by Felicien | Jul 16, 2019 | Education
How Can You Encrypt Files and Folders in Windows 10, 8 or 7?
You can encrypt files and folders in Windows (vers. 7-10) using BitLocker. This Vista operating system extension has on-disk encryption as well as key management capability. It’s protected by two-factor authentication, so anyone who wants to crack the code needs a hardware key and your specified long passphrase.
Through its trusted platform module (TPM) hardware, BitLocker provides advanced security features. For instance, when encryption is only at the software level, access may be vulnerable to dictionary attacks. Hardware-level protection safeguards your system from guessing or automated attacks.
What Steps Let You Check For a TPM Chip?
Follow these steps to see if your computer has a TPM chip:
Select the Windows key + X and choose Device Manager.
Expand on Security devices.
One of the devices should read Trusted Platform Module and contain a version number.
BitLocker is typically available on these platforms:
Windows 10 on Enterprise, Pro, and Education
Windows Vista and Windows 7 on Ultimate and Enterprise
Windows 8 and 8.1 on Enterprise and Pro
Windows Server 2008 and later
How Can You Encrypt Files and Folders in Windows 10, 8, or 7?
Follow this procedure to encrypt folders and files:
In Windows Explorer, right-click on a folder or file.
From the context-menu, choose Properties.
In the dialogue box, click Advanced.
The Advanced Attributes dialogue box appears. Look for the Compress or Encrypt Attributes section.
Check Encrypt contents to secure data.
Click OK then Apply.
For folders, a Confirm Attribute Change dialogue box appears to confirm whether you want everything in the folder encrypted. Select your preference and click OK.
You can also choose to Back up your file encryption key. If you miss the message, you can access it in Notification Area for your operating system.
Make sure to plug in a USB flash drive.
Choose Back up now (recommended).
Click Next to create your certificate.
You can accept the default file format for the export.
on the next screen, select the Password: box to enter and re-enter your password.
Go to the USB drive, enter a name for the key and certificate you’re exporting and click Save. (It’s saved with as a .pfx)
Click Next, Finish, and OK.
Remove the USB drive and store it in a secure spot.
How Can You Decrypt a Folder or File?
To decrypt your file or folder:
Follow steps 1-6 above. However, uncheck the Encrypt contents to secure data box for step 4.
Now, you can unlock your drive at startup by entering a password or inserting the USB drive.
You can encrypt the whole hard drive, but the process is time-consuming. If you have a lot of data, expect to wait a long time. You’ll want to leave your computer connected to an uninterrupted power source throughout the process. You have to reboot for the changes to take place. However, you can work throughout the process.
Now you can secure your files to keep out prying eyes and hackers.
by Felicien | Jul 16, 2019 | Education
Microsoft Office 365 and Your Business: Boost Productivity with the Right Tech Tools
The workplace is becoming more and more digital every day. New tech tools are developed regularly, and most have the same goal—to make your life easier. While some new developments end up making life harder because they are hard to learn, cumbersome, or have glitches or bugs, most are specifically designed to be easy to understand and use. Getting things done faster and more efficiently is a huge driver for technology generally, but that is especially true today.
Defining the Modern Digital Workplace
The “Modern Digital Workplace” is a phrase used today that describes utilizing the technology that is most useful for your team. It helps your team by:
Making collaboration easier
Training and educating faster and more efficiently
Compiling documents and information in an easy-to-use and access way
Automating processes, to the extent possible, in a way that make sense for your industry and your team
Improving digital processes not only internally, but also with partners, suppliers, and other third parties
Technology, when used properly, can make the entire workplace run in a much smoother, more efficient way. New tools allow your team to meet the needs of customers, and the business as a whole, better. When goals are easier to accomplish, productivity gets a huge boost.
The Obvious Connection: Technology and Productivity
In general, the new digital workplace focuses on improving three key areas of a company. These include the following:
Employee Collaboration. When employees can team up and get work done easier, it makes projects faster and more efficient. Sometimes talking to one another is the best way to come up with new ideas and simply ensure that everyone is getting their job done effectively and promptly. Making sure that information and the ability to connect with one another is all on one platform is one of the best ways to encourage and foster this type of collaboration.
Content Collaboration. Many teams work on the same content at similar times. Being able to share documents, files, and even external information at the same time can be a huge time saver within a company.
Business Application. Administrative processes, such as workflow, forms, and rules, can often be automated in a way that cuts down significantly on processing time and time spent requesting or obtaining status updates. Even something as simple as creating digital versions of forms and allowing employees or third parties to input the information themselves can be a huge time saver in many industries.
Transparency regarding work product and processes is one of the most effective ways to ensure that your team is getting their work done and creating a final product that is the best version that you can provide.
Certain technologies often focus on a different area of these three overarching ideas. Some attempt to address all of them, while others target just one or two sections of particular concern. When all three can be addressed, you have a powerful system that encourages accountability, efficiency, and, in turn, productivity.
Office 365’s Role in the Modern Digital Workplace
Office 365 has been created with the Modern Digital Workplace in mind. It is specifically designed to address these three major concerns in an easy-to-use way.
While Office is commonly associated with their most popular programs, like Word, Excel, and PowerPoint, they have a whole host of programs that can significantly boost your team’s productivity because they make collaboration and transparency ridiculously easy.
Outlook
Microsoft’s email program, Outlook, has been a staple for many businesses for years. Outlook is more than just email, however. Users can use the calendar to schedule meetings and create task lists. They can also create contact lists and share documents through OneDrive. Outlook’s key focus is employee collaboration.
Microsoft Teams
This relatively new feature allows employees and third parties to chat, share documents, work on documents at the same time, schedule meetings, have audio and visual video calls, create notes, and more. It is also integrated with several very popular apps and services, including OneDrive, SharePoint, Yammer, Dynamics 365, and Skype.
Delve
Microsoft Delve shows what your team is working on, popular documents, and provides insightful information to workers who might be interested in them. Employees develop profiles, and they can find and organize information based on interests. It also allows workers to search for documents that are connected through SharePoint and OneDrive.
Yammer
Yammer is similar to a social networking site, but it is limited to your employees and other workers. It is designed to encourage communication throughout your organization. Its focus is on ensuring that information is accessible and shared at virtually every level.
Microsoft Planner
This tool allows your team to create new plans, assign tasks, share files, and organize projects. You can easily see what people are working on and get updates on progress for various tasks. This type of open communication makes assigning projects and getting status updates easy and more efficient.
SharePoint and OneDrive
OneDrive is a straight-forward means to share files, both internally and externally. SharePoint uses sites and files, team news, lists, libraries, and more to encourage collaboration on documents and files. Both are based on sharing information in the cloud.
Microsoft Flow
This tool is focused on making internal processes easier and more efficient. It helps automate and exchange data. It has built-in alerts and notifications to help address organizational processes like approvals, multi-stage processes, and more.
Using Office 365 to Help Your Business
Every company is different. Office 365 has enough unique tools focused on making your company better that you are bound to find something that fits well for your needs. Encouraging collaboration and automated processing can lead to huge productivity boosts for your business.
by Felicien | Jul 16, 2019 | Education
How To Send Large Attachments Over Email
When you’re trying to send large files to colleagues, customers or partners, you often can run up against issues that make transmission difficult.
Many commercial email programs put size limits on files transmitted over their networks. For example, attachments sent via AOL, Gmail or Yahoo are limited to 25 Mb per email and Outlook.com puts a 10 Mb limit.
In addition to the limits set by email providers, the email accounts to which you’re sending the attachments may also limit size.
So, what are you supposed to do when wanting to send large files? Here are a few ways to deliver what’s needed.
Can I Use a Cloud Storage Service?
There are plenty of commercially available cloud storage services, many of which are free. Among the most well known are Dropbox, Google Drive and OneDrive, the latter two of which are tied to email services (Gmail and Outlook, respectively). After you’ve uploaded your large files to these services, you can provide a link to those you want to see it and determine if they have editing capabilities.
What Is Compression Software?
Compression is a process that shrinks the size of each file considerably, up to 75 percent in some cases, without disrupting the integrity of the files themselves. The compressed files will be placed in a ZIP file. If the compressed ZIP file is now below the size limit for your email provider, you’ll be able to send it with no problem.
The recipient of your email can then unzip the file, where your files will be available for use.
Is Archiving an Option?
File compression into a ZIP file is one form of archiving, a process that collects multiple files into a single file. Archiving files is a good way to send large numbers of files at once. However, even this process can be problematic, with archived files themselves exceeding email provider limits.
If your files are already archived, you can extract all the files, split them into their own archives and send away.
What Is the Sharing Option About?
Many cloud storage sites include sharing shortcuts to allow for even faster collaboration. With OneDrive, for example, you can right-click on a file (in Windows) and select the Share feature. Click on the Send Link option and you’ll be able to enter an email address and message.
Are There Other Online File Sharing Options?
There are several online services available that are designed expressly to help with uploading and sharing large files. In most cases, you can upload your large files to the site. Then you can send a link to the files. Some sites require those accessing the files to have an account with the site; others allow anyone to whom you send a link to access the files. In some cases, there’s a free option for file sharing (but the allowed sizes are usually pretty small) and tiered account options.
Are There Any Other Solutions?
Depending on your internet service provider, you may be able to set up a Virtual Private Network (VPN) that would allow you to keep your files highly secure and sendable. However, a VPN transmission of large files could slow down your VPN and the files may not be intact upon arrival.
If you have a web hosting account, you can use its File Transfer Protocol (FTP) service to upload the files to your anonymous folder. Share the folder name and have the recipient access the folder via their own FTP features. This option takes some technical expertise, however, and can lead to a long upload process.
Finally, there is an old-school option. You could purchase a USB drive or an external hard drive, transfer the files to the device, and physically deliver them to the recipient.
Large files a reality for many businesses, freelancers and individuals. However, there are multiple options for transferring those files safely and affordably.
by Felicien | Jul 16, 2019 | Education
Your MacOS Is Under Attack: 2019’s Biggest Malware Threats
The Mac operating system (MacOs) has frequently been hailed as one of the best systems for its resiliency to malware and typical viruses. But the days of MacOs standing strong and tall with no worries have really always been a misconception. Mac systems are just as vulnerable to the beefed-up, intelligent malware threats that are out there today.
SentinelOne published a lengthy review of the MacOs malware at the end of 2018, but in a new release, SentinelOne also stated that there has actually been an uptick in the numbers of new types out there attacking users. Here is a look at some of 2019’s biggest MacOs malware threats that every Mac-reliant business owner should know.
1. OSX.Siggen: A Malware Download from a Malicious Domain
Masquerading as a helpful app called WhatsApp, OSX.Siggen is actually a latched-on malware that slips in during a regular app download. WhatsApp is a fake social media platform, and the download looks super enticing when users come across it. However, once added to MacOs, the app runs with a backdoor designed to take administrative control over the system.
2. KeyStealDaemon: Password Hijacker
This dirty malware showed up in February of 2019, but by June it was still running strong. Apple allowed a patch several years ago designed for another purpose, but KeyStealDaemon can create administrative privileges for itself by slipping through. Unfortunately, this malware allows the person behind the scenes to get into the system and steal pretty much any password you have stored. The good news is, if you have properly updated your system, KeyStealDaemon can be booted out because it cannot break through.
3. CookieMiner Slips In and Steals Credentials
Toward the end of January 2019, a cryptominer showed up with its own installed backdoor to induce a threatening combination of technologies to steal cryptocurrency exchange cookies and passwords for Google Chrome. The worrisome thing about CookieMiner is this: experts believe that the malware could potentially have the rare ability to bypass things like authentication processes that involve multiple factors. If CookieMiner is capable of gathering enough cookies and credentials, cryptocurrency wallets can be virtually pickpocketed right in plain sight.
4. Mokes.B Puts On a Good Act
Persistence agents running amuck on your MacOs with familiar names may never be spotted, especially if they are calling themselves things like Firefox, Skype, or Chrome. This is precisely how Mokes.B avoids suspicion when it latches onto the operating system in application support folders and tracking files. Mokes.B is super-scary because it can gain the ability to take actual screenshots whole you are on pertinent screens, but it can also record keystrokes to steal date you are keying in.
5. A Variant of OSX.Pirrit Has Shown Up
OSX.Pirrit caused a lot of problems a few years ago, but this malware never really disappeared altogether. Instead, new family members under the old parent app are still being found on MacOs, and they are not being detected as they would otherwise be when acting as OSX.Pirrit. The aim of this malware is to make money from redirect actions that occur as a result of a browser infection, but there are rumors that PIRRIT is potentially capable of stealing data as well.
6. OSX.Dok Reroutes User Traffic
OSX.Dok gets into a system and installs a securely tucked-away Tor version location on a Mac system. User traffic hitting a site gets sent to an onion server instead of where it should be, which is a major problem for business owners needing to protect sensitive customer actions when they think they are on an e-commerce website. One of the scariest things about OSX.Dok is the fact that it can steal even SSL encrypted internet traffic maneuvers. Older versions of this software were thought to be banished, but new versions continually pop up.
Even though there are so many Mac users who think they are covered by some unseen immunity from malicious software, these risks are there and the growing list of 2019 proves that fact. Attackers deploying these software programs are targeting those easy-to-break barriers, so something like an improperly updated computer or even an unsuspecting employee can leave a business computer wide-open for an attack.
by Felicien | Jul 15, 2019 | Education
How to Stop Your CEO from Becoming a Phishing Target
Business fraud affects businesses of all types and sizes, and there are no individuals within your business that are truly immune from the possibility of a targeted attack. However, there are some people who are more prone to an attack, simply because of the high value of their knowledge or access to the information within the business. Accountants, finance leads and your CEO are some of the most commonly-targeted individuals when it comes to business email compromise (BEC) attacks, more commonly known as phishing attacks. Knowledge is power, and these tips will help keep your CEO from becoming the next victim of these vicious attacks.
What’s the Difference Between Phishing, Spear Phishing and Whaling attacks?
While phishing is the most common term that you may hear, there are two additional terms that are often used when it comes to upper executives or more targeted attacks: spear phishing or executive whaling. These more specialized attacks go beyond the broadscale spam of phishing attacks that are meant to net any type of “fish” who is willing to click a link. In a spear phishing or whaling attack, the hacker has researched your business and knows enough from either social media or your corporate website to target specific individuals. Cybercriminals spend the time and effort to find any key vendors for your business or some personal details that will inspire confidence in your executives. The assailants then leverage this information to create a highly specific and tempting message that feels more like a personal email from a known vendor partner or internal asset in an attempt to gain control of your systems or to get access to sensitive information. The term spear phishing generally refers to tactics that are specific to a few mid-level individuals in your payroll or accounting department while executive whaling is targeted directly at your CEOs and other C-suite leaders.
What’s the Potential Payoff for Cybercriminals?
This investment by the cybercriminal is expected to have a high-dollar payoff and there’s only one chance at success — so the hacker has a vested interest in taking the time to do it right the first time. Each subsequent request increases the potential of being discovered and reduces the possibility of a return on their investment of time. The fraudulent emails are often requesting that the recipient transfer a large number of funds, pay a massive invoice or otherwise release information to what the target thinks is a “trusted” party. The FBI estimates that a single targeted whaling attack can release upwards of $150,000 in funds to a cybercriminal, making this an extremely lucrative pastime for these malicious actors.
Your CEO Should Be Wary of These Tactics
Coaching your CEO to stay out of the way of cybercriminals starts with an ongoing dose of education. In this case, attackers tend to follow a pattern of sorts that is relatively easy to isolate as long as you’re actively looking for this type of interaction. Receiving an email from vendors that have already invoiced you for the month, or requesting a different payment method that they have not used in the past (such as a direct funds transfer) should be a big red flag for your senior executives. Be cautious of emails that come in from trusted individuals with a slightly different email address; e.g. “@Micros0ft.com” instead of “@Microsoft.com”, as hackers are now spoofing entire mail domains in an attempt to release funds and data from your organization. Funds aren’t the only things that are requested by these organizations — personal information such as tax records also command a high rate on the dark web. This quick flowchart from KnowBe4.com may be a helpful graphic to share with your executive team.
Protecting your organization from the tactics of cybercriminals is not a one-time problem or solution, but requires an ongoing and dedicated effort to foil the efforts of these actors. Keeping your finance teams and senior executives safe can save your organization hundreds of thousands of dollars in remediation and notification costs, not to mention the frustration and difficulties associated with handling a significant breach.
