Amid Increased Threats, Less Effective IT Agencies
There was a report done by the ISACA (Information Systems Audit and Control Association) at the beginning of the month. Among the key findings of their study were that just 41% of cyber security teams were able to effectively work from home with their resources and 92% saw an increase in threats to clients and end users, as we've discussed in previous issues of Tech Talk News. We at Ridge Support are happy to say that we are among the 41% that are still effectively managing IT infrastructure and security during this time.
For almost two months, our technicians have been working remotely on any project or ticket that allows the ability to do so. While other IT firms have struggled to keep up, we were able to move to this model without much impact to our clients. We would like to thank all of our existing customers for their understanding during this time as well as would like to let other organizations that may be seeking an IT partner during these difficult times to feel free to contact us.
Updates on Threats Directed At Remote Users
1. Increase In Ransomeware Attacks
Ransomeware is on the rise because of the increase in remote access. Many organizations moved quickly to setup remote access, but in the haste to do so may not have secured a longer-term or truly secured connection method. Without this, networks may be more vulnerable to an attack such as allowing an outside user to access your computer through the remote access software and enable them to install what they want on the PC. This has come in the form or Ransomeware early in 2020.
The experts at Covewear reports that, in Q1, Ransomeware payments rose to over $111,000 with a median payment of $44,000 and an average of 14 days worth of network shutdowns. They also report that the median number of employees was 62, making small businesses just as at risk to an attack as a large business.
There is little that can be done after ransomeware has infected a network, so all precautions should be taken ahead of time. Secure access points, a unified threat management platform and comprehensive backup solutions are a few of the things that can help to prevent or limit the damage done by such a threat.
2. Video Conference Impersonators
These can be a phishing email or may go as far as to be an entirely spoofed (fake that is made to look exactly like the real) website. The goal in many of these cases is to get users to download what they think is Skype, Team, Zoom, etc., but actually contains a program that will allow the bad actor to use your computer's camera and microphone at any time. The increase of usage of these products has made it commonplace to receive emails from one or more of these products, which makes it easier for a fake to seem like a normal email.
3. Phishing
Of course, this has been the primary topic that we've discussed in our previous editions of Tech Talk News, but it has yet to calm down. COVID-19 is all over everything and it catches people's attention, so bad actors continue to use fake emails that claim to have more information about or updates regarding the virus in the hopes that the user will not check the email to verify it is safe and simply click on the link or file.
We strive to look out for the best interest of our customers and their procurement in the IT venue. Be it hardware, software or service related, we want to guide you in the most effective manner possible.
