Central Illinois' IT Experts

Print out this guide and hand it out so your team always has a handy reference to turn to.

Viruses

A computer virus is perhaps the most recognized term for malware, in that many users will attribute any stunted functionality to one. In actuality, a computer virus is a malicious piece of code that can replicate and disperse without the person responsible for unleashing it remaining involved. This makes them a particularly effective weapon for hackers to use against targets of all sizes, often by attaching it to some file or application that their intended victim is likely to download. 

Worms

Worms are another self-replicating pest, predating even viruses. Once a system has been infected (either via an application flaw or a hacker’s social engineering) a worm can truly wreak havoc. Additional malware can be transferred into the system, system memory can be used up to create issues, and communications can be cut back. Email is another effective way that worms have been used against businesses. All it takes for an entire company to be infected is for one employee to open the wrong email attachment.

Spyware

This variety of malware is useful to a cybercriminal who intends to create even more considerable problems sometime later. This is because it can be used to bypass a system’s security by monitoring a user’s actions, recording credentials and snooping on their behaviors. Keyloggers are a well-known variety of spyware, as they secretly record a user’s keystrokes to steal credentials and other sensitive data. As an added impact, spyware also eats up a system’s CPU resources to increase its vulnerability to further attack.

Adware

Adware is intended to fool a user into clicking through a forged advertisement to what appears to be the website described in the ad, but is actually the creation of a cybercriminal. 

Malvertising

Some cybercriminals prefer to camouflage their attacks behind legitimate advertising networks. By paying for ad space and hiding code within the ad, the user could again be brought to a malicious site. Alternatively, the ad may instead install malware onto the user’s system - sometimes without any action needed from the user at all. This includes scripts used to turn a system into a cryptomining puppet for the cybercriminal’s benefit, as well as Trojans and ransomware.

Trojan Horse

Just like the wooden horse strategically used in the Trojan War, Trojans hide their malware attacks in what appear to be legitimate programs. They are particularly common for a few reasons: first, they are relatively easy for even a novice hacker to create, and second, they are very effectively spread through social engineering and deception. Once the user activates the program, the payload is delivered and the Trojan fulfills its goal, whether that’s damaging or stealing data or simply throwing the proverbial wrench into the computer’s operations. 

Ransomware

Ransomware has seen a considerable jump in popularity over the last few years, which makes a lot of sense in a few ways. Not only has it proven to be an effective means of attack, as businesses, healthcare organizations, and even entire cities have been brought to a halt by it, it can be very lucrative for the cybercriminal responsible. Once the ransomware has been executed, it encrypts the infected system and locks the user out. The user is then given a message explaining what happened, with a link to an encrypted cryptocurrency wallet to pay the ransom in exchange for the decryption key. Unfortunately, many victims are never given the key, even if they pay.

Logic Bomb

A logic bomb can, appropriately enough, act as a digital land mine. Lying dormant in a system until it is triggered by some event, a logic bomb will damage a computer - sometimes causing physical damage to its components. For instance, some logic bombs overwork certain pieces of hardware, like hard drives and cooling fans, until these devices fail.

Backdoor

A backdoor is less of an attack itself, and more of an attack vector. It effectively gives a cybercriminal a means of getting into a vulnerable system again later, even if the original vulnerability is resolved. Using this backdoor, the cybercriminal has the opportunity to return again later, when the user has again let their guard down.

Rootkit

A rootkit is what enables a hacker to create a backdoor. By modifying system files by virtue of software vulnerabilities, a hacker is able to leave themselves an opening into their targeted system.

Botnets

Botnets are made up of bots, or infected programs and systems, that can execute whatever task the cybercriminal wishes in tandem with one another. Essentially, a botnet can consist of hundreds of thousands of devices, such as computers, smartphones, and even IoT devices. With their collected computing power, botnets are formidable threats, which is why they are commonly used to execute Distributed Denial of Service attacks.

Fileless Malware

A more recent development, fileless malware infects a computer and starts to pull the strings from inside the device’s random-access memory, or RAM. Once there, this malware is able to spread using encryption keys and APIs, as well as cause problems by altering user privileges and misusing admin tools.

Being able to recognize threats is a crucial part of stopping them. The other part? Having the right security solutions in place before they strike. Decatur Computers Inc. can help on both fronts. Reach out to us at 217-475-0226 to learn more and ensure your company is better defended.

Microsoft 365 is a cloud-based bundle that includes a virtual Windows 10 desktop, access to Microsoft 365 applications, OneDrive storage, and access to security features including device management and app and data security. It is the most comprehensive cloud-based package Microsoft offers and comes in three major products that have their own tiers. They are:

• Microsoft 365 Business
• Microsoft 365 Enterprise
• Microsoft 365 Education

For the modern business, cloud-based software can be very attractive. Microsoft 365 Business offers the following software: 

• Windows 10 Pro - Operating system
  • Windows 10 Business - Used to control devices and their security
  • Windows AutoPilot - Used to streamline integration of Windows 10 PCs
• Microsoft Office - Productivity suite
  • Word - Word processor
  • Excel - Spreadsheet program
  • PowerPoint - Presentation software
  • OneNote - Note-taking software
  • Outlook - Email manager
  • Publisher - Periodical creator
  • Access - Database management
  • Exchange - Mail and calendar 
  • OneDrive - Cloud storage
  • Skype for Business - Communications/Conferencing
  • Microsoft Teams - Collaboration software
  • SharePoint - Project management software
• Business Apps from Office - Additional Management Applications 
  • Bookings - Appointment software
  • Outlook Customer Manager - Track and follow customer management
  • Mile IQ - Mileage tracking
  • Microsoft Invoicing - Invoicing program

Since the platform is completely designed for small and medium-sized businesses, the tools found in Microsoft 365 Business provide substantial value. Getting all of this for a small monthly expense has its own benefits, but if you need to move many users to the platform, a cost/benefit analysis will help you know whether you should upgrade to new infrastructure, or whether your organization will be better off choosing the cloud-hosted Microsoft 365 platform. 

For larger organizations or for educators there are additional options. Microsoft 365 Enterprise is designed for larger businesses that need enterprise versions of Windows 10 and Microsoft Office, while getting advanced security features. Perfect for the enterprise project team that needs the computing resources to excel right away.

Microsoft 365 Education is designed for the classroom. Educators can provide more powerful tools, without the huge capital investment that many schools simply cannot afford. With Windows 10, Office 365, and OneDrive, each student will have the resources at their disposal to see a better outcome from their education.

If your business has been searching for a reliable tool that gives you access to some of the best technology on the market, call our consultants today at 217-475-0226.

Update (And Turn on Notifications)

We can safely say that the more up-to-date a browser is, the more secure it is going to be. This is because many of the changes that these updates address have to do with the browser’s security features, including any anti-phishing, anti-malware, and plugin security measures. You should also turn on your browser’s auto-update function, which will let you know whenever an updated version is available.

Customize Your Security Settings

Or, in other words, set them to be as high as possible. Here are some suggestions:

Cookies - Disable them, or only enable them if you trust the website and they are required.
Pop-Up Windows - Block them from opening automatically, only enable them for trusted websites, or have the browser ask for confirmation
Block Reported Attack/Fake Sites - If it is available, block malicious sites by enabling this feature
Camera and Microphone Usage - Block from running automatically, and have the browser ask for confirmation
Javascript - Block from running automatically, only enable it for trusted websites, and have the browser ask for confirmation
Plugins and Add-Ons - Block from running automatically, or have the browser ask for confirmation

Leverage Antivirus

Is antivirus perfect? No. Is it better to use it? Absolutely. An up-to-date antivirus solution can provide quite the strong defense against most malicious code, and their threat definitions can be updated automatically, meaning that it would only get better and more effective over time. For your company, your antivirus should be centrally managed, not installed on each individual device.

Use a Limited Account

Instead of using your administrator account for your daily use, consider creating a secondary one with limited privileges to use instead. Many threats leverage the access of the user in order to deliver whatever payload they have, so the less access the user has, the better. An administrator account is really only necessary when you’re making changes to the device, so limiting its use won’t be an inconvenience.

Browser Compartmentalization

There are many different options out there for web browsing - far more than just the likes of Chrome, Edge, and Safari. There is also nothing to restrict you to only using one, which is why another means of improving your security exists: browser compartmentalization.

Basically, browser compartmentalization is to use multiple browsers, assigning certain activities to each. Any online accounts will only be accessed via Browser A, while Browser B would be reserved for browsing (with its history and cookies disabled). As long as you stick to the rules, browser compartmentalization can be an effective way of making your browsing more secure.

Try a Browser Made for Security

Speaking of web browsing options, many browsers are designed with their security as the top priority. There’s Firefox, for instance, which can be customized to be security-centric, as well as a few open-source versions, like GNU IceCat, Waterfox, and Pale Moon. If you’re more used to Google Chrome, there are secure browsers based on Chromium, the code base behind Chrome. These include Iridium Browser, Ungoogled Chromium, and Brave.

Use a VPN

A VPN (short for Virtual Private Network) takes your Internet activity and conceals it behind encryption, boosting your security considerably. There are many VPN services out there, so you will want to lean on a trusted resource like Decatur Computers Inc. to help you select and implement one that best fits your needs.

Decatur Computers Inc. can help you improve your business’ security and productivity with reliable IT solutions. To learn more about what we can do, reach out to us at 217-475-0226.