Consider IT

Consider IT
Consider IT

Tag: cyber security

UK companies blog
June 7, 2023

UK companies Exposed to Global Data Theft: A Wake-up Call for Cybersecurity

In the latest cyber security news, a number of high profile UK companies including Boots, BBC and British Airways have fallen victim to a ransomware hacking group named Clop. The group exploited a vulnerability in the file transferring software, MOVEit. Thousands of organisations are understood to have been affected by this breach that has exposed employee’s personal data including national insurance numbers, contact information and bank details.

Zellis, a major payroll provider, confirmed that 8 of their clients were affected by the data breach, but did not name any names. 

It’s very likely that the next steps for the hacker group will be to contact the victims with a list of demands. The stolen data potentially holds immense value for those who seek to exploit it for financial gain.

This cyber attack highlights the vulnerability of even the most secure organisations when faced with sophisticated cyber threats. Beyond the immediate threat of compromised data, the incident could lead to lost revenue, reputational damage, and an erosion in customer trust for MOVEit and the companies caught in the crossfire. 

Lessons learned 

This breach serves as a wake-up call for organisations worldwide to reassess their cybersecurity practices. It reaffirms the need for constant vigilance and the adoption of proactive measures to safeguard sensitive information. Here are a few key lessons to take away:

Strengthen your Cybersecurity Infrastructure

Invest in robust security systems, firewalls, and encryption protocols to protect your business and customer data. Regular security audits and vulnerability assessments can help identify potential weaknesses and mitigate risks.

Employee Education and Awareness

Human error remains a significant factor in successful cyber attacks. Training employees to identify phishing attempts, maintain strong passwords, and practice safe browsing habits can greatly enhance your cybersecurity posture.

Multi-Factor Authentication

Implementing multi-factor authentication can provide an additional layer of protection, making it harder for unauthorised individuals to gain access to sensitive systems and data.

Continuous Monitoring and Incident Response

Establish robust incident response plans and maintain round-the-clock monitoring of networks. Prompt detection and response can limit the damage caused by potential breaches.

Is your business cyber secure?

Cyber Essentials is “essential” for anyone seeking to safeguard their data and protect against cyber threats. With the ever-increasing prevalence of cyberattacks and data breaches, having a Cyber Essentials certification demonstrates a commitment to cybersecurity best practices. It helps you establish a robust foundation for information security by implementing fundamental security controls and mitigating common vulnerabilities. 

We can help you get compliant, stay compliant, and protect your business from attacks. Get in touch today.

June 7, 2023
0
Ransomware attack
May 4, 2023

The City of Dallas ransomware attack: What can we learn?

According to media reports the City of Dallas has fallen victim to a ransomware attack that has affected several critical systems and services, including 911 emergency response, financial transactions, and public communications. The attackers, a group named “Royal Ransomware”, are believed to have gained access to the City’s systems via phishing attack.

Phishing attacks typically involve fraudulent emails, text messages or phone calls that appear to come from a reputable source (for example a subscription service) that can trick people into downloading malware to their device, or convince them to part with sensitive data such as credit card or bank account details. 

While the city’s IT team has responded quickly to isolate the affected systems, the attack has still caused significant disruption and inconvenience to residents and businesses. For part of the day, 911 call dispatchers had to manually write down call reports to pass to officers instead of using their automated dispatch system. Additionally, court systems went down, resulting in some jury trials being cancelled. In a media statement, officials confirmed the attack:

“”Wednesday morning, the City’s security monitoring tools notified our Security Operations Center (SOC) that a likely ransomware attack had been launched within our environment. Subsequently, the City has confirmed that a number of servers have been compromised with ransomware, impacting several functional areas, including the Dallas Police Department Website,”

“The City is currently working to assess the complete impact, but at this time, the impact on the delivery of City services to its residents is limited.”

There has been no indication as of yet if a ransom demand has been made.

What have we learned?

This incident highlights the importance of cybersecurity awareness, education, and resilience for all organisations, regardless of their size or sector. Here are some key takeaways from the Dallas ransomware attack:

Cyber threats are real and evolving

Ransomware attacks are a growing trend among cybercriminals, who use them to extort money from vulnerable targets. Organisations must stay informed about the latest threats and trends and implement appropriate security measures to reduce their risk exposure.

Regular vulnerability assessment is key

Organisations that don’t take stock of their cyber vulnerabilities leave themselves open to attack. Cyber criminals are a constant threat that need constant surveillance. Implementing systems to scan for vulnerabilities as they appear, regularly updating software and systems, and prioritising vulnerabilities by risk level makes it harder for criminals to access sensitive data.

Humans are the weakest link

Many cyber attacks exploit human errors and behaviour, such as clicking on suspicious links or downloading malware. Organisations must train their employees and contractors on how to detect and avoid cyber threats, and foster a culture of cyber security awareness and responsibility. Penetration testing with phishing simulation emails can help business leaders to assess where their team is in terms of cyber security awareness, so any training gaps can be plugged.

Backup and recovery are essential 

Even if an organisation falls victim to a ransomware attack, it can minimise the impact by having a reliable incident response plan. Regularly backing up critical data and testing the recovery process can help organisations restore their operations faster and avoid paying the ransom.

We can help

Find out how to protect your business from cyber security threats by contacting a member of our team today by emailing [email protected]

May 4, 2023
0
3cx hack blogl
March 30, 2023

3CX Desktop app compromised as hackers launch a supply chain attack

Consider IT will continue to monitor the situation as updates become available.

On the 29th of March malicious activity was detected as an illicit version of the 3CX VOIP desktop client has reportedly been used to target customers in a supply chain attack.

3CX’s customer list includes many high-profile companies such as American Express, Coca-Cola, McDonalds, BMW, Honda, AirFrance, NHS, Toyota, Mercedes-Benz, IKEA and HolidayInn.

Several antivirus vendors picked up the issue. The threat intel team from CrowdStrike said, “The malicious activity includes beaconing to actor-controlled infrastructure, deployment of second-stage payloads, and, in a small number of cases, hands-on-keyboard activity. “

Sophos added, “”The most common post-exploitation activity observed to date is the spawning of an interactive command shell”

The attack  is thought to have been launched by a nation-state related hacking group, but this cannot be confirmed as the situation is still unfolding.

What’s been done to combat the threat so far?

In an update, 3CX said the “issue appears to be one of the bundled libraries that we compiled into the Windows Electron app via git” and that it’s further investigating the matter. So far:

-Illicit domains have been taken down – domains contacted by the compromised library have been reported and the majority removed overnight

-New windows app in progress – 3CX are working on a new windows app that does not have the issue

-Customers have been advised to use the PWA App instead – the PWA app is completely web based and does 95% of what the electron app does

ConsiderIT have immediately taken action this morning to secure any customers using 3CX.

March 30, 2023
0
text cyber security scans you need to be aware of on blue orange overlay on image of a tablet
November 21, 2022

Cyber security scams you need to be aware of ahead of Black Friday

Cyber security is a serious threat to individuals and businesses. During the pandemic, cyber criminals honed their scamming skills, eliminated obvious red flags like typos, and cloned well-known trusted organisations websites and emails. As the holiday season approaches cyber criminals are upping their game and taking advantage of bargain hunters and people looking to save money during the cost-of-living crisis.

‘Phishing is the oldest scam in the hackers’ playbook and Black Friday is Prime time for cybercrime. Consider IT see the highest number of cyber-attacks at this time of year. It’s a numbers game and the odds are stacked in favour of the cyber criminals when millions of consumers are searching online for the best deals. Distracted consumers are impulsive and easily tricked with buy now deals and tricked into giving away sensitive data.’ Andy MaClaren, Head of Cyber Security, Consider IT

The best way to protect your personal and financial data for you and your business you need to be aware of cyber threats. Here are the most common holiday season hacker scams:

Fake websites are cloned to look like your favourite sites so you have no idea they are safe until it is too late. Bookmark legitimate sites and return to them instead of clicking on dodgy links

Malicious browser extensions can insert ads, collect browsing data, and steal your online account login credentials. Using really good anti-virus software is the first step to safeguarding you from malicious activity.

Verification code hijacking happens in the scenario where a malicious caller poses as your bank or A.N Other company to access personal or company information.  Be aware they have already accessed your email and now need you to supply a verification code to proceed with a fraudulent payment transaction. Never immediately call back and always create an extra strong secure password that is unique don’t rely on repurposing an old one like Ibiza1, Ibiza2, Ibiza3.

Non Delivery is when the gift never arrives. After payment there is no tracking number and when the consumer checks back the seller and website have disappeared and so has the money. So only buy from secure sites with SSL encryption, HTTPS and a lock icon.

Issue with order message with an urgent prompt to click to reschedule immediately. So our advice is don’t click on any link instead delete it immediately or head directly to the retailers’ website if you do have an order with the company.

Fake delivery notifications are sent out disguised at big delivery organisations such as Evri, Royal Mail and Amazon. This is a numbers game for the hackers who send out millions of messages and only need to get lucky once to wreak havoc.

Fake shopping websites are accurately cloned to look like well-known retailers so our top tip is to bookmark your favourite legit sites to avoid falling foul of hackers’ clever tactics.

Safeguard your employees, customers and your business – talk to a member of our team today about cyber essentials and our managed IT services.

November 21, 2022
0
CONSIDER IT FACEBOOK CONSIDER IT Twitter CONSIDER IT Linkedin

Contact Us

0131 510 0110
[email protected]
Find Us

Customer Service

Contact Us
Our Locations
Case Studies

Information

About Consider IT
Domains
Privacy Policy
Terms & Conditions
Press Enquiries

© 2024 Consider IT Limited – All Rights Reserved
Registered office: Waterview House, 37 Shore, Edinburgh, EH6 6QU. Company Number: SC320341 | VAT number: GB 930 1862 42
Consider IT is a trading name of Consider IT Limited