New Phishing Emails Target Citibank Account Holders

Are you a Citibank customer?  If so, be aware that a group of scammers is specifically targeting Citibank account holders.

The campaign is incredibly convincing, and the emails look just like official communications from the company.  All logos have been copied and are positioned correctly.  The sender address appears genuine at first glance and the body of the email message is free of typos which is a common "tell" among poorly orchestrated phishing campaigns.

The content they receive in the email varies. However, the general summary of the phishing emails is that the recipient's Citibank account has been put on hold due to a suspicious transaction or a login attempt made in a location than the recipient would normally log in from.

The solution according to the email is simple.  Take swift action now to protect your account.  Click the link below to verify your account information and avoid a permanent suspension.

Social engineering is common in phishing campaigns, and this is a tried-and-true technique to build a sense of urgency into the communication.

Unfortunately, if the recipient of this email clicks the link they will be taken to a website controlled by the threat actors. While it may appear to be an official Citibank portal, it isn't. Any user who "verifies their credentials" by entering them in the capture boxes on this site is handing their account information to the scammers who will promptly empty their accounts or max out their credit cards or both.

This campaign is targeted primarily at users in the United States with statistics indicating that 81 percent of the recipients of these emails are residing in the U.S. So if you are a Citibank customer, be aware that the campaign is ongoing. If you get an email that appears to come from Citibank, rather than clicking embedded links, either call the company direct or open a new browser tab and manually type in the URL.  Never trust embedded links!

Call SpartanTec, Inc. if you need help in protecting your organization against phishing and other online threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Employee Information Was Leaked At Cookware Company Meyer

Meyer Corporation is a California-based company and a giant in the cookware industry. Meyer is the latest victim in a seemingly never-ending parade of hacking attacks. The full extent of the attack has not yet been disclosed because an investigation into the matter is ongoing. However, we do know at this point that the attackers made off with at least one database containing the personal information of thousands of Meyer employees.

The company issued a breach notification and has filed papers with the Attorney General office in both Maine and California.  Notification letters have already been sent to individuals impacted by the breach.

The notification reads in part, as follows:

"Meyer was the victim of a cybersecurity attack by an unauthorized third party that impacted our systems and operations. Upon detecting the attack, Meyer initiated an investigation with the assistance of our cybersecurity experts, including third-party forensic professionals. On or around December 1, 2021, our investigation identified potential unauthorized access to employee information.

The types of personal information that may have been accessed during this incident will depend on the types of information you have provided to your employer, but may include: first and last name; address; date of birth; gender; race/ethnicity; Social Security number; health insurance information; medical condition(s) and diagnoses; random drug screening results; COVID vaccination cards and status; driver's license, passport, or government-issued identification number; Permanent Resident Card and information regarding immigration status; and information regarding your dependents (including Social Security numbers), if applicable that you may have provided to the company in the course of your employment."

The company has not confirmed that the attack was a ransomware attack. However, the Conti gang who makes heavy use of ransomware successfully breached the company's defenses last November (in 2021).  Their leak site contained nearly 250 MB of data which represented about 2 percent of the total data stolen from the company during that attack.

It's not much of a silver lining. At least in this case, unless you work for the company, your personal information does not appear to be at risk.  Even if you are one of the unfortunate people who received a notification letter from Meyer you will be offered two years' worth of free identity protection.  That's small consolation but it's something.

Call SpartanTec, Inc. now if you need help in protecting your company against online threats.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

4 Ways To Protect Yourself From Keyloggers

Hacking is a becoming an increasing problem. Hackers are finding new ways to steal sensitive data, as well as using old techniques, as more people use smartphones and computers. Keep reading to learn more about how to protect yourself against keylogger.

What is a keylogger?

Keylogger is shorthand for the keystroke logger. It is surveillance software that records each keystroke of a user.  The Soviet Union created and deployed a keylogger for typewriters in 1970s.

A keylogger can be used for legitimate purposes today, including monitoring children's online activities or monitoring the computers of employers and employees. Keyloggers are often used to malicious ends. Keyloggers are used by cybercriminals to steal passwords and personal information.

Phishing attempts are one way keyloggers can be spread. The software infects your computer by clicking on or opening a fake attachment.

There are many ways to protect your company and information from keyloggers. These are four ways to be proactive.

Keylogger Protection and Prevention

1.  Training your employees to spot phishing attacks.

It is important to educate your employees about phishing so they are aware of its basics. Cyber awareness is the first step. SpartanTec, Inc. can train your employees the current security practices.

Hackers are constantly evolving and finding new and innovative ways to steal data. Make sure your employees are aware of the latest attacks so that they can be prepared. Remind your employees to be cautious. Even when systems and caution are in place, sometimes things can still happen.

1. Use a password manager

While keyloggers cannot track what is being typed, relying on the browser's remember password’ feature may not be the best way to protect your information.

For example, hackers can access Google Chrome's password settings to gain access to all your saved passwords. You should instead use an identity management and access control system that encrypts all passwords and allows for single-click login.

1. Implement Multifactor Authentication

Multifactor authentication strengthens and enhances user logins through multiple steps in the login process. MFA requires two of three identifiers: username and password, hardware, phone, or biometrics.

The password can be recorded using a keylogger but the hacker who attempts to gain access to the account must have the same hardware or be you. Hackers who use a keylogger can't bypass this security measure, as there is no keyboard that can be tracked.

1. Use software to help protect yourself against phishing attacks

A Third party vendor, such as SpartanTec, Inc., can help stop attacks by providing built-in software that alerts users and allows them to manage potential attacks. Automated systems that prevent these cyberattacks are the most effective defense, and it doesn't rely on human error.

Stop typing personal information or passwords if you suspect you might have been compromised by a keylogger. You can use your onscreen keyboard, which is available in your computer's settings under accessories - accessibility. After you have removed the keylogger, change your passwords.

Call SpartanTec, Inc. now if you need the help of an IT professional in protecting your network against keyloggers and other cyberthreat.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

What You Need To Know About Co-Managed IT Services

When it comes to the technology plan or managed IT services that your business needs, a one-size-fits-all or a cookie-cutter approach isn’t what most businesses need. A proven process should be set in place if you want your business to move forward. A reliable firm, like Spartantec, Inc.,  will work with your company’s in-house IT team to address certain concerns during the proprietary business and onboarding process review.

This involves the following:

1. Evaluating your business cybersecurity plan and network infrastructure  against the industry standards
2. Identifying technology risks and determining business impact
3. Concentrating on sequencing top priorities that address business risks
4. Prioritizing IT initiatives that support the goals of your business

All these information will then be used to create recommendations, which will be provided during the consultation. After that, our IT professionals will create a plan, budget, and roadmap from comprehensive onboarding and business process. We will also take into account suggested business intelligence solution, application integration and selection, advisement and strategy, industry compliance and security, remediation plan, cybersecurity action, business continuity solutions, and disaster recovery.

With a co-managed IT service, we will improve your internal IT department. The model used for the co-managed IT services will overlay the tested and proven procedure onto your existing IT structure. Our experts will work with your tech team to create a technology plan that is aligned with your specific business and assist in managing your daily IT operations, where you can make the most out of your investment.

Co-managed IT solutions generally include:

1. Continual standards alignment and dedicated network administration
2. Development of an effective technology strategy
3. Preventative maintenance for the network as well as the end-point environment
4. Managed end-point security
5. Escalation support for your in-house IT-department
6. Cloud computing
7. Backup and disaster recovery
8. Data and IT security

Do you have an internal IT team? Are you confident they are able to handle all of todays security challenges? If you have any doubt, call SpartanTec, Inc. to learn more about how your company will benefit from co-managed IT services.

SpartanTec, Inc.
Myrtle Beach, SC  29577
843-561-9788
https://www.spartantec.com/

Puma Sportswear Recently Impacted By A Data Breach

We have recently learned that Puma Sportswear was impacted by a data breach in the waning days of 2021.

It's important to note that Puma's networks were not attacked directly.  The attack was made against Kronos which is one of the company's North American workforce management service providers.

In a recently filed data breach notification it was disclosed that the still unidentified attackers stole a variety of personal information belonging to Puma employees and their dependents from the Kronos Private Cloud. In addition, they deployed ransomware on the Kronos network.

The investigation into the breach is ongoing but it presently appears that nearly half of Puma's employees were impacted.  Kronos sent a letter to all impacted individuals.  Unfortunately, the letter was terse and contained little in the way of actionable information.

The letter states:

"On January 7, 2022, Kronos confirmed that some of your personal information was among the stolen data. We notified PUMA of this incident on January 10, 2022."

All impacted individuals have been offered two free years of Experian IdentityWorks, which includes credit monitoring, identify theft insurance, and identity restoration.

This is the second hacking incident involving Puma in recent months.  Back in August of 2021 the company's network was breached and source code for an internal application was stolen and put up for sale on the Dark Web.

The company stressed that no customer data was compromised and that the stolen information was connected solely to the company's employees.

This attack underscores the risks and dangers inherent in our increasingly interconnected world.  A data breach on a trusted vendor's network can impact your company in ways you never even imagined. That means no matter how much you spend on your own IT security, you may still be vulnerable if one of the vendors you rely on doesn't take security as seriously as your firm does.

Call SpartanTec, Inc. now if you need help in protecting your company against data breach.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Why Small and Medium Businesses Need To Focus on Cybersecurity

With the emerging ware in Europe the potential for a cyber attack has increased. High impact and high profile criminal cybersecurity is becoming more common. The data breaches on the news usually involve big and global companies. This causes many people to believe that only large firms are at risk of online attacks. They have an incorrect assumption that cybercriminals these days always seek out massive financial payout or a large cache of confidential data. But the truth is that small and medium businesses are at risk, too.

Why are SMBs at risk of cyberattacks?

It doesn’t matter how big your business is, hackers who wish to get access to your network will make the most out of any vulnerable spots they can find. A single incorrectly secured or unprotected edge device could be all they have to access a whole system.

It is important to have a comprehensive approach to cybersecurity Myrtle Beach SC to keep hackers at bay. However, many smaller firm use a haphazard method when securing their physical systems. The take on disparate solutions for video surveillance and access control which places them at a much greater risk. And as they evolve or grow, they add new technology or cameras instead of finding the resources to create a strategic plan on how to upgrade their system securely. Therefore, it’s possible that they are unaware of possible attack points on their changing physical security network.

But with better awareness and training, SMBs could mitigate these mistakes. This will take a lot of commitment from the department heads and a good understanding of what is at risk. However, SMBs believe that cybercriminals won’t attack their network but the truth is they are at a greater risk of closing down their business once they fall victim to cyberattacks.

The Effects of Data Breach

The costs of the damages brought on by a cyberattack on global businesses can reach more into the millions. This figure may seem insignificant for multinational companies but for a small and medium business, this number means a significant financial burden. Aside from the containment and clean up costs, SMBs that collect PII or personally identifiable information may have to pay fines and follow required breach reporting within 72 hours of detecting the data breach.

How can SMBs Protect Their Networks?

Just like any company, SMBs can protect their networks by implementing solutions that are created with online security in mind. The systems they utilize must include methods of encrypting data, authenticating users, and authorizing access.

Encrypting data will help small and medium businesses protect the sensitive and private data on their network and improve the security of the communication between servers and clients. Once data is encrypted, it won’t be readable without the right key and it will become useless to people who have accessed it without permission.

One authorization capabilities are integrated into cybersecurity solutions, the administrators will be able to restrict the scope of activity in the company’s systems by providing specific access rights to individuals or groups for data, resources, or applications. Administrators can easily streamline the level of access provided to every individual.

Call SpartanTec, Inc. now and let our team of IT experts help boost your cybersecurity so your company is less at risk from data breaches today and in the future.

 

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston

Medusa Android Banking Trojan Steals Sensitive User Information

There are two new forms of malware spreading rapidly among people with Android devices according to researchers at ThreatFabric. This latest campaign involves the FluBot malware (also known as Cabassous) and the Android banking trojan called Medusa.  What's disturbing about this most recent spate of attacks is that both forms of malware share the same basic infection tactics and delivery infrastructure.

FluBot is one of the most notorious strains of Android malware and can steal passwords, banking details, and other sensitive information from infected devices. It also gains access to the user's list of contacts and uses SMS messages to spread to other devices.

FluBot's success has encouraged imitators. Although Medusa was not created by the same group that authored FluBot, Medusa's authors are following in FluBot's footsteps.

In the case of Medusa it began life as a keylogger. It has been upgraded and can now take screenshots and collect data about how the device is used.  Medusa's authors have even gone so far as to deliver their malicious payload by using poisoned apps bearing the exact same names that FluBot's controllers use.

The researchers at ThreatFabric had this to say about the matter:

"Despite the fact that Medusa is not extremely widespread at the moment, we do see an increase in volume of campaigns and a sufficiently greater number of different campaigns.

Powered with multiple remote access features, Medusa poses a critical threat to financial organisations in targeted regions."

The single best thing users can do to minimize the risk of infection by either of these forms of malware is to install apps from the Google Play store or other authorized and trusted vendors only.  Never install an app via a direct link or from some other website that offers it.  It just isn't worth the risk.

Call SpartanTec, Inc. now if you need help in protecting your business against cyberattacks.

SpartanTec, Inc.
Myrtle Beach, SC 29577
(843) 420-9760
https://www.spartantec.com/

Serving: Myrtle Beach, North Myrtle Beach, Columbia, Wilmington, Fayetteville, Florence, Charleston