Dangerous New Trojan Can Infect Systems Through Wifi

If you're not already familiar with the Emotet trojan, it deserves a special spot on your radar. It's one of the most dangerous forms of malware in the world today.

Their success is thanks to the fact that its creators have worked hard and diligently to keep it upgraded by bolting on a variety of modules that enhance its capabilities in new, and sometimes terrifying ways.

Recently, researchers at BinaryDefense have spotted a particularly nasty new module that allows the trojan to infect other devices nearby. Called a "WiFi Spreader," it allows the trojan to hop wirelessly from one device to another.

Granted, this capability does not guarantee a 100 percent infection success rate, because the nearby device may have protection protocols in place. It does, however, provide a new attack vector the malware can utilize to spread itself farther than it otherwise might.

The implications of this are staggering. If Emotet makes its way onto your system and the strain you have has the WiFi Spreader module, it poses many risks. It poses risks to your own network, to the personal devices your employees carry that aren't connected to your network, and also to any other networks in close proximity to yours. Whether the networks are one floor up, or down, right next door, they are also at risk.

Also, consider the implications of an Emotet infection in a shared work environment. For example, WeWork office space, or a constellation of small companies that share one floor of an office and work in close proximity to one another. These kinds of arrangements are increasingly common and will absolutely complicate forensic investigations of malware infections.

If there's a silver lining here, it is the fact that according to Binary Defense, the WiFi spreader doesn't work on Windows XP SP2 or Windows XP SP3. That is because it utilizes functions that are incompatible with those builds. In any case, stay vigilant and be on the lookout for Emotet. It's one of the most dangerous forms of malware out there.

Call SpartanTec, Inc. if you need the help of IT experts in securing your business data, devices, or networks.

SpartanTec, Inc.
Myrtle Beach, SC 29577
843-420-9760
https://www.spartantec.com/

Password Manager Malware Tricks Users Into Revealing Passwords

There's a new threat making the rounds called 'Metamorfo' that you should be aware of. The malware began its life as a banking trojan.

This news is from researchers at Fortinet, who report that the malicious code has recently gotten some upgrades that make it particularly nasty.

Like many similar programs, this one finds its way onto target machines by way of phishing emails. In this case, the vehicle of choice seems to be emails that claim to have an invoice attached in the form of a Microsoft Word document.

If a user receives this email and opens the 'invoice' he or she will be informed that the message cannot be properly displayed without enabling macros. Of course, enabling macros is the mechanism that allows Metamorfo to be installed on the target device.

Once installed, the malicious code will first check to be sure it's not running in a sandbox or virtual environment. Once it has confirmation that it is not, it will run its Autolt script execution program, which it uses to evade detection by antivirus programs that may be running on the target system.

Safe from detection, it will then shut down any browser sessions that may be running and prevent any new browser windows from using the auto-complete function when entering passwords. It then begins prompting the users to manually enter their passwords. When they do, the keystrokes are mapped and sent to a command and control server that the hackers control. It's a fiendishly clever way of making sure the hackers harvest as much password information as possible from each system they infect.

Be very wary of opening attachments from any unknown and untrusted source and make sure all your systems are fully patched and up to date. It's not a perfect solution, but it will certainly minimize your risk.

Call SpartanTec, Inc. and let our team help you develop and set up the most effective and suitable cybersecurity strategies that customized according to your business security needs.

SpartanTec, Inc.
Myrtle Beach, SC 29577
843-420-9760
https://www.spartantec.com/

A Definitive Guide To Managed IT Services

Managed IT services refers to solutions that aim to replace or augment the management of certain business functions by a third party contractor. In the past 10 years, managed services have grown substantially, especially within the IT industry. In this area, managed services include managing technologies like telephony, core network, and data center. Meanwhile, legacy managed services include core IT maintenance obligations such as patch management and break/fix.

What Is MSP?

An MSP or managed service provider is a firm that owns and remotely manages a service or technology and permits the use of the said service or technology to any client through a subscription.

Why Use Managed IT Services?

Although managed services are not solutions that are suitable for all business, it is a clear cut solution to a few important business challenges that are faced by businesses of all shapes and sizes.

High hardware cost – technology architecture is costly and there’s no guarantee that they won’t be obsolete after a few years.

Specialized technology – conventionally, firms could hire a few IT staff to develop, manage, and fix problems across the whole IT enterprise. Now, to guarantee availability and high performance, IT teams are created for every IT function.

Cost of qualified staff – IT staff are in high demand and they are expensive.

Shortage of qualified personnel – even if you have an IT team, the question is if you have enough. Is your team qualified when it comes to maintenance?

Cost of constant maintenance – If you don’t have issues with maintenance, the members of your IT staff could concentrate on projects that could enhance your business like updating the CRM or creating new lead generation analytics and so on.

Are There Any Complaints About Managed IT Services?

Managed service providers provide an affordable and convenient way to help companies run smoothly. But, in an effort to maximize profits while cutting back their resource investment, several MSPs have decided to take a shortcut.

Inflexible programs – there are some providers that develop rigid program specifications at the expense of the clients. Flexibility is oftentimes the reason why the client turns to managed IT services, to begin with.

Low touch client service – with strict communication lines, there are a few MSPs that can automate away access to human professionals.

A Reliable MSP Partner

There are several MSPs these days that offer a range of services, to be used in different ways. Some are truly value-added partners while others are just service vendors. So how do you differentiate a vendor from a true partner?

A good managed IT service partner is the one that provides great advice, challenges you, and provides an honest critic. A good partner is one who is transparent in all of their dealings with their client and above all, handles sensitive problems, hiccups or shutdowns that affect your business just like their very own.

At SpartanTec, Inc., we believe in creating committed partnerships with our clients. We develop collaborative prosperity that affects businesses positively. Call us now for more information.

SpartanTec, Inc.
Myrtle Beach, SC 29577
843-420-9760
https://www.spartantec.com/