FTC Enforcing That Businesses Patch Log4j Java Security Issue

By now you're almost certainly aware of the Log4j Java issue.

It's a serious and fixable flaw relating to java logging.

Recently the United States Federal Trade Commission (FTC) has issued a chilling warning to anyone who hasn't yet fixed the flaw and protected against the vulnerability.

The FTC's statement reads in part as follows:

"The FTC intends to use its full legal authority to pursue companies that fail to take reasonable steps to protect consumer data from exposure as a result of Log4j, or similar known vulnerabilities in the future. 

Failure to identify and patch instances of this software may violate the FTC Act.

The Log4j vulnerability is part of a broader set of structural issues.  It is one of thousands of unheralded but critically important open-source services that are used across a near-innumerable variety of internet companies. 

These projects are often created and maintained by volunteers, who don't always have adequate resources and personnel for incident response and proactive maintenance even as their projects are critical to the internet economy.

This overall dynamic is something the FTC will consider as we work to address the root issues that endanger user security."

The FTC has already made it clear that they're not playing around with this issue either.  Not long ago in 2019, they hit Equifax with a staggering $700 million fine because of customer data exposure.

The FTC clearly has the muscle to make this threat stick. So if you haven't already installed the remedy for Long4j, do it now before you lose track of it. Keep an ear to the ground for other similar issues.

Fines of the sort that the FTC is threatening are enough to rock any business back on its heels. So don't take any chances.  Stay vigilant out there.  It's going to be an interesting year.

Call SpartanTec, Inc. now if you need professional IT support in keeping your information safe against cybersecurity issues and online threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

New Data Breach Hits US Cellular Company

It's the dawning of a new year and the hackers of the world have been busy.  This time it's US Cellular caught in the crosshairs.

The company recently reported that their billing system was hacked and they sent breach notification letters to more than four hundred impacted individuals.

US Cellular is the fourth largest carrier in the United States.  Only 405 of the company's customers seem to have been affected which makes this attack quite small in terms of scope and scale.  That's small consolation if you're one of the unlucky US Cellular customers to have received a notification in the mail.

The company had this to say about the incident:

"On December 13, 2021, UScellular detected a data security incident in which unauthorized individuals illegally accessed our billing system and gained access to wireless customer accounts that contain personal information.

Information in customer accounts include name, address, PIN code and cellular telephone number(s) as well as information about wireless services including service plan, usage and billing statements.

Sensitive personal information, such as Social Security number and credit card information, is masked within the CRM system. At this time, we have no indication that there has been unauthorized access to your UScellular online user account."

If you haven't received a notification in the mail from US Cellular then it's  most likely that your account record was not compromised. Out of an abundance of caution, you may want to reset your account password and be on the lookout for suspicious emails targeting you. Now you may be more likely to be on the receiving end of phishing emails for a time.

Kudos to US Cellular for their rapid response.  Sadly we'll probably be seeing a lot more of this kind of thing in the year ahead.

Call SpartanTec, Inc. now if you need professional help in protecting your data against hackers and cybersecurity threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

This New Malware Steals Passwords From Popular Browsers

A new threat has appeared on the horizon. Even if the name is not familiar to you this malware strain is bad news indeed.

Called RedLine it is an information-stealing malware that specifically targets popular web browsers including Opera, Microsoft's Edge browser, and Chrome.

Unfortunately, many people have come to rely on their trusty web browser to store and remember their passwords for them. RedLine takes advantage of this and the group behind the code has found a way to crack the browser open and grab the passwords stored within.

Even worse is that RedLine isn't just isolated to a single gang or group of cyber criminals.  Instead, it is being offered as a commodity on the Dark Web. That means anybody with about $200 USD can buy a copy and start harvesting the credentials of anyone they infect.

While it is true that passwords stored inside web browsers are encrypted, RedLine can programmatically decrypt those passwords if they are logged in as the same user which is very much the case here.  RedLine runs as the user who was infected which means that all of their passwords are open to the person controlling the malware.

Although it is highly convenient the bottom line is that it's dangerous to have all of your passwords stored inside your web browser.  If you insist on going that route, then your best bet by far is to enable two-factor authentication on every website you visit frequently that offers it. That is so at least if your passwords are compromised the hackers who gain access to the information still can't easily access your accounts.

Given how RedLine is being marketed on the Dark Web we can expect to see a surge in cyberattacks using the malware in the months ahead.  It's going to get a lot worse before it starts getting any better.

Call SpartanTec, Inc. now if you need the help of IT professionals in protecting your business against cybersecurity threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Popular Digital Photo Company Shutterfly Hit By Ransomware Attack

Recently digital media giant Shutterfly was hit by a major ransomware attack.

The attack disrupted broad swaths of the company's services including those offered under their GrooveBook, BorrowLenses, and Lifetouch brands.

According to a report received by BleepingComputer, Shutterfly was targeted by the Conti gang. That group was able to encrypt more than four thousand of the company's devices and 120 VMware and ESXi servers.

Like so many ransomware attacks in recent months the Conti gang did not start encrypting files immediately upon breaching the Shutterfly network.  Instead they lurked for a time while quietly exfiltrating files to a server they control.

The Conti gang has created a private Shutterfly data leak page that contains screenshots of the data the group allegedly stole prior to launching the encryption phase of their attack.  The purpose is to use the stolen files as leverage to prompt the company to pay the ransom demanded. The ransom in this case is reportedly in the millions of dollars.

Based on the screenshots on the data leak page it appears that the Conti gang made off with legal agreements, merchant account info, and a wide range of login credentials for corporate services.

The company has released a brief statement about the matter that reads as follows:

"Shutterfly, LLC recently experienced a ransomware attack on parts of our network. This incident has not impacted our Shutterfly.com, Snapfish, TinyPrints or Spoonflower sites. However, portions of our Lifetouch and BorrowLenses business, Groovebook, manufacturing and some corporate systems have been experiencing interruptions. We engaged third-party cybersecurity experts, informed law enforcement, and have been working around the clock to address the incident.

As part of our ongoing investigation, we are also assessing the full scope of any data that may have been affected. We do not store credit card, financial account information or the Social Security numbers of our Shutterfly.com, Snapfish, Lifetouch, TinyPrints, BorrowLenses, or Spoonflower customers, and so none of that information was impacted in this incident. However, understanding the nature of the data that may have been affected is a key priority and that investigation is ongoing. We will continue to provide updates as appropriate."

Based on the above there's little for users of those services to do at present. Out of an abundance of caution if you do use the impacted services you will probably want to change your password and improve your computer security right away.

Call SpartanTec, Inc. now if you need help in protecting your information against ranswomare attacks and other online threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

LastPass Says There Is No Evidence Of Data Breach

There are strange events swirling around LastPass. LastPass is a popular password safe and identity protection service.

Recently Twitter exploded with reports from around the world of people who received a notification from LastPass regarding a string of suspicious login attempts. Most of them came from countries other than the ones the impacted users lived in.

Naturally this led to speculation that LastPass had been hacked and a data breach caused some portion of the passwords stored by their massive user base were stolen. This created something of a panic because LastPass and similar sites are considered one of the last safe refuges where passwords are concerned.

The company responded that there was no evidence that LastPass servers had been breached but questions persisted.  If that was the case, then why did the company send out notifications to users regarding suspicious login attempts? The company's investigation into the matter continued.

Recently LastPass issued another update which reads as follows:

"As previously stated, LastPass is aware of and has been investigating recent reports of users receiving e-mails alerting them to blocked login attempts.

We quickly worked to investigate this activity and at this time we have no indication that any LastPass accounts were compromised by an unauthorized third-party as a result of this credential stuffing, nor have we found any indication that user's LastPass credentials were harvested by malware, rogue browser extensions or phishing campaigns.

However out of an abundance of caution, we continued to investigate in an effort to determine what was causing the automated security alert e-mails to be triggered from our systems.

Our investigation has since found that some of these security alerts, which were sent to a limited subset of LastPass users, were likely triggered in error. As a result, we have adjusted our security alert systems and this issue has since been resolved.

These alerts were triggered due to LastPass's ongoing efforts to defend its customers from bad actors and credential stuffing attempts. It is also important to reiterate that LastPass' zero-knowledge security model means that at no time does LastPass store, have knowledge of, or have access to a users' Master Password(s).

We will continue to regularly monitor for unusual or malicious activity and will, as necessary, continue to take steps designed to ensure that LastPass, its users and their data remain protected and secure."

It seems that it was a false alarm.  Even though it was a false alarm, if you are LastPass user you should enable two-factor authentication as soon as possible to minimize your risk.

is your data secure? if you don't have an  answer to this question then it is time to contact SpartanTec, Inc. for a complete network security audit.

SpartanTec, Inc.
800 25th Ave S #4320
North Myrtle Beach, SC 29582
(843) 418-4792
https://www.spartantec.com/

How Data Breaches Happen

A data breach is more than just a temporary terror. They can have a profound impact on your life. Sensitive information can cause huge problems for individuals, businesses, and governments. Hackers can reach you online or offline via Bluetooth, text messages or other online services.

A small flaw can lead to a huge data breach if it isn't addressed properly.

Many people don't pay enough attention to modern security threats because they aren't aware of their existence.

We'll be discussing data breaches and their potential impact on you in this article.

We'll be diving in to answer some of the most frequently asked questions.

• What is a data breach?
• What is the cause of a data breach
• What does a data breach mean for me?
• What can I do prevent data breaches?

Before we move on, let's first define data breaches.

What is a Data Breach?

Data breach is when confidential, sensitive or protected information is made available to an unauthorised person. Files in a data breach can be viewed and/or shared by anyone without permission.

Data breaches can happen to anyone, from individuals to governments and high-ranking companies. Even more important, anyone can expose others to risk if they don't have their data protected.

Generally speaking, data breaches take place because of weaknesses in:

• Technology
• User behavior

Data can slip through more places as our mobile devices and computers get more connected. We are constantly creating new technologies faster than we can protect them.

The IoT sector's devices are a clear example of how we value convenience over security.

Hackers are exploiting many "smart home", products that have flaws like a lack of encryption.

We'll see more of this issue as new digital products, tools, and services are used without any security testing.

Even if all the technology is in place, users may still be prone to poor digital habits. It takes just one person to compromise a website, or network.

You are almost certain to be at risk if you don't have comprehensive security both at the enterprise and user levels.

Understanding how data breaches occur is key to protecting yourself and others.

How do Data Breaches happen?

Although it is commonly believed that data breaches are caused by outside hackers, this is not always the case.

Sometimes, data breaches can be traced back at the source to intentional attacks. It can also be caused by simple oversights or weaknesses in the company's infrastructure.

Here are some ways a data breach could occur:

• An Accidental Insider. One example is an employee accessing a colleague's computer without authorisation permissions and reading files. This access is accidental and no information is given out. The data was however viewed by an unauthorized person and is therefore considered to be breached.
• A Malicious Insider. A malicious insider is someone who accesses or shares data in order to cause harm to an individual/company. Although the malicious insider may be authorized to access the data, the intention is to use it in criminal ways.
• Devices stolen or lost. A laptop or external hard drive that is not encrypted and locked -- any information that contains sensitive data -- can be lost.
• Malicious Outside Criminals. These hackers use various attack vectors in order to obtain information from a network or individual.
• Malicious methods used to breach data

Cyberattacks can lead to malicious data breaches, so it is important that you know what to look out for.

These are some of the most popular hacker methods

• Phishing
• Malware
• Brute Force Attacks

Phishing. Such social engineering attacks are intended to trick you into causing data breaches. To deceive you, phishing attackers pretend to be organizations or people that you trust. These criminals will try to get you to give the data to them or to gain access to your sensitive data.

Brute force attacks. Hackers might use software tools to guess passwords in a more aggressive approach.

Brute force attacks

You should go through every possible password option until you get it right. Although these attacks can take some time, they have become more rapid with the increase in computer speed. Hackers can also hijack other devices similar to yours by infecting them with malware, which speeds up the process. It might take only a few seconds for hackers to crack your password if it is not strong enough.

Malware. Security flaws can exist in your device's operating system and software. Criminals use these security gaps to insert malware. Spyware is perfect for stealing private information while remaining undetected. This infection might not be detected until it is too late.

What are the targets of Data Breaches?

A data breach could be caused by an innocent error, but real damage can occur if the person with unauthorized entry steals or sells Personally Identifiable Information or corporate intellectual data in order to gain financial gain or cause harm.

Malicious criminals follow a simple pattern. Targeting an organization to breach is planning. They conduct research on their victims to find out where vulnerabilities exist, such as missing updates or failures and employees' susceptibility to phishing attacks.

Hackers discover weaknesses in a target and then create a campaign to get insiders downloading malware. Sometimes, they directly target the network.

Once inside, malicious criminals can search for any data they need. This is because it takes an average of five months to find a breach.

Common vulnerabilities that malicious criminals target include:

You have weak credentials Weak credentials are responsible for the majority of data breaches. Your username and password combination can be used to gain access to your network by malicious criminals. Cybercriminals can use brute-force attacks to gain access to your email, website, or other financial information, as most people reuse passwords.

Stolen credentials. Brute force.

Phishing

They pose a serious security risk and can be used by cyber criminals to gain access to your bank account and other online accounts.

Compromised assets.

Various malware attacks

These are used to disable regular authentication steps that would normally protect computers.

Payment Card Fraud. Card skimmers attach themselves to gas pumps and ATMs and steal data every time a card swipes.

Third-party access. Third-party access. Malicious criminals may be able to gain access to your network and data, even though you do your best to protect it.

Mobile Devices. Employees are permitted to bring their own devices into work (BYOD). This makes it easy for malware-laden apps to be downloaded to the device, giving hackers access to the data. This includes files and email from work, as well as the owner's PII.

Data Breach can cause serious damage

Data breaches are not something that can be fixed with a few password changes. Data breaches can have a long-lasting impact on your finances and reputation.

A data breach can be devastating for business organizations. It can affect their reputation and financial bottom lines. Equifax, Target and Yahoo are just a few of the organizations that have suffered from data breaches. Many people today associate the data breach with these companies and forget about their actual business operations.

Government organizations can be exposed to highly confidential information by compromising their data. A government's citizens and its citizens can be seriously threatened by military operations, political dealings, or details about essential national infrastructure.

Individuals: Identity theft is a serious threat to victims of data breaches. Data leaks could reveal everything, from banking information to social security numbers. These details can be used to commit fraud under your name by criminals. It is possible to lose your credit and face legal problems if your identity is stolen.

These are all common situations, but data breaches can cause more harm than these. It is important to determine if your data has been compromised. To find out if your personal or work accounts have been compromised use https://haveibeenpwned.com/ to check (this tool checks existing data breaches for your email address and reports what was leaked).

To determine if your data is being leaked, you might need more detailed monitoring. Kaspersky Security Cloud offers data leak detection to help you navigate the situation.

The best way to protect your self is to not be a victim. There are many ways to protect yourself, whether you're an individual person or an enterprise.

How to avoid becoming a Data Breach victim

• Everyone needs to be involved in data breach prevention, from IT support staff to end-users and everyone in between.
• Security is as weak as the weakest link when you are trying to prevent data breaches or leaks. Each person who interacts with the system could be vulnerable. Even children as young as three years old can be at risk from a tablet connected to your home network.
• These are some best practices to prevent data breaches
• Software updates and patches available as soon as possible
• Secure data encryption using high-grade technology
• Upgrade devices when software is not supported by the manufacturer
• BYOD security policies should be enforced, such as requiring that all devices use a business-grade VPN and antivirus protection.
• To encourage better cybersecurity practices, strong credentials and multifactor authentication should be enforced. Encourage users to use a password manager.
• Educate employees about security best practices and how to avoid being victim of socially-engineered attacks.

Call SpartanTec, Inc. now if you want to prevent data breaches and keep other online threats at bay.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Link between Cybersecurity Attacks & Remote Work Technology

According to a recent 60 Minutes interview, more and more of the workforce is opting to work remotely. This can leave a big gap in your cybersecurity network. Research and reports on the cybersecurity risks of hybrid or remote work continue to be published. A Tenable study found that 74% of companies attributed recent cyberattacks on their business to remote work.

The report was conducted by Forrester. It found that cloud services, apps, personal devices, and remote access tools have effectively eliminated security perimeters within organizations, leading to more cyberattacks and compromises as IT support managers struggle with managing the new technologies.

Today, 80% security and business leaders believe that remote work has made their organization more vulnerable to risk. This is attributed to three factors, according to the survey: lack of visibility into remote employees' home networks, expansion of the software supply chain, and migration to the cloud.

Cybersecurity and Remote Work

The research found that over half of remote workers access work data via a personal device. 71% of security officers lack adequate visibility into remote employee networks. This leads to cyber attacks targeting remote employees (67%)

Recent cyberattacks have also highlighted the increased use by threat actors of compromising third party software providers or leveraging vulnerability in those products. 65% of respondents to this survey link recent cyberattacks with those compromises.

Tenable found that while the cloud is generally viewed as more secure than the on-premises infrastructure in many cases, 80% of security and business executives told Tenable that they felt that moving business-critical functions to cloud increased their risk. 62% also reported that cloud assets were causing business-impacting attacks.

The survey found that at least two-thirds (or more) of IT security professionals plan to increase cybersecurity investment over the next two year. Nearly 75% of respondents cited vulnerability management and cloud security among their top priorities.

Amit Yoran (CEO of Tenable) stated that hybrid and remote work are not going away. Therefore, organizations must adapt to ensure their employees can be protected.

Yoran states that there are two ways forward. One is riddled by unmanaged risks and unrelenting hack attacks, and the other accelerates business productivity. "CISOs and CEOs have the responsibility and opportunity to harness the power and manage cyber risks for the new world.

Call SpartanTec, Inc. now if you need professional help in securing the system you use for your work from home setup.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston