Windows Update; Should I stay or should I Go.

Windows 10 Update 2004:  when to update.

Tuesday of this past week, 06/09/2020 was the second Tuesday of the month aka in the Microsoft realm as Patch Tuesday.  This update included patches for 129 vulnerabilities.  It was the largest Patch Tuesday ever.

Should you update?  As of June 9th, none of the bugs had been exploited in the "wild", only in lab testing.  However, malware writers are known to dissect Microsoft's monthly updates to select, find and exploit vulnerabilities that are most useful and profitable for them.

So yes it is a good idea to update your machines to keep them safe from the bad guys...  see link below for details about this update.

https://www.zdnet.com/article/microsoft-june-2020-patch-tuesday-fixes-129-vulnerabilities/?ftag=TRE-03-10aaa6b&bhid=27630927001468733386426006914379&mid=12873514&cid=1862926557

So, should you update to Windows 10 2004?

The latest version available is Windows 10 2004.  It has been delayed for 6 months due to extensive testing by Microsoft to attempt to avoid issues caused by the update.  In the Microsoft Universe, there are millions of combinations/permutations of hardware and software.  That's due to the ubiquitous installed base of Windows computers.

Also, manufacturers are always bringing new devices to the table and in many cases refuse to continue to write drivers or provide support for older devices.

After awhile even Microsoft can no longer support 10 year old processors and computers.  This is true in the Apple World as well.  I can't upgrade my old MAC to the latest version of Mac OS.  They stopped supporting it in 2014 with the Yosemite release, 10.10.

Thus far with Windows 10 Ver. 2004 there have been issues resulting in printer bugs, that stopped all print jobs on some printers.  

https://www.zdnet.com/article/windows-10-out-of-band-update-printer-bugs-fixed-as-microsoft-moves-more-of-you-to-2004/

The out-of-band update should fix Ricoh, Canon, Panasonic, and Brother printers that Windows 10 admins reported stopped working after installing the security update. 

I have read about USB ports disappearing and reappearing, BlueTooth devices not working and now there seems to be issues with Chrome and Edge browsers.

https://www.zdnet.com/article/windows-10-2004-issues-now-browser-bugs-hit-edge-startup-launches-chrome-sign-outs/

In conclusion, I would recommend delaying the upgrade to Windows Ver. 2004 until next month's Patch Tuesday, July 14th, 2020.

You can delay updates for up to 35 days by going to Settings, (left click Start Button, and click on Gear Icon), Updates and Security, 

then select Advanced Options and look for Pause Updates

In the meanwhile stay tune to this blog and I will keep you updated as to when it is safe to go back in the water.

This is my current situation;

How to determine your Windows version

When Microsoft introduces a major feature release they use the last 2 digits of the year and 2 digits of the month to define the version, so version 1803 was March 2018 and the latest is April 2020.  This is known as the Version Number.  There is also the Build Number that more precisely defines updates and hotfixes that have been applied since you last upgraded the the latest Version.

You can find this information by using the WINVER command;

• To open Run Command in Windows 10 use the shortcut key Win key+R
• Type the keyword “ winver ” and click OK.
• a Window with your Info will open.

Below is a link to a good article about Window versions and builds.

https://www.anoopcnair.com/windows-10-build-numbers-version-numbers/#Windows_10_2004

DForce Intel based Workstations

If you are running old equipment or an out of date OS, operating system, you could be putting your business and information at risk.  

Starting with the Intel 8th generation of processors, performance took a quantum leap forward, Core i3 processor cores increased from 2 to 4, Core i5 from 4 to 6 single thread cores and the Core i7 6 hyper threading cores.  In addition, SSDs are included in all DForce workstations.  Intel launched 9th generation Coffee Lake Refresh CPUs with up to eight cores.

Get up to speed today and safeguard your business and information.

Working from Home (WFH) - Remote Options to help you and your Business survive the Corona Crisis

I previously sent out an email to my client list with options for accessing their work computers remotely.  RemotePC still has a limited time offer of $6.95 for 10 computers for the first year available.  After deploying and using it for the past 2 weeks, I must say it works well and who can beat that price.

What about conducting business that requires face to face meetings?  Yesterday I set up a client with webcam and we deployed Zoom.  I had used Zoom in the past to attend online meetings schedule by Vendors and Microsoft training but had never used it to schedule a meeting.  I must say it is fairly easy to use.  You can either start a face to face meeting or schedule future meetings.  The best part of signing up for an account with Zoom is its Basic Plan is free.  There are limitations but you can conduct unlimited 1 to 1 meetings.

Here is a link to all Zoom plans.

https://zoom.us/pricing

A microphone and camera are necessary if you wish to have video along with voice-enabled meetings.  You can mute the audio and turn off the video if you wish.  Almost all notebook and portables have this capability built-in.  If you wish to use your desktop good luck finding a webcam.  Most webcams have a microphone built-in, however, due to the rush to work remotely, almost all stores are completely sold out.

Don't despair, I have links below that tell you how to use your iPhone or Android phone as your webcam.

iPhone as a webcam

https://itstillworks.com/use-iphone-webcam-pc-7167.html

Android as a webcam

http://technobrij.com/use-android-device-as-webcam-pc/

Remote Access software for Working From Home.

Paid remote access:

In the advent of a virus related shutdown or other impediments to workplace access, you should have some preparedness plan in place.  Some of my clients already have remote access via LogMeIn or GoToMyPC.  These are just 2 of the possible ways you could access your workplace computer remotely.  However, some do not have enough licenses for all their workstations.  LogMeIn offers a 2 week Free Trial without a credit card.  be sure to use an email address that has not been previously used for a trial.  After the trial, LogMeIn and GoToMyPC are not cheap.

There is a new alternative, REmotePC by iDrive.  It has received a PCMag rating of Excellent.  Currently, they offer a 30-day free trial (No credit card required) and for a limited time, they have a 10 computer license for $6.95/first year.

www.logmein.com

https://www.remotepc.com/?gclid=EAIaIQobChMIws6dremX6AIVx5yzCh1FNApnEAAYAiAAEgIzY_D_BwE

Free remote (limited access) alternatives.

TeamViewer offers free access for personal use.  Google Remote Desktop is another free program, however, in the case of most free access software, you have to be given a code for the computer you want to access.  This limits unlimited access,  with TeamViewer you can install the software and record the access code before leaving, but if the computer restarts it will generate a new code that will prevent you from logging in again.  Google RemoteDesktop requires the user at the machine you wish to access to generate a code which the user will then provide you.

www.teamviewer.com

TeamViewer – Remote Support, Remote Access, Service Desk, Online Collaboration and Meetings The new standard for remote control and remote support.. The leading all-in-one solution. Buy or Upgrade today — or download for free for personal use. www.teamviewer.com

https://remotedesktop.google.com/

I will be writing in detail over the weekend in the Driving Force Blog.  Look for our email Monday.

Have a safe and healthy weekend.

Google Chrome Play Store Malware, Phishing and now Smishing, IDF Soldiers tricked and more Security News

Google Chrome Extensions.  500 plus extensions spreading dangerous Malware!

I like a lot of users have been using Google's Chrome browser in lieu of other browsers for the past few years.  It was faster and promised to be more secure.  That is not the case any longer.  Hackers have now infiltrated Google's Play Store with more than 116 new malicious apps offered for download.  More than 500 extensions containing malware have been discovered around the world.

Read more and how to check and remove offending extensions at;

https://www.komando.com/security-privacy/chrome-extensions-spread-malware/707273/


Israeli soldiers tricked into installing malware by Hamas agents posing as women

"Members of the Hamas Palestinian militant group have posed as young teenage girls to lure Israeli soldiers into installing malware-infected apps on their phones, a spokesperson for the Israeli Defence Force (IDF) said today."

https://www.zdnet.com/article/israeli-military-tricked-into-installing-malware-by-hamas-agents-posing-as-women/


Microsoft detects and tracks a daily average of around 77,000 active web shells, spread across 46,000 infected servers.

Email users receive numerous emails on a daily basis purporting to be voicemails, faxes or files.  The emails look to be from legit users or maybe from someone they know, either someone the hacker is spoofing or a compromised user.  Often times these emails allude to an invoice or payment, anything to entice the user to open or click on the link or attachment.  Many of these emails are simply tricks to fool the target into giving up their Microsoft Office, Social App or financial credentials.  These are easier to prevent from falling victim to, simply do not give up your credentials without verifying the legitimacy of the email's source.  Of more concern are emails that link to compromised servers hosting websites that are infected with web shells.

Microsoft has released info that it detects and tracks a daily average of 46,000 infected servers.  On these servers, they find 77,000 active web shells.

If you follow a link that lands you on an infected server/website. hackers use web shells to upload other hacking tools on a victim's systems, tools that are later used for reconnaissance operations and lateral movement across a victim's internal network, making simple web server hacks into much bigger security incidents.

If you aren't sure about an email, do not open.

To read more about this serious threat click on the following link;

https://www.zdnet.com/article/microsoft-says-it-detects-77000-active-web-shells-on-a-daily-average/?ftag=TRE49e8aa0&bhid=27630927001468733386426006914379


Phishing scams are costing us more than ever. This trick is most likely to catch you out.
Scammers are still getting big payouts from business email compromise attacks - but almost two-thirds of attacks involve a much simpler scheme.

Businesses are losing over $700m a month to cybercriminals because employees are falling victim to phishing attacks, business email compromise campaigns, and gift card scams – and the amount of money being lost is still on the rise.
Large wire transfers make a significant percentage of the successful attacks

https://www.zdnet.com/article/phishing-scams-are-costing-us-more-than-ever-this-trick-is-most-likely-to-catch-you-out/

This latest phishing scam is spreading fake invoices loaded with malware

Prolific malware turned botnet shows no signs of slowing down as campaigns are launched against financial institutions in the US and UK.

Emotet started life as a banking trojan but has also evolved into a botnet, with its criminal operators leasing out its capabilities to those who want to distribute their own malware to compromise machines.

https://www.zdnet.com/article/this-latest-phishing-scam-is-spreading-fake-invoices-loaded-with-malware/


Scammy, spammy texts have come to your phone. Here's how to avoid getting ripped off by scam artists who've added social engineering to their toolbox.

The computer is not the only device under attack by hackers and con men.  Nowadays, more users are conducting financial transactions using their mobile devices, smartphones.  With the advent of the mobile wallet and financial apps, the bad guys are targeting mobile users with SMS messages or what is called "Smishing" coined from the similar email Phishing term.

For more information and ways to protect yourself, click on the following link;

https://www.howtogeek.com/526115/what-is-smishing-and-how-do-you-protect-yourself/


Mac malware threats are now outpacing attacks on Windows PCs

https://www.zdnet.com/article/mac-malware-is-growing-fast-but-its-still-not-as-dangerous-as-the-attacks-on-windows/

Security Updates: Last night was Update Tuesday, Microsoft's February 2020 Patch Tuesday fixes 99 security bugs

Microsoft's February 2020 Patch Tuesday fixes 99 security bugs

The second Tuesday of each month has become known as Patch Tuesday.  Microsoft released yesterday the February 2020 Patch Tuesday security updates. This month's updates include fixes for a whopping 99 vulnerabilities, making this Microsoft's biggest Patch Tuesday known to date.

With the possible combination and variety of installed programs not to mention a myriad of hardware configurations, issues are always a possibility.  Many users postpone updates, however, if possible install updates when available.  The internet is criminal infested and users and their info are under constant assault whether by Google, Alphabet, Facebook, and others gathering information discretely about you or criminals trying to steal your financial information.  There are many legit firms who collect your information and sell it to marketers and then they are hacked and your info is stolen along with millions of others.

On January 17, Microsoft disclosed ongoing attacks where hackers were using this IE zero-day, however, at the time, the OS maker could not provide a patch. This patch is now included with this month's cumulative security updates.

Read about this important update the following link;

https://www.zdnet.com/article/microsofts-february-2020-patch-tuesday-fixes-99-security-bugs/?ftag=TREc64629f&bhid=2219791

New Orleans latest Major City attacked by Ransomware, VISA warns of Gas Station POS malware, Windows 7 support ending

New Orleans hit with a cyberattack, 4K computers affected

The city of New Orleans was the latest major U.S. city hit by a cyberattack this past Friday, December 13, 2019.  It follows attacks on Atlanta in 2018 and Baltimore earlier this year.  The malware was discovered in the morning.  The IT staff ordered all computers to power off to avoid the malware from spreading.  The outage caused the city to declare a state of emergency. Luckily no data was held for ransom, but the recovery process will be costly and lengthy.

No request for ransom has been received thanks to the attack being stopped in the early stages.

"But there were still headaches and disruptions as city employees arrived at work Monday, and New Orleans police were forced to use paper and pens to conduct basic tasks like writing arrest reports."

According to NOLA.com:

"Mayor LaToya Cantrell said about 4,000 computers will need to be scrubbed. She added that 400 servers were affected. The exact nature and extent of the attack were unclear, but it appears to have started about 5 a.m. Friday, when city officials first noticed suspicious activity on their network. Reports of suspicious activity picked up as employees got to work around 8 a.m., and officials decided to shut down the system after 11 a.m."

The police department, 911 and 311 were unaffected, and the fire department is operating off old-fashioned hard copies. Sounds like NOLA had functioning backups, unlike many other cities that have recently fallen victim to ransomware.

To read more follow the link to Nola.com

https://www.nola.com/news/politics/article_0a132564-2061-11ea-8d52-53848745f381.html


VISA warns of POS malware incidents at gas pumps across North America

VISA says it's aware of POS malware being deployed on the networks of five North American fuel dispenser merchants.

The payments processor said that gas station operators are under attack by cybercrime groups who want to deploy point of sale malware on fuel dispenser networks.

"POS malware works by continuously scraping a computer's RAM for what looks like unencrypted payment card data, which it collects, and then uploads to a remote server.
The VISA Payment Fraud Disruption (PFD) team says cybercrime groups appear to have found a weak spot in how gas stations and gas pump operators work."

The problem basically is out of date readers that do not accept cards with chips but rely on the magnetic strip.  When a card is swiped the data is sent unencrypted and that is when the crooks intercept the data.

"VISA said the easiest ways for fuel dispenser merchants to safeguard customers is to either encrypt card data while it's being transferred across a network or stored in memory or shift to a chip card acceptance policy."

The entire article can be found at the following link;

https://www.zdnet.com/article/visa-warns-of-pos-malware-incidents-at-gas-pumps-across-north-america/?ftag=TRE-03-10aaa6b&bhid=27630927001468733386426006914379


Take your cybersecurity seriously.  Make sure your computer OS and anti-virus are up to date.  Apply firmware patches to your routers and beware when opening emails, even if it purports to be from someone you know.  A lot of phishing attacks use spoofing to gain the confidence of the target.

Support for Windows 7 ends 01/14/2020.

After January 14, 2020, Microsoft will no longer provide security updates or support for PCs with Windows 7. Upgrade to Windows 10 now to keep your employees productive and secure.

https://support.microsoft.com/en-us/help/4057281/windows-7-support-will-end-on-january-14-2020


DForce Intel Gen 8 & 9 Workstations

How to be Safe Shopping Online during the Holiday Season. Top 3 Phishing attempts of 2019.

FBI shares security advice for online shopping
FBI: Use credit cards rather than debit cards, don't use public WiFi, keep your devices updated, and more.

The FBI has issued a list of 12 things you should do during the holiday shopping season.  If you do fall victim to a holiday scam the FBI wants you to report the crime to it's Internet Crime page
By reporting the crime you help the FBI to understand trends and help it in fighting these activities.

Read all the tips at the following link;

https://www.zdnet.com/article/fbi-shares-security-advice-for-online-shopping/?ftag=TRE-03-10aaa6b&bhid=2219791

Microsoft details the most clever phishing techniques it saw in 2019
This year's most clever phishing tricks include hijacking Google search results and abusing 404 error pages.

In the year 2019, Microsoft said that out of the total volume of emails analyzed by the company,  phishing emails grew as a percentage from .2% in January of 2018 to .6% by October of 2019.

There were 3 attacks identified by Microsoft as being most clever;

1.  Hijacking search results

The first is a multi-layered malware operation through which a criminal gang poisoned Google search results.

2.  Abusing 404 error pages
When a 404 page is displayed it indicates that the link is broke or non-existent.  Hackers are using links that takes one to a supposedly non-existent page but is hosted on phishing website.  If a security system scans the link and receive a 404 error it will ignore the site, however, if a real user clicks on the link the phishing site could detect the user and redirect to a phishing page.

3.  MitM-based phishing  (Man in the Middle)

I've written about this attack in previous blogs.  It is one that my Office 365 online users will be familiar with.

An attacker will send a phishing email, usually saying that something is wrong with your Office 365/Exchange account or that you have received an attachment, a PDF or Voicemail.  Upon clicking on the link you will be presented with a familiar login screen.  Web pages are easy to duplicate by capturing the underlying source code.  The key to being safe from these phishing attempts is looking at the URL displayed in the address space.

To read more about these phishing attacks click on the following link;

https://www.zdnet.com/article/microsoft-details-the-most-clever-phishing-techniques-it-saw-in-2019/?ftag=TRE-03-10aaa6b&bhid=2219791

Beware of Fake Software updates... Malware Attacks on Hospital are rising fast

This fake software update tries to download malware onto your PC even when you click 'later'

According to W3Techs, WordPress powers 34% of all the websites on the Internet, including those without a content management system (CMS) or with a custom-coded CMS. Or to put it another way, WordPress powers over one-third of the web! And if you limit the data set to only websites with a known CMS, WordPress’ market share gets even more dominant.  WordPress holds a 60% market share for content management systems on websites with a known CMS.  (Kinsta.com)

That said crooks are hacking into insecure WordPress sites through a vulnerability in the theme plugin and interjecting malicious redirect scripts into the site.  What happens when the script runs is an alert will pop up with a fake Flash update message.  The user can click on Update Now or Later, either way, the redirect still occurs and the malicious payload is delivered.  

The payload is what is known as a RAT, Remote Access Trojan which allows remote access to the compromised computer.

A second known way the RAT payload is delivered is if the Chrome Browser is being used to visit a compromised website, a message that the 'PT Sans' font wasn't found and to update the browser.

Be careful and vigilant, especially with the upcoming holiday season when cyber-crooks will be active trying to cash in on consumer holiday buying.

To read more click on the following link;

https://www.zdnet.com/article/this-fake-software-update-tries-to-download-malware-onto-your-pc-even-when-you-click-later/?ftag=TRE-03-10aaa6b&bhid=2219791


Two-factor authentication.  What is it and how to deploy.

The single most important security precaution you can take with high-value online accounts is to enable a mobile device as a secondary identity factor. Which authenticator app should you choose? The correct answer might involve multiple apps.

Malware attacks on hospitals are rising fast, and the problem is about to get a lot worse

The healthcare industry stores some of the most sensitive personal information there can be about people: hackers know this and are looking to exploit what they view as an easy target.

Alongside names, addresses, dates of birth and other information that hackers can use to commit fraud and other cybercrime, the nature of health data means hospitals store extremely sensitive information about patients, something which attackers could exploit.

https://www.zdnet.com/article/malware-attacks-on-hospitals-are-rising-fast-and-the-problem-is-about-to-get-a-lot-worse/?ftag=TRE-03-10aaa6b&bhid=2219791

Coming in the next blog post, the best way to protect your credentials/online identity.

Two-factor authentication.  What is it and how to deploy.

The single most important security precaution you can take with high-value online accounts is to enable a mobile device as a secondary identity factor. Which authenticator app should you choose? The correct answer might involve multiple apps.

don't miss this important info.


Driving Force Intel Gen 8 and 9 Workstations

Dark Mode, What is it and how to enable it in Windows 10

Dark Mode in Windows 10

If you are like millions of computer users the constant glare of bright white backgrounds on your computer screen can take a toll on your eyes.  Maybe you have heard about Dark Mode for Windows.

Dark modes aren’t just for emos or for those who like dressing in black. They are better on the eyes and use much less battery which is ideal for phone and laptop users. I find webpages shown within a dark browser easier to read too. Something to do with the contrast I guess.

If you haven't heard of it and you suffer from eye strain then you owe it to yourself to try Dark Mode.  I didn't like it at first but it was because it is so different, but now I really prefer dark mode.  When I switch to the default white screens my eyes feel it instantly.  Dark mode provides instant relief.


To enable Dark Mode in Windows 10 you have to click on the Settings button, then choose Personalization.

Next click on Colors, select Dark for your default Windows mode as well as your default app mode.

Upon turning on Dark Mode, the most noticeable differences will be Windows Explorer and title bars on certain applications.

To really get the full-blown effect of Dark Mode across your entire computing environment, you need to change settings in Office 2016/365 and Google Chrome.

Dark Mode in Microsoft Office

To enable Dark Mode in Microsoft Office, (BTW, this is supported in Office 2016, 365 and 2013), follow the instructions provided by the following link;

https://www.howtogeek.com/360470/how-to-enable-dark-mode-in-microsoft-office/

Dark Mode in Google Chrome

Firefox and Microsoft Edge were leaders in the implementation of dark mode.

Now Google's Chrome browser also has a dark mode feature.  To enable dark mode in Chrome, you first have to enable it on Windows 10 as described above.  Once you have enabled it on Windows 10, open Chrome and type the following in the address bar;

chrome://flags

Next search flags for Dark Mode, it is an extension that you can enable or disable within the browser.

Enable the dark mode extension.

  Firefox and Microsoft Edge were leaders in the implementation of dark mode.

For a less techy approach, use the following link and read how to change Chrome to dark mode and customize the look;

https://lifehacker.com/how-to-enable-google-chromes-new-dark-mode-and-more-1833265661

DFORCE Intel Generation 8 and 9 workstations