Apparently geeks go after their own now…

ALERT:

Enter to Win FREE Tickets to Star Wars

The upcoming December of the next Star Wars Episode VII:  The Force Awakens movie has been eagerly anticipated, and is scheduled for mass release in the U.S. on December 18, 2015.  

CyberCriminals are using this anticipation, and are trying to trick people by offering free tickets to the upcoming theater release.  

Over the next 2 months computers everywhere will be deluged with scams.  Until the December 2015 release (and likely for weeks afterwards) people will receive emails that ask you to enter sweepstakes, fill out surveys, or enter information to win coupons for free movie tickets.  CyberCriminals will employ every trick in the book to get you to open their emails, click on attachments, or open zip files.

Do NOT fall for these tricks.  

Instead of free tickets, all you will win is a bill from your friendly neighborhood computer geek, because you will be downloading and infecting your computer (and possibly the whole computer network, if you’re at work!) with malware or a virus.  If you’re using a work computer, you risk infecting the whole network. 

Technology by Design clients that have purchased our Spam Filter don’t have to worry, the spam emails will not get through.

However, they cannot open things willy-nilly.  A well-intentioned friend in your contacts can still directly email you the link/entry form/etc.

Not sure if your company is safe?  Ask us for a FREE Network Security Assessment!

Check out our “Email Red Flags”  for what to watch for, in suspicious emails. 

Ask us about our “Core Security Solutions” package!

You can’t stop CyberCriminals from targeting your company or employees.

But you can be prepared for their arrival, and have full shields up.

Got CyberBugs?

Call 1-204-800-3166

For Cyber-Extermination!

#itthatworks

ALERT:  FBI Public Alert

The FBI released a warning recently against a new CyberCriminal I.T. crime wave that is so prevalent and so devastating to companies, that the FBI have named it:

“CEO Fraud”

This scam is also known as “Business Email Compromise“, which we sent out an ALERT for in January.  

“CEO Fraud”:  CyberCriminals impersonate a company’s CEO, using the company’s own spoofed domain name.  The fake CEO contacts company employees in charge of money transfers, and orders them to transfer large amounts of money out of the country.

CyberCriminals take employee email addresses and other information from the target company’s website to help make the emails more convincing.  In the case where executives or employees have their inboxes compromised by the thieves, the crooks will scour the victim’s email correspondence for certain words that might reveal whether the companies routinely deals with wire transfers (searching for messages with key words like “invoice”, “deposit” or “president” or “CEO”).

CyberCriminals monitor the email account of a company’s CEO for months, waiting for the right time to kick this fraudulent event off.  The “right time” is usually a time where the CEO is out of town, or can’t be easily reached.  

The CyberCriminals spoof the name of the company’s own domain (eg. “tbyd.co” instead of “tbyd.ca”) to make the emails more convincing, which can be done easily if your email server is not configured properly.

(One reason to get a professional I.T. organization to manage and maintain your I.T. network!)

The CyberCriminals, once they have spoofed the company’s domain, and have confirmed (by monitoring the CEO’s email account) that the CEO cannot easily be reached for confirmation, send URGENT emails that look legit.  The emails look like they are coming directly from the CEO, and are ordering the employee to send wire transfers.  

This email fraud is targeting small and medium-sized companies, and the current loss is tallied at $1.2 Billion.

“The scam has been reported in all 50 states and in 79 countries,” the FBI’s alert notes.  

“Fraudulent transfers have been reported going to 72 countries; however, the majority of the transfers are going to Asian banks located within China and Hong Kong.”

How To Prevent Becoming a Victim

The FBI suggests the following tips for businesses to avoid being victimized by this scam (a more complete list is available at:  www.ic3.gov).

1. Verify changes in vendor payment location and confirm requests for transfer of funds.
2. Be wary of free, web-based email accounts, which are more susceptible to being hacked.
3. Be careful when posting financial and personnel information to social media and company websites.
4. Regarding wire transfer payments – Be suspicious of requests for secrecy or pressure to take action quickly.
5. Consider financial security procedures that include a two-step verification process for wire transfer payments.
6. Create intrusion detection system rules that flag emails with extensions that are similar to company email, but not exactly the same.  For example “.co” instead of “.com”.
7. If possible, register all Internet domains that are slightly different than the actual company domain.
8. Know the habits of your customers, including the reason, detail, and amount of payments.  Beware of any significant changes.

Not sure if your company is safe?  Ask us for a FREE Network Security Assessment!

Check out our “Email Red Flags”  for what to watch for, in suspicious emails. 

Ask us about our “Core Security Solutions” package!

You can’t stop CyberCriminals from targeting your company or employees.

But you can be prepared for their arrival, and have full shields up.

Got CyberBugs?

Call 1-204-800-3166

For Cyber-Extermination!

#itthatworks

ALERT:  Drowned Syrian Boy Scams

The news, Internet, and social media have been confronted with some disturbing images this week.

Graphic photos of 3-year-old Alyan Kurdi, lying lifelessly on  a beach off the coast of Turkey, have been shared prolifically across social media platforms, such as Facebook.  The boy, along with his family and other Syrian refugees, was trying to reach Greece.

The graphic photos have reached millions of people, being passed from friend to friend.  Justified by the reasoning that we cannot hide away from the very real, very serious nature of this situation.

As with all tragedies, CyberCriminal lowlifes are willing to exploit this graphic photo, for their own profit.  

And they have several scams currently being used, to do just that.

Phishing Scams

Phishing email attacks are sent out randomly to a mass amount of people:

1. Trying to trick people into either giving a charitable donation at a bogus website, or
2. Trying to trick people into clicking on a link that downloads malware onto your PC.

Social Media Scams

Facebook, Twitter, etc:  Asking you to share/like/retweet etc their post

1. They tell you that if you care at all you will share/like etc –  “1 share = 1 prayer”
2. Asking for your help, they tell you that if they get 1000 shares/likes etc, so and so will donate a specific amount of money

Called “Like-Farming Scams“ – They collect “likes” or “shares” etc.  The list of followers can be used by the CyberCriminals for further spear-phishing, or sold to other CyberCriminals for their spamming use, or to marketing outfits.

Not sure if your company is safe?  Ask us for a FREE Network Security Assessment!

Check out our “Email Red Flags”  for what to watch for, in suspicious emails. 

Ask us about our “Core Security Solutions” package!

You can’t stop CyberCriminals from targeting your company or employees.

But you can be prepared for their arrival, and have full shields up.

Got CyberBugs?

Call 1-204-800-3166

For Cyber-Extermination!

#itthatworks