Consider IT
Consider IT

Tag: cyber security

2FS blog
November 24, 2023

Strengthening Cyber security Defences: The Crucial Role of Two-Factor Authentication

Have you implemented two-factor-authentication (2FA) across your organisation? While promoting the adoption of robust passwords is essential, the reality is that various vulnerabilities still exist. For example, employees using identical passwords across multiple platforms or storing sensitive information within their browser are common practices that pose potential risks. Consider the scenario where a laptop is lost or stolen—such a situation could easily lead to a compromise of your systems.

As technology advances, so do the tactics employed by cyber criminals. It is crucial for organisations to adopt robust cyber security measures to safeguard sensitive information and maintain the trust of their clients. At Consider IT, we recognise the significance of 2FA as a core component of a comprehensive cyber security strategy, and we implement it as a mandatory element of our managed services. Here’s why.

The Rising Threat Landscape:

Cyber security threats have become more sophisticated, with attackers employing advanced techniques to exploit vulnerabilities and gain unauthorised access to confidential data. As a result, businesses are compelled to fortify their defences to protect against an array of threats, including phishing attacks, password breaches, and identity theft.

The Role of your IT provider:

Implementing two-factor authentication is not just a recommended practice but a fundamental necessity in today’s cyber threat landscape. As trusted guardians of their clients’ digital infrastructure, IT providers (like Consider IT) recognise the critical importance of 2FA. By integrating this additional layer of security into the systems they manage, IT providers enhance identity verification, mitigate the risks associated with password vulnerabilities, and fortify against evolving cyber threats. If your IT provider hasn’t mentioned 2FA to you, you should ask them why.

Understanding Two-Factor Authentication:

Two-factor authentication adds an extra layer of security by requiring users to provide two forms of identification before granting access to sensitive systems or data. Typically, this involves something the user knows (e.g. a password) and something the user has (e.g. a mobile device or a security token). This additional layer of authentication significantly reduces the risk of unauthorised access, even if passwords are compromised.

Enhanced Security with 2FA:

Consider IT advocates for the widespread adoption of 2FA as a powerful tool to mitigate the risks associated with single-factor authentication. Passwords alone are no longer sufficient to protect against determined cyber criminals. 2FA acts as a robust deterrent, adding an extra barrier that significantly reduces the likelihood of unauthorised access, even in the event of compromised credentials.

Benefits of Two-Factor Authentication:

Improved Identity Verification:

2FA ensures that users are who they claim to be, offering a higher level of confidence in identity verification. This is crucial in preventing unauthorised access to sensitive systems and data.

Mitigation of Credential-Based Attacks:

Password breaches are a common method employed by cybercriminals. 2FA reduces the impact of compromised passwords by requiring an additional form of authentication, preventing unauthorised entry.

Enhanced Remote Security:

With the rise of remote work, securing access to corporate systems from various locations is paramount. 2FA provides an additional layer of protection, reducing the risk of unauthorised access from external networks.

Compliance Requirements:

Many industry regulations and compliance standards mandate the use of multi-factor authentication to protect sensitive information. Extra protections help you avoid potential legal and financial repercussions.

About Consider IT

Consider IT, as a forward-thinking IT support and cyber security provider, knows the importance of integrating two-factor authentication into the core of a business’s cyber security strategy. In an era where cyber threats are ever-evolving, embracing robust measures like 2FA is crucial to safeguarding sensitive information, maintaining trust, and ensuring long-term security and success.

Additionally, Consider IT offers a comprehensive suite of cyber security services designed to fortify your digital infrastructure against evolving threats. Our expert team specialises in Cyber Essentials, ensuring your organisation adheres to essential cyber security standards. We conduct thorough penetration testing to proactively identify and address vulnerabilities in your systems, while our vulnerability assessments provide a comprehensive overview of potential risks. In the event of a security incident, our rapid and effective incident response ensures minimal impact on your operations. Committed to industry best practices, Consider IT holds multiple cyber security accreditations, including Cyber Essentials Plus and CREST. For a detailed overview of our certifications and a deeper understanding of how we can safeguard your digital assets, please visit our website here.
If you’d like to learn more about our Cyber and Managed IT services, please get in touch today for a chat with our friendly team.

November 24, 2023
0
Onboarding blog
November 15, 2023

Navigating the IT Support Onboarding Process: A Comprehensive Guide

Taking on a new IT Support provider can seem quite daunting, whether you’re entirely new to the world of IT support, or switching from an existing provider. The prospect of handing over your organisation’s crucial technological infrastructure to a new partner can be overwhelming. However, this transition doesn’t have to be as scary as it might initially appear. At Consider IT, we strive to make the process as seamless and reassuring as possible. Our experienced team is well-versed in guiding clients through these transitions, ensuring that your IT systems continue to run smoothly without any significant disruptions. We understand your concerns, and we’re here to provide the expertise and support necessary to make the transition a positive and productive experience. Here’s a short guide to show you what a typical onboarding process looks like at Consider IT:

Initial Audit 

The onboarding process typically begins with an initial audit of your current IT. During this stage, a comprehensive evaluation of your existing IT infrastructure will be conducted. This includes hardware, software, networks, security protocols, and any existing IT-related issues. The goal is to gain a deep understanding of your specific needs and challenges.

Setting Objectives and Expectations

After the assessment, clear objectives and expectations will be set out. This includes defining service level agreements (SLAs), response times, and the scope of services provided. 

Planning and Customisation

Based on the needs analysis and agreed-upon objectives, a customised service plan will be put in place. This plan outlines the specific services that will be provided, such as helpdesk support hours, software updates, security monitoring, and any other IT-related tasks that you may require.

Knowledge Transfer

To get up and running smoothly, we want to know as much as possible about your IT. This may include knowledge transfer sessions with appropriate personnel and our Client Success Manager and sharing all relevant documentation regarding your IT systems.

Deployment and Migration

Once the service plan is established, Consider IT will begin the deployment and migration phase. This may involve setting up monitoring tools, configuring software, and ensuring that all systems are running optimally. During this phase, we may also work closely with the client’s in-house IT personnel or previous IT Support provider to ensure a seamless transition.

Ongoing Support and Maintenance

With the initial setup and training completed, Consider IT would continue to monitor your systems and provide ongoing support. This includes proactive monitoring of network security, software updates, and addressing any issues that arise. Regular performance assessments and reporting help ensure that the IT infrastructure is meeting the agreed-upon objectives.

Review and Reporting

The IT support onboarding process doesn’t end once systems are up and running smoothly. Regular reviews and optimisation are crucial to ensure our IT support services continue to meet your evolving needs. This phase involves assessing the effectiveness of the services and making necessary adjustments to keep the IT infrastructure aligned with your business goals.

About Consider IT

If you are considering taking on or replacing an IT support provider, we hope this gives you some comfort that the onboarding process isn’t as daunting as it may seem. 

At Consider IT, we take pride in our knowledgeable and friendly team of IT professionals who go the extra mile to ensure a smooth transition and uninterrupted operations. Our ultimate aim is to become a part of your team. Our dedicated experts understand the common IT challenges faced by individuals and businesses alike. From password resets to complex network issues, we have the expertise to handle it all, ensuring your technology operates seamlessly.

What sets Consider IT apart is our commitment to building strong relationships with our clients. We believe in fostering open communication and a transparent approach. Our team actively listens to your concerns, tailoring solutions that perfectly fit your unique requirements. We are also one of the few IASME certifying bodies in Scotland, making us uniquely qualified to award the Cyber Essentials accreditation. We are dedicated to ensuring that all our clients adhere to the essential baseline cyber security controls necessary for safeguarding their digital assets. This is just one of the many cyber security accreditations we hold in our dedication to providing top-notch security solutions for our clients. If you’d like to lean more about this, visit our awards and accreditations page on our website.

When you choose Consider IT, you gain more than just technical support; you gain a reliable and responsive partner. We proactively monitor your systems, identifying potential issues before they escalate into problems. Our goal is to empower you with the right tools and knowledge to harness technology efficiently, enabling your business to thrive.

Get in touch today to speak to one of our experts about your business.

November 15, 2023
0
7 ways IT Support Services can transform your company
November 3, 2023

7 Ways IT Support Services Can Transform Your Company

Have you ever had one of those weeks when technology fails you? Maybe you’ve forgotten your password, or the internet has gone down, or your printer has completely malfunctioned. OR, on a more serious note, your computer has been infected with a virus or malware. From little issues to larger ones, these problems can really affect your productivity throughout the day.

That’s why many successful businesses outsource their IT. In a fast-paced business environment you want quick problem solving, and proactive management of all your IT systems. Not to mention, you need to be protected from cyber attacks which can prove to be devastating for many organisations.

The worst mistake business owners can make is discounting the importance of a strong IT infrastructure, and its role in keeping you competitive. Here are the main reasons why:

1. Rapid Issue Resolution:

Effective IT support services are the backbone of any organisation’s IT infrastructure. They provide timely and efficient solutions to technical problems, ensuring that employees can work with minimal disruption. By swiftly addressing IT issues, businesses can maintain their productivity, thereby increasing their competitive edge. The faster your technology-related challenges are resolved, the quicker you can return to focusing on what matters most: your core business operations.

2. Proactive Monitoring and Maintenance:

IT support services offer proactive monitoring and maintenance of your IT systems. They can identify potential problems before they become major issues. This proactive approach not only prevents downtime but also helps in optimising system performance. By avoiding unexpected outages and improving the overall efficiency of your IT infrastructure, you can better allocate your resources and maintain a competitive advantage.

3. Data Security and Compliance:

Data breaches and cyber attacks are significant threats to businesses large and small. IT support services are well-equipped to handle these threats by implementing robust security measures, such as firewalls, intrusion detection systems, and antivirus software. They also help businesses comply with industry-specific regulations and data protection laws. Ensuring the security and integrity of your data not only protects your company but also helps build trust with your customers, contributing to your competitive edge.

4. Scalability and Flexibility:

As your business grows, your IT needs will evolve as well. IT support services are adaptable and can scale up or down according to your requirements. They can help you seamlessly integrate new technologies and services to accommodate growth or changes in the market. This flexibility ensures that your IT infrastructure remains agile, allowing you to respond quickly to market developments and maintain your competitive position.

5. Access to Expertise:

With IT support services, you gain access to a team of IT experts with a wide range of skills and knowledge. They stay up-to-date with the latest industry trends, technologies, and best practices. Leveraging their expertise can help you implement innovative solutions and stay at the forefront of your industry. Additionally, they can provide guidance on technology investments, ensuring that your resources are allocated strategically. 

6. Cost Efficiency:

Outsourcing IT support services can often be more cost-effective than maintaining an in-house IT team. It eliminates the need for hiring, training, and retaining specialised IT personnel, along with the associated overhead costs. This cost efficiency allows you to allocate your budget to other critical areas of your business, further strengthening your competitive edge.

7. Focus on Core Competencies:

By delegating IT management and support to experts, your internal teams can focus on what they do best—developing and enhancing your products or services, expanding your customer base, and exploring new opportunities. This sharpens your core competencies and enables your business to excel in its primary mission, which is essential for staying competitive.

About Consider IT

Consider IT is a trusted Managed Service Provider with offices in Edinburgh, Glasgow, London and Austin, Texas. With our team of experts and a wealth of experience, we offer comprehensive solutions that empower businesses to thrive in an ever-changing landscape. Beyond providing top-notch day-to-day IT support, we are also an accredited IASME certifying body, ensuring that all our clients are fully compliant with the baseline controls for Cyber Essentials. If your business aims to go the extra mile and attain accreditation, we can issue you with the necessary certificate, solidifying your commitment to data security and building trust with your customers. 

Want to know more about how Consider IT can help you keep your competitive edge? Get in touch today for a chat with one of our experts at hello@considerit.com.

November 3, 2023
0
CS awareness month (1)
October 11, 2023

Have you considered your Cyber Security defences this Cyber Security Month?

Have you thought about your cyber security lately? If you haven’t, you just need to take one glance at the news to see why you should. Cyber attacks are on the increase, and many companies are falling victim to the ever increasing problem. Just last week, we saw the tragic downfall of KNP Logistics Group, a haulage company with a 158 year legacy falling victim to a vicious ransomware attack. The June 2023 attack ultimately resulted in the company’s administration and the loss of 730 jobs. In the same week, the Royal Family were even targeted when their website was temporarily taken down by Russian hackers. No one is immune to cyber attacks, but there are ways that you can strengthen your defences against them. Now is the perfect time to explore essential strategies to safeguard against cyber threats as we observe Cyber Security Month this October. 

The Business Imperative for Cyber Security Awareness

Protecting Sensitive Data: As a business, you store vast amounts of sensitive data, including customer information, intellectual property, and financial records. A data breach not only jeopardises this critical information but also damages your reputation and finances.

Regulatory Compliance: Many industries are subject to strict data protection regulations, such as GDPR in Europe or HIPAA in the healthcare sector. Non-compliance can result in hefty fines and legal consequences.

Financial Impact: Cyber attacks can lead to direct financial losses due to theft, ransom payments, or business interruption. Additionally, the costs associated with investigating and mitigating an attack can be substantial.

Reputation Management: A cyber security incident can destroy customer trust and confidence. Your business may find it challenging to regain your reputation even after addressing the breach.

Strategies to secure your business this Cyber Security Awareness Month

Conduct Risk Assessments: Begin by assessing your organisation’s cyber security risks. Identify vulnerabilities, and the most critical assets that need protection. Specialist IT providers such as Consider IT can carry these out for you.

Develop a Cyber security Policy: Create a comprehensive cyber security policy that outlines best practices, employee responsibilities, incident response procedures, and compliance requirements. Ensure all employees are aware of and adhere to this policy.

Employee Training and Awareness: Invest in cybersecurity training for employees at all levels. Teach them how to recognise phishing attempts, practice safe password management, and report security incidents promptly.

Regular Updates and Patch Management: Keep all software, operating systems, and security tools up to date. Regularly apply patches and updates to address known vulnerabilities.

Implement Strong Access Controls: Limit access to sensitive data and systems to authorised personnel only. 

Secure Your Network: Invest in robust firewalls, intrusion detection systems, and encryption protocols to protect your network infrastructure from cyber threats.

Implement 2-factor Authentication: Add an extra layer of protection to your passwords to prevent unauthorised access to company data.

Data Backup and Recovery: Regularly backup critical data, and ensure that you have a tested and effective data recovery plan in place. This can be crucial in the event of a ransomware attack or data breach.

Incident Response Plan: Develop a well-defined incident response plan that outlines steps to take in the event of a cyber security incident.

Get Cyber Essentials Accredited: Add an extra layer of trust with your customers and stakeholders by getting Cyber Essentials Certified. Cyber Essentials is a government-backed scheme that ensures organisations adhere to fundamental cyber security principles, providing a crucial defence against common cyber threats

Consider talking to your IT Partner

At Consider IT, cyber security is our top priority. We are dedicated to assisting our clients in fortifying their digital defences to safeguard their sensitive information and operations. This Cyber Security Month, we invite you to reach out to us for a complimentary cyber security assessment. Consider IT is an IASME certifying body, and as such our expert team will work with you to achieve Cyber Essentials accreditation and compliance. Reach out today to learn more.

October 11, 2023
0
Ashley Madison data breach
August 30, 2023

Ashley Madison: How lax cybersecurity resulted in mass privacy violations

Have you watched the new documentary on the Ashley Madison scandal yet? If you haven’t, here’s the cliff notes, and the lessons that can be learned from this famous cyber attack.

This breach not only exposed the personal lives of millions but also ignited discussions on digital privacy, cybersecurity, and the ethical implications of such breaches.

Ashley Madison: who are they and what happened?

In July 2015, a group of hackers collectively known as “The Impact Team” targeted Ashley Madison, a dating website with the aim of connecting people who wish to step outside of their marriage and cheat on their partners.

The site promised users anonymity and security – promising to fuel your illicit affair with the ultimate privacy and secrecy. In fact, they went so far as to latch on to viral cheating scandals, with the message “Should have used Ashley Madison”, to highlight the safety of the site. This included Republican Mark Sandford – at the time he was the Governor of California and was running for Congress in a special election and his affair had previously been exposed. A billboard (right) was advertised with his face and the message “Next time use ashleymadison.com to find your ‘running mate’.”

To give users even more peace of mind, Ashley Madison  offered a “full delete” service. For the price of $19, all user information would be deleted from their servers – just like it never happened. However, that wasn’t quite true. Despite netting almost $1.7 million in 2014 for this feature, it didn’t quite work as advertised. While some data was indeed removed, things like credit card information with their full name and address, and other factors such as gps data, city, state, country, weight, height, date of birth, gender, ethnicity and sexual preferences were not – all of which may be enough to identify individuals.

Despite Ashley Madison’s declarations that finding your affair partner is much safer on their site, the hackers successfully infiltrated their security systems and obtained an extensive database containing user information, including names, email addresses, payment details, and even intimate fantasies. And how did they manage that? Well, it turns out that their cyber security measures left much to be desired. In fact, investigations showed that a disgruntled ex employee still had “uber-god” admin access to their systems, showing just how lax their security procedures were.

The hackers then threatened to publish the stolen data unless Ashley Madison and its affiliated site, Established Men, were shut down permanently. When the parent company, Avid Life Media, refused to comply, the hackers followed through on their threat, releasing sensitive user data in August 2015. This marked one of the most high-profile and consequential data breaches in history.

The fallout: Privacy Violations and Emotional Turmoil

The aftermath of the Ashley Madison breach was nothing short of catastrophic. The leaked data, which included personal details of over 30 million users, exposed countless individuals to public humiliation, ruined relationships, and damaged careers. The breach hit not only the users of the site but also their families, sparking heated debates about the ethics of hacking, cyberbullying, and the right to privacy in a digital age.

The breach had particularly severe consequences for public figures and individuals living in countries with conservative social norms, where extramarital affairs can lead to legal and societal repercussions. The emotional toll experienced by victims served as a stark reminder that data breaches have real-world ramifications beyond the digital realm. 

Many of the exposed users were then targeted by individuals who threatened to expose that they were part of the data leak to their family, friends and employer unless they paid a hefty ransom.

Some of these users ended their lives as a result of the breach, including a pastor of a small church.

Ashley Madison were also sued by a group of users who had been adversely affected by the breach, and they were ordered to pay $11.2 million in damages. The CEO, Noel Biderman also stepped down from his role at the end of August 2015. This breach was particularly embarrassing for him, as his full email inbox and shady business practices were released as part of the information dump.

Lessons Learned: Digital Privacy and Cybersecurity

The Ashley Madison data breach highlighted several critical lessons for individuals, companies, and policymakers alike:

Robust Security Measures: Companies handling sensitive user data must prioritise cybersecurity. Strong encryption, regular security audits, strong employee onboarding and offboarding procedures, and proactive measures to defend against potential attacks are imperative to safeguarding user information.

Incident Response Procedures: In this day and age cyber attacks are almost inevitable, but you can put measures in place to respond to threats quickly and efficiently. Having an incident response plan significantly reduces the risk to your business, and will help you bounce back quicker after experiencing a breach.

Transparent Data Handling: Transparency in data collection, storage, and usage is crucial. Users have the right to know how their information will be used and protected, fostering trust between companies and their customers.

User Education: Individuals must be educated about the risks of sharing personal information online and the potential consequences of data breaches. Practising good digital hygiene, such as using unique passwords and enabling two-factor authentication, can significantly reduce vulnerability.

Legal and Ethical Considerations: The breach highlighted the need for robust legal frameworks that address both hacking and the responsible use of leaked data. Ethical discussions around exposing sensitive information also gained prominence, raising questions about the role of hackers as vigilantes or villains.

How can you protect your company from a data breach?

While I’m sure your business isn’t quite as…questionable…. as the one highlighted in this article, the message remains the same – cyber breaches can not only harm you and your business, it can bring extreme harm to your customers. 

At Consider IT, cyber security is a top priority. We ensure all of our customers comply with the standards of Cyber Essentials so they are protected from any data breaches or cyber attacks – even if they don’t want the certification. Cyber Essentials is a UK government-backed cyber security certification scheme that sets out a baseline of technical controls for organisations of all sizes to protect themselves against common cyber threats. 

Consider IT is one of the few Information Assurance for Small and Medium Enterprises (IASME) certified bodies in Scotland, which means we can award the Cyber Essentials certification, and ensure you keep compliant. We offer end-to-end guidance and project management to make sure your cyber strategy is up to scratch. And if you need more peace of mind, we are also:

-A CREST accredited provider

-A trusted partner of the Cyber and Fraud Centre Scotland

-Members of the UK Cyber Security Council

-A National cyber Security Centre assured service provider

-ISO accredited in 27001, 14001, 9001

For a full list of our accreditations, visit our website here.

If you would like to know more about how we can help you get certified, get in touch today.

August 30, 2023
0
UK companies blog
June 7, 2023

UK companies Exposed to Global Data Theft: A Wake-up Call for Cybersecurity

In the latest cyber security news, a number of high profile UK companies including Boots, BBC and British Airways have fallen victim to a ransomware hacking group named Clop. The group exploited a vulnerability in the file transferring software, MOVEit. Thousands of organisations are understood to have been affected by this breach that has exposed employee’s personal data including national insurance numbers, contact information and bank details.

Zellis, a major payroll provider, confirmed that 8 of their clients were affected by the data breach, but did not name any names. 

It’s very likely that the next steps for the hacker group will be to contact the victims with a list of demands. The stolen data potentially holds immense value for those who seek to exploit it for financial gain.

This cyber attack highlights the vulnerability of even the most secure organisations when faced with sophisticated cyber threats. Beyond the immediate threat of compromised data, the incident could lead to lost revenue, reputational damage, and an erosion in customer trust for MOVEit and the companies caught in the crossfire. 

Lessons learned 

This breach serves as a wake-up call for organisations worldwide to reassess their cybersecurity practices. It reaffirms the need for constant vigilance and the adoption of proactive measures to safeguard sensitive information. Here are a few key lessons to take away:

Strengthen your Cybersecurity Infrastructure

Invest in robust security systems, firewalls, and encryption protocols to protect your business and customer data. Regular security audits and vulnerability assessments can help identify potential weaknesses and mitigate risks.

Employee Education and Awareness

Human error remains a significant factor in successful cyber attacks. Training employees to identify phishing attempts, maintain strong passwords, and practice safe browsing habits can greatly enhance your cybersecurity posture.

Multi-Factor Authentication

Implementing multi-factor authentication can provide an additional layer of protection, making it harder for unauthorised individuals to gain access to sensitive systems and data.

Continuous Monitoring and Incident Response

Establish robust incident response plans and maintain round-the-clock monitoring of networks. Prompt detection and response can limit the damage caused by potential breaches.

Is your business cyber secure?

Cyber Essentials is “essential” for anyone seeking to safeguard their data and protect against cyber threats. With the ever-increasing prevalence of cyberattacks and data breaches, having a Cyber Essentials certification demonstrates a commitment to cybersecurity best practices. It helps you establish a robust foundation for information security by implementing fundamental security controls and mitigating common vulnerabilities. 

We can help you get compliant, stay compliant, and protect your business from attacks. Get in touch today.

June 7, 2023
0
Ransomware attack
May 4, 2023

The City of Dallas ransomware attack: What can we learn?

According to media reports the City of Dallas has fallen victim to a ransomware attack that has affected several critical systems and services, including 911 emergency response, financial transactions, and public communications. The attackers, a group named “Royal Ransomware”, are believed to have gained access to the City’s systems via phishing attack.

Phishing attacks typically involve fraudulent emails, text messages or phone calls that appear to come from a reputable source (for example a subscription service) that can trick people into downloading malware to their device, or convince them to part with sensitive data such as credit card or bank account details. 

While the city’s IT team has responded quickly to isolate the affected systems, the attack has still caused significant disruption and inconvenience to residents and businesses. For part of the day, 911 call dispatchers had to manually write down call reports to pass to officers instead of using their automated dispatch system. Additionally, court systems went down, resulting in some jury trials being cancelled. In a media statement, officials confirmed the attack:

“”Wednesday morning, the City’s security monitoring tools notified our Security Operations Center (SOC) that a likely ransomware attack had been launched within our environment. Subsequently, the City has confirmed that a number of servers have been compromised with ransomware, impacting several functional areas, including the Dallas Police Department Website,”

“The City is currently working to assess the complete impact, but at this time, the impact on the delivery of City services to its residents is limited.”

There has been no indication as of yet if a ransom demand has been made.

What have we learned?

This incident highlights the importance of cybersecurity awareness, education, and resilience for all organisations, regardless of their size or sector. Here are some key takeaways from the Dallas ransomware attack:

Cyber threats are real and evolving

Ransomware attacks are a growing trend among cybercriminals, who use them to extort money from vulnerable targets. Organisations must stay informed about the latest threats and trends and implement appropriate security measures to reduce their risk exposure.

Regular vulnerability assessment is key

Organisations that don’t take stock of their cyber vulnerabilities leave themselves open to attack. Cyber criminals are a constant threat that need constant surveillance. Implementing systems to scan for vulnerabilities as they appear, regularly updating software and systems, and prioritising vulnerabilities by risk level makes it harder for criminals to access sensitive data.

Humans are the weakest link

Many cyber attacks exploit human errors and behaviour, such as clicking on suspicious links or downloading malware. Organisations must train their employees and contractors on how to detect and avoid cyber threats, and foster a culture of cyber security awareness and responsibility. Penetration testing with phishing simulation emails can help business leaders to assess where their team is in terms of cyber security awareness, so any training gaps can be plugged.

Backup and recovery are essential 

Even if an organisation falls victim to a ransomware attack, it can minimise the impact by having a reliable incident response plan. Regularly backing up critical data and testing the recovery process can help organisations restore their operations faster and avoid paying the ransom.

We can help

Find out how to protect your business from cyber security threats by contacting a member of our team today by emailing hello@considerit.com

May 4, 2023
0
3cx hack blogl
March 30, 2023

3CX Desktop app compromised as hackers launch a supply chain attack

Consider IT will continue to monitor the situation as updates become available.

On the 29th of March malicious activity was detected as an illicit version of the 3CX VOIP desktop client has reportedly been used to target customers in a supply chain attack.

3CX’s customer list includes many high-profile companies such as American Express, Coca-Cola, McDonalds, BMW, Honda, AirFrance, NHS, Toyota, Mercedes-Benz, IKEA and HolidayInn.

Several antivirus vendors picked up the issue. The threat intel team from CrowdStrike said, “The malicious activity includes beaconing to actor-controlled infrastructure, deployment of second-stage payloads, and, in a small number of cases, hands-on-keyboard activity. “

Sophos added, “”The most common post-exploitation activity observed to date is the spawning of an interactive command shell”

The attack  is thought to have been launched by a nation-state related hacking group, but this cannot be confirmed as the situation is still unfolding.

What’s been done to combat the threat so far?

In an update, 3CX said the “issue appears to be one of the bundled libraries that we compiled into the Windows Electron app via git” and that it’s further investigating the matter. So far:

-Illicit domains have been taken down – domains contacted by the compromised library have been reported and the majority removed overnight

-New windows app in progress – 3CX are working on a new windows app that does not have the issue

-Customers have been advised to use the PWA App instead – the PWA app is completely web based and does 95% of what the electron app does

ConsiderIT have immediately taken action this morning to secure any customers using 3CX.

March 30, 2023
0
text cyber security scans you need to be aware of on blue orange overlay on image of a tablet
November 21, 2022

Cyber security scams you need to be aware of ahead of Black Friday

Cyber security is a serious threat to individuals and businesses. During the pandemic, cyber criminals honed their scamming skills, eliminated obvious red flags like typos, and cloned well-known trusted organisations websites and emails. As the holiday season approaches cyber criminals are upping their game and taking advantage of bargain hunters and people looking to save money during the cost-of-living crisis.

‘Phishing is the oldest scam in the hackers’ playbook and Black Friday is Prime time for cybercrime. Consider IT see the highest number of cyber-attacks at this time of year. It’s a numbers game and the odds are stacked in favour of the cyber criminals when millions of consumers are searching online for the best deals. Distracted consumers are impulsive and easily tricked with buy now deals and tricked into giving away sensitive data.’ Andy MaClaren, Head of Cyber Security, Consider IT

The best way to protect your personal and financial data for you and your business you need to be aware of cyber threats. Here are the most common holiday season hacker scams:

Fake websites are cloned to look like your favourite sites so you have no idea they are safe until it is too late. Bookmark legitimate sites and return to them instead of clicking on dodgy links

Malicious browser extensions can insert ads, collect browsing data, and steal your online account login credentials. Using really good anti-virus software is the first step to safeguarding you from malicious activity.

Verification code hijacking happens in the scenario where a malicious caller poses as your bank or A.N Other company to access personal or company information.  Be aware they have already accessed your email and now need you to supply a verification code to proceed with a fraudulent payment transaction. Never immediately call back and always create an extra strong secure password that is unique don’t rely on repurposing an old one like Ibiza1, Ibiza2, Ibiza3.

Non Delivery is when the gift never arrives. After payment there is no tracking number and when the consumer checks back the seller and website have disappeared and so has the money. So only buy from secure sites with SSL encryption, HTTPS and a lock icon.

Issue with order message with an urgent prompt to click to reschedule immediately. So our advice is don’t click on any link instead delete it immediately or head directly to the retailers’ website if you do have an order with the company.

Fake delivery notifications are sent out disguised at big delivery organisations such as Evri, Royal Mail and Amazon. This is a numbers game for the hackers who send out millions of messages and only need to get lucky once to wreak havoc.

Fake shopping websites are accurately cloned to look like well-known retailers so our top tip is to bookmark your favourite legit sites to avoid falling foul of hackers’ clever tactics.

Safeguard your employees, customers and your business – talk to a member of our team today about cyber essentials and our managed IT services.

November 21, 2022
0
CONSIDER IT FACEBOOK CONSIDER IT Twitter

Contact Us

0131 510 0110
hello@considerit.com
Find Us

Customer Service

Contact Us
Our Locations
Case Studies

Information

About Consider IT
Domains
Privacy Policy
Terms & Conditions
Press Enquiries

© 2023 Consider IT Limited – All Rights Reserved
Registered office: Waterview House, Edinburgh, EH6 6QU. Company Number: SC320341 | VAT number: GB 930 1862 42
Consider IT is a trading name of Consider IT Limited