Kids Can Bypass Communication Limit Feature On iOS 13.3

If you have children that own Apple devices, be aware that the latest update for iOS 13.3 included a feature called Communications Limits.

It is designed to allow parents to set up parental controls to keep their kids from speaking to, texting with, or Facetiming with anyone who's not already in their contacts list.
It's a small but important feature addition. Hackers, scammers, bullies, or strangers can easily get phone numbers belonging to children. Even worse, they can then harass or threaten them in a variety of ways.

Unfortunately, there were problems with the implementation of the feature. For one thing, a bug in the code allowed kids to add a new number to the address book contacts list and use that as a springboard for bypassing the restrictions imposed by the software.

The bug was discovered by staffers at CNBC who were able to show that the feature worked fine on devices backed by iCloud, but not other services like Google's Gmail.
Todd Haselton of CNBC had this to say about the discovery:

"A child should not be able to add the contact to the iPhone's address book without their parent entering their PIN first if the feature is working properly."

That's a succinct description of both the problem and its solution. Right now, Apple is scrambling to generate a fix. Although the company hasn't said as much, there's a very good chance that by the next patching cycle, the company will have a fix in hand.

If you were counting on the feature, one thing you can do until the fix is ready is to make use of the Downtime feature. That allows users to restrict access to apps according to a predefined schedule. It's not perfect, but it will get the job done in the short term.

If you wish to maximize the productivity of your employees by restricting their access to unnecessary apps and programs on your network or if you wish to protect vital business information from prying eyes of unauthorized personnel, call SpartanTec, Inc. in Fayetteville now.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

FBI Sheds New Light On Ransomware Tactics

According to a recent FBI alert marked "TLP: AMBER," businesses should be on high alert for ransomware attacks.

The alert reads, in part, as follows:

"Since January 2019, LockerGoga ransomware has targeted large corporations and organizations in the United States, United Kingdom, France, Norway, and the Netherlands. The MegaCortex ransomware, first identified in May 2019, exhibits Indicators of Compromise (IOCs), command and control (C2) infrastructure, and targeting similar to LockerGoga.

The actors behind LockerGoga and MegaCortex will gain a foothold on a corporate network using exploits, phishing attacks, SQL injections and stolen login credentials."

The alert also states that the attackers behind these two ransomware strains often wield Cobalt Strike tools, including Cobalt beacons to gain remote access.

Once the attackers gain a toehold inside a target network, they'll carefully explore and map the target network, seeking out the most sensitive information including proprietary company data, payment card information and other customer details and the like.

The goal here is to identify the highest value information that can be exfiltrated to the command and control server for sale on the black market. Finally, when all of the most valuable information has been siphoned from the network, the hackers will trigger the ransomware itself, which they'll use to gain an additional payment, extorting the affected organization.

The FBI also reports that hacking operations carried out by nation-states often deploy ransomware to make it appear that the attack is the work of traditional cybercriminals, throwing forensic investigators off of their trail.

The process of network mapping and exfiltrating valuable data can take weeks or even months, depending on the size of the network. So, organizations may be infected long before the visible signs of the attack become evident. Given that, it's more important than ever to have robust security system in place. You should have remote backups taken at regular intervals and a rapid response plan in place in the event of a breach.

Call SpartanTec, Inc. in Fayetteville and let our team help you find the best IT strategy to protect your company and network from ransomware attacks.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Types of IT Services We Offer

Many small businesses find it challenging to deploy, maintain, and protect their technology. Whether you’re looking to keep IT costs predictable, avoid unexpected problems, communicate more effectively, or make a plan for business continuity, SpartanTec, Inc. has a solution for you.

IT Services To Choose From

Managed IT Services

Several IT service providers that deal with small businesses are referred to as managed service providers. This could cover a range of specifics but lets the business to serve the network of the company on an ongoing basis at a regular fee. It is less costly for firms as time goes by because it could prevent costly issues from transpiring in the first place.

On Demand IT

Another way to categorize an IT service firm is by providing services on demand. You could still provide the same variety of particular functions. However, instead of firms paying a regular fee every month, they just pay for every individual service if they need it.

Network Setup

We also offer a preliminary setup service for firms that are just seeking to get their networks working and fully functional. It is possible to provide this as a standalone service, but can be even more valuable as a part of a specific managed IT package.

Network Security

Cybersecurity is a primary concern for all firms. So checking and responding to possible threats is a famous service for several IT business. This is often included as part of the managed IT services. But it may also be provided as a separate service.

Database Management

A database management is a specific system that a firm uses to check and access data throughout the lifecycle. It will include certain things like employee and customer information, sales, as well as finances. It also includes the organization of data to guarantee security, compliance, as well as the performance that are applications that are driven by data.

Cloud Computing

This specific category includes all kinds of IT service that’s delivered through the internet or a specific cloud network. Therefore, a cloud platform or SaaS service falls in this category. So, we can create a kind of software that’s provided to users over the cloud and they can access it if they pay a membership fee.

Software Support

We like to deal with software products such as those that run databases, multimedia, or spreadsheets, we provide a service where we offer support for users who are in need of technical fixes. We can concentrate on a specific type of software or perhaps a list of programs or provide a service that is more generalized.

Data Storage

We offer a platform or a service for individuals or firms to store their data. We can offer on-premises storage option or cloud platform for system backups or more storage so that users do not need to keep everything on their main devices. We can also add this with a security offering when you are dealing with proprietary or sensitive data.

VoIP Service

VoIP is also referred to as Voice Over Internet Protocol. We provide an online service that lets clients communicate with other people using voice calling, either as needed or on an ongoing basis. This service could be an option for a managed IT service in Fayetteville.

Computer Repair

Computer repair services deal with computers, graphics cards, and motherboards, to name a few. This service could be provided to individuals or companies. This kind of work needs meeting with clients in person at a certain point in time.

Call SpartanTec, Inc. in Fayetteville if you wish to know more about these services or if you are interested in getting one for your business.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

New Ransomware Targets Removable And Attached Drives

There's a new and unusual ransomware strain making the rounds that you should be aware of. Called 'AnteFrigus,' it is primarily distributed via 'malvertising' that redirects users to the RIG exploit kit. One of the most unusual features of this strain is the fact that it specifically doesn't target the C: drive of the target computer. Instead, it focuses exclusively on drives that are commonly associated with mapped network drives and removable hardware. BleepingComputer was one of several organizations to discover the ransomware. They all contacted independent security researcher Vitali Kremez to reverse engineer the malware to get a peek under the hood at how it works. Kremez discovered that this strain only targets the D:, E:, F:, G:, H:, and I: drives.  It does not even attempt to encrypt any files located on the C: drive, nor does it try to do anything whatsoever with unmapped network shares.

In addition to that, the AntiFrigus ransomware is designed to skip any file with the following extensions:

• Adv
• Ani
• Big
• Bat
• Bin
• Cab
• Cmd
• Com
• Cpl
• Cur
• Deskthemepack
• Diagcap
• Diagcfg
• Diagpkg
• Dll
• Drv
• Exe
• Hlp
• Icl
• Icns
• Ico
• Ics
• Idx
• Ldf
• Lnk
• Mod
• Mpa
• Msc
• Msp
• Msstyles
• Msu
• Nls
• Nomedia
• Ocx
• Prf
• Rom
• Rtp
• Scr
• Shs
• Spl
• Sys
• Theme
• Themepack
• Wpx
• Lock
• Key
• Hta
• Msi
• Pck

The facts that the ransomware studiously ignores the C: drive and the list of extensions the malware won't encrypt are curious. This all had many people scratching their heads trying to discern why the developers would build their code in this way. Upon review, Kremez concluded that the developers are not terribly sophisticated and are, at this point, still in the experimental stages.  The code is still very much a work in progress.  Work in progress or not, it can be dangerous. Be sure your staff is aware of this latest threat.

Call SpartanTec, Inc. in Fayetteville and let our team set up the proper security measures to protect your network and all your drives.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Fake Voicemail Messages Tricking People Into Opening Malicious Content

Office 365 has been the target of an increasing number of ongoing phishing scams.
The latest scam involves using fake voicemail messages to convince targets that they need to log in to hear the full recording.

Researchers at McAfee Labs had this to say about the matter:

"Over the past few weeks McAfee Labs has been observing a new phishing campaign using a fake voicemail message to lure victims into entering their Office 365 email credentials.  At first, we believed that only one phishing kit was being used to harvest the user's credentials.  However, during our investigation, we found three different malicious kits and evidence of several high-profile companies being targeted."

Recipients will receive an email message informing them that they missed a call.  A partial recording is available and embedded in the email, but the recipient gets little more than hello, so there's no real indication of what the message might be about.

Then, if the recipient clicks the link provided to "log in and hear the message" they will, of course, be sent to a page that looks like an Office 365 login screen.  All they're really doing at that point is handing their credentials over to whomever sent the message.
As we said at the start, Office 365 has become an increasingly popular target.  There's another scam making the rounds that tries to get a user's login credentials by making it seem as though the message wa
s sent by the recipient's employer's HR department and talks about an upcoming raise.

Both are powerful approaches that have been yielding better results than usual for the scammers.

Be sure your IT staff and all of your employees are aware of and on their guard against these scams. Call SpartanTec, Inc. in Fayetteville now for more information.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Will We Control Computers With Our Brains Soon?

Over the years, Facebook has made several high-profile acquisitions, with one of their most recent being the acquisition of Oculus Rift for a staggering two billion dollars.  Now, rumors are swirling that the company is on track to buy another innovative startup, CTRL-Labs. They are the makers of an innovative device worn at the wrist that uses brain waves to allow users to control electronic devices.

Estimates are that the social media giant will pay between $500 million and a cool one billion dollars to acquire the company, which is one of a number of startups creating BMIs, (Brain Machine Interfaces).

What's interesting about the offering by CTRL-Labs is that their product is worn on the wrist, while most of their competitors rely on devices worn on the head. In a few cases, they require chips to be physically implanted in the brains of those who want to use their tech.

In this regard, what CTRL-Labs is offering borrows from two different technologies that have been featured on TED talks in recent years:  Pranav Mistry's "Sixth Sense" technology (which translates gestures into commands that a computer can understand) and the Emotive headset, which scans your brain for changes and translates those signals into commands.

Honestly the industry is still too small and the technologies are too unrefined to know for certain whose products will wind up being adopted as the de facto standard.  However, the fact that Facebook is placing a large bet on the industry is a powerful indication that these types of technologies (whatever form they ultimately take) are the future.

It's a long-term bet, to be sure.  Although there are products you can buy today, they only offer limited functionality and it will be at least five years before we see a killer app for the new tech, but one way or another, the day is coming when we will indeed control computers with our brains.

Just like the many breakthroughs in today's technology, hackers are also becoming more clever as they continue to find ways to obtain personal and business information from individuals and companies. Given that, you need to step up your game by making sure that there are no loopholes in your cybersecurity. Call SpartanTec Inc in Fayetteville and let our team help you with your security solutions. 

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto

Problems With Consumer Based Routers And Devices

The SOHOpelessly Broken 2.0 study has been released by Independent Security Evaluators.

The picture it paints of routers and the so-called 'smart' devices that make up the rapidly expanding Internet of Things (IoT) is not pretty.

The researchers sum up their findings as follows:

"Today, we show that security controls put in place by device manufacturers are insufficient against attacks carried out by remote adversaries.  This research project aimed to uncover and leverage new techniques to circumvent these new security controls in embedded devices."

The research team investigated several SOHO routers and NAS devices offered by a range of manufacturers, including:

• ASUS
• Asustor (a subsidiary of ASUS)
• Buffalo
• Drobo
• Lenovo
• Netgear
• QNAP
• Seagate
• Synology
• TerraMaster
• Xiaomi
• Zioncom
• Zyxel

Sadly, devices from every manufacturer listed above had at least one web app vulnerability that could allow a remote attacker to gain access to the administrative panel of the device in question.  Worse, the researchers reported that they were able to obtain root shells on 12 of the devices, giving them complete control. In six cases, they were able to gain complete control remotely and without authentication.

The most at-risk routers the group tested are the:

• Asustor AS-602T
• Buffalo TeraStation TS5600D1206
• TerraMaster F2-420
• Drobo 5N2
• Netgear Nighthawk R9000
• TOTOLINK (Zioncom) A3002RU

Since the publication of the SOHOpelessly Broken 1.0 report, the research team did say that the general state of security on IoT devices had improved somewhat. That's a low bar given the sorry state of IoT security to begin with.  While things have no doubt improved, there are still miles to go before IoT security could be called anything approaching robust.

In fact, many of the IoT devices being sold today still lack basic web application features like browser security headers and anti-CSRF tokens.  Until these kinds of issues are addressed, the conclusions fronted by the SOHOpelessly Broken 3.0 report won't be much better than they are now.

The internet world has become a scary place and most small business are ill prepared for an attack. What is the state of your companies security? If you have any doubts - call SpartanTec, Inc. for a complete analysis of your network and suggestions on how to secure your data.

SpartanTec, Inc.
517 Owen Dr
Fayetteville, NC 28304
(910) 745-7776
http://manageditservicesfayetteville.com

Cities Served:
Fayetteville, Spring Lake, Hope Mills, Dunn, Aberdeen, Southern Pines, Pinehurst, Sanford, Clinto