Category: Security

Is Your Data Breached? What To Do

Patrick Jensen - Twin Cities PC Repair — Patrick Jensen (Owner)

Is Your Data Breached? What To Do – 1/27/2023

News of data breaches is all too common. This company apologizes for six million accounts breached. That company acknowledges hackers accessed 35,000 users’ personal identifiable information. But the question that probably matters most: Is your data breached, too?

The company should contact you if your information is in a data leak, but you can’t rely on that. You can also find out if your phone number or email address has been leaked by visiting https://haveibeenpwned.com/.

HaveIBeenPwned has uploaded various breaches and consolidated the information to make searching easy. Enter your address and get a list of breaches that compromised that email. You’ll get a summary paragraph as well as a description of data compromised in each breach.

It is not uplifting reading!

Next, the question is what to do about your breached information.

Steps to Better Security

First, change your passwords for those breached accounts. If you use that same password to access other accounts, change those passwords, as well, even if they are not listed as leaked.

Always avoid reusing passwords. Yes, it can be a hassle to remember many different access credentials, but you risk exposing many accounts if you keep reusing one email address and password combo over and again.

Make using unique passwords for all accounts easier by using a password manager. A manager can store your many passwords in one place and generate strong ones to use. You can often download an app to your mobile device, which gives you the convenience of filling in your credentials when you’re on the go, too.

The next step is to use two-factor authentication (2FA).

Understanding 2FA

This adds a layer of difficulty for hackers trying to access your accounts. Even if they had your username and password, they would need a second way to verify your identity.

Using 2FA requires you to provide one of the following before you can gain access:

something you know (e.g. the answer to a secret question);
something you have (e.g. your smartphone);
something you are (e.g. your fingerprint).

A bad actor would need to have not only your leaked credentials but also your other “something.”

A common approach to FA is an SMS text message or voice-based authentication. You enter your credentials, then the site follows up with a text or phone call providing a separate code you must then enter. This is not the best method, however. Scammers can hack the SIM card associated with your device, and then use your number to make and receive calls and texts.

Software tokens for 2FA are a safer solution. You’ll download and install an application on your phone (e.g. Google Authenticator, Authy or Okta Verify). It can generate a unique verification code that is valid only for 30-60 seconds.

Want to learn more about password management and soft-token 2FA. We’re here to help. Contact us today at (651) 456-8655 or send us a message from our Contact page.

Download an Authenticator app here:

Google Authenticator – https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en_US&gl=US&pli=1

Authy – https://authy.com/download/

Okta – https://tinyurl.com/32cuzmu4

Emsisoft Security For Your Home PC!

Emsisoft Security For Your Home PC! – 1/4/2023

Why settle for a system resource hog?

Now we could sell our clients a typical, heavily commercialized, residential computer security product, but why settle for less? Here at Twin Cities PC Repair, we have tested several computer security products and have arrived to the conclusion that most are riddled with bells and whistles you simply don’t need. What does this mean? It means that the products slam your system performance by heavily utilizing system resources such as memory, CPU and hard drive.

What are we offering?

A simplified, yet powerful, product known as Emsisoft Business Security! Emsisoft’s ideal is a malware-protected world, a place where home and business computer security is engineered to perfection. Emsisoft produces innovative anti-malware solutions that are efficient, powerful, unobtrusive, and minimalistic. Emsisoft’s software effectively detects new threats before your computer is compromised. All of their products do their job perfectly; keeping your digital world safe. Emsisoft Business Security leaves your computer’s power where it belongs: with you.

Let’s Discuss Key Features…

FINDING AND REMOVING MALWARE

Dual-engine virus and malware detection – Emsisoft (A) and Bitdefender (B) engines work together to detect all types of malicious software, including viruses, ransomware,
trojans, bots, keyloggers, spyware and more. Signatures for double-detections are avoided for memory use and speed optimization.

Super fast system scans (1-2 min) – Scan your device quickly and thoroughly using our efficient dual-engine scanner. Scan time varies depending on which scan type you
select.

PUP/Potentially Unwanted Programs detection – Alerts you of potentially unwanted programs (adware, browser toolbars, system optimizers, etc.) that can affect your device’s
performance.

Advanced infection cleaning – Smart operation processes ensure the safety and stability of the computer during system cleaning. Checks 70+ autorun/loading
points including hidden ones used by rootkits and restores default values if they have been overwritten by malware.

There’s More! – Click HERE to download a full feature list in PDF format.

PREVENTING NEW INFECTIONS

Multi-layered real-time protection – We use diverse technologies and multiple layers of security to maximize our solutions’ protection capabilities.

Web Protection – Blocks access to known dangerous websites using a frequently updated block list. Web Protection is host-based and works across all
programs, even if the transferred web data is encrypted.

Anti-phishing – Blocks access to known fraudulent websites that try to steal online banking passwords or identity details.

Browser security – Browser extension/addon for Chrome, Firefox and Edge that blocks access to dangerous websites on a URL level. Uses a privacyconscious design that doesn t track your browsing history or break your SSL encryption chain.

There’s More! – Click HERE to download a full feature list in PDF format.

CENTRALIZED MANAGEMENT

Management Console – Centralized security management has never been easier. As part of our daily client endpoint monitoring duties (Included in your subscription), we monitor the protection status of your devices and we’ll reach out to you immediately if we notice any areas of concern. This also includes system performance monitoring such as, memory performance, hard drive performance and any Windows generated errors. Your security and privacy are of utmost importance! We do not have the ability to monitor your file system or any personal information on your device(s).

Windows & Third-Party Patching – Also, included in your monthly subscription, we review and deploy Windows and third-party software patches to your device(s). We test & review all patches before deployment, ensuring your have a healthy and up-to-date system!

There’s More! – Click HERE to download a full feature list in PDF format.

If you’d like to subscribe, request additional information, or are looking for a free consultation of your PC’s current security status, please call our security professionals at (651) 456-8655 or send us an email by visiting our Contact page! Only $9.99/mo/device. No contract. Cancel anytime.

Additional Emsisoft Related Articles:

Lapsus$ Extortion Gang Hit Microsoft, Targets Cryptocurrency

The Lapsus$ Hacking Group Is Off to a Chaotic Start

Blackbyte ransomware gang claims it hacked San Francisco 49ers

FBI warns BlackByte ransomware is targeting US critical infrastructure

Windows 7 support ends on January 14, 2020

Windows 7 support ends on January 14, 2020 – Microsoft made a commitment to provide 10 years of product support for Windows 7 when it was released on October 22, 2009. When this 10-year period ends, Microsoft will discontinue Windows 7 support so that we can focus our investment on supporting newer technologies and great new experiences. The specific end of support day for Windows 7 will be January 14, 2020. After that, technical assistance and software updates from Windows Update that help protect your PC will no longer be available for the product. Microsoft strongly recommends that you move to Windows 10 sometime before January 2020 to avoid a situation where you need service or support that is no longer available.

What does end of support mean for me?
After January 14, 2020, if your PC is running Windows 7, it will no longer receive security updates. Therefore, it’s important that you upgrade to a modern operating system such as Windows 10, which can provide the latest security updates to help keep you and your data safer. In addition, Microsoft customer service will no longer be available to provide Windows 7 technical support. Related services for Windows 7 will also be discontinued over time. For example, certain games such as Internet Backgammon and Internet Checkers as well as Electronic Program Guide for Windows Media Center are scheduled to be discontinued in January 2020.

What should I do?
For most Windows 7 users, moving to a new device with Windows 10 will be the recommended path forward. Today’s PCs are faster, lightweight yet powerful, and more secure, with an average price that’s considerably less than that of the average PC eight years ago. Our Guide can help you choose a new PC in just a few easy steps.
Want to learn more about Windows 10? Check out our overview page to learn more.

Can I upgrade my existing PC to Windows 10?
To take advantage of the latest hardware capabilities, we recommend moving to a new PC with Windows 10. As an alternative, compatible Windows 7 PCs can be upgraded by purchasing and installing a full version of the software. For more information, see Windows 10 upgrade FAQ.

How can I upgrade to Windows 10 for free?
The Windows 10 free upgrade offer ended on July 29, 2016. To get Windows 10 you will need to either purchase a new device or, if you have a compatible PC, purchase a full version of the software to upgrade your existing device. We recommend that you don’t install Windows 10 on an older device, as some Windows 7 devices are not compatible with Windows 10 or could experience reduced feature availability.

What happens if I continue to use Windows 7?
If you continue to use Windows 7 after support has ended, your PC will still work, but it will become more vulnerable to security risks and viruses. Your PC will continue to start and run, but you will no longer received software updates, including security updates, from Microsoft.

Can Windows 7 still be activated after January 14, 2020?
Windows 7 can still be installed and activated after end of support; however, it will be more vulnerable to security risks and viruses due to the lack of security updates. After January 14, 2020, Microsoft strongly recommends that you use Windows 10 instead of Windows 7.

Will Internet Explorer still be supported on Windows 7?
Support for Internet Explorer on a Windows 7 device will also be discontinued on January 14, 2020. As a component of Windows, Internet Explorer follows the support lifecycle of the Windows operating system it’s installed on. See Lifecycle FAQ – Internet Explorer for more information.

Will Microsoft Security Essentials continue to protect my PC after end of support?
Microsoft Security Essentials (MSE) will continue to receive signature updates after January 14, 2020. However, the MSE platform will no longer be updated. Click here to learn more about learn more about Microsoft Security Essentials.

What if I’m running Windows 7 Enterprise?
If you are using Windows as part of a work environment, we recommend you check first with your IT department or see Windows 10 deployment support to learn more.

What about Windows 7 Embedded?
Windows for embedded devices such as ATMs or gas pumps have lifecycle dates that sometimes differ from versions of Windows that are used on PC devices.

Can I move my existing programs to a new Windows 10 PC?
For the best possible experience, we recommend doing a fresh installation of your programs and apps on your new Windows 10 PC. Microsoft Store has a variety of third-party apps that can be easily downloaded and installed. On your Windows 10 PC, you can open Microsoft Store by selecting the icon on the taskbar or by searching for “Microsoft Store” in the search box on the taskbar.

For any software not currently available in Microsoft Store, we recommend going to that company’s official website and downloading the Windows 10 version from there. In limited circumstances, some older software may not have an updated version that’s compatible with Windows 10.

How will Windows 7 end of support affect my Microsoft Office apps?
Your experience may be different depending on the Office version you’re running. To learn more, see Windows 7 end of support and Office. It’s important to note that Windows 7 itself will no longer receive security updates, leaving your device vulnerable to security threats. As such, if you’re running Microsoft Office on a Windows 7 PC, we recommend you move to a new Windows 10 PC.

Please feel free to download our free eBook: Windows-7-End-of-Life

Now that you’re probably confused about Microsoft’s explanations above, there is no need to worry because you’re in good hands with Twin Cities PC Repair!! We can certainly take this burden off you by offering upgrade options for your current PC or the option to upgrade to a new or refurbished PC which is already Windows 10 certified. Please feel free to call us at (651) 456-8655 or visit our CONTACT page.

Don’t Fall Victim to Webcam Blackmail

Webcam Blackmail Scam-Patrick Jensen — Patrick Jensen (Owner)

Inver Grove Heights Residents – Don’t Fall Victim to Webcam Blackmail. Many users have reported recent scam messages from individuals claiming to have intercepted their username and password. These messages often state they have been watching your screen activity and webcam while you have been unaware.

Typically, attackers threaten to broadcast footage to your contacts, colleagues, or social media channels. Demanding payment in Bitcoin, malicious hackers blackmail their victims to keep confidential information private.

Where Have the Attacks Come From?

In many cases where hackers have claimed to have a victims’ password, this has turned out to be true.

In the last few years alone, many large websites have suffered enormous hacks which have released confidential details on many of their users. LinkedIn, Yahoo, and MySpace all suffered massive and devastating hacks. Some users of these services are still feeling the consequences today.

The details leaked from these sites, and others facing the same issues, are sold online for years after the initial breach. Hackers buy username and password combinations in the hopes of reusing them to access services, steal money, or blackmail their owners.

How to Respond

If you have been contacted by one of these hackers, it is a scary reality that they could have access to your credentials, data, and online services.

The only thing you can do in response to this type of email is to ignore it. This “we recorded you” email is a scam made much more believable because they probably do have one of your real passwords gained from a site hack.

That said, accounts that share the same password should be changed immediately. Security on additional services you use should be updated too.

Self Defense On the Web

When using online services, a unique password for every site is your number one defense. A good password manager makes this practical and straightforward too.

Using a different password for each site you use means that hackers can only gain access to one site at a time. A hack in one place should never compromise your other accounts by revealing the single password you use everywhere.

Often, people think that maintaining many passwords is hard work or even impossible to do. In truth, it’s almost always easier to keep tabs with a password manager than it is to use the system you have in place today.

A high quality and secure password manager such as LastPass, or 1Password, can keep track of all your logins efficiently and securely. They often offer the chance to improve your security by generating random and strong passwords that hackers will have a tougher time cracking.

Password management services offer a host of features that help you log in, remind you to refresh your security, and make your safety a number one priority. After using a manager for just a short time, you can be forgiven for wondering how you managed without it.

Learn more about LastPass here: https://lastpass.com/f?87108671

If you think you might have been hacked already, or want to prevent it from ever happening, give us a call today at (651) 456-8655 to update your security. You may also visit our contact page HERE.

How to Tell if You’ve Gotten Hacked

Patrick Jensen - Owner — Patrick Jensen – Owner

How to Tell if You’ve Gotten Hacked… Being hacked is the single biggest fear of most computer users. Many believe the first sign of strange behavior or errors on their PC is a sign hackers have taken control. But are hackers really inside your machine, stealing your information? Or should we be on the lookout for more subtle signs? What does being hacked really look like?

There is an important distinction to make between being hacked by a person and being infected with a virus or malware. Virus software and malware are automated processes designed to damage your system, steal your data, or both. There are of course ways that we can defeat these processes, but what if we are instead hacked by an individual?

Logins not working

One of the first steps a hacker might take would be to change the computers passwords. By doing so, not only do they ensure future access to the account, they prevent you from accessing the system to stop them. For the hacker, this is a crucial step that keeps them in control. With this in mind, we always want to make sure to keep on top of our own login details and how often we change them.

Security Emails or SMS’s from online services

Many services track which device and location you logged into your account from last. If your account is accessed from a new device or a different country it might trigger an automated email or SMS to ask if this new login is your own.

If you have logged in using a new computer, tablet, or phone; an email that asks “hey, is this you?” need not be cause for alarm. If you haven’t, it may be time to investigate further. This service is an important part of information security. It may be a key first step to identify someone else gaining access to your account.

Bank accounts missing money or strange transactions

Most commonly today, hackers commit crimes to steal money. The end goal for hackers is typically to profit from their crimes by taking money from people online.

It always pays to keep a regular eye on your financial transactions to make sure you know what money is coming and going from your account.

You may see a large sum missing where hackers have attempted to take as much as they can in a single transaction.

Alternatively small, hard to notice transactions may appear. These often account for small purchases where attackers have tested the details they have to make sure they work.

Sudden loss of cellular connectivity

Network interruption is a symptom that few people expect but occurs commonly when hackers attack. Many banks and online services use a security feature known as Two-factor authentication. To do this they send a short code to your phone or app when you log in. Two-factor authentication is ideal in most cases and a great boost to security.

Hackers can try to work around this by calling your mobile service provider to report your phone as lost or stolen. During this call, they will request your phone number be transferred to a new sim card that they control. When your bank sends its regular two-factor authentication code to the number registered, it goes instead to the hacker who may be able to log in. From your perspective phone service will simply stop working.

Keeping vigilant and maintaining security

These are only some of the modern techniques that hackers can try to use to gain access to your accounts. It pays to be extra vigilant and pay close attention to the signs and signals that indicate you may have been hacked.

Check out our partner links for more helpful information:

Hacking Identity Theft: Entry points, tools and prevention (Emsisoft) –
https://blog.emsisoft.com/en/2066/hacking-identity-theft-entry-points-tools-and-prevention/

7 clear-cut signs you’ve been hacked (USA Today) –
https://www.usatoday.com/story/tech/columnist/komando/2018/05/04/has-your-computer-phone-been-hacked-heres-how-tell/559136002/

12 signs you’ve been hacked… And how to fight back (CSO) –
https://www.csoonline.com/article/2457873/data-protection/signs-youve-been-hacked-and-how-to-fight-back.html

If you suspect that you might have been hacked, or would like help to prevent hackers in future, give us a call at (651) 456-8655 or visit our contact page HERE and we’ll improve your security.

Can Private Browsing Protect You Online?

Private browsing important to you? Maintaining your privacy while using the internet has become more challenging over the years. The recent Facebook privacy scandal made that abundantly clear, with users shocked at how much information had been recorded about them. While it’s almost impossible to enjoy the internet and leave zero digital footprints, there are things you can do to hide your online activities – some more effective than others.

1. Get a virtual private network (VPN) VPNs aren’t just for business and downloaders now, they’ve gone mainstream. Once set up, it creates an encrypted connection from your computer to the VPN providers computer. The other computer could be in another city or another country. When you visit a website, it can only see the VPN computer – not yours. You essentially run around the internet pretending to be another computer, in another location. Since your connection is encrypted, even your ISP can’t see what you’re doing online, making your usage anonymous.

The downsides: Because your internet usage has to route through another computer first, your browsing and download speed could be affected. They can be tricky to set up and not all VPNs offer the same privacy levels (the better ones tend to be more expensive). Some websites may even block visits from people using VPNs, so you may end up switching it on/off as required.

2. Go incognito Most browsers have a private browsing mode, each called something different. For example, Google Chrome calls it ‘incognito’, Microsoft calls it ‘InPrivate’. Before you take the name at face value, it’s a good idea to talk about how they define ‘private’. Unlike a VPN where you can dance around the internet anonymously, private browsing simply means it won’t show up in your browser history, or what you entered into forms. This feature is free, so you always have the option to use it, and it’s actually more helpful than you might think. Common uses include price shopping to reset sale timers and access local-only pricing and overriding usage limits on certain sites. Some sites use cookies to control your free trials and private browsing can help you get around that. For example, some news sites limit you to 5 free articles a month unless you pay. Private browsing can extend that trial quite easily!

The downsides: It can’t pre-fill saved passwords and it won’t help you type in the website name even if you’ve been there before.

3. Think about who’s watching While you might be naturally careful when using a public computer have you thought about who’s watching what you do on your work computer? Some workplaces have employee monitoring software that tracks all sorts of data, including taking screenshots of your desktop. It helps them create rules about computer usage but it may also provide them with evidence you’ve been breaking those rules. Stepping out to the internet cafe can be even more risky, as people can install keyloggers that record every keystroke, including your credit card numbers and logins. You’ll never know your activities are being recorded, even if you use private browsing.

The downsides: None. Awareness of the risks and the possibility of being watched ensures you’re more likely to use the internet safely.

While private browsing can help keep your internet usage under wraps, it’s not a magic bullet to cover all possibilities. Many people believe they’re invisible AND invulnerable while private browsing, a mistake they end up paying for. You’ll still need solid anti-virus and password habits to protect against threat, and to be a smart internet user who avoids suspect websites. Consider the options above as privacy-enhancing measures, not one-stop solutions.

Looking for a VPN? Our recommendation is Nord VPN. For more information, visit: https://nordvpn.com/

Need help with your online privacy? Give us a call at (651) 456-8655 or visit our CONTACT page.

fake suspicious activity found alert scams

Microsoft Tech Support Scams – What you should know…

These scammers want access to your computer and they’ll do anything to get it!

Chances are, you’ve probably received a random phone call from one of these demanding scammers. Either they’ll call you randomly or you will stumble upon one of their realistic pop-up warnings notifying you that your computer has been infected or hacked and to call Microsoft Technical Support immediately. The problem is, the number they provide is not Microsoft’s. Once you’re on the phone with the scammer, he or she will likely be of East Indian descent. They will direct you to a website to gain remote access to your PC and once they are in, they will run a bunch of bogus tests likely through a DOS prompt to try and get you to believe that your IP/Ports are being accessed by a hacker. This is completely bogus information! These scammers are expertly trained in deploying scare tactics to try to scam you out of your hard-earned money. And they don’t take “No” for an answer. These clowns have even been known to swear at you over the phone before hanging up on you. I, as owner of Twin Cities PC Repair, even received a call from one of these scammers. Now, being that I’m well educated on cyber scams, I decided to play their game for awhile… After wasting 45 minutes of their time listening to the spiel and playing along with it, when they asked me for my credit card so that they may install their software to clean my PC, I told them that I am a IT business owner!! I won’t even repeat what they said to me (LOL) because of its profanity.

What should you do?

The best thing to do if you receive a call out of the blue from one of the Microsoft Support Scammers would be to hang up on them. Chances are they might call you back, and if they do, you can simply call them out on their scam and let them know that you are calling your state and local authorities.

If you happen to stumble upon a website with their realistic and scary looking pop-up, you can do one of four things:
1.) If you can get to the (X) at the top right corner of your browser, simply close out of all browser windows.
2.) If you can’t close your browser windows, you can try rebooting your PC through the start menu.
3.) If you can’t click on your start menu, you can try clicking Ctrl+Alt+Del, click on Task Manager, click on the browser listed and click the End Task at the lower right corner of the dialog box. This will force close your browser.
4.) If none of the above work for you, simply hold the power button down on your PC for 10 seconds. This will force a hard shutdown of your PC. Boot your PC back up and you should be good to go.

As with any pop-up page on the web, there is always a chance that the website might be infected with malware. Always make sure to run a virus/malware scan afterwards with a reputable virus/malware scanner (Preferably on you subscribe to). If you are in need of a reliable antivirus software, please visit our security services page HERE.

Will it ever end?!?

According to Microsoft, from approximately November 2013 through 2016, Client Care Experts victimized over 40,000 people and defrauded these individuals out of more than $25,000,000!! So, what’s being done about these frauds? The FTC is on it! They recently teamed up with the State of Alabama and settled with a handful of technical support companies who were using their scams to impersonate major tech companies such as Apple and Microsoft. A few suspect companies include:

Airoways, LLC.
Crazy Bee Man of Palm Beach, Inc.
TrothSolutions, LLC.
TrothSolutions, Inc.
QuickKonto, LLC.
eDoorways International Corp
Escue Energy, Inc.
Check out the full list here: https://www.ftc.gov/news-events/press-releases/2017/10/ftc-obtains-settlements-operators-tech-support-scams

We certainly don’t anticipate these scams ending anytime soon, in fact, they’re growing by the day and they’re finding new and innovative ways to try to con you into believing your personal information is in danger. The best thing to do is to educate yourself on trending scams. Twin Cities PC Repair is constantly investigating a multitude of current scams, so feel free to call us at (651) 456-8655 or send us a message through our contact form HERE if you have any suspicions. We are more than happy to help you! Also, make sure to subscribe to our mailing list below for important news and updates.

To report tech support scams, visit here: http://www.microsoft.com/reportascam

More helpful information can be found here:

https://blogs.microsoft.com/on-the-issues/2017/05/18/fight-tech-support-scams/

https://www.ftc.gov/news-events/press-releases/2017/05/ftc-federal-state-international-partners-announce-major-crackdown

Please keep in mind, if you have fallen victim to one of these tech support scams, Twin Cities PC Repair is unable to assist in the recovery of any funds taken from your bank account by the scammer. Please contact your bank or credit card issuer immediately.

New ‘KRACK’ Wi-Fi Security Issue: This Affects All of Us

The invention of Wi-Fi has been a science fiction dream come true. We can use our laptops anywhere in the house, our phones are using home internet instead of sucking down our cellular data, and our gadgets are all communicating. It’s essentially the backbone of the smart tech boom for home and business alike. Most networks are password-protected with an encryption called “WPA2” and this has been safe and secure, until now. Welcome to KRACK…

Recently, a security flaw called KRACK was discovered that allows hackers to break into Wi-Fi networks – even the secured ones. Your laptop, mobile phone, gaming console and even your smart fridge are possibly vulnerable as a result.

How KRACK works:

The Key Reinstallation AttaCK isn’t a problem with your device or how it was set up. It’s a problem with the Wi-Fi technology itself. The attack gets between your device and the access point (eg router) to reset the encryption key so hackers can view all network traffic in plain text. Since we rely on Wi-Fi so much, this might mean hackers have a front row seat to your credit card numbers, passwords, chat messages, emails, photos and more.

NOTE: The hacker must be in physical range of your Wi-fi to exploit this flaw, it doesn’t work remotely like other attacks we’ve seen recently. Given most Wi-Fi ranges extend well past your own home/business, this is small comfort, but important to know.

How to protect yourself

Run your updates: Software updates are being released which fix the flaw. Microsoft has already released one for Windows, Apple has one coming in a few weeks. Take a few minutes to make sure you’re up to date with all your patches on any device that uses Wi-Fi (your smartphones, laptops, tablets, PCs, game consoles, etc). Unfortunately, some devices may be slow to get an update, or if they’re older, may not get an update to fix this issue at all. If possible, consider using a cabled connection on those older devices or upgrade to one with support.

Be very careful with public Wi-Fi: While your local business center, library or school campus has expert IT professionals keeping guard over your security, it’s a very different matter at your local coffee shop. It’s unlikely small locations such as this will be on top of security patches. Remember, a hacker exploiting this flaw only needs to be in the same Wi-Fi area as you, so be careful you don’t give them a dollop of private information with their coffee.

Check your browser security: Before sending anything secure over the internet, check you’re using a HTTPS site. You’ll know these by the little padlock you see next to the URL, and the address specifically begins with HTTPS. Major sites like Facebook, Gmail and financial institutions already use HTTPS.

Please visit our partner HERE for more information on the KRACK security vulnerability.

If you need help updating your devices, or want us to check if you’re safe, give us a call at (651) 456-8655 or visit our contact page HERE.

October 2017 Newsletter

Why Do People Create Viruses?

people-create-computer-viruses-email

You’d be right in thinking it’s hard to program a computer virus that can spread across the world in a flash – we’re talking days of constant desk-jockey nerd-work. So why do they bother? Well, it generally comes down to 3 reasons: Money, showing off their skill, or to simply being a jerk. While showing off or being a jerk is pretty self-explanatory, the money side is fascinating.

Here’s how people are making money with computer viruses:

Bank account theft: Virus creators are more than happy to help themselves to your bank details, sneaking in to grab your login details or credit card info. They can either transfer your funds away or use your credit card details to go on a shopping spree. Sometimes they’ll leave the fun to another person though, and simply sell your details to the highest bidder.

Ransomware: Rather than a financial snatch and grab, sometimes a virus will encrypt your files and demand money for the unlock code. Without a true backup plan in place beforehand, you’re at their mercy. You’ll be given very helpful information on how to pay, plus a firm deadline before your files are destroyed permanently.

Ad swappers: A cheeky technique, this is when they create a virus that either puts annoying ads on websites you visit, or places affiliate codes on pages so that when you buy something legitimately – eg, from Amazon – they get a percentage as a ‘referral fee’. Their kickback doesn’t make your purchase cost more and you may not even know you’re supporting their activities.

Bitcoin mining: You might have heard of digital currencies being used for payment, but did you know you can also earn them with your computer processing power? Unfortunately, ‘renting’ out your computer’s processing power means paying more in running costs than you’d make – unless you were very clever and sneaky, and used a virus to rent out other people’s computers.

Botnets: Certain infected computers can be remotely controlled to do whatever the virus creator wants. In this case, they’ll usually set the infected bot computers to overwhelm a target web server, like an e-commerce store. Sometimes it’s done as revenge, but more often it’s blackmail. The ‘Botmaster’ says “pay me thousands of dollars or I’ll crash your site during the biggest shopping day of the year.”

Account stealing: Subscription accounts like Netflix and Hulu are often hijacked, leaving you to pay the bill for someone else’s entertainment. But sometimes, virus creators go one step further with online gaming accounts. All those digital items that you fought so hard for (special clothing, weapons etc.) can carry real world value and be stolen from your account and sold on a black market. Yes, that’s cheating!

Give us a call at (651) 456-8655 to make sure your computer is secure and protected.

——————————–
——————————–

Should I Upgrade or Buy a New Computer?

upgrade pc Well, it depends – mostly on who you’re asking! A department store salesman will always recommend a new one, but when you get down to the nitty gritty with a trained technician, you’ll often discover you have more (and cheaper) options than you thought.

Start by taking stock of what you’ve got. Sometimes an upgrade simply isn’t worth the trouble and it’s painfully obvious. For example, if your car is 30 years old, demands a constant supply of special fuel and you can see the road whizzing by thanks to the ‘custom’ holes in the floor…it’s time to replace the rust-bucket! However, if your car is decently modern and in reasonably good condition but happens to stall at stop signs, a few quick fixes can be just what the mechanic ordered.

If your computer does need to be replaced, chances are you already know this. But if you’re not sure and some days it could go either way, this will help. We’ve put together a walkthrough of the most common upgrades and the impact they’ll have:

Video card upgrade: It might not be your computer that’s getting old. Instead, games are getting more and more demanding. The days of stick-figure animations are gone and lifelike 3D is the new normal. With that improved experience comes a huge strain on your computer’s resources. If you have a gamer in the house, you can often super-power your computer with a single component – a new video card. For hardcore gamers, it’s actually a necessity, as some new games refuse to install if the video requirements aren’t met. Love smooth animations and responsive gameplay? We know all the best games out now (and in the works) and can match you with the right video card.

Hard drive upgrade: New hard drives are a popular option, both in size and speed. Running out of space is less of a problem now, but speed is a major concern. You’ve no doubt sat there twiddling your thumbs and urging a file to hurry up and copy. Many upgrades are to an SSD (Solid State Drive) that has zero moving parts and can find/transfer data in a flash. They even make booting up lightning fast! And you’ll have the choice of keeping your old drive for general storage, complete with all your existing data.

Memory/RAM upgrade: Some cheaper computers are underpowered from day 1. In truth, most of the ones in the department store could use at least an extra 4GB of oomph! Sometimes though, even a great computer falls behind as new applications come out and need more resources. Adding extra memory can revive your existing computer and set it up for a couple more years of happiness.

Where to draw the line: There are other upgrades such as the CPU, which is basically the brains of the computer; and the motherboard that all the parts plug into…but once you’re in that territory, it really is time to go for a full replacement. You’ll save money by getting a computer that meets your needs and can grow with you.

Is your computer letting you down? Give us a call at (651) 456-8655 to help you with upgrading or selecting a new computer

——————————–
——————————–

URGENT ALERT: 143 million Customers Exposed in Financial Data Breach

equifax-data-breach Credit reporting company Equifax has just revealed that its databases were hacked in a large-scale breach affecting millions across the US, UK & Canada. While no hacking event is ever good news, some are easier to ignore than others – this isn’t one of them. The sensitive nature of the exposed data now requires immediate action for all those even possibly affected.

The short version: Equifax is one of the three main organizations in the US that manages & calculates credit scores. To do that effectively, they have access to almost every piece of financial data for adults in the country, plus pretty much anyone who’s lived/worked in the US. We’re talking social security, tax file numbers, drivers’ license, credit card numbers…the big stuff. On July 29, Equifax disclosed the breach, stating that hackers had repeatedly gotten in through a vulnerability in the web application from mid-May to July of this year.

If you’re an Equifax customer: As scary as all that sounds, what’s done is done. Equifax, cyber-security experts & law enforcement officials are on the case, working to minimize the long-term damage.

The best action now is to protect yourself against fallout:

Go to: http://www.equifaxsecurity2017.com to see if your data may have been affected. There was some news that this site was delivering random results, but Equifax announced it has been corrected. At this stage, it’s safest to assume everyone with a credit history has been impacted, so unless that link gives a definite ‘no you’re safe’ response, continue with the following recommendations.
Claim the Equifax free year of credit monitoring & identity theft insurance (if you’re a US resident). If you’re not eligible, consider sourcing your own. As the hacked data will continue to circulate for some time, also consider extending your credit monitoring for a few more years.
Keep a close eye on your finances and accounts. Check for notifications of new credit applications, monitor your statements and bills, and immediately report any suspicious activity or sudden change in billing.
Change all your passwords to be strong, unique and long. Any of the stolen data may give hackers a free pass into the rest of your bank accounts, email and personal information.
Add two-factor authentication where possible. This is when an account demands a second layer of authentication before allowing access or changes – getting the password correct isn’t enough, the hacker would also need to get the special code sent by SMS.
Consider freezing your credit report. This makes it harder for identity thieves to open accounts under your name, as access is completely restricted until you choose to un-freeze.

Need help with your passwords? Give us a call at (651) 456-8655 or email us HERE

If you’re using a free antivirus program, you might want to read this…

Has the antivirus industry gone mad?

In Security Knowledge by Mariska on January 17, 2015 | Italiano, Français, English, Deutsch

We have seen a concerning trend that is about to spiral out of control: Potentially Unwanted Programs (PUPs) are further on the rise. What’s even more concerning is how they are spreading. After big vendors as Oracle (Java) and Microsoft (Bing and Skype) started bundling, now antivirus vendors have joined the game. We did research on some of the most popular PUP practices among the freeware antivirus vendors, and the results are quite disturbing.

PUPs want to get on your computer to make money off of you

First, lets quickly recap what PUPs are and why they’re spreading like wildfire. PUPs are programs in the form of toolbars, adware, plugins or other downloads that sneak onto your computer. PUPs are not classified as malware (yet?), since they’re not always harmful but pretty much always annoying, hence the name “potentially” unwanted. But, PUPs are getting more and more unwanted than ever: just the fact that you don’t know what you’re installing is undesired. If you notice a sudden change in your computer’s speed, notice your search engine changed, experience annoying pop-up ads, notice new toolbars in your browser menu bar or any other sudden change in your computer’s behavior or layout, chances are high that your computer has one or more PUPs installed.

pup-toolbars

PUPs come in many shapes and forms, but they all have a few things in common:

PUPs want to make money off of you. PUPs want to be on your computer for a reason, to make money off of you. The most common form is by hijacking your browser: they can then show you ads, monetize or sell your search and/or browser behavior or redirect your homepage.
PUPs use aggressive distribution methods to get on your computer: we specifically used the word “sneak” onto your computer, because in the large majority of the cases, the user is not aware that he/she is installing a PUP.
Most PUPs don’t have any significant value or advantages, so PUP producers have to get around this by paying other software vendors or distributors such as download portals $$$ per new installation that they get them.
PUPs are often brought to you by freeware vendors: they frequently get on your computer bundled with a freeware program. While you’re installing program A, you also install one or more PUPs, often without knowing you did. The freeware vendor gets money from the PUP producer to do this, up to $2 per install.

Danger! Do not try this at home: download the top 10 apps on Download.com

PUPs are not new. But its a very alarming trend that more and more large freeware vendors and distributors, such as download portals, are distributing PUPs in high volume – all in exchange for quick cash. Even Sourceforge, a hosting platform for open source projects, started to add PUPs to their downloads, without the consent of the developers who run their projects there. Tech website HowtoGeek recently showed what happens when you download the top 10 listed apps at Download.com ranked by download volume:

“We installed the top 10 apps from Download.com, and you’ll never believe what happened! Well… I guess maybe you might have a good guess. Awful things. Awful things are what happens. We’ve been railing against freeware download recommendations for years, so we thought, why not have some fun and see what really happens if you download software like a regular clueless user might?”

The result of this test: ALL the top 10 apps on Download.com come with bundles or PUPs, some loaded with them. HowtoGeek even recommends users to not do this at home on your primary PC, unless you want to make your computer a “smoking pile of useless.”

Antivirus programs have joined this nasty game too

Now, here is the top 10 Download.com list that HowtoGeek used for their test:

Does anything stand out to you on this list? There are two antivirus programs on there! Ethics in the software industry seem to be lost completely when even antivirus vendors bundle PUPs with their software. Now look at the download amounts in the above screenshot: up to one million downloads a week. Add to that downloads from other sources, and the fact that PUP producers are willing to pay anything from a few pennies to USD$2 per install, and it can give a rough idea how much money there is involved in this business: thousands if not millions of $$$. We learned that before as well when Emsisoft got approached for a similar PUP bundle deal.

Fact: 7 out of 8 tested free antivirus suites bundle with PUPs

We decided to further look into this and test other free, full antivirus suites. For reference, we downloaded the products in the test directly from the source (vendor website) and not from a download portal. The results are pretty shocking:

All tested free Antivirus programs come with toolbars or PUPs of some sort – except Bitdefender Free. A lot of them have a “rebranded” Ask toolbar that generates considerable pay per install (PPI) revenues while they’re labeled as part of the vendors own security solution. Some disclose they use Ask (for example Avira), others like AVG go as far as adding pops with coupon deals.

Antivirus programs are supposed to protect your computer from viruses, yet many of them give you a questionable program during installation, without clear disclosure. Below is the list of 8 free antivirus programs and the type of PUPs they give you during installation at the time of posting. Please note that we only included full antivirus suites, not scanner-only products.

Bitdefender Free: as mentioned before, Bitdefender Free is one of the only clean antivirus vendors that does not come with any PUPs.

Comodo AV Free: changes home page and search engine provider to Yahoo during the installation process, unless the user unchecks the box.

Avast Free: offers Dropbox during installation by default, unless you uncheck the box. No toolbars are installed.

Panda AV free: installs Panda Security toolbar, yahoo search takeover and MyStart (powered by Yahoo) home page takeover. No product rebrands, at least the installer is clear that both are Yahoo products.

AdAware free: installs WebCompanion by default unless user unchecks the box. Also installs Bing Homepage takeover and Bing search takeover by default, unless opted out. Discloses that AdAware offers these programs to keep the software free.

Avira free: offers Dropbox after installation. Takes over search with Avira Safe Search, which is a a white-labeled version of the Ask toolbar. Avira does disclose that it partners with Ask, and states that it “chose Ask.com to be our partner in bringing you the SearchFree Toolbar because Ask.com is one of many vendors whose products offer functionality which we believe our users will value”.

ZoneAlarm free AV + Firewall: with Custom Install: Zonealarm homepage and search takeover.This is a rebranded Ask toolbar, which is not mentioned on ZoneAlarm’s website.

AVG free: installs Web Tuneup, including AVG SafeGuard. Sets AVG Secure Search as homepage, new tab page and defaults search engine. Toolbar is Ask powered, although this is not explicitly stated. Also offers AVG Rewards, which displays popup advertisements with coupons and deals.

Popular ways for free Antivirus programs to make money with PUPs

Looking at the above screenshots, we can see that the antivirus vendors have a few popular methods to make money with PUPs:

Search Engine Takeover: you now set your default search engine to the software vendor’s choice, there’s big money to make there. Just look at this company called Google.
Ask Toolbar: do a quick search on Google for the Ask toolbar, and you’ll learn quickly why the first results page is full of “How to remove the Ask toolbar” and “How to get rid of the Ask toolbar”.
Rebranded Ask Toolbar: even worse than the Ask toolbar, the rebranded version is a white-labeled Ask toolbar where the software vendor gives it a different name and look, while it’s just the Ask toolbar in disguise.
Homepage take-over or new tab: “free” guaranteed traffic to a website anyone?
Your data, search and browser behavior: it is not known what antivirus vendors do with your data. It is known that they are watching you and track you. Do you trust whether they do anything with this data? Tracking and selling browser data and other personal information has been a big business for years in the internet industry, so who knows.

What’s disturbing about all the methods these antivirus vendors use is that in the majority of the cases, the PUPs are included in the default intallation, unless a user opts out or reads the small fine print. Sometimes the PUP install is not disclosed at all, or hidden. It’s rarely explained what the installed PUP actually does, if anything. Questionable tactics to get onto computers of unknowing users.

When the product is free the real product is YOU

As HowtoGeek states as well, it doesn’t matter what download site you use. The people that make the freeware are the ones bundling. Some download sites bundle on top of that but it’s not the root of the issue. They’re a player in the game. As HowtoGeek states it in their article:

“There are also no safe freeware download sites… because as you can clearly see in the screenshots in this article, it isn’t just CNET Downloads that is doing the bundling… it’s EVERYBODY. The freeware authors are bundling crapware, and then lousy download sources are bundling even more on top of it. It’s a cavalcade of crapware. Each time we ran through this experiment over the last few months, different software would end up being bundled in a rotation, but every single software that bundles itself ends up bundling the same culprits: browser hijackers that redirect your search engine, home page, and put extra ads everywhere. Because when the product is free the real product is YOU.”

Do freeware users “enable” the PUP business?

Let’s clearly point out that not all freeware is bad and relies on PUPs, but the good ones have unfortunately become an exception to the rule. The few examples of good freeware are:

Trimmed down versions of full products. where the free version gives an idea of the product and provides basic functionality while the vendor tries to sell a higher edition of the same software.
The open source community. where people create software for fun or to help make the world a better place. Although this is a tricky one: sometimes others use open source projects to add PUPs by fake imitations.
Projects that live off donations, although these have become rare.

The rest of the freeware vendors need to resort to software bundles to make money. Are people enabling the growth and distribution of PUPs by continuing to download this freeware? In a way yes, but you can’t blame them really. Most of them just think a free piece of software sounds like a sweet deal, but have no clue what it may come with. At most you can blame them for the fact for not looking into why a piece of software is offered at no cost.

PUP producers know that what they do is misleading, freeware vendors know PUPs are highly questionable and antivirus vendors for sure know that it’s unethical. Therefore, all these players will go great lengths to hide the fact that they are bundling PUPs. They will make sure that they fulfill the legal requirements sharp, but use any possible way to increase the spread of those unwanted programs. The fact that vendors are willing to put their ethics aside and their reputation at risk for quick cash, says a lot. PUP distributors are taking advantage of the average “unknowing” computer user.

Conclusion: be careful with freeware, paid software usually doesn’t come with PUPs or bundles

The amount of PUPs will spread further and they will become nastier and sneakier in form if people don’t take action. The only way to make a change is collectively. Even if you are a PUP-free antivirus user, you are affected by the rapid growth of PUPs. You will hear about them more, see them blocked more, see more and more signatures updated to your antivirus program to detect all the different types of them. For example, Emsisoft’s malware analysis team now spends half of their overall analysis time on PUPs, while we could spend this time towards other resources and other types of malware to protect you from other internet threats. At least, users need to demand full disclosure so that they are given a chance to make a conscious choice whether they want to download a piece of software or not, and so that they know what they are downloading. Bottom line is, be careful with freeware, paid software usually doesn’t come with any PUPs or software bundles.

Did you ever find PUPs on your computer? Are you surprised by these PUP practices and the fact that freeware and antivirus vendors participate? Share your opinion and leave a comment below.

If you’re looking for assistance with which Antivirus to use, please call us at (651) 456-8655 or CLICK HERE to fill out our short help form.

Have a great (PUP-free) day!

Category: Security

Emsisoft Security For Your Home PC!

Why settle for a system resource hog?

What are we offering?

Let’s Discuss Key Features…

FINDING AND REMOVING MALWARE

PREVENTING NEW INFECTIONS

CENTRALIZED MANAGEMENT

Additional Emsisoft Related Articles:

Microsoft Tech Support Scams – What you should know…

These scammers want access to your computer and they’ll do anything to get it!

What should you do?

Will it ever end?!?

New ‘KRACK’ Wi-Fi Security Issue: This Affects All of Us

How KRACK works:

If you’re using a free antivirus program, you might want to read this…

Has the antivirus industry gone mad?

PUPs want to get on your computer to make money off of you

Danger! Do not try this at home: download the top 10 apps on Download.com

Antivirus programs have joined this nasty game too

Fact: 7 out of 8 tested free antivirus suites bundle with PUPs

Popular ways for free Antivirus programs to make money with PUPs

When the product is free the real product is YOU

Do freeware users “enable” the PUP business?

Conclusion: be careful with freeware, paid software usually doesn’t come with PUPs or bundles

Recent Posts

Recent Comments

Archives

Categories

Meta

Categories

Category: Security

Steps to Better Security

Understanding 2FA

Why settle for a system resource hog?

What are we offering?

Let’s Discuss Key Features…

FINDING AND REMOVING MALWARE

PREVENTING NEW INFECTIONS

CENTRALIZED MANAGEMENT

Additional Emsisoft Related Articles:

Logins not working

Security Emails or SMS’s from online services

Bank accounts missing money or strange transactions

Sudden loss of cellular connectivity

Keeping vigilant and maintaining security

These scammers want access to your computer and they’ll do anything to get it!

What should you do?

Will it ever end?!?

Subscribe to our mailing list

How KRACK works:

Why Do People Create Viruses?

Should I Upgrade or Buy a New Computer?

URGENT ALERT: 143 million Customers Exposed in Financial Data Breach

Has the antivirus industry gone mad?

PUPs want to get on your computer to make money off of you

Danger! Do not try this at home: download the top 10 apps on Download.com

Antivirus programs have joined this nasty game too

Fact: 7 out of 8 tested free antivirus suites bundle with PUPs

Popular ways for free Antivirus programs to make money with PUPs

When the product is free the real product is YOU

Do freeware users “enable” the PUP business?

Conclusion: be careful with freeware, paid software usually doesn’t come with PUPs or bundles

Recent Posts

Recent Comments

Archives

Categories

Meta

Categories

Popular tags

Newsletter signup

Book an Engineer