CryptoWall - the next security threat

Last year saw a number of highly publicized security threats that many companies struggled to deal with. One of those was some nasty malware called Cryptolocker, which held your files for ransom. While this has now largely been dealt with, news is surfacing of a second version – called CryptoWall – that has begun to infect users. What is Crypto malware? Crypto malware is a type of trojan horse that when installed onto computers or devices, holds the data and system hostage. This is done by locking valuable or important files with a strong encryption. You then see a pop-up open informing you that you have a set amount of time to pay for a key which will unlock the encryption. If you don’t pay before the deadline, your files are deleted. When this malware surfaced last year, many users were understandably more than a little worried and took strong precautions to ensure they did not get infected. Despite these efforts, it really didn’t go away until earlier this year, when security experts introduced a number of online portals that can un-encrypt files affected by Cryptolocker, essentially neutralizing the threat, until now that is. A recently updated version is threatening users once again. Cryptolocker 2.0, aka. CryptoWall Possibly because of efforts by security firms to neutralize the Cryptolocker threat, the various developers of the malware have come back with an improved version, CryptoWall and it is a threat that all businesses should be aware of. With CryptoWall, the transmission and infection methods remain the same as they did with the first version: It is most commonly found in zipped folders and PDF files sent over email. Most emails with the malware are disguised as invoices, bills, complaints, and other business messages that we are likely to open. The developers did however make some “improvements” to the malware that make it more difficult to deal with for most users. These changes include: Unique IDs are used for payment: These are addresses used to verify that the payment is unique and from one person only. If the address is used by another user, payment will now be rejected. This is different from the first version where one person who paid could share the unlock code with other infected users. CryptoWall can securely delete files: In the older version of this threat, files were deleted if the ransom wasn’t paid, but they could be recovered easily. In the new version the encryption has increased security which ensures the file is deleted. This leaves you with either the option of paying the ransom or retrieving the file from a backup. Payment servers can’t be blocked: With CryptoLocker, when authorities and security experts found the addresses of the servers that accepted payments they were able to add these to blacklists, thus ensuring no traffic would come from, or go to, these servers again. Essentially, this made it impossible for the malware to actually work. Now, it has been found that the developers are using their own servers and gateways which essentially makes them much, much more difficult to find and ban. How do I prevent my systems and devices from being infected? Unlike other viruses and malware, CryptoWall doesn’t go after passwords or account names, so the usual changing of your passwords won’t really help. The best ways to prevent this from getting onto your systems is: Don’t open any suspicious attachments - Look at each and every email attachment that comes into your inbox. If you spot anything that looks odd, such as say a spelling mistake in the name, or a long string of characters together, then it is best to avoid opening it. Don’t open emails from unknown sources - Be extra careful about emails from unknown sources, especially ones that say they provide business oriented information e.g., bank statements from banks you don’t have an account with or bills from a utilities company you don’t use. Chances are high that they contain some form of malware. Should your files be attacked and encrypted by this malware, then the first thing you should do is to contact us. We can work with you to help find a solution that will not end up in you having to pay the ransom to recover your files. If you are looking to learn more about CryptoWall malware and how to boost your security and protect your data and systems, then we could you your first line of tech defence. Published with permission from TechAdvisory.org. Source.

Picking the best phone system

Businesses in different industries often have unique needs when it comes to the technical systems they integrate. One system however is universal in that every business needs it: The phone system. If your business is looking for a new communications set-up you will quickly find a wealth of options out there. Here are tips you can follow to make sure that you get the best system for your business. Read more...

Cutting the landline - good idea?

The cell phone and tablets are quickly becoming the primary communication device for many individuals at home. In fact, in 2013 it was estimated that 2/5 households in the US use only mobile devices for calls. Cutting the landline is becomingly increasingly popular, and some business owners are considering switching over to a mobile only system entirely. Read more...

Save time by pre-drafting emails

As a business owner or manager, you likely send out a large number of emails each day. A certain percentage of your emails are probably sent to other colleagues, with the idea that they then create a message to send to a third party on your behalf. One way to ensure that the message gets through, while avoiding too much back and forth communication between you and your colleague, is to pre-draft the email. Read more...

Overview of the Air 2 and mini 3

Apple usually prefers to launch new or updated mobile products with a flashy press conference and unveiling. They did this with the recent release of the iPhone 6 and 6 Plus, but oddly enough they didn’t do it when they announced two new iPads – the iPad mini 3 and the iPad Air 2. If you are looking for a new iPad, here is an overview of these two new devices. Read more...