Windows users are often the victims of ransomware attacks. For example, in 2017, WannaCry and Petya ransomware infected hundreds of thousands of Windows PCs around the world. Unfortunately, ransomware strains that specifically target Macs are expected to grow in number as well. If you have a Mac, follow the security best practices below to avoid getting infected.

What is ransomware?

Ransomware is a type of malicious software that holds computer systems hostage via encryption until a ransom is paid. Attackers typically threaten to release the encrypted information to the public or destroy sensitive data if victims don’t pay within a certain deadline. Healthcare and finance organizations, in particular, are more likely to pay the ransom because these organizations tend to be worth a lot of money and have many valuable assets, and can’t afford to lose access to their critical data.

As its name suggests, Mac ransomware is simply ransomware that targets Mac desktops and laptops. And just like other types of ransomware, it is typically distributed via phishing emails.

Types of Mac ransomware

In 2016, the KeRanger ransomware was distributed through the popular BitTorrent app Transmission. KeRanger was signed with an authorized security certificate, allowing it to evade macOS’s built-in security measures and infect more than 7,000 Mac computers.

Meanwhile, the Mac ransomware strain Patcher was discovered in 2017. It disguised itself as a patching app for programs like Microsoft Office. When launched, Patcher would encrypt files in user directories and ask for a Bitcoin ransom. But the ransomware was poorly built, so there was no way to retrieve the decryption key once the ransom was paid.

In 2019, the EvilQuest ransomware encrypted files and forced victims into paying a Bitcoin ransom. Much like Patcher, however, there was no decryption key, leaving those who paid the ransom with nothing.

Ransomware attacks like these can make a resurgence at any time, which is why you need to be prepared in case of an attack.

An ounce of prevention goes a long way

Preventive measures are the best way to keep your Macs safe from ransomware. This involves installing only programs from the official App Store and the latest software patches to defend against the latest threats.

Since phishing emails are the usual delivery method of ransomware, be wary of suspicious links and email attachments. Always be on alert even if the email appears to come from a legitimate company or someone you know.

You must also maintain offline backups and have a disaster recovery plan to keep your business running in the event that ransomware successfully infiltrates your systems.

Responding to ransomware

If your Mac is infected with ransomware, do not pay the ransom fee, as there’s no guarantee that hackers will provide a decryption key and release your data. Instead, use an up-to-date anti-malware program to remove ransomware from your computer. There are also free ransomware decryption tools online that you can use to remove the infection.

If these tools don’t work, contain the spread of the ransomware by disconnecting from the network. Afterwards, run data recovery procedures and immediately seek the help of our cybersecurity experts. We stay abreast of the latest Mac security threats and know just how to keep your business safe.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

Businesses of any size can fall victim to ransomware. How will you protect your small business from it? And can you afford it?

The Business of Chicago

One Monday morning, 35 workers of a Chicago business board of directors turned on their computers. They were met by a desiccated head popping up and demanding nearly a quarter-million in Bitcoin. Hackers had shut off their internet access. Their databases had been scrambled and rendered unusable.

This NGO had vital infrastructure but no skilled cybersecurity professionals or even a proper data recovery and business continuity strategy, much like thousands of other ransomware victims whose tales never reach the news.

Company management believed that its data and networks were secure until they experienced that dreadful Monday morning return to work. The company also lacked the financial wherewithal to pay the ransom.

Productivity loss is the biggest price tag paid by ransomware victims. In addition, they suffered the time-consuming job of controlling and cleaning up after the assault.

According to Proofpoint and the Ponemon Institute study, a ransom payment generally amounts to less than 20% of the entire cost of a ransomware attack’s interruption.

The staff at the Chicago organization discovered too late that their data recovery methods did not actually back them up. The organization labored over finding paper documents in order to recreate its records from the ground up.

Businesses In a Bind

Many smaller businesses believe they aren’t vulnerable to ransomware. That is very clearly not the case.

According to the National Cyber Security Alliance, small and midsized firms are the target of the bulk of cyberattacks, with up to 60% of them going out of business within six months of the ransomware assault.

Three Simple Steps to Defeat Hackers

Some may reasonably question, if a $44 billion firm like Accenture can fall prey to ransomware, what hope does a smaller company have?

Everyone requires a reaction plan if no one is immune to an assault. Consider the following three essential steps:

1. Provide cyber awareness training to all staff.

PEBCAC stands for “problem exists between computer and chair” in the world of cybersecurity.

Because email phishing is by far the most common threat vector for ransomware, the first line of defense is to teach all employees not to open unfamiliar attachments or clickbait links — “You’ve just won $1 million!” — and to protect their login credentials, preferably with two-factor authentication.

Some employees, believe it or not, still retain passwords on Post-it Notes stuck to their computer displays. Every employee in today’s networked remote workforce is a member of the security apparatus. Employees play an essential role in data protection. However, they must be given the correct knowledge and training.

2. Update all of your applications.

An inventory of operating systems and software is the first step in any threat assessment.

Updates defend a computer network from known security flaws. Additionally, you must properly maintain and configure every firewall and server to stay safe.

Unfortunately, this seemingly simple task of data governance is a big undertaking. It’s made considerably more difficult by the abundance of endpoints. Think smartphones, industrial systems, IoT devices, and all the equipment used by work-from-home staff.

3. Put backups and recovery strategies to the test.

This is the one step that many companies skip. You shouldn’t.

Pick a day, perhaps a Saturday, when everyone “pretends” to be victimized by a hacker. Test the reliability of your backups and the amount of downtime you can expect to endure should you fall victim to ransomware.

How You Can Recover

To recover from an assault, every firm needs dependable backups and, equally essential, a business continuity strategy. Form a cyber incident response team and conduct penetration testing to ensure the safeguarding of vital infrastructure. Be proactive rather than reactive in your cyber response.

No one is immune to assault. These are merely the beginning of your defenses.

Monitor network traffic in real-time. Otherwise, your organization is extremely susceptible. Mechanisms must be in place to detect and respond to intrusions before you suffer damage. Be aware that 100 percent prevention is neither cost-effective nor practical.

Virus Software

Virus software and firewall hardware have come a long way. However, at the end of the day, the greatest defense is a skilled cybersecurity team.

A monitoring and incident response control center will allow speedy data recovery, reducing downtime for both internal and external cyberattacks. Outsourcing a security operations center may help businesses with limited resources reduce their risk.

Consider the cost of business disruption as the first step in making systems more robust. Governments, utilities, and even IT corporations are all vulnerable to assault. Put a solid data security strategy in place. Without one, it’s not a question of if, but rather when hacking will occur.

Make sure your cloud storage is secure.  It’s imperative that you do so ASAP. Without this safeguard, all sorts of malware, such as ransomware, can run riot through your systems.

Are you interested in learning more about cybersecurity? Call us today and discover how our wide array of tech services can safeguard your business.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from smallbusinesstechnology.com SOURCE

We’re all aware of the dangers posed by cybersecurity threats. Without exception, we all want to protect ourselves. Not all of us know how.

There are those who wish to take advantage of any and every vulnerability. However, according to a recent survey of business owners and independent insurance agents in the United States, many businesses are simply not taking the necessary steps to protect themselves and their assets.

This is bad news. It should give all SMB participants nightmares. Because a breach in one company can lead to a domino effect. More companies can fall within a matter of hours.

Some also seem to be attempting to persuade themselves that they are invulnerable, even though they are aware that they should be doing more.

The news has been full of small business technology and security trends this year. Following cybersecurity industry trends, knowing how hackers infiltrate networks, and taking the necessary safeguards to keep them out are important parts of defending your organization.

The following are the top cybersecurity trends to watch in the New Year.

1. Implementation of multi-factor authentication.

Multi-factor authentication is a method in which users must authenticate their identity by using two or more different devices at the same time.

Example: When trying to log into a program, users may input their password on their computer’s browser and then get a code on their cellphone, which they must enter on the computer once more to be successful. It increases the security of logins by certifying that the user is who they claim to be in at least two locations.

Businesses may utilize a variety of third-party programs. To incorporate multi-factor authentication into their systems. If you market to clients who use applications such as Facebook, Robinhood, and Netflix, you may discover that they are already acquainted with the process. This is because prominent apps such as these already employ the method.

While many firms still consider multi-factor authentication to be optional, others are using multi-factor authentication systems as an extra layer of protection against a cyber attack.

2. Increased cyber-threats to remote employees as a result of technological business advancements.

In the opinion of cyber security experts, the transition to remote or hybrid work that has been prompted by COVID-19 has placed workers at greater risk of cybersecurity attacks.

In addition, when individuals bring their personal networks and devices into the workplace, they become more vulnerable to phishing emails and ransomware assaults. Their preparation is lacking. They don’t have the security protections that a company would put in place on its internal systems.

Your workers will benefit from having better security measures installed on their cloud-based apps, home devices, and home networks if you provide them with tools and training.

Find out more about the best practices for cybersecurity training. Consult in-house or get a professional consultant. Don’t rely on your Uncle Fred or some online website!

3. Attacks against cloud-based computing business services.

According to a survey by Northeastern University, cloud-based computing services have grown in popularity in recent years, and businesses are using them more than ever across a growing number of international employees.

They make it simple for workers to access the resources they need to be successful from any location, and they are both accessible and reasonably priced to host and maintain. The downside is that they are a great target for cyber-attacks, as well.

As a precaution, make sure that your cloud-based systems are up to date. You should also run breach and attack simulations to identify any security system flaws.

4. Simulation of a breach and an assault.

When there is illegal tampering with your technological systems, this is referred to as a cybersecurity breach.

Test your system frequently with BAS. These breach and attack simulations (BAS) are crucial. Even for the smallest business. They help you discover the most vulnerable parts of your cyberinfrastructure. Once discovered, they can be quickly strengthened.

Implementing BAS may assist you in identifying and eliminating vulnerabilities in a timely manner.

Learn more about the ramifications of a data breach on your company. Do some simulations at the beginning of the New Year.

5. Managing the use of technology and gadgets.

For the purposes of this definition, the Internet of Things (IoT) is a structure of physical things. These devices contain sensors, automation, and other software technology in order to communicate and exchange data with other devices and systems through the internet.

The term encompasses anything from linked equipment on the factory floor to smart home items and automation technologies. It’s swiftly encircling us and shows no signs of slowing down any time soon.

Begin to incorporate artificial intelligence and smart technology into your organization. Develop an enterprise-wide plan to detect and manage every connected machine.

This is critical to maintaining the security of your network and data. Don’t put off the hard work, because the payoff can be significant.

Are you interested in learning more about cybersecurity? Call us today and discover how our wide array of tech services can safeguard your business.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from smallbusinesstechnology.com SOURCE

Malware creators will target anyone and everyone, including Mac users. So even though Apple computers are less vulnerable than Windows PCs, they are not completely impervious to cyberattacks. Read on to find out the different threats you should protect your Mac against, as well as signs that your computer has been compromised.

What are the threats that can affect your Mac?

There are several forms of malware that hit Apple products, and their effects can range from ones that are merely annoying to downright destructive.

  1. Adware – These are unwanted programs that bombard users with pop-up advertisements. Some malicious adware piggyback spyware like keyloggers and keyboard sniffers onto their deployment protocols, allowing them to record your typing habits and monitor your browsing behavior.
  2. Sniffers – These are usually designed to detect certain words on a web page and in a person’s typing pattern in order to trigger the keylogger. For instance, when you type your password, sniffers can activate the keylogger to copy the information you type and steal your login details.
  3. Trojan horses – These can infect both Macs and PCs, and they are often deployed through fake software installers or unsecured updates. They parade as legitimate software that actually contain a nasty surprise once installed. A notorious Trojan horse for Macs is the MacDownloader, which attempts to steal personal data stored in iCloud Keychain.
  4. Macro viruses – These attack computers by running a code that can take screenshots, format hard drives, corrupt files, deliver more malware, and access webcams and microphones. They are triggered when a user opens an infected macros-enabled file, hence the name.
  5. Ransomware – Macs managed to hold off ransomware for a while, but nowadays, even they can be vulnerable to it. KeRanger was one of the first big ransomware outbreaks in Macs. After remotely encrypting the computer and hibernating for three days, KeRanger would issue a .txt file containing instructions for decryption in return for one bitcoin.

Telltale signs your Mac is infected

Now that you know what kinds of malware your Mac could be affected with, here are some ways to tell if your computer is infected with one:

  1. Pop-up ads – If you’re seeing more pop-ups on your computer than usual, your computer is probably infected. An unusual amount of banner ads and pop-ups may mean that your computer is due for an update and/or a virus scan.
  2. Slowness – Mac users fear one thing above all: the spinning wheel of death. This little rainbow-colored spinning cursor wheel indicates that the computer is having trouble processing at usual speeds. This slowness can often be caused by overwhelming requests from simultaneous processes — likely of dubious origin — running in the background.
  3. Browser issues – Viruses sometimes do weird things to Safari or Google Chrome such as change its homepage or redirect a preset landing page to a site you’ve never seen before. If your browser starts behaving oddly, crashes regularly, or is often unresponsive, your Mac might have a virus.

Computer security is a matter of importance no matter what operating system you use. Reach out to our experts for an assessment of your network today.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

To keep cyberthreats at bay, you need proactive cybersecurity solutions in your arsenal. They identify and contain threats before they wreak havoc on your systems and cause significant productivity and financial losses. Here’s all you need to know about proactive cybersecurity and how to implement it.

What is proactive cybersecurity?

Traditional cybersecurity is reactive — your IT team or managed IT services provider (MSP) will be alerted of a cyberattack after it has happened, leaving them to alleviate the impacts. In contrast, proactive cybersecurity is preventative — it takes into account all potential threats and seeks to identify vulnerabilities so that they can be addressed before they lead to larger, downtime-causing issues.

Many organizations have adopted proactive cybersecurity measures along with reactive ones and are now reaping the benefits, including the ability to stay one step ahead of cyberthreats and improved data compliance.

How to implement proactive cybersecurity

In adopting a proactive approach to cybersecurity in your organization, you must follow these steps:

  1. Understand the threats you’re facing
    Before you can work toward preventing cyberattacks, you must know exactly what you’re up against. Seek the help of your in-house IT staff or MSP in identifying the types of attacks that are most common in your industry.
  2. Reevaluate what it is you’re protecting
    Once you have a list of the biggest threats to your organization, you need to take stock of how each can damage the various components of your network. Map out every company device that connects to the internet, what type of data they have access to (regulated, mission-critical, low-importance, etc.), and what services are currently protecting those devices.
  3. Choose proactive cybersecurity measures to put in place
    Depending on the risks and assets uncovered in steps 1 and 2, your IT team or MSP may recommend any of the following measures:
Proactive measure What it entails
Security awareness seminars for all internal stakeholders Train everyone from the receptionist to the CEO about effective security practices such as password management, proper mobile device usage, and spam awareness.
Updated anti-malware software or cloud-based service Protect your data and systems against the latest and most menacing malware.
Routine software patches and upgrades Minimize the chances of leaving a backdoor to your network open.
Web filtering services Blacklist dangerous and inappropriate sites for anyone on your network.
Perimeter defenses (e.g., intrusion prevention systems and hardware firewalls) Scrutinize everything trying to sneak its way in through the borders of your network.
Policy of least privilege Limit users’ access only to the data they need to fulfill their tasks.
Data segmentation Rank data according to sensitivity and build micro-perimeters around high-value datasets.
Full-disk encryption Make data stored in computers and portable devices unreadable so that if these machines are stolen, the files they have inside remain secure.
Virtual private networks Make data transmitted across unsecured connections unreadable so that intercepting it would become futile.
Strict access controls Prevent unauthorized access to accounts by using strong passwords, multifactor authentication, and auto screen locks and logouts for idle users.
AI-powered network monitoring Identify suspicious user and software behaviors such as employees accessing files outside their departments.

If you’re looking to implement a proactive cybersecurity strategy to protect your business’s critical systems, give our professionals a call today. We’ll assess your needs and recommend the best, most effective solutions to address them.

To learn more about how to safeguard your business, or if you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment.

Published with consideration from TechAdvisory.org SOURCE

Data is everything to a small business in this day and age – which means if you lose access or control of your data, you lose everything.

As dramatic as that might sound, the data backs that up. According to several sources, 93% of companies, no matter how big they are, are out of business within one year if they suffer a major data disaster without having first formulated a strategy for combating it. And since 68% of businesses don’t have any sort of plan for that worst-case scenario, that means losing data would be a death knell for most of the businesses in the country.

Fortunately, your business does not have to be one of them. By taking the following steps, you can ensure that you have a rock-solid disaster recovery plan in place.

Step 1: Know How A Disaster Recovery Plan Is Different From A Business Continuity Plan

The main difference between these two types of plans is that while business continuity plans are proactive, disaster recovery plans are reactive.

More specifically, a business continuity plan is a strategy by which a business ensures that, no matter what disaster befalls it, it can continue to operate and provide products and services to its customers. A disaster recovery plan, on the flip side, is a strategy by which businesses can back up and recover critical data should it get lost or held for ransom.

So, now that we have a clear, concise understanding of what constitutes a disaster recovery plan, we can dive into the steps necessary to create one.

Step 2: Gather Information And Support

In order to get the ball rolling on your disaster recovery plan, start with executive buy-in. This means that everyone, from the CEO to the entry-level employees, needs to be brought in on executing the plan in case your company suffers a data disaster. When everyone is aware of the possibility of a data disaster, it allows for cross-functional collaboration in the creation process – a necessary step if you want to prevent breaches in all parts of your systems.

You need to account for all elements in your tech systems when you’re putting together your disaster recovery plan, including your systems, applications and data. Be sure to account for any issues involving the physical security of your servers as well as physical access to your systems. You’ll need a plan in case those are compromised.

In the end, you’ll need to figure out which processes are absolutely necessary to keep up and running during a worst-case scenario when your capability is limited.

Step 3: Actually Create Your Strategy

When everyone is on board with the disaster recovery plan and they understand their systems’ vulnerabilities, as well as which systems need to stay up and running even in a worst-case scenario, it’s time to actually put together the game plan. In order to do that, you’ll need to have a good grip on your budget, resources, tools and partners.

If you’re a small business, you might want to consider your budget and the timeline for the recovery process. These are good starting points for putting together your plan, and doing so will also give you an idea of what you can tell your customers to expect while you get your business back up to full operating capacity.

Step 4: Test The Plan

Even if you complete the first two steps, you’ll never know that you’re prepared until you actually test out your disaster recovery plan. Running through all the steps with your employees helps them familiarize themselves with the steps they’ll need to take in the event of a real emergency, and it will help you detect any areas of your plan that need improvement. By the time an actual data disaster befalls your business, your systems and employees will easily know how to spring into action.

So, to review, these are the quick actions that you and your employees will need to take in order to make a successful, robust disaster recovery plan:

  • Get executive buy-in for the plan.
  • Research and analyze the different systems in your business to understand how they could be impacted.
  • Prioritize systems that are absolutely necessary to the functioning of your business.
  • Test your disaster recovery plan to evaluate its effectiveness.

Complete these steps, and you can ensure that your business will survive any data disaster that comes your way.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

Hurricanes damage property and put lives at risk. If you’re not prepared, hurricanes can also disrupt your operations and put your business through extended downtime. In this blog, we’ll help you quickly regain access to your data and get your business back to operational mode after a disaster.

Determine recovery hierarchy

Certain parts of your IT system are more mission-critical than others. Ask yourself which systems and/or data must be recovered in minutes, hours, or days so your business can resume operations quickly

For example, you may find that recovering sensitive customer information and eCommerce systems take priority over recovering your email server. Whatever the case may be, prioritizing your systems ensures that the right ones are recovered quickly after a disaster.

Pay attention to location

First and foremost, your backup site should be in a hurricane-free zone. Ideally, your off-site facility should be located at least 100 miles away from your main location. If this isn’t possible, make sure it is built to withstand wind speeds of 160 miles per hour (as fast as Category 5 storms) and is supported by backup generators and uninterruptible power supplies.

You should also request an upper floor installation or, at the very least, keep critical IT equipment 18 inches off the ground to prevent water damage in case of floods.

Use image-based backups

Unlike fragile tape backups, image-based backups take “snapshots” of your systems, creating a copy of the OS, software, and data stored in them. From there, you can easily boot the virtual image on any device, allowing you to back up and restore critical business systems in seconds.

Take advantage of the cloud

The cloud enables you to host applications and store data in high-availability, geo-redundant servers. This means your backups can be accessed via the internet, allowing authorized users to access critical files from any device. Expert technicians will also watch over and secure your backups, allowing you to enjoy the benefits of enterprise-level backup facilities and IT support.

Back up your data frequently

Back up your data as often as possible, especially during disaster season. If your latest backups were created on September 15th and a storm makes landfall in your area on the 28th, you could lose nearly two weeks of data.

Test your disaster recovery (DR) plan

After setting up your backups, check whether they are restoring your files accurately and on time. Your employees should be drilled on the recovery procedures and their responsibilities during and after a disaster. Your DR team should also be trained on how to failover to the backup site before the storm hits. Finally, providers, contractors, and customers need to be notified about how the hurricane will affect your operations.

As cell towers and internet connections may be affected during a hurricane, make sure your company forums are online and have your employees register with the Red Cross Safe and Well website so you can check their statuses.

It’s nearly impossible to experience disruptions during disasters like Harvey or Irma, but with the right support, you can minimize downtime. If you’re concerned about any natural disasters putting you out of business, call us today. We offer comprehensive business continuity services that every company should have.

If you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment

Published with consideration from TechAdvisory.org SOURCE

Some of the most well-known companies in the world, including Sony Pictures, Home Depot, Adobe, and eBay, have been victims of cyberattacks. While major corporations like these are high-profile targets for hackers, small- and medium-sized businesses are not exempt from data breaches. And because it may be difficult or impossible to undo any damage caused by cybercriminals, it’s imperative for any business — regardless of their size — to take steps to fortify their systems. The following security tips can help guard company data.

Use two-factor authentication

Using a complicated password to secure your system is not an effective way to level up your cybersecurity. That’s because having to memorize a difficult password often pushes users to set that same complex password for multiple accounts. And if a hacker gets a hold of a recycled password, there’s a high probability that they could access all your accounts that use that same password.

Two-factor authentication (2FA) adds an extra layer of security to your systems and accounts. 2FA comes in many forms: it can be a biometric verification in the devices that you own or a time-sensitive auto-generated code sent to your mobile phone. This security feature works similarly to how websites would require you to confirm your email address to ensure that you are not a bot.

Encrypt all data

Encryption is an effective obstruction to hackers, since it scrambles and descrambles data every time someone tries to read it. Encryption also causes compatibility issues if the data is not being accessed via a company’s own network systems. While applying encryption can be expensive, it is certainly well worth the money because it protects your data in case it falls into the wrong hands.

Keep systems up to date

Hackers are always upgrading their tools to take advantage of outdated security systems, so companies should keep up to protect their valuable technology resources. Many companies don’t install software updates immediately, and that’s a huge problem. Updates often close existing security loopholes, which is why delayed installation can mean exposing your systems to external attacks. Keep your data safe by installing software updates as soon as they are released.

Back up frequently

Implementing several layers to your security doesn’t ensure that hackers won’t find their way into your systems. This is why you need to back up data frequently, whether it’s on-site, off-site, or by way of cloud backups. In the worst-case scenario where your systems do get infiltrated, you can restore lost data from your backups.

Monitor connectivity

Many businesses have no idea how many of their devices are connected online at a given time, so it’s very hard for them to keep track of which of these should actually be online. Sometimes, a company’s computers and servers are online when they don’t need to be, making these tempting and easy targets for attackers. It’s advisable to configure business servers properly to guarantee that only necessary machines are online and that they’re well-protected at all times.

It’s much more expensive to recover from a data breach than to prevent one. If you’re looking to protect your business IT systems from potential threats, contact us today so we can help.

To learn more about how to safeguard your business, or if you are looking for an expert to help you find the best solutions for your business talk to GCInfotech about a free technology assessment.

Published with consideration from TechAdvisory.org SOURCE