation-state hackers with deep pockets, or by well-heeled networks of cybercriminals. At this point, there’s no clear indication which category Triout’s creators fall into.

The malware strain has been found masquerading as a legitimate app, but the team has been unable to trace it back to its source of origin. At this point, there’s no clear indication where it’s coming from. The first sample was uploaded to VirusTotal from Russia, but subsequent samples were uploaded from an Israeli IP address.

The researchers note that despite its advanced feature set, the group responsible appears to have made a mistake:

“What is striking…is that it’s completely obfuscated, meaning that simply by unpacking the cloned app’s .apk file, full access to the source code becomes available….this could suggest that the Triout framework may be a work-in-progress, with developers testing features and compatibility with devices.”

Joseph Martin

Encrypted Chats Are Now Available In Skype

August 30, 2018 by Joseph Martin

Earlier this year, Microsoft announced that it had entered into a partnership with Open Whisper Systems, the makers of the Signal app. The purpose of the partnership was to bring Signal’s open source, end-to-end encryption protocol to Skype.

As of the latest Skype builds, that is now a reality. Stable versions of Skype have been released for Windows, macOS, Linux, android, and iOS. If you haven’t yet upgraded to the latest versions and want to begin making use of the new protocol, you should upgrade to Skype v8.15.0.306 if you’re an Android user, or Skype v8.28.0.41 if you’re a Windows user.

The new feature is called “Skype Private Conversations.” To access it, just press the “+Chat” button at the top of your contacts sidebar and select “New Private Conversation.”

A couple of caveats here. First, both parties will have to have the latest version of Skype to make use of the feature. Second, a new private conversation needs to be started from each device.

Assuming that’s the case, Skype sets up keys to encrypt the conversation. Note that as the name of the protocol indicates, this is end-to-end encryption, which means that the messages remain in an encrypted state even while in transit between the two devices that are communicating.

It’s a good feature, and a long-overdue addition that makes Skype even more useful. At present, however, the implementation is a bit cumbersome. It won’t see widespread adoption until a majority of the Skype user base has upgraded to the latest version.

Nonetheless, this is an excellent development that will, over the medium term, make communications more secure. Be sure your team is aware, and if you want to begin using encrypted chat right away, make sure that all users upgrade to the latest version.

Joseph Martin

Microsoft Outlook is Rolling Out New Design Changes

Microsoft Allowing More Time For Major Windows 10 Updates

Tech Support Scammers Are Advertising Online

Hacker Requests For Wire Transfers Are Topping Email Scams

New Versions Of Ransomware Continue To Wreak Havoc

Some Apple iPhone 8’s May Have A Manufacturer Defect

Hackers Make More Money Than Is Spent On Cybersecurity

High Frequency Audio Computer Monitors May Expose Screen Activity

Android Malware Could Access Your Pictures And Calls

Encrypted Chats Are Now Available In Skype

Contact Info

Navigation