New Ransomware Named AvosLocker Uses Multiple Tricks In Attacks

There's a new strain of ransomware to be concerned about in the form of AvosLocker.

This is from security firm Sophos who warns that the new strain of human-operated ransomware is one to watch.

AvosLocker burst onto the scene over the summer of this year (2021). Having enjoyed some success with their product the gang behind the code is now on the hunt for partners in a bid to fill the gap left by REvil's departure.

One of the key features of the malware's design is the fact that it leverages the AnyDesk remote IT admin tool while running it in Windows Safe mode. We've seen malware that leverages Windows Safe Mode. Safe Mode loads with a minimal set of drivers and it is less well-protected but it isn't exactly a common tactic.

AnyDesk is of course a perfectly legitimate tool used by thousands of professionals all over the world every day.  Here however it is being put to nefarious use and by combining it with running in Safe Mode and it allows the hackers to deal serious damage to their targets.

Peter Mackenzie is the Director of Incident Response at Sophos. Mackenzie says the group behind this new strain relies on simple but very clever tactics and methodologies to get the job done. So far, they've been amazingly successful.

The company had this to say about the new strain:

"Ransomware, especially when it has been hand-delivered (as has been the case in these Avos Locker instances), is a tricky problem to solve because one needs to deal not only with the ransomware itself, but with any mechanisms the threat actors have set up as a back door into the targeted network. No alert should be treated as "low priority" in these circumstances, no matter how benign it might seem."

Wise words indeed.  Stay alert out there.

Call SpartanTec, Inc. now if you need the help of IT specialists in setting up the most effective cybersecurity measures to protect your business against various online threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

The Best IT-Related Resolutions For The New Year

The past couple of years have been difficult for just about everyone. Business owners and entrepreneurs have had to adapt and evolve to survive in an ever-changing climate. There’s no telling when or even if things will go back to what we once thought was “normal.” As we enter a New Year, many business owners are putting their resolutions in place to survive and hopefully thrive in 2022.

People will focus on plans for growth and ways to bring more profit in for their resolution, but it’s important to include tech- and IT-related resolutions as well. Technology might not be an obvious approach to growing a business, but it goes a long way toward making your clients and employees feel more secure about everyday interactions. This can inadvertently lead to growth as you improve customer relationships as well.

Here are a few tech-related resolutions that we think can greatly improve any business.

Use Multiple Layers Of Cyber Security Protection

There is no security approach that covers every hole or flaw that cyber security threats are looking to exploit. The best way to keep your defenses protected is to put in place multiple approaches to cover every possible gap. By using multiple programs and layers, you will ensure that every individual component of your cyber security program has a backup to counter any issues.

Your first line of defense should be a firewall. Firewalls help monitor incoming and outgoing traffic and work as a barrier between networks you trust and don’t trust. They essentially shield you from malicious or unnecessary network traffic. Multifactor authentication is an important layer as well. This prevents cyber-attacks that come from weak or compromised passwords. With multifactor authentication, you and your employees may have to receive a text to your cell phones to prove that the correct person is trying to access the network. This will help prevent the use of employee passwords to gain access to sensitive information.

Back Up Your Data And Replace Old Equipment

Unfortunately, preventive measures don’t always work. An unexpected disaster could cause your network to go down or someone could accidentally delete some important files. Plus, if your data is not backed up, you could lose sensitive information as well as time and money down the road. Customers will also be upset if you lose information pertaining to them. This could devastate your brand’s reputation and cost you customers. If you do not have a backup plan or program in place, you should definitely get one for 2022.

In addition to backup plans, it’s important to have equipment that is up-to-date. Using slow and outdated technology can take away from productivity and will make your job more difficult. If some of your equipment goes down, think about replacing it with something new rather than repairing it. While it might be more expensive at first, this decision will save you time and money in the long run.

Employee Security Training

If you want to run a cyber security-aware business, you’ll need to train your employees in security awareness and create a culture that ensures information security. Providing your employees with training related to information security can make them more comfortable and confident in their decision-making and overall employment. This rubs off on your clients and makes them feel more comfortable about doing business with you. According to information from the UK Information Commissioner’s Office, human error is to blame for 90% of cyberdata breaches. Getting your employees trained in cyber security awareness can help reduce the chance of human error.

As you lay out plans to make your business more successful throughout 2022 and beyond, ensure that your tech and information security practices are updated. There are simply no downsides to improving your technology and cyber security. Adopting these practices can go a long way toward making your employees and customers feel more comfortable and confident in their decisions.

SpartanTec, Inc. would like to partner with you in the new year to ensure your business, your employees and your customers data is secure. Call us today for a complete consultation on how we can give you peace of mind.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Reasons The Log4j Java Library Security Issue Is Concerning

Haven't heard of Log4j before right now? If not, you're certainly not alone but unfortunately it's something you're likely to hear more about in the weeks ahead. It may wind up being the cause of a few headaches for you.

"Log4j" is a Java library.  Its function is to log error messages in applications.  Consider it akin to an overworked clerk in the back office somewhere.

As is often the case with overworked clerks in back offices, it turns out that they're important. If one of them starts having issues it can have gigantic ripple effects. That's basically what's happening here.  This library is open source and is one of the bedrock components of the Java-logging framework.

Recently cybersecurity researchers found a remote code execution flaw in Log4j that is already being exploited in the wild.

The issue is being tracked as CVE-2021-44228 and has a severity score of 10/10 so this issue is as serious as they get.  In fact, it's such a major problem that the UK's National Cyber Security Centre has already issued a bulletin about it.

This is a pervasive issue that impacts pretty much every device that's exposed to or connected to the internet and that's running Apache Log4j versions 2.0 to 2.141. Even worse is that there's at least one group of hackers already abusing the flaw.  The Mirai botnet targets mostly IoT devices and has been modified with a module that specifically exploits this flaw.

Fortunately, both Cisco and VMware have released patches that address the issue for their products that were affected by the issue. As a whole the industry is moving very slowly when it comes to responding to this cyber threat.

That's dangerous because the global economy absolutely depends on the internet these days. Anything that has a large-scale impact on the web will have enormous ripple effects that will be felt for months if not years.

People also ask

What is Log4j used for?

Log4j is used by developers to keep track of what happens in their software applications or online services. It's basically a huge journal of the activity of a system or application. This activity is called 'logging' and it's used by developers to keep an eye out for problems for users.
https://www.ncsc.gov.uk/information/log4j-vulnerability-what-everyone-needs-to-know

What are the best practices to manage cyber risk like Log4j?

There are three main reasons that all cyber professionals need to be proactive in managing cyber risk. They must comply with regulations, their frequency and their severity. What can we do to address this problem?
https://manageditserviceswilmington.com/manage-cyber-risk/

What is Log4j vulnerability?

The Log4j flaw allows attackers to execute code remotely on a target computer, which could let them steal data, install malware or take control. Exploits discovered recently include hacking systems to mine cryptocurrency.
https://www.spartantec.com/2021/11/29/mistake-employees-cybersecurity/

Call SpartanTec, Inc. now for more details on how we can help protect your information against various types of cyberthreats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Government & Small Businesses Must Prioritize Cybersecurity

Are You Prepared If Your Companies Data is Compromised?

Most of your everyday interactions are dominated by Fortune 1000s. However, small businesses continue to be the foundation of the U.S. economy. The 30 million small businesses that are operating in the country employ almost 50% of the overall workforce, as per the Small Businesses Administration. However, these same businesses have started to fall prey to cybercriminals at an increasing rate. This trend is putting the country’s economy at risk. As bigger organizations invest heavily on cybersecurity, hackers, fraudsters, and cybercriminals have started to shift their focus on small businesses.

Improved Cybersecurity Can Protect Economy

Malicious cyber activities cost the U.S. economy between $57 billion and $109 billion every year. These figures are expected to grow as the economy starts to include all of the losses incurred by small businesses from cybercrime.

As economists highlight the possibility of recession, it is crucial for all of society to assist small businesses from becoming a contributing factor. Here are few things that need to be done.

Government supported tax incentives – the government is already trying to secure our borders, financial system and air travel. Now, it needs to help in securing the digital environments of all those who are unable to do so on their own. A good place to start is to provide tax incentives to encourage innovation as well as to help small businesses realize the importance of network security. Incentives are an effective way of producing results without having to implement regulations and not having to force firms to react. In many instances, the government has leveraged tax deductions and rebates to encourage certain behaviors that are unlikely to be seen otherwise, just like with electric vehicles and solar power.

Lower Cyber Insurance Premium – small businesses can benefit from having cyber insurance if the event of a cyberattack since the damages the result from it are generally excluded from general liability policies. If small businesses do not have coverage, they will have no choice but to deal with ransoms, data loss, damages, as well as other liabilities. But, several small firms are priced out of cyber insurance market these days. Aside from that, the policies don’t cover the main attack vector, which is email phishing. If making insurance widely available is in the horizon, there is a need to request assistance from the federal and state government through tax deductions and grants. This is a small price to pay when compared to how the economy will suffer if small businesses continue to fall victim to cyberattacks.

Improved organizational awareness -  small businesses also have the responsibility to raise awareness in their company and to improve their defenses. A study revealed that less than 20% of small businesses said they were confident in their cybersecurity and those that had a well defined cybersecurity strategy didn’t reach 50%. Performing a third party security evaluation that will identify vulnerabilities is one affordable yet crucial step to take. Once the weaknesses have been determined, a plan can be made on how to deal with these weaknesses and mitigate possible losses in case a cyberattack happens.

Call SpartanTec, Inc. if you need help in setting up the most effective cybersecurity measures to secure your business against the most common online threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Does Every Company Need IT Support?

Small businesses often believe that IT support is only for large companies. This is false. No matter how large or small your company, there are many benefits to having IT support available.

IT support can increase your company’s competitiveness. IT support can also be used to reduce costs and help you achieve your goals.

Here are some reasons to explore managed IT services.

Increase your ROI and reduce costs over time

An IT professional is a great investment. It will increase your ROI and reduce company costs. Professional tech support will take away the need to worry about expensive repairs or questionable software investments. Unexpected costs and fees are not an issue. All you have to do is pay a flat fee that is flexible to your budget.

Increase overall computer security

No matter what type of business you run, data is an essential part of any business. Reliable backup systems and high-quality cybersecurity are essential to protect your company’s data.

You can enjoy all the benefits of an IT support team. An IT specialist can help protect your company and confidential data of employees and customers.

Give Clients the Service They Want

Clients expect quality service. Technology that isn’t up to standard can compromise customer relationships. You can ensure that your clients receive the best IT support experts.

Make use of new technologies to help you reach your goals

Technology may not be a problem for your business. An IT support team can help you get the most out of your business’s technology.

Spend more time managing and less time worrying

Computer problems can cause headaches. These tech problems can be avoided by investing in IT services. You can leave IT problems to the professionals and concentrate on other important issues, such as employee management and strategy development.

Boost Company Efficiency

No matter what type of business you run, efficiency is something you want to increase. Technology can assist you in this endeavor. It can also be harmful if it is full of bugs, flaws and other problems. Tech support ensures that your technology is optimized. You can make the most of your technology with the support of an IT team that is dedicated to helping you achieve your business goals and identify areas for improvement.

Get a customized service

Each company has different technology requirements. Professional technical IT support will provide customized managed IT services tailored to your business’s needs. Your IT support team is made up of qualified candidates who have been trained. They can help you identify your IT needs and provide the best solutions to achieve your company’s goals.

Adtek Advanced Technologies is the right place to go if you are looking for the best in technology.

People also ask

What type of companies need IT services?

Characteristics of Businesses that Require Outside Information Technology (IT) Support to Succeed

1. Those without In-House IT Expertise. It may be obvious to state that the business without IT support, is the one that needs IT support. …
2. Those Most Concerned About Cyber Security. …
3. Those That Plan on Growing.

What does an IT support company do?

Work an IT support company does can involve everything from fixing bugs and backing up data, to overseeing security and managing IT infrastructure.

https://adtekitservices.com/rock-hill-sc-managed-it-services/

Rock Hill, SC 29730
(803) 902-3111

Dillon, SC 29536
843-627-3079

Home

Cox Communications Reports Recent Data Breach

Cox Communications is a major provider of cable, internet, and phone service in the United States.  The company is the latest in a seemingly unending parade of companies to fall victim to a hacking attack. In this case, the hacker gained access to company servers by impersonating a member of Cox Communication's Customer Support team.  At this point details are sketchy as the investigation into the matter is ongoing.

The company's breach notification statement reads:

"On October 11, 2021, Cox learned that an unknown person(s) had impersonated a Cox agent and gained access to a small number of customer accounts. We immediately launched an internal investigation, took steps to secure the affected customer accounts, and notified law enforcement of the incident.

After further investigation, we discover that the unknown person(s) may have viewed certain types of information that are maintained in your Cox customer account, including your name, address, telephone number, Cox account number, Cox.net email address, username, PIN code, account security question and answer, and/or the types of services that you receive from Cox."

At this point the exact number of records the hacker gained access to is not known. However given the above if you are a Cox customer you should change your password and security question(s) at a minimum.

Although payment card information associated with impacted accounts was not specifically mentioned it pays to closely monitor whatever payment cards you have tied to your Cox account just to be safe.

It is also worth mentioning that the company is in the process of contacting impacted customers and has offered one free year of Experian Identity Works. The program can help monitor credit reports and detect signs of fraudulent activity.

We wish we could say that this will be the last major data breach of the year but sadly it almost certainly won't be.  Stay vigilant.  It's dangerous out there.

SpartanTec's primary objective is to keep our customers data secure. Call us today to see how we provide peace of mind.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

New Emotet Malware Found A New Way To Distribute

Emotet is one of the most feared malware strains circulating right now. The team behind it has managed to infect a staggering array of targets all around the globe. To say that it is a major threat would be an understatement. Recently the group behind Emotet just upped the ante even further. Researchers have recently discovered that the malware is now being distributed via a new channel.

The new channel is a malicious Windows App Installer that appears to be an innocuous Adobe PDF reader. Windows App Installer is a built-in feature of both Windows 10 and 11 and systems can be infected by "tricking" users to click attachments in emails which trigger the App Installer.

Emotet's preferred methodology revolves around a "conversation in progress" approach.  An email is crafted that already has several replies. So at a glance it appears that the recipient and whomever sent this email have already been conversing about something. The "most recent" reply says some variation of "please see attached" and contains a PDF file.

When the recipient clicks the file the built in App Installer is triggered and the malware is installed. Note that this completely bypasses most malware and cybersecurity measures because the recipient is making a conscious decision to open the file in question.

The campaign is amazingly well put together.  The attachment and subsequent prompts appear to be legitimate Adobe Acrobat components right down to sporting an official company icon and a certificate marking it as a trusted application. So there's no reason for a user to think that there's anything amiss unless they look more closely at the email containing the attachment.

That's exactly what the hackers are counting on.  They know that people are busy and may only give the body of the email a cursory glance before clicking to see what all the fuss was about.

As ever vigilance and mindfulness are the keys to avoiding these types of shenanigans. Many employers overlook employee training because they assume their employees are aware of how to look for spam in their emails.

SpartanTec, Inc. provides employee training and spam protection. Call us today before your network falls prey to malware. Activate your two free hours of IT support now.

People also ask
Is Emotet a virus?
Emotet is a computer malware program that was originally developed in the form of a banking Trojan. The goal was to access foreign devices and spy on sensitive private data. Emotet has been known to deceive basic antivirus programs and hide from them.
https://www.spartantec.com/2021/12/09/block-off-malware-from-computer/

Is Emotet a ransomware?
Emotet is a malware strain and a cybercrime operation believed to be based in Ukraine. The malware, also known as Heodo, was first detected in 2014 and deemed one of the most prevalent threats of the decade. Emotet is known for renting access to infected computers to ransomware operations, such as the Ryuk gang.

https://www.spartantec.com/2021/11/29/mistake-employees-cybersecurity/

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston