Two New Phishing Tactics You Need To Know About: Voicemail Spoofs and Dropbox Links

UPDATE 6/12/14: We've just learned that the virus being spread by the new tactics we reported yesterday is, in fact, the dreaded Crypyolocker ransomware, on which we've reported before. All the more reason to think twice before clicking links in emails!

We all know by now that as our safeguards against cybercriminals become more sophisticated, so do their methodologies. It's a classic arms race. What isn't as widely known, though, is that while evolving technical safeguards are invaluable, so is an evolving awareness of the ways criminals try to trick people. As a team of technology experts who partner with our clients to help them get the most out of their technology, we try to help users with both.

Toward that end, we wanted to make everyone aware of two email phishing tactics cybercriminals are using to target unsuspecting users.

Most Common Phishing Techniques

Tactic 1: Voicemail Spoofing

We've noticed recently that scammers are trying to trick users into installing malicious software by sending emails designed to look like internal voicemail service messages (see the example below). It's not uncommon for businesses to have systems set up to forward audio files of voicemail messages to the appropriate parties--and such features can be extremely useful. Unfortunately, this also means that tactics like this can be hard for users to detect.

screen from mail

So, what's the answer? If you know your company's phone system has an email forwarding system in place, make sure you know exactly what those legitimate emails look like so that you can distinguish them from scam emails. Above all, don't click on any links or open any voicemail attachments unless you're absolutely sure they are coming from your company's actual voicemail system.

Which brings us to our next point . . .

Tactic 2: Dropbox Links

One of the universal rules of thumb for avoiding malware sent via email is, as we noted above, "Don't click on attachments unless you know with absolute certainty where they are coming from." The more widely known this rule of thumb becomes, the less effective attachments will be for cybercriminals--which is probably why they have now turned to Dropbox, an extremely popular (and perfectly legitimate) cloud hosting service.

Instead of sending attachments, some purveyors of malware are now sending links to publicly shared Dropbox folders that contain mailicious software (again, see the image on the left).

So, what's an unsuspecting user to do? The advice is the same as it is with attachments. Don't click on Dropbox links unless you're absolutely sure you trust the sender.

And, when in doubt, always talk to your network adminstrator before clicking on anything. If you're a client of 3n1media, well, you know who to call. Feel free to let us know if you have any questions.

Our Team Keeps Growing! Meet Alan, Our Newest Systems Engineer.

3n1media stuff

We’re pleased to announce that our team of Systems Engineers has grown yet again! Allow us to introduce Alan Torres (pictured on the left), the most recent addition to our team.

Alan brings ten years of experience in IT support to the table. Most recently, he worked as a Support Specialist for Waller Lansden Dortsch & Davis, one of the largest law firms in Tennessee. While there, he tech support to end users and also assumed management of the company’s mobile device infrastructure, revamping and growing it from a BlackBerry-only operation to a full-service, cross-platform venture. Before that, he also worked as a Systems Support Specialist for Redstone Federal Credit Union in Huntsville, Alabama, where he managed the ins and outs of highly-specialized bank software and backup systems. 

Needless to say, Alan’s expertise will be a great addition to our already stellar team and a big help as our business continues to grow. Here’s what Sean Wright, our President and CEO, has to say about Alan: “As we Bring Alan on, I am excited about the growth of 3n1media both in our client base and our team. Alan is yet another example of how we have been focusing on developing a team of engineers that can not only service our clients, but also enhance who 3n1media is. Alan’s firsthand experience along with his technical knowledge definitely adds to the 3n1 team. I look forward to our clients working with him.”

Outside of the office, Alan enjoys pursuing his second passion: music. His main instrument is guitar, but he can hold his own on piano and bass as well. His musical influences include the likes of Oasis, the Rolling Stones, and Ryan Adams.

And last, but not least—he’s a family man as well. He and his wife Rachel are expecting their first child this June! 

When you see Alan, please help us welcome him aboard. We know you’ll agree that he will help us carry out our mission of delighting our clients with excellent service on a daily basis.

As Microsoft Releases A Security Patch For Internet Explorer (Including XP Users), Here Are 3 Tips For Safer Browsing

ie.png

Reports surfaced earlier this week that a vulnerability had been found in Microsoft's Internet Explorer web browser, exposing users to serious malicious attacks. Today, Microsoft announced that there is a security patch available to fix the vulnerability.

The most newsworthy aspect of this story is that the security patch is available to Windows XP users. This is surprising because Microsoft officially ended support for XP on April 8th, leading many people to think, with good reason, that XP users were out in the cold on this one. Apparently, though, Microsoft decided to go ahead and give XP users the update, since the vulnerability surfaced so soon after the end-of-support date.

At any rate, we thought this would be a good time to remind our friends--especially those still running XP--of a few key tips for secure web browsing.

How to Browse Safer

1. XP users should upgrade.

Don't count on Microsoft remaining charitable with security patches. The recent IE security vulnerability was such a big story because--at least in theory--the end of support means that security fixes like this one won't be available in the future, and around a quarter of the computers in the world are still running XP. If your computers are among that number, feel free to reach out to us to start strategizing an upgrade.

If you must continue to use XP, consider using another web browser, like Firefox or Google Chrome, since they will continue releasing browser security patches to XP users, at least in the short run.

2. Java is at the root of many browser security issues, including this one.

As we've written before, a good number of vulnerabilities that hackers find in web browsers have their root in the Java plugin. Users can prevent a number of attacks simply by disabling the Java plugin in their browsers.

3. Be wary of where you browse, and think about using a content filter.

Cyberattacks executed through web browsers really only happen when a user visits an infected website. While avoiding such websites may be more easily said than done, there are a few things you can look for. Many times, hackers will infect otherwise legitimate websites whose owners appear to have let their sites go to seed, so to speak. So, avoid websites that look like they haven't been updated in a while. And do not click links you receive in emails unless you are absolutely positive that you trust the sender, and that the sender is who he/she says he/she is.

Furthermore, we've found that content filters actually cut down on malware attacks by detecting and blocking infected websites--even those that do not contain objectionable content. Because they have become highly sophisticated in recent years, many filtering solutions also protect users from outdated websites that might carry malware. Feel free to contact us if you're interested in learning more about implementing a content filter.

And, as always, let us know if you have any questions. Unfortunately, these kinds of vulnerabilities are all too commonplace in the tech world. Still, with awareness and the right precautions in place, cybersecurity is attainable.

What You Need To Know About Heartbleed: A User-Friendly Guide

heartbleed.png

By now, you've probably heard at least something about Heartbleed, a fairly widespread security bug in the way some websites protect user data. There's a lot of information floating around out there, so we wanted to reach out to our friends and partners to get them the critical facts, and hopefully clear a few things up.

So, here are a few common questions and answers about Heartbleed:

What to Know About Heartbleed

What is Heartbleed?

We'll keep it simple: Heartbleed is the name the tech community has given a bug that was just discovered in certain versions of OpenSSL, a protocol that some websites use to encrypt sensitive data such as usernames, passwords, credit card numbers, etc. This bug has been around for the last two years, meaning that sites using affected versions of OpenSSL have been vulnerable during that time.

Which websites have been affected?

OpenSSL is one--but not the only--encryption protocol some websites use to secure their data. 3n1media, for instance, uses a different security protocol for the websites we host, so they were not affected by Heartbleed. Furthermore, not all websites using OpenSSL were affected, since only certain versions were vulnerable. Security giant Trend Micro even reports that Heartbleed poses problems for only 17% of the websites using OpenSSL.

Still, a number of widely-used web services have been affected, including Box, Dropbox, Gmail, Facebook, and Netflix. Here's a more extensive list, but keep in mind that none of the lists being published by news organizations is completely exhaustive. If you have specific questions about a website or online service, we recommend reaching out to the vendor responsible, or consulting with a trusted technology partner, like 3n1media.

Should I change my passwords?

The short answer is yes. We've always recommended that users change their passwords regularly, especially for sites that store sensitive data. That way, you're always prepared for vulnerabilities like Heartbleed. Stolen passwords will do criminals no good if they've been changed.

Still, Heartbleed is a special case. For affected websites, it matters when you change your passwords. Vendors and site operators, if they have their users' best interest in mind, are currently patching their systems to eliminate the Heartbleed bug. Once the bug has been fixed, users will need to change their passwords in the event that they were compromised before the fix (this is unlikely, but--better safe than sorry). So, be on the lookout for updates from vendors, and make sure to change your passwords when you see them. If you're not sure about a specific vendor, either consult with a technology partner, or contact the vendor directly.

As always, feel free to reach out to us if you have any questions about Heartbleed. As IT experts, we've been keeping a close eye on the situation. While it doesn't warrant mass hysteria, it is a serious security problem that requires vigilance and smart, timely action.

Why Box is Still Better Than Dropbox for Business

Box, Dropbox, and the Cloud Solution Landscape

box-logo.jpg

We're hearing from more and more businesses who want to take operations to the cloud. This is especially the case when it comes to file storage: in-house file servers are looking a lot less attractive when there are inexpensive and easy-to-use cloud services available. The concern, of course, has always been security. But cloud technology has matured to the point where it really is viable for numerous businesses to store and share files securely in the cloud.

Still, some cloud services have matured more than others. The two biggest solutions that we deal with on a daily basis are Dropbox and Box. For a long time, our answer to the question "Which is better for business?" was a simple an easy one: Box is the better solution for business, while Dropbox is better for personal use.

Last fall, though, Dropbox rolled out Dropbox for Business, which complicates matters. So, is there still a clear winner for business use? We think so.

Security and Business-Class Functionality: Why Box is Still Better

The bottom line is that Dropbox is late to the cloud hosting for business game. They're doing what they can to catch up, but they're still behind in some important ways.

The biggest issue with Dropbox is the interplay between business and personal accounts on a single machine. Dropbox has announced features that allow users to access and toggle between both kinds of accounts. So, if used properly, security shouldn't be an issue . . . but that's a pretty big if, since to some degree it's up to the user to make sure the right files end up in the right account.

Furthermore, Box offers other business-class features that Dropbox doesn't have. Its administrative controls and reporting features are still far more robust, facilitating audit trails for both users and files. And Box offers more collaboration tools, such as document commenting and task management features.

So, for the time being at least, our recommended solution in most cases is still Box. It's the clear winner in the business game, especially when it comes to business-class security and administrative features. All of this makes Box the safer bet, which is always good when it comes to IT and business.

Feel free to reach out if you'd like to talk about how Box might benefit your business.

Business Pick of the Week: Squarespace

Squarespace

What to Know About Squarespace

Squarespace: A Powerful Tool for Building and Managing a Professional Website

For a long time, we remained skeptical of most "do-it-yourself" website building tools. No more. Squarespace, in particular, has matured to the point where it really is a viable option for creating, managing, and hosting an attractive, professional website for a fraction of the cost it takes to build a website from scratch. We've helped a number of businesses set up websites with this tool, so we feel very comfortable recommending it.

Squarespace is both a web development tool and content management system (CMS). It works by providing users with a wide array of highly customizeable template pages from which they can build, manage, and update a website. It's an incredibly flexible tool that empowers businesses to easily manage and update their web presence while consistently keeping fresh content up--without having to know anything about coding.

Squarespace's feature set is incredibly broad, including:

  • E-commerce capabilities

  • Image galleries

  • Blogs with commenting

  • Audio collections

  • Multiple contributors

  • Built-in SEO

  • Website analytics

  • Importing and exporting

  • Template designs

  • Site control (easy tool to change CSS and layout of website)

  • Built in mobile site

Availability and Pricing

Squarespace offers 3 tiers of pricing. The "Personal" service consts $8 per month, "Professional" is $16, and "Business" is $24. The higher the tier, the more capabilities you have.

Need Help Creating Your Site?

Another great thing about Squarespace is that it allows users to integrate outside design elements as well. So, if you'd like to go beyond the built-in design templates with some customized branding while maintaining the flexibility of Squarespace, we'd love to partner with you. We can also help you build out your site to optimize user experience, and then turn the keys over to you to maintain your content. Feel free to contact us if you'd like to talk about how Squarespace might help your business.

View Full PowerPoint Presentations on Your iOS Device with SlideShark, Our Business Pick of the Week

slideshark.jpg

What to Know About SlideShark

Leverage Your iPhone or iPad to View PowerPoint Presentations

Sure, Apple's Keynote presentation app has enabled folks to create and share presentations with their iPhones and iPads for a while now. But let's face it: a very large portion of business users still use PowerPoint for their presentation needs.

While there are a number of ways for at least viewing the content of PowerPoint presentations on iOS devices, SlideShark goes above and beyond by providing a platform that maintains all of your presentation elements, including animations, links, videos, fonts, etc. It links with cloud storage services like Box and Dropbox to facilitate quick and easy uploading. Plus, it boasts a pretty slick UI, complete with a laser pointer feature, a timer, and great presentation remote features for easily driving an onscreen presentation from your device.

Pricing and Availability

SlideShark is only available on iOS devices. The good news is that the free version of the app likely offers enough functionality to be a no-brainer for most business users. There are, of course, premium versions that offer more features, such as extra storage and administrative capabilities for organizations.

Business Pick of the Week: Use Your Phone to Track Mileage Automatically with TripLog

Triplog GPS Mileage Tracker

What to Know About TripLog

Track and Report Your Mileage with Your Phone

Businesspeople who have to track mileage for work tend to get tired of keeping track of each trip manually with a pen and paper. As a business whose workforce is constantly driving to client locations, we've been there.

Thankfully, TripLog, an easy-to-use smartphone app, now allows us to track mileage automatically. TrippLog regcords mileage by utilizing the GPS functionality of the user's smartphone. You can either start and stop the tracker manually--or plug the phone in to log trips without even touching a button. Once plugged in, the app will automatically begin tracking mileage when your car begins to go over 5 miles per hour, which is handy--provided that you're in the habit of plugging your phone into a car charger.

TrippLog also includes great reporting capabilities. It will automaticaly figure in a reimbursement rate against the miles you drive on the job, allowing you to submit reports to your company via the app. All of this is why 3n1media engineers use TrippLog to easily and efficiently keep track of and submit their mileage.

Pricing and Availability

TripLog follows the "fremium" pircing model. So the app itself, along with it's core features, is free. Extra features, such as greater reporting capabilities, are available as in-app purchases for nominal fees. TripLog is available on iOS and Android devices.

Business Pick of the Week: Windows 8.1 Quick Guide for Business

Lost in Windows 8? This Guide Might Help . . .

Windows 8.1 Quick Guide

We've written before to caution business users thinking about making the jump to Windows 8. The reason for this, of course, is that Windows 8, from a user's perspective, is a complete overhaul of the operating system. Long learning curves are never a good thing in the business world, where efficiency is king.

Still, we know that more and more users will be upgrading to Windows 8 (especially as XP users scurry to upgrade prior to the April 8th end-of-service-date), and that the changes Microsoft made aren't likely to go away.

So, for those of you who wish to upgrade to Windows 8 instead of Windows 7: wouldn't it be nice to have a quick, simple reference guide to navigate the changes? Well, Microsoft has provided one. Their "Windows 8.1 Quick Guide" quickly acquaints you with everything that's new about Windows 8.1. Especially helpful are their simple explanations of the new Start Screen and the new touch and mouse gestures that are essential to finding your way around in Windows 8.

If you're thinking through taking the plunge into Windows 8, we definitely recommend downloading and reading through this guide--preferrably before you make the upgrade, as it's also a good window into how it differs from past iterations of the OS.

And, of course, you can always reach out to us if you'd like advice on whether Windows 8 is right for your busienss environment.

Maintenance and Support Partnerships: A New Way to Partner with 3n1media for a Flat Monthly Fee

3n1media

We've written before about how 3n1media is growing and relentlessly bent on improving the way we serve our clients. In our last newsletter, we introduced you to new staff members. Now, we want to tell you about how our growth has a direction--how the changes we're making mean substantial improvements to the service we provide you. Toward that end, we want to introduce 3n1media's Maintenance and Support Partnership, a new model of service we are now offering clients. Read on to hear how we're living out our mission of "delighting our clients on a daily basis by providing an excellent experience"!

Building Partnerships with Clients: What's New

Hiring new engineers, improving communications, streamlining our workflow--these are all efforts towards creating meaningful partnerships with our clients. In the past, 3n1media more or less worked on a break/fix model of IT support. When you, the client, needed us, you called us, and we resolved your issues or implemented a new solution. This model is fine, as far as it goes, but we believe that we can go farther and do more for our clients. We want to serve as a trusted, full-service partner for our clients. This means that we want to act as members of the client's team, taking on the role of an in-house systems administrator who proactively maintains the health of technology systems and thinks ahead to help the client achieve long-term business goals.

Introducing Maintenance and Support Partnerships

Over the past few months, we have been working through how to make these partnerships a reality. What we've come up with is a model for full-service maintenance and support offered at a flat monthly fee. This means no more hourly charges for work related to maintenance or support for existing systems. It's our take on a managed services agreement, with the added value of 3n1media's high-touch, relationship-based support. We call this our Maintenance and Support Partnership (or MSP for short). Here's a list of benefits of moving forward with an MSP with 3n1media:

  • Fixed-price IT support for sound budgeting

  • 24/7 support for business-critical issues

  • Remote and onsite support

  • Systems monitoring, updating, and proactive maintenance

  • Consulting for improvement projects

If you're interested in taking your partnership with 3n1media to the next level, don't hesitate to contact us. We truly believe that MSPs will provide our clients with the best possible service and the best possible value. We'd love to have a conversation about how this kind of partnership can help you achieve your business goals.

Business App of the Week: Office Remote

Office Remote

Office Remote: Turn Your Windows Smartphone Into A Presentation Remote

How often do you present information in meetings using a Microsoft Office product? For most business users, the answer is likely "very often," despite the recent proliferation of other viable options. If you have a smartphone running Windows Phone 8, Microsoft's Office Remote app allows you to control presentations of Word, Excel, and PowerPoint files from your PC. By connecting to your PC via Bluetooth, Office Remote lets you change PowerPoint slides, scroll through Word documents, and jump around in Excel spreadsheets. Our testing showed that the app actually works quite well, with good responsiveness over bluetooth.

Availability and Pricing

The good news is that Office Remote is free. The bad news is that its availability is limited. Not only is it only available on the Windows Phone 8 platform, but it also only works with Microsoft Office 2013--not with Office 2013 RT or earlier versions of Office. Still, if users have both Office 2013 and a Windows smartphone, this free app is probably a no-brainer.