The Central Texas IT Guy

Web Development Austin, SEO Austin, Austin Search Engine Marketing, Internet Marketing Austin, Web Design Austin, Roundrock Web Design, IT Support Central Texas, Social Media Central Texas

Category: Security Page 71 of 79

Wi-Fi Password Sharing Feature In Windows 10 Raises Security Concerns

By

On July 16, 2015

In Security

July 16, 2015

With Microsoft taking its last leap with the Windows 10, most tech professionals are looking forward to the new competences added to this operating system. One such feature, that has managed to garner more controversies than commendations, is the ‘Wi-Fi Sense’. Essentially, it is a mode of sharing network information among users. It is designed to allow an easy and quick connection to in-range password protected wireless hotspots within friends. Though Microsoft initially rolled out this Wi-Fi password sharing feature in Windows Phone 8.1, it did not gain much popularity due to its limited user base.

How Does Wi-Fi-Sense Work?

Wi-Fi Sense enables users to share network connection with their Facebook, Skype and Outlook contacts. Working at the back-end, this feature agrees to Wi-Fi terms and conditions, shares log-in credentials as well as connects your friends whenever they are in-range of the network that you want to share. Hence, if any of your friends tries to access your internet connection, Wi-Fi Sense will evaluate his actions and provide access spontaneously, without making the password visible to him. Other users, who are in your contact list and have Windows 10 on their device, will also have their network details shared with you, provided they have enabled Wi-Fi Sense.

Security Risks With Wi-Fi Sense

According to Microsoft’s official sources, the Wi-Fi password is shared in an encrypted form through the company’s internal servers. The user is granted access only to internet connection and not to the files or data stored in your system. However, even the basic sharing of password may compromise the security of your network and make it vulnerable to various hacking attacks. The idea of sharing internet connection can be great for family and friends, but not for corporate settings. Sharing passwords with all your Facebook, Outlook and Skype contacts could also mean inadvertently providing your network information to people whom you barely know.

The best way to safeguard your network from these privacy risks is by taking a few preventive measures. As the feature is likely to be enabled by default in Windows 10 PCs and laptops, make sure you turn it off. However, it is a not a perfect solution for business firms that encourage bring your own device (BYOD) culture. Another option to keep your network out of Wi-Fi Sense is to add the phrase “_optout” to its name. For instance, if your internet connection is named “mynetwork”, you must change it to “mynetwork_optout”.

Considering the security concerns emerging around Wi-Fi Sense, it is recommended that you use 802.1X authentication or implement stricter access controls to your network connection.

Beware Of Fraudulent Companies Claiming To Clean Up Your Virus Infected PC

By

On July 9, 2015

In Security

July 9, 2015

Every day, a lot of web users receive fake calls/ emails from scammers posing to be IT support technicians offering help to clean up their computer issues. They claim themselves to be from some reputed software companies and persuade people to perform certain tasks to remove virus from their PC. According to a recently released report by the Better Business Bureau (BBB), these types of phone/ email scams have become the most common way for hackers to access all the personal information stored on the target computer.

How The Scam Works?

A user typically gets a call from people asserting to be from a tech support firm. The callers already gather the target user’s name, address, operating system and version of Windows to convince them about the legitimacy of the call. They may tell the user that they have detected certain virus on the computer that needs to be fixed and for which they need to pay a certain fee. When this occurs, the hackers are able to gain access to the credit card details of the user. They may also install certain malware and malicious software on the system which may require additional expenses to be removed. These phone scams may include the following:

  • The cybercriminals may ask the user to download a remote access service to grant them the right to use the computer. This allows them to take complete charge of the target PC.
  • The user is made to install certain anti-virus software, sold as the genuine version. In contrast, it is simply a trail or forged version, leaving the user’s computer vulnerable to major security threats.
  • Once they have unrestrained access to the system, it can be easily infected with malware. As the targeted system has a non-functioning anti-virus and vulnerable OS, it would not be able to detect or remove the Trojan.

Tips To Avoid Phone Scams

  • Never grant access to your computer to unknown people.
  • Do not depend on caller ID to validate any phone call. Identities on these types of software can be easily hoaxed.
  • Do not provide details about your credit card, bank account or other personal information to any unknown caller.
  • Note down the caller’s information and report it to your local cyber-crime branch.
  • Change any passwords that you have shared with anybody.
  • Always install and regularly update authentic anti-virus software as well as Windows version.

In case you receive any such phone calls, make sure you do not provide them any information and contact the helpline number of your service provider for assistance.

Beware Of Rombertik Virus

By

On June 28, 2015

In Security

June 29, 2015

Cybersecurity experts have come up with a new self-destructive virus, Rombertik, which is remarkably inimitable with respect to its functionality and perplexity. Identified by Cisco’s Talos Security Intelligence and Research Group, the deadly virus has been designed to decode any text entered into the user’s internet browser. It aims at stealing user names, passwords, bank account details, credit card codes and other sensitive information. Also known as the ‘suicide virus’, Rombertik attempts to destroy the infected computer if it gets detected.

How Does Rombertik Work?   

Rombertik mainly targets a user’s computer through spam emails. When a user downloads the attachment files that accompany these emails, the virus installs itself on the device. Initially, Rombertik performs some checks to confirm it is not running inside the sandbox, after which it starts with its execution. What makes Rombertik different from other malware is its bloated file size. As stated by Talos, the unpacked version of Rombertik is merely 28 KB whereas the packed file is more than 1 MB. This implies that almost 97 percent of the data in packed version is included just to make the file look legitimate.

The malware Rombertik is self-aware, meaning that it recognizes if the user tries to dismiss it with anti-virus software. In an attempt to avoid detection, the virus starts to destroy itself along with the computer’s Master Boot Record (MBR), rendering it unusable.

How Does Rombertik Remain Undetected?

  • The huge amount of junk elements contained in the executable file of Rombertik is never utilized by the malware. This inflates the volume of the file, which needs to be analyzed and studied by the cyber experts, thus, adjourning the virus identification process.
  • The virus overwrites a single byte of random data 960 million times on the computer memory. This is done to deceive sandbox to take Rombertik to be an authentic program. It leads to extending the data log over 100 GB, thus, complicating the investigation and detection of the malware.

How To Protect Against Rombertik?

  • One should not download attachments in emails from unknown sources.
  • Anti-virus software should be updated to block the malware in the first place.
  • Set up email security settings and block downloading of certain types of attachments.

Cyber security professionals recommend that users should constantly update their system’s security software and keep a backup of all the important data to minimize the effects of getting the system infected with Rombertik.

Man-In-The-Middle-Attack

By

On May 30, 2015

In Security

May 30, 2015

A man-in-the-middle (MITM) attack occurs when an unauthorized user attempts to actively monitor, capture and control the information transmitted between the source and destination computer. The attack may be carried out to simply gain access to the encrypted/unencrypted information or empower the hacker to modify the message before passing it further.

How Does A Man-In-The-Middle Attack Works?

The man-in-the-middle attack is performed when the attacker gains complete control over the networking router along a normal flow of traffic. The cybercriminal, in most cases, is in the same broadcast domain as the victim. For example, a TCP connection exists between the server and client in an HTTP session. The MITM splits the link into two – one between the server and attacker and other between the victim and attacker. By interrupting the TCP connection, the attacker decodes, alters and inserts fake data into the communication. A man-in-the-middle attack aims to exploit the weaknesses in the communication protocol, convincing the source network to divert traffic through the attacker’s router.

Tips To Prevent Man-In-The-Middle Attacks

  • Pay Attention To Certificate Warnings: A security certificate warning appearing for a website might indicate a serious problem. If the certificate doesn’t match with the server, you might be communicating with a malicious server carrying out a man-in-the-middle attack. Thus, you must not visit such websites, specifically if it involves entering important information like user names, passwords, bank account details etc.
  • Check for HTTPS Encryption: When connecting to sites that process financial transactions such as online shopping or banking, make sure that the session has an HTTPS encryption. When communicating over HTTPS, your web browser checks identity certificates to confirm the credibility of the servers you are connecting to, thus, reducing the possibility of a phishing server.
  • Be Careful While Using Wi-Fi Networks: Avoid doing any online transaction or sharing sensitive information if you are using a public Wi-Fi network. Be more alert if you see certificate warnings and websites without HTTPS encryption on such networks. Always try to use a private virtual private network (VPN) to create a secure connection to a trusted server.
  • Install Anti-Virus Software: Installing and regularly updating anti-virus software can help you defend against man-in-the-middle attacks that involve infecting your computer with a malware.

We, at Centex Technologies provide the most advanced cyber security solutions for businesses. For more information, you can call us at (855) 375 – 9654.

Cyber Insurance – Needs And Benefits

By

On May 26, 2015

In Security

May 26, 2015

Cyber insurance is designed to provide coverage from the losses incurred by an organization due to various cybercrimes such as network damage, data breaches, denial of service attacks, identity theft etc. Generally, a cyber-insurance policy protects against two types of risks – first party and third party. The former covers the losses of the policy holder whereas the latter one recompenses for the company’s liabilities towards clients, business partners and shareholders. Coverage options in a cyber-insurance policy may include crisis management, computer forensics investigation, data reconstruction, security liability, protection from cyber ransom etc.

Why Is Cyber Insurance Needed?

Every business, be it large or small, is likely to rely on information technology to some extent. In spite of using sophisticated firewalls and anti-virus software, it is nearly impossible to achieve complete security from cybercrimes. This is where the need for cyber insurance arises. It is particularly important for companies that hold confidential customer data, rely heavily on computer network to carry out business activities and deal in financial transaction processing.

Some of the reasons why companies need cyber insurance are:

  • Safeguarding the data of clients is one of the most important reasons to purchase cyber insurance.
  • Disclosure agreements and commercial contracts stored on the network may contain clauses regarding the confidentiality of the information. These can lead to expensive claims in the event of a breach.
  • Most entrepreneurs believe that their business is sufficiently covered by other insurance policies. However, having a cyber-insurance policy will make sure that all the network security risks are comprehensively covered.

Benefits Of Cyber Insurance

  • Mitigates Risk: Cyber insurance helps mitigate the risk of network attacks by increasing security measures. Insurers need to attain a certain level of cyber security in their organization as a prerequisite for coverage. This helps companies to identify the flaws in their IT system and make improvements in security practices.
  • Reimburses Losses And Penalties: Cyber insurance is immensely beneficial in the event of a large scale network attack. It provides coverage for the losses incurred, costs of notifying the affected individuals, hiring an attorney, legal fees and liabilities to other people.
  • Business Interruption Expenses: Some insurance policies also offer coverage for the income lost by a company as a result of the network or equipment failure due to the cyber-attack.

© Copyright 2022 The Centex IT Guy. Developed by Centex Technologies
Entries (RSS) and Comments (RSS)