Wednesday, September 25, 2013

Filecoder: Your data is being held at ransom

Trojans put messages into user files and try to demand a ransom from victims in exchange for a decryptor utility.  Ransomeware is commonly known as a locked screen on your desktop, which tries to scare you into making some kind of payment to regain access to your computer again.

This is an old issue but it is noted to be a significant increase in Filecoder activity this summer.

ESET has detections of this malware category flagged as Win32/Filecoder, Win32/Gpcode, and other family names.

Statistics on ESET LiveGrid telemetry shows Win32/Filecoder detections have risen by 200% just in the last few months.  From January to June 2013 the detections have been at a normal level, but the spike since July is alarming.




Russia is most affected by these malware families, although these campaigns are spreading throughout the entire world.

 

Infection Trajectory

Cybercriminals that incorporate Filecoder randomware use various methods of getting the malware to victims' systems:
  • Downloads from malware-laden websites
  • E-mail attachments
  • Trojan-downloader or backdoor
  • Manual instillation (this hurts the most)
  • Infection vectors
A scenario of the Win32/Filecoder.Q or the Win32/Filecoder.AA/Win32/Filecoder.W spreads through back-doors such as the Poison-Ivy R.A.T.  Victims are being sent the Poison-Ivy backdoor through email and are enticed to execute the malware onto their computer.  The C&C (command and control) server waits for the commands then the attacker would send the Filecoder Trojan  to the infected mainframe.

The Trojan is not stored as a file on the hard drive, but is ran in the memory of the computer.

There are other cases where the attacker manages to install Filecoder ransomware through Remote Desktop Protocal.   The keylogger is infected and weak passwords enable the attacker to gain full access to the aimed machine.

This "break in" disables antivirus protection while installing malware onto the compromised desktop.
Sometimes manual installation is needed due to the fact that a number of variants call for "user interaction", to set the encryption password.


 

Encryption Methods

Various encryption methods are used like:
  • Blowfish - a keyed symmetrick block cypher
  • AES - an encryption of electronic data based on the Rijndael cipher
  • RSA - an algorithm for public-key cryptography based on factoring large integers
  • TEA - a block cipher with implementation of a few lines of code
  • Hard coded in binary numbering system
  • Entered manually by command-line or dialog box
  • Randomly created and sent to the machine
It is a good idea to password-protect any anit-malware software you have on your computer to prevent it from being adjusted by an attacker.


password-protect


It is also equally important to backup your computer regularly, make sure all your anti-virus software is up-to-date and all setting preferences are correct.

Here is a good reference for cybersecurity: How FireEye has redefined cyberdefense on USATODAY.com: http://www.usatoday.com/videos/tech/2013/09/24/2861507/

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

References:
Filecoder: Holding your data to ransom - We Live Security
http://www.welivesecurity.com/2013/09/23/filecoder-holding-your-data-to-ransom/
September 23, 2013

Tuesday, September 24, 2013

Welcome to CloudOn



CloudOn_Color_
http://www.hyphenet.com/blog/welcome-cloudon/


CloudOn, a popular iOS and Android app that lets you view and edit Microsoft Word, Excel, and PowerPoint files, is making its online debut today.

More than 5 million users have signed up through the mobile app, enabling users to create, review, and share documents from any laptop, tablet, or smartphone.

CloudOn only works with Google Chrome and Apple Safari, it is not yet compatible with Firefox and Internet Explorer but will soon be.

CloudOn allows you to open, rename, delete, and manage just about any file type stored in Dropbox, and Microsoft SkyDrive accounts.  The new FileSpace is a great Office screen-sharing system that connects you to the office while giving you more control over accessed documents.


cloudon
http://www.hyphenet.com/blog/welcome-cloudon/
 Click here to download

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

References:
CloudOn
http://site.cloudon.com/
CloudOn Brings Its Mobile Productivity Suite To The Web – TechCrunch
http://techcrunch.com/2013/09/24/cloudon-brings-its-mobile-productivity-suite-to-the-web/
September 24, 2013

Monday, September 23, 2013

Buy of the Week: Lenovo ThinkCentre Edge 72 3484 for only $398 plus tax!

The Lenovo ThinkCentre Edge 72 3484 Mid-Tower Chassis PC  with Pentium G2020 2.9 GHz delivers the fundamentals; great application performancelenovo-thinkcentrehttp://www.hyphenet.com/blog/buy-week-lenovo-thinkcentre-edge-72-3484-398-plus-tax/ and reliability. The Lenovo ThinkCentre Edge service will keep your online customers happy.








Main Specifications
Product Description Lenovo ThinkCentre Edge 72 3484 – P G2020 2.9 GHz – Monitor : none.
Type Personal computer
Form Factor Tower
Localization English
Processor 1 x Intel Pentium G2020 / 2.9 GHz ( Dual-Core )
Processor Socket LGA1155 Socket
Processor Main Features Intel Virtualization Technology
Cache Memory 3 MB
Cache Per Processor 3 MB
RAM 2 GB (installed) / 16 GB (max) – DDR3 SDRAM – 1333 MHz – PC3-12800
Storage Controller SATA ( SATA-300 )
Hard Drive 1 x 500 GB – SATA-300
Optical Storage DVD±RW (±R DL) / DVD-RAM
Monitor None.
Graphics Controller Intel HD Graphics
Audio Output Integrated – stereo
Networking Gigabit LAN
Power AC 120/230 V ( 50/60 Hz )
OS Provided Windows 8 Pro 64-bit / 7 Professional 64-bit Edition downgrade – pre-installed: Windows 7
Microsoft Office Preloaded Includes a pre-loaded image of select Microsoft Office 2010 suites. Purchase an Office 2010 Product Key Card or disc to activate preloaded software on this PC.
Dimensions (WxDxH) 6.3 in x 15.7 in x 15.6 in
Weight 16.5 lbs
Manufacturer Selling Program TopSeller
Manufacturer Warranty 1 year warranty – on-site

Extended Specifications
General
Type Personal computer
Product Form Factor Tower
Built-in Devices Speaker
Color Glossy black
Localization English
Processor / Chipset
CPU Intel Pentium G2020 / 2.9 GHz
Number of Cores Dual-Core
CPU Qty 1
Max CPU Qty 1
Processor Main Features Intel Virtualization Technology
CPU Socket LGA1155 Socket
Chipset Type Intel H61 Express
Cache Memory
Installed Size 3 MB
Cache Per Processor 3 MB
RAM
Installed Size 2 GB / 16 GB (max)
Technology DDR3 SDRAM
Memory Speed 1333 MHz
Memory Specification Compliance PC3-12800
Form Factor DIMM 240-pin
Features Unbuffered, dual channel memory architecture
Configuration Features 1 x 2 GB
Hard Drive
Type HDD
Capacity 1 x 500 GB
Interface Type SATA-300
Spindle Speed 7200 rpm
Storage Controller
Type 1 x SATA – integrated
Controller Interface Type SATA-300
Channel Qty 3
Optical Storage
Type DVD±RW (±R DL) / DVD-RAM – SATA
Monitor
Monitor Type None.
Graphics Controller
Type Integrated
Graphics Processor Intel HD Graphics
Video Interfaces VGA, DVI
Max Monitors Supported 2
Audio Output
Type Integrated
Sound Output Mode Stereo
Compliant Standards High Definition Audio
Input Device
Type Mouse, keyboard
Keyboard
Keyboard Name Lenovo Slim USB Keyboard
Interface USB
Mouse
Technology Optical
Interface USB
Networking
Type Integrated
Ethernet Controller Realtek RTL8111E
Data Link Protocol Ethernet, Fast Ethernet, Gigabit Ethernet
Features Wake on LAN (WoL)
Expansion / Connectivity
Bays 1 (total) / 0 (free) x external 5.25″ x 1/2H
1 (total) / 0 (free) x internal 3.5″ x 1/3H

Slots 2 (total) / 1 (free) x DIMM 240-pin
1 (total) / 0 (free) x CPU
1 (total) / 1 (free) x PCIe 2.0 x16 – half-length, full-height
2 (total) / 2 (free) x PCIe 2.0 x1 – half-length, full-height

Interfaces 6 x USB 2.0 ( 2 front, 4 rear )
2 x microphone ( 1 front, 1 rear )
1 x headphones ( 1 in front )
1 x LAN (Gigabit Ethernet)
1 x VGA
1 x DVI-D
1 x audio line-in
1 x audio line-out
1 x serial
1 x parallel

Miscellaneous
Features Security lock slot (cable lock sold separately), administrator password, hard drive password, power-on password, boot without keyboard or mouse, USB port control, boot sequence control, padlock loop
Compliant Standards RoHS
Manufacturer Selling Program TopSeller
Power
Device Type Power supply
Nominal Voltage AC 120/230 V ( 50/60 Hz )
Power Provided 180 Watt
Operating System / Software
OS Provided Windows 8 Pro 64-bit / 7 Professional 64-bit Edition downgrade
Preinstalled OS Windows 7
Microsoft Office Preloaded Includes a pre-loaded image of select Microsoft Office 2010 suites. Purchase an Office 2010 Product Key Card or disc to activate preloaded software on this PC.
Software ThinkVantage Power Manager, ThinkVantage Rescue and Recovery, Adobe Reader, Skype, ThinkVantage System Update, Lenovo Password Manager, Windows Live Essentials, Norton Internet Security (30 days subscription), ThinkVantage Product Recovery, Corel DVD MovieFactory Lenovo Edition, Corel Burn.Now Lenovo Edition, Lenovo Simple Tap, Lenovo Message Center Plus, ThinkVantage Communication Utility, ThinkVantage View Management Utility, Lenovo Solution Center
Manufacturer Warranty
Service & Support 1 year warranty
Service & Support Details Limited warranty – 1 year – on-site – response time: next business day

Call (619) 325-0990 to order your Lenovo ThinkCentre Edge 72 3484  today!

Buy of the Week offer valid through September 27, 2013.
Note: Shipping and taxes apply.
Looking for something else? Check out our monthly deals or contact us to get a quote on the product you’re searching for.

Thursday, September 19, 2013

What you should know before you upgrade to iOS 7

calls
Major changed in the interface. Geared towards children…

Apple’s iOS 7 is out and the temptation to snag the software update immediately is hard to resist.  But you may want to do some research before you make the switch, because there’s no going back.
The complete redesign of the interface at first looks cool and high-tech.  The interface icons appear to float over the background, giving the control center a 3-D effect.  Zooming animations fly in and out when navigation through quick-access tools.  Browser windows open in Safari are now vertically scrolling rectangular cards and not limited to just 8.
But are these really better features for iPhones and iPads?  Does this make the iOS 7 more efficient for users or does it just make it more interesting?
I know for those who suffer with Vertigo, don’t do it!  Do not make the switch!

Unfavorable

Functionality
The icons that fly into the screen when unlocked,  makes the interface seem more like a video game…kind of pointless. This can cause delays and glitches within the system. Not to mention become distracting and uses more battery life. Why would we want navigating through the interface to use up more battery life than we already do with our obsessive usage of devices anyway?
To navigate through the interface a few extra clicks on the home button are necessary to exit out of quick-access tools. Extra clicks, means extra time, and extra thinking.

ios7-vs-ios6-icons
Gradients have been removed and icons are enlarged and changed in the iOS 7.

The Wallpapaer
The background image is now enlarged, being cut off of the screen. There is no way to rescale the image to fit into the interface and experimenting with different backgrounds may take a lot of time. The font is also thinner and  white, so this makes it harder to read on certain backgrounds.

iOS7-wallpaperhttp://www.hyphenet.com/blog/know-upgrade-ios-7/

Keyboard
There are no keyboard improvements. Autocorrect works the same as it did before, requiring you to “x” out the suggested text or else it will automatically replace your word. You still need to toggle through the keyboards to insert numbers, even though there is more real-estate on the iPhone 5, 5c, and 5S.

Apps
If your device is jailbroken, apps like Activator, Browser Chooser, Winterboard and others are not optimized for the iOS 7 yet.
The iOS 7 is definitely a change from the past six years for Apple, but are these real improvements or is it more appealing to the eye? The colors are incredibly vibrant and saturated, this reminds me of Candy Crush. Did Apple really think the rainbow colored interface would appeal to everyone?
These are some characteristics of the new iOS 7 which can be a little annoying, but is it enough to make a user not want to switch over to the new Operating System?  Lets review the more favorable features of the iOS 7.

Favorable

The Design
The iOS 7 design has put the spotlight search on all screens instead of only the home screen.  Folders hold multiple screens of items not limited to 9 or 12 anymore.  There is an emphasis on thin lines and transparency for a more sleek design.  Font sizes can now be changed to a larger font for all screens through the Settings .

Notifications
The Notification pull-down menu, shows you all alerts at once and gives you tabs showing all notifications. This includes calls and messages you have missed. Although, once the notification is up, it takes up the whole screen instead of a pop-up. You can now access the notification center from the lock screen.


Browser
The window browser is more flexible, instead of swiping left and right to view open windows, they now preview vertically. Scroll bars disappear until you need them, and bookmark tabs are now at the top of your screen.
The Reading List allows you to scroll from one story to the next by scrolling to the bottom of a story.

Control Center
You no longer have to go into the Settings app to access the control center. Swipe up to access the control center overlay. You can now access the free flashlight, camera, calculator, and alarm all in the new control center tab.

Camera
The camera app shows you how certain filters would look before you take a picture. It also lists all your shooting modes so you can switch from panoramic to continuous shots in an instant.
iOS 7 treats photos as a timeline unlike iOS 6 that organized your photos into albums. The timeline photos show up as a mosaic, so you can zoom into the photos to navigate more easier.


AirDrop
Apple iOS 7 has a completely new design and has added features like AirDrop and iTunes Radio. AirDrop is a file sharing functionality that works by creating local ad hoc networks among nearby users. It offers a seamless way to transfer photos, videos, and other data via email using its Bluetooth connection to find other devices.

iTunes Radio
Much like Pandora, Apple’s new iTunes Radio include features with radio stations you can build around your favorite artists.

Activation Lock
Activation Lock in iOS 7 will not allow your device to be opened if stolen. A custom message can be made alerting anyone who may find this device how to contact you. You can enable this feature from iCloud.com and enter your device into “Lost Mode”.


The new interface will require an adjustment, but Apple does it’s research, and overall I think the iOS 7 is a good makeover.  If you’re not ready to commit, that’s fine.  Make sure before you upgrade you have some time to familiarize yourself with the new system.
What are your thoughts on the iOS 7?  Have you found any tricks or glitches in the system so far?  Feel free to let us know!
Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+

References:
Massive makeover makes iOS feel new again – C|Net
http://reviews.cnet.com/operating-systems/apple-ios-7/4505-3671_7-35781767-2.html
September 19, 2013
7 Misses In iOS 7 – Forbes
http://www.forbes.com/sites/markrogowsky/2013/09/18/7-misses-in-ios-7/2/
September 18, 2013
Why You Might Want To Wait Before Upgrading To iOS 7 – ReadWrite
http://readwrite.com/2013/09/18/ios-7-upgrade-why-wait#awesm=~ohU0XCEa7RV4iy
September 18, 2013

Wednesday, September 18, 2013

Chinese Hackers Linked to Huge Cyber Attacks

Chinese hackers are now being linked to the biggest espionage attacks in history.  Symantec revealed this group is the most technically advanced of several dozen thought to be running  cyber espionage enterprises out of China.

Symantec sells software and other services to protect corporate and user computer systems from cyber attacks, and is also used by hackers in Operation Aurora.



“Cyber China” From Operation Aurora to China Cyber attacks Syndromehttp://www.hyphenet.com/blog/chinese-hackers-linked-to-huge-cyber-attacks/


Symantec has a 28 page report describing this “Hidden Lynx,” as a professional organization which staffs between 50 to 100 people all geared towards stealing information and breaching networks.

The company stated their researchers believe Hidden Lynx might be responsible for the 2009 Operation Aurora attacks.  The most well-known cyber espionage company uncovered to date.

Operation Aurora is known for attacks on Google’s Gmail, Adobe Systems, and 30 other high profile companies.

In January 2010, Google disclosed the attacks in which hackers tried to read Gmail communications of human rights activists and to access then change source code at targeted companies.

A Symantec researcher Liam O’Murchu said the company was not able to determine which people were behind Hidden Lynx or if it was linked to the Chinese government or not.

Although, there was a separate study released in February from Mandiant, a firm that follows Chinese hackers, saying that a secret unit of the Chinese military was engaged in the cyber espionage on the United States.

Symantic reports several attacks to Hidden Lynx, including a breach at a cybersecurity firm Bit9 and follow-on attacks at three Bit9 clients.

Hidden Lynx is also connected to a campaign dubbed Voho, which was spotted last year by EMC’s Corp RSA’s security company.  Voho targeted hundreds of organizations, financial services, technology departments, healthcare companies, and government agencies.




References:
Hackers for hire: Group in China linked to big cyber attacks – South China Morning Post
http://www.scmp.com/news/china/article/1312131/hackers-hire-group-china-linked-big-cyber-attacks
September 18, 2013
Google Hack Attack Was Ultra Sophisticated, New Details Show – WIRED
http://www.wired.com/threatlevel/2010/01/operation-aurora/
January 14, 2010

Tuesday, September 17, 2013

Buy of the Week – Netgear R6300 – Wireless Router for only $220!


netgear-routerhttp://www.hyphenet.com/blog/buy-week-netgear-r6300-wireless-router-220/


This Netgear R6300 Wireless router 802.11 a/b/g/n/ac is up to 3x faster than the 802.11.  This router has HD streaming throughout your home, is compatible with next generation Wi-Fi devices, and is easy to manage, monitor and repair your network.

The Netgear R6300 makes any printer AirPrint compatible to print from an iPad or iPhone.


Main Specifications
Product Description NETGEAR R6300 – wireless router – 802.11 a/b/g/n/ac – desktop
Device Type Wireless router – 4-port switch (integrated)
Enclosure Type Desktop
Data Link Protocol Ethernet, Fast Ethernet, Gigabit Ethernet, IEEE 802.11b, IEEE 802.11a, IEEE 802.11g, IEEE 802.11n, IEEE 802.11ac
Frequency Band 2.4 GHz, 5 GHz
Features Firewall protection, auto-sensing per device, Stateful Packet Inspection (SPI), DoS attack prevention, IPv6 support, parental control, Quality of Service (QoS), Green Ethernet, ReadySHARE, Push ‘N’ Connect button
Compliant Standards IEEE 802.11b, IEEE 802.11a, IEEE 802.11g, Wi-Fi CERTIFIED, IEEE 802.11n, DLNA CERTIFIED, IEEE 802.11ac
Dimensions (WxDxH) 8.1 in x 10 in x 3 in
Weight 23.1 oz
Microsoft Certification Compatible with Windows 7
Localization North America
Manufacturer Warranty 1 year warranty

Extended Specifications
Device Type Wireless router – 4-port switch (integrated)
Enclosure Type Desktop
Connectivity Technology Wireless, wired
Data Link Protocol Ethernet, Fast Ethernet, Gigabit Ethernet, IEEE 802.11b, IEEE 802.11a, IEEE 802.11g, IEEE 802.11n, IEEE 802.11ac
Frequency Band 2.4 GHz, 5 GHz
Encryption Algorithm WPA, WPA2, WPA-PSK, WPA2-PSK
Features Firewall protection, auto-sensing per device, Stateful Packet Inspection (SPI), DoS attack prevention, IPv6 support, parental control, Quality of Service (QoS), Green Ethernet, ReadySHARE, Push ‘N’ Connect button
Compliant Standards IEEE 802.11b, IEEE 802.11a, IEEE 802.11g, Wi-Fi CERTIFIED, IEEE 802.11n, DLNA CERTIFIED, IEEE 802.11ac
RAM 128 MB
Flash Memory 128 MB

Expansion/Connectivity
Interfaces LAN : 4 x 10Base-T/100Base-TX/1000Base-T – RJ-45
WAN : 1 x 10Base-T/100Base-TX/1000Base-T – RJ-45
USB 2.0 : 2 x 4 pin USB Type A

Call (619) 325-0990 to order your NETGEAR R6300 Wireless Router today!

Buy of the Week offer valid through September 20, 2013.

Note: Shipping and taxes apply.

Looking for something else? Check out our monthly deals or contact us to get a quote on the product you’re searching for.

Iranians had Social Media Access due to Glitch

Monday evening, Iranians had a few hours of access to their Facebook and Twitter accounts due to a technical glitch in the system.  This was the first time in four years Iranians were able to get into their social media accounts because the government has put a ban on them from protests of the Islamic revolution.
This was the first time they gained access to their accounts without having to get around a firewall, put on by the government.


iranian-tweethttp://www.hyphenet.com/blog/iranians-social-media-access-due-glitch/


Speculation of the eased censorship points toward President Hassan Rouhani, who succeeded Mahmoud Ahmadinejad last month.  The re-election in 2009 sparked demonstrations, which social media played a large part of.

Although, access has been blocked again, Abdolsamad Khoramabadi, secretary of a state committee, said technical difficulties with Iranian Internet service providers (ISP) had allowed access most likely caused by a technical malfunction caused the problem.

Service providers are being investigated.

Officials, including Foreign Minister Mohammad Javad Zarid, have created Facebook and Twitter profiles, hoping the sites would be soon unblocked for them to access.

Many Iranians use proxy servers to trick the system into believing they live elsewhwere to access the social media sites.

Arash Tajik, an IT administrator in Tehran, said he thought the blip, which meant he could get into his Facebook without a proxy server at his office Monday, was a test.  Because on Tuesday when he tried to access it from home, no longer worked.

Signs of Change

President Rouhani, has pledged to relax political and social media restrictions in Iran has not claimed responsibility.

The lift could have also been a trend in diplomacy, noting Forign Minister Javad Zairf tweeted “I had a very constructive meet in Bishkek with Chinese Foreign Minister, followed by an excellent hour-long meet between the two presidents.”


javad-zarifhttp://www.hyphenet.com/blog/iranians-social-media-access-due-glitch/

International executives at Facebook and Twitter had no comment on the development.
One Iran expert based abroad said controls had briefly been removed not only with Twitter and Facebook but for other sites including pornographic ones.  This is due to a SSL Web security tool.

Amin Sabeti, a British-based expert on the Internet in Iran stated, “Iran has invested millions of dollars for its filtering system and it is clear that the regime will not give up Internet censorship very easily.”

Other signs of  relaxed social controls is Mohammad Javad Zarif, and Supreme Leader Ayatollah Ali Khamenei,  using their Facebook and Twitter profiles to engage users and publicize ideas.

Some are still speculating it is an experiment for the U.S. to use the social media sites, like Google uses technology, to block certain kinds of activity.

Arash Tajik, an IT administrator in Tehran, said he believed this was done by authorities, that they are testing the situation to see what happens and if they can control the situation or not.

Do you think the block should be taken off  the Iranians?  Please share your thoughts below.

Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet, “Like” us on Facebook or add us to your circle on Google+.

References:
‘Glitch’ gave Iran social media access – Aljazeera
http://www.aljazeera.com/news/middleeast/2013/09/201391781149630189.html
September 17, 2013
Iran ends brief social media access, calls it glitch – Yahoo News
http://news.yahoo.com/technical-glitch-gives-iranians-access-facebook-twitter-official-080556704–sector.html
September 17, 2013