In a recent news release by US-CERT, the United States Computer Emergency Readiness Team, US-CERT stated they are aware of a malware campaign that surfaced in 2013 and is associated with an increasing number of ransomware infections. CryptoLocker, a new variant of ransomware, restricts access to infected computers and demands the victim provide a payment to the attackers in order to decrypt and recover their files.  As of this time the primary means of infection appears to be phishing emails containing malicious attachments.

Everyone who makes use of computer systems, including email, should be on guard for these types of malware infection attempts.  In many cases the email will appear to be legitimate and harmless but you need to ask yourself if you were expecting this communication, and if not, contact the sender to make sure it's legitimate.

To help mitigate any loss of data should you fall victim to this infection, you should take regular backups of your system and store your important files onto your file server which is backed up regularly.

To get more information about CryptoLocker, follow this link to the US_CERT website and think before you click!

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

In celebration of National Cyber Security Awareness Month this October we will be featuring an Information Security video each week.  Please take the time to review this video which reviews a number of information security safety tips, and also how not to be a Billy.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

In celebration of National Cyber Security Awareness Month this October we will be featuring an Information Security video each week.  Please take the time to review this video on MALWARE and how best to combat it.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Be careful before you resell or give away your handheld devices such as smart phones or any other device that can store data. The new owner will be able uncover your previous data from the device including id's, passwords or any other personal information that may have been stored. At a minimum, figure out how to reset it to the factory standard before turning it in or reselling it. Refer to your manual or call the manufacturer. Follow this link for more information on deleting data.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

With the recent flurry of phishing emails being received these days I thought I would post this quick guide to assist you in determining if the email you received may actually be a phishing email.

It could be a phishing email if:

• There are misspelled words in the email or it contains poor grammar.
• The message is asking for personally identifiable information (PII), such as credit card numbers, account numbers, passwords, PIN's or Social Security Number.
• There are "threats" or alarming statements that create a sense of urgency.  For example: "Your account will be locked until we hear from you" or "We have noticed activity on your account from a foreign IP address".
• The domain name in the message isn't the one you're used to seeing.  It's usually close to the real domain name but not exact.  For example:
• Phishing Website:  www.regionsbanking.com
• Real Website:  www.regions.com

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

You've probably heard that "To err is human, but to foul things up completely you need a computer". We know it's important to protect the large databases that we use to store data, but we shouldn't ignore our paper records. The amount of information held on paper may be much smaller than in databases, but many of the most serious leaks happen through very human methods — reports stolen from desktops or read over someones shoulder. Sensitive paper files should be locked away when they are not being used and shouldn't be read public places.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

As attacks against cryptographic systems and the SSL infrastructure have advanced in recent years, experts have begun to fret about the future utility of the system. Companies that rely on the security of the SSL technology are beginning to take steps to address the issue, with the latest being Google, which is planning to change the length of the keys on all of its SSL certificates to 2048 bits.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Be cautious about all communications you receive, and clicking on links in an email, instant message or a website. Even if you know and trust the sender of the email, or an instant message, or are on a known website or a friend's social networking page, it is still prudent to use caution when navigating pages and clicking on links or photos, because links, images or other content contained on the pages may include malicious code placed there by hackers.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

In simplest terms, cloud computing is a subscription-based or free service where you can obtain networked storage space and other computer resources through via the Internet. While these systems may remove the need for owning physical components, they also introduce new risks to your information. Before you float your digital assets to the cloud, make sure you take the appropriate steps to protect yourself.

Know your needs. Before you start, make sure you carefully plan what your security and privacy needs are. This includes knowing what your legal and regulatory requirements are for protecting data.
Read the contracts. End User License Agreements and Service Level Agreements are important because they describe the terms and conditions of the cloud service. If you're not sure of what they do or do not provide, contact the provider to clarify the services.
Protect Your Machine. Enable your firewall, use anti-virus/malware and anti-spyware software.
Protect your data. Don't store unencrypted sensitive information in the cloud. You don't know with whom you're sharing the cloud!

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

By responding to these messages, you're only confirming that your email address is active. Another thing you shouldn't do is click the "remove me" link in the message. Links in email can point to an IP address other than what is being represented or referenced. The best thing you can do is delete the message. 

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Peer-to-peer (P2P) networking is a popular method for sharing files, music, photographs and other information. Just remember that this method can come with its share of major risks. It is best to know with whom you are sharing data and files versus browsing for a site that you believe meets your criteria. The data you receive may be corrupted with malware or expose you to legal ramifications (e.g., copyrights, pirated software or music). So, be safe and know what your P2P buddy is offering before you load a copy onto your device.

For more information, please visit:

• Peer-to-Peer (P2P) Network Security
• P2P File Sharing Tips
• US-CERT Cyber Security Tip"Risks of File-Sharing Technology"

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Once an anti-virus and/or anti-spyware package has been installed on your computer, you should scan your entire computer periodically. If your anti-virus package has the ability to automatically scan specific files or directories and prompt you at set intervals to perform complete scans, enable this feature.

What can I do to protect my computer?

• Don't click on pop-up ads that advertise anti-virus or anti-spyware programs 
• Use and regularly update firewalls, anti-virus, and anti-spyware programs 
• Properly configure and patch operating systems, browsers, and other software programs. 
• Turn off ActiveX and Scripting, or prompt for their use.

• MS-ISAC Newsletter on Detecting and Avoiding Fake Anti-Virus Software
• US-CERT Newsletter on "Recognizing and Avoiding Spyware"

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

The issue with our groupshares has been identified and corrected. The parties who had their workstations affected have been contacted and are in the process of having their workstations corrected. No data was lost as a result of this issue.

Network groupshares are now available for use.  Public drive Z: will not be available until Noon today.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

The following network groupshare drives are currently offline, G:\, H:\ and Z:\ drives. T&C Infrastructure is currently researching the issue. Please navigate to the T&C Information Security web page for status updates. The next update is scheduled for 9:00 AM unless the issue is resolved before then.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

A new video released by SANS.org is available this month to help you learn what the cloud is and how you can use it securely.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Many people are under the misconception that when they draft and send e-mail, two things occur. Their message gets sealed in a (virtual) envelope (that's why you have to open e-mail right?) and that it goes directly to the person it was sent to via internet magic. 

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Credit card and online banking sites are convenient and easy ways to purchase and handle your financial transactions. They are also the most frequently spoofed or "faked" sites for phishing scams. Information you provide to online banking and shopping sites should be encrypted and the site's URL should begin with https. Some browsers may also have an icon representing a lock at the lower right of the browser window. 

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

A new video released by SANS.org is available this month to help you learn some of the most common risks of online social networking and the steps you can take to protect yourself and your family.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

secureCI presents Ouch!

The SANS Monthly Information Security Bulletin at Channel Islands

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

As we near "Tax Day 2013", many spamming and phishing groups are increasing their attempts to try and get at your personal information.  Please be sure to execute caution before responding to any email claiming to be from the IRS or any other government group and think before clicking that link.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

A wireless hotspot is an wireless network that is made available (open) to everyone. A good example of an open wireless hotspot would be the wireless network offered at your favorite coffee shop. These wireless networks hook computers into the public Internet — very handy, but dangerous. Because wireless hotspots are for open use, they don't provide much security protection for your data while on them. Some tips to keep in mind before you start using a wireless hotspot include:

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

The Internal Revenue Service today issued its annual “Dirty Dozen” list of tax scams, reminding taxpayers to use caution during tax season to protect themselves against a wide range of schemes ranging from identity theft to return preparer fraud.

The Dirty Dozen listing, compiled by the IRS each year, lists a variety of common scams taxpayers can encounter at any point during the year. But many of these schemes peak during filing season as people prepare their tax returns.

"This tax season, the IRS has stepped up its efforts to protect taxpayers from a wide range of schemes, including moving aggressively to combat identity theft and refund fraud," said IRS Acting Commissioner Steven T. Miller. "The Dirty Dozen list shows that scams come in many forms during filing season. Don't let a scam artist steal from you or talk you into doing something you will regret later."

Illegal scams can lead to significant penalties and interest and possible criminal prosecution. IRS Criminal Investigation works closely with the Department of Justice (DOJ) to shutdown scams and prosecute the criminals behind them.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Locking your computer before leaving it unattended prevents anyone else from accessing it while you are away. This is especially important when there are outside people in your office. Leaving your computer unlocked can expose sensitive and confidential data to a third party. Even if there is no one in your office, data could be exposed if your computer screen faces an outside window, especially if you are on the ground floor.  Lock your computer using Ctrl+Alt+Del and Enter.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

1. Warning Messages: If you don't understand the warning message, say no and consult IT support. It's easier to go back and say yes if you need to than be sorry and have to rebuild your machine. 
2. Certificates: If you don't understand a website certificate message, say no and consult IT support. It is easier to go back and say yes if you need to than be sorry and have to rebuild your credit. 
3. Antivirus: Running antivirus does not slow your computer down nearly as much as a virus does. 
4. Back-up: Backing up your data may seem like a waste of time — er, until you spill coffee all over your laptop. 
5. Passwords: Writing down your password around your desk is about as secure as leaving a $20 bill lying on the dashboard of your car. How well do you trust anyone these days?

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Being able to access the Internet from different locations — the library, a computer lab at school, an Internet cafe — is a great convenience, but it can also pose a security risk to personal information. If you do access the Internet from a shared computer, here are a few things you need to remember.

1. Don't check the "remember my password" box. 
2. When you're done, make sure you log off completely by clicking the "log off" button before you walk away. 
3. If possible, clear the browser cache and history.
4. Never leave the computer unattended while you're logged in. 
5. Move all documents you've used to "Trash", and empty the recycle bin.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

secureCI presents Ouch!

The SANS Monthly Information Security Bulletin at Channel Islands

• Harvesting Information: The cyber attacker’s goal is to fool you into clicking on a link and taking you to a website that asks for your login and password, or perhaps your credit card or ATM number. These websites look legitimate, with exactly the same look, imagery and feel of your online bank or store, but they are fake websites designed by the cyber attacker to steal your information.
• Infecting your computer with malicious links: Once again, the cyber attacker’s goal is for you to click on a link. However, instead of harvesting your information, their goal is to infect your computer. If you click on the link, you are directed to a website that silently launches an attack against your computer that if successful, will infect your system.
• Infecting your computer with malicious attachments: These are phishing emails that have malicious  attachments, such as infected PDF files or Microsoft Office documents. If you open these attachments they attack your computer and, if successful, give the attacker complete control.
• Scams: These are attempts by criminals to defraud you. Classic examples include notices that you’ve  won the lottery, charities requesting donations after a recent disaster or a dignitary that needs to transfer millions of dollars into your country and would like to pay you to help them with the transfer. 

• Be suspicious of any email that requires “immediate action” or creates a sense of urgency. This is a common technique used by criminals to rush people into making a mistake.
• Be suspicious of emails addressed to “Dear Customer” or some other generic salutation. If it is your bank they will know your name.
• Be suspicious of grammar or spelling mistakes; most businesses proofread their messages carefully before sending them.
• Do not click on links. Instead, copy the URL from the email and paste it into your browser. Even better is to simply type the destination name into your browser.
• Hover your mouse over the link. This will show you the true destination where you would go if you actually clicked on it. If the true destination of the link is different than what is shown in the email, this may be an indication of fraud.
• Be suspicious of attachments and only open those that you were expecting.
• Just because you got an email from your friend does not mean they sent it. Your friend’s computer may have been infected or their account may have been compromised, and malware is sending the email to all of your friend’s contacts. If you get a suspicious email from a trusted friend or colleague, call them to confirm that  they sent it. Always use a telephone number that you already know or can independently verify, not one that was included in the message.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

If you receive an email asking you to call an 800 number related to a banking or credit card issue, don't call the number. Your credit card has a phone number on the back as do your bank account statements. Be safe, don't call a phone number listed in an email; instead look up the number on your credit card or account statements. There's a new attack called Vishing, designed to have you call a fake, automated answering system, and get you to enter your account number and other sensitive information.  Don't be a victim.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

On Saturday 3/2/2013, Evernote, the online service that enables users to store and sync all kinds of data across multiple devices, sent out a notice to their users stating that their Operations & Security team had  discovered and blocked suspicious activity on the Evernote network that appeared to have been a coordinated attempt to access secure areas of the Evernote Service.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

No one from the HelpDesk or Technical Support will ever ask you for your password. If access to your account is needed for some reason, and we can't contact you in time, your password will be reset and you'll be notified by voicemail. Anyone calling and asking you for your password is most likely trying to gain unauthorized access to the network. If you ever receive such a call, notify your supervisor and the HelpDesk immediately.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Most security folks (and IT folks, for that matter) would rather hear about a problem from you than to figure it out afterwards while troubleshooting a system failure. If you receive a phone call from "User Support" doesn't sound quite right, if a common email announcement is just a little off, or if a caller on the phone is too stressed to remember his or her password and asks you to provide it — don't be pressured and don't be rushed. Rush and pressure are among the "social engineering" hacker's best tools. 

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

This article discusses a study released Wednesday 2/20/2013 shows one in four consumers who receive a data breach letter become the victim of identity fraud. That statistic represented 12.6 million victims last year -- one million more than the year before, according to the 2013 Identity Fraud Report released by Javelin Strategy & Research.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

It may be tempting to use useful-looking software that you can get free on the Internet, but these tools may carry a hidden cost.  Installing them may often cause other programs to stop working and it can take a long time for IT teams to track down the problem.  More seriously, the software can display unwanted ads, slow your PC down or make it less secure by letting the PC download more ads from the Internet.  Most seriously, the software can be infected by viruses or spyware that are intended to damage your PC or steal confidential information.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

We've all received them, emails from a seemingly trusted source like a bank, delivery company or even your own place of employment, claiming there was some type of issue or another requiring you to offer up some personal information or to click on a link or button to help clear the issue up. If you receive an email similar to this DO NOT CLICK ON ANY LINK OR OFFER UP ANY INFORMATION! 

This is a common form of security attack called a phishing or spear phishing scam.

Groups attempting to steal personal information will often use e-mails that appear to originate from a trusted source to try and trick a user into entering valid credentials at a fake website. Typically the e-mail and the web site look like they are part of a bank or some other organization the user is doing business with.

For example, it could be a phishing email if...

• There are misspelled words in the e-mail or it contains poor grammar. 
• The message is asking for personally identifiable information, such as credit card numbers, account numbers, passwords, PINs or Social Security Numbers. 
• There are "threats" or alarming statements that create a sense of urgency. For example: "Your account will be locked until we hear from you" or "We have noticed activity on your account from a foreign IP address." 
• The domain name in the message isn't the one you're used to seeing. It's usually close to the real domain name but not exact. For example: 
• Phishing website: www.regionsbanking.com 
• Real website: www.regions.com

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

The executive order that President Barack Obama signed on February 12th in advance of his State of the Union Address contains a lot of provisions for information sharing on attacks and threats on critical infrastructure, and also calls for the development of a framework to reduce cybersecurity risks in federal agencies and critical infrastructure.

Read the executive order on cybersecurity and see what is identified as mandated and what is being classified aside as volunteer initiatives.

Additional information may be found here.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Passwords are like bubble gum, they're much better when used by only one person. If you share your computer with others, each person should have a unique account, username, and password. Don't allow another user to know or use your password, and don't ask another user if you can use theirs. When it's your turn to use the computer, log the last user off, and then log on using your own username and password. When you take a break, don't leave your computer open. Log off or lock it, and remember, passwords shorter than 8 characters are easy to crack. Avoid common words, proper names, and use both uppercase and lowercase letters, numbers, and symbols when creating your password.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

This article discusses recently released endorsements by the Federal Trade Commission (FTC) regarding new privacy guidelines for mobile apps and devices. The guidelines or series of suggestions, have been released to assist developers, advertising networks and device companies better protect their users online.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Each one of us has a responsibility to ensure that our building is secure. When you enter a building from a side door or after hours, make sure the door closes properly and check to see that no one has slipped in behind you. If you see someone you don't know wandering around, don't be afraid to grab a co-worker and ask which room they're looking for or who they're visiting. Security is everyone's responsibility and it's better to be safe than sorry!

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

If you can't remember hard passwords no matter how hard you try, put your password in parenthesis. baseball38 is a weak password, but (baseball38) is much better.

Whenever you change your password, you should always change at least half of it and when you do, change the parentheses as well. You can change the parentheses to asterisks, exclamation points or dollar signs. *sallyandbob39* is better than sallyandbob39, and !jimandbetty93! is better than jimandbetty93.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

While social networking sites can increase a person's circle of friends, they also can increase exposure to people with less than friendly intentions. Here are tips for helping your kids use social networking sites safely:

1. Help your kids understand what information should be private. 
2. Explain that kids should post only information that you - and they - are comfortable with others seeing. 
3. Use privacy settings to restrict who can access and post on your child's website. 
4. Remind your kids that once they post information online, they can't take it back. 
5. Talk to your kids about avoiding sex talk online. 
6. Tell your kids to trust their gut if they have suspicions. If they ever feel uncomfortable or threatened by anything online, encourage them to tell you.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

secureCI presents Ouch!

The SANS Monthly Information Security Bulletin at Channel Islands

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Here are a few tips to help prevent getting hooked by a phisher:

1. Don't reply to email or pop-up messages that ask for personal or financial information.
2. Don't don't click on links in email messages that you're not familiar with or that ask for personal or financial information.
3. Don't cut and paste a link from the message into your Web browser -- phishers can make links look like they go one place, but actually send you to a different site.
4. Use anti-virus and anti-spyware software, as well as a two-way firewall, and update them all regularly.
5. Don't send personal or financial information by email.  Email transmits data in open text!
6. Be cautious about opening any attachment or downloading any files from emails you receive regardless of who sent them.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

SANS and EDUCAUSE have developed a free privacy awareness video that colleges and universities can use during Data Privacy Month in January, and throughout the year, in their privacy education and training efforts. High and low resolution versions of the video are available.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Google patched nearly two dozen security vulnerabilities in Chrome on Thursday and a day later attackers have begun circulating fake Google Chrome updates that actually are part of a scam related to the Zeus botnet and is designed to steal online banking credentials, among other things.  Follow this link to view the full article from Threatpost.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest

Internet Explorer users beware, there is a new zero day (previously unknown, unpatched vulnerability) attack targeting your browser.  Follow this link to view the details and what you can do at this time.

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest