Cryptolocker - RansomWare Threat

A computer virus is a software program designed to destroy or steal data. They are often a nuisance,usually designed with malicious purpose, either to disrupt activity, steal information or some other type of financial gain. Viruses have been known to wipe systems out, destroy hardware, or fill a hard drive up with junk applications.

There always exists a motive for the virus's author.Viruses can be used for marketing, theft or political statements. They can bring down home PCs or large corporate networks. Viruses exist under many forms, such as boot sector viruses or browser hijackers to name two. In some cases, a virus will infect a system for the purpose of delivering a "payload", which is other malware with a different purpose.

About two years ago, a new virus called "MoneyPak" came online. When a PC became infected, a phony message was displayed saying the FBI will seize the machine unless a $300 moneypak card was purchased from CVS or Walgreens. From a technical perspective, this was a simple annoying virus that was easy to remove. Gullible users would buy the card and pay the fee, most simply sought out technical help to have the virus removed.

Ransomeware

Ransomeware is a computer virus that infects a system and limits access until the owner of the comptuer pays the creator of the virus to have it removed. The Moneypak virus is one such example.

Recently, a new variant of Ransomware (in this case crypto malware) has emerged called Cryptolocker. Crypto Malware infects a computer with a program that takes control of the system and connects to a control server to obtain an encryption key and apply it to specific files on a computer.  Cryptolocker utilizes a 256 bit Advanced Encryption Standard (AES) key. The algorithm described by AES is a symmetric-key algorithm, meaning the same key is used for both encrypting and decrypting the data. Although the original server handing out encryption keys has been taken down, the virus is still being spread

Current forms of the virus go after typical productivity files such as Microsoft Word, Excel, WordPerfect files, Access databases, photos and other multimedia files. Essentially, files you use everyday. Once the files are encrypted, the only way to read those files is through the key.The virus gives the end users options for obtaining a key, usually by paying a $300 un-lock fee. 

At present, paying the $300 ransom is the only way to have your files unlocked.

How the Virus is Spread

To date, the virus is sent to host computers through "social engineering", which typically has been email. Phony emails  typically appear to be from FedEx notifying the reader that a package is waiting for them, and to click a link for more information.

Prevention

The best methods to avert falling victim to these scams are:

1. End user education - stay informed on computer malware threats

2. Solid e-mail spam filtering

Public e-mail services through Microsoft (Hotmail, Outlook.com) or Google (Gmail) are generally good at eliminating these threats through behavior tracking technology. Private domain based mail accounts (YourOrganization.com) generally don't have aggressive enough spam filtration that will eliminate the majority of these threats. If you would like to improve  your current spam filtration solution or have the current system evaluated, please contact us to discuss in detail.

If you have a private domain based mail account, contact us for information on our email spam filtration service and antivirus protection software. Coverage for your PC and email starts at just $2.99/month.

(215) 634-2997
www.richmondcomputer.com

HP to be dropped from Dow Jones Industrial Average September 20th

In a sign that the computer manufacturer continues to struggle, Dow Jones has announced that HP will be dropped from its list of major US manufacturers, namely due to underperforming stock.

Over the years, HP has struggled to gain a higher share of the computer manufacturing market and branch out from manufacturing printers. In 2001, HP merged with Compaq to acquire a larger share of the PC and camera market. At the time, HP founder Walter Hewlett was reluctant on the merger as he saw then that PCs were a marginally profitable product.

Today, the PC division of HP has the lowest margin of their manufacturing line.

Read more.

Electronic communications rejected by court due to lack of authentication

This may seem like a no-brainer, but authentication of electronic evidence is crucial when presented as evidence.

In 2011, a Maryland appellate court overturned a decision involving a murder trial because the prosecution failed to present any authentication that a message from a MySpace account actually came from the account they claimed it did (see: Antoine Levar GRIFFIN v. STATE of Maryland No. 74, Sept. Term, 2010). (Read more about the Griffin case)

Proper handling, analysis and authentication of electronic evidence is crucial in any form of litigation, otherwise the evidence will be tossed as hearsay.

Our SMS Witness service, which covers text messages, instant messages and Facebook data, provides parties with the proper handling, analysis and presentation of this evidence, so that it can be properly entered into evidence in civil or criminal matters.

SMS Witness entails live collection of data, special chain of custody documentation, data analysis and verification, hash code generation (to prove the file is unique), and presentation of text messages, instant messaging or Facebook messaging in a transcript format.

Sample SMS Text message transcripts:
http://www.richmondcomputer.com/doc/Transcript_2col_ColorBubble.pdf
http://www.richmondcomputer.com/doc/Transcript_ImStyle.pdf
http://www.richmondcomputer.com/doc/Transcript_UTF.pdf

Don't risk your entire case using a free or low dollar third party app to print out your messages. A single text message could swing a decision, even in a minor case, IF you present it properly.

Call 215-634-2997 for more information, or sales@richmondcomputer.com

"Tax"-achussets targets IT Industry with new "computer services tax"

Governments have been taxing citizens since the days of the Egyptian Pharaohs. Over time, governments have levied taxes to raise funds to operate the government, be it for military protection or domestic services. Rates rise and fall due to the state’s needs or political agendas in play. Taxes have been known to start riots and wars, such as the Magna Carta and the American Revolutionary War. In modern times, there are no shortages of controversies as governments levy new taxes against its citizens.

On Tuesday July 24, 2013, the Massachusetts state legislature passed an $800 million dollar transportation finance plan to fund statewide highway and transit needs. While the legislation increased existing taxes on items such as gasoline, a new tax was created called the “computer system service tax”, which applies the state’s 6.25% sales tax to computer services. The new tax is expected to generate $161 million per year, and applies to a variety of technical services provided by those in the IT industry. Some examples include:

·       Installation of “prewritten software”, for example re-installing Windows 7 onto a customer’s PC

·         Installing a packaged software suite such as QuickBooks onto a customer’s computer

·         Web based software/applications operated by a company within Massachusetts

·         Networking computers together on a LAN

·         Installing software patches (enhancements) on already installed software products (i.e. Microsoft product updates/security updates, antivirus software updates)

Oddly, the tax does not apply to the installation of Open Source software because there is no transaction to acquire that software. However, if an IT Professional is engaged in website development and uses an open source template to build the customer’s site, then the services are taxable. Confused yet? This also means modifying an existing website (content management) is now taxable, but website hosting and cloud storage are not taxable.

The tax singles out the computer industry, and those who outsource technology functions to service providers, be it individuals or corporations. This causes a number of problems. First, if the tax is not repealed, it sets a precedent which other states or legislative bodies could follow. Secondly, it hurts innovation. Companies may elect to defer upgrades and projects which would otherwise improve commerce. Thirdly, it encourages companies to defer maintenance such as the installation of new antivirus software or security updates on network computers when performed by consultants or contractors. Compromised computers and websites are often the source of malware infections for other systems, and encouraging companies to defer maintenance because of rising maintenance costs is a dangerous situation for everyone. Fourth, IT consultants and contracting firms already pay their share of income tax, as do the companies that utilize these services.

Targeting the IT industry will only impede the growth of the IT industry. The IT industry, like many others is diverse. It is comprised of firms small and large, from independent consultants to multinational firms. In some cases, a “computer services” tax will cost jobs. Small businesses could decide to keep certain tasks in-house, even assigning them to less than qualified personnel (the famous scope creep). While there remains a great deal of ambiguity regarding the law, what is clear is the losers are the IT sector and businesses within “Tax”achusetts.

Rather than waste precious legislative time (is there such a thing on the taxpayer's dime?), legislators could have studied where this tax was enacted before, namely to the south in Maryland in 2007. There, a similar outcry led to the repealing of the tax not long after it became law.

Link to the tax FAQ’s from theMassachusetts department of Revenue

Microsoft Makes Appeal to NSA on PRISM Scandal

In a surprise move for Microsoft, general counsel Brad Smith wrote to US Attorney General Eric Holder to make a plea for permission to disclose and explain to the public what information the software giant has been handing over to the NSA as part of the PRISM scandal, which came to light by leaker Eric Snowden who is now seeking asylum while holed up in a Russian airport.

The concerns brought up by Microsoft's attorney primarily deal with preserving constitutional rights of U.S. citizens. However, it is more likely that Microsoft's lawyers are concerned with liability over the surrendering their customers' data to the U.S. Government, and potential for lawsuits as part of those requests.

With more and more data being stored in the cloud, and most computers on a 24/7 connection to the internet with various "behind the scenes" applications transmitting data to Microsoft, its likely that all of our computers are potential sources for monitoring by government authorities.

Read More

Do you think Microsoft should be able to disclose to customers what information is being requested and turned over to the NSA?

Sound off here!

Gigabit Wifi coming soon

The Wi-Fi Alliance, a global organization that ensures the interoperability of Wi-Fi technologies, began certifying so-called "ac" devices on July 20, 2013. The new standard is called "802.11ac" will have speeds of up to 1.3 Gigabits per second.

Since few devices are currently on the market with the new standard, pricing is much higher than standard WiFi devices. Netgear's R6200 WiFi access point starts at $160.00 at Best Buy.

Before considering a purchase, consider operational gains are mostly applicable to the streaming of large files across a WiFi network, such as videos and sound files.

Use of Facebook data for criminal & civil litigation

Recently, Facebook disclosed that it received thousands of requests for data from user accounts in the last half of 2012 alone. This reinforces the fact that investigators, and ultimately the courts, are relying more on electronic data for litigation purposes than ever before.

That being said, Richmond Computer now offers transcription and data collection services involving Facebook data, similar to the highly popular SMS Witness program, which converts cell phone text messages to court admissible transcripts. Starting at $49.99, we can collect Facebook data and produce items such as Facebook messages into transcripts, complete with documentation on collection and production methodology and analysis of metadata.

Read more.