A new FakeUpdates campaign targeting WordPress sites has been detected
20/03/2024Over the past few weeks, a new wave of the FakeUpdates malware, also known as SocGholish, has been detected, aimed at WordPress websites. The objective is to lure users into downloading remote access trojans, allowing attackers to take control of their systems. Since its emergence in 2017, FakeUpdates has been one of the most recurring malicious software in the cyber threat landscape. It has previously been associated with cybercriminal groups like Evil Corp, who monetize its use by selling access to infected systems. In this new campaign, cybercriminals are using JavaScript to target WordPress web pages, compromising compromised administrator accounts to introduce altered versions of WordPress plugins. These adulterated versions deceive users into downloading remote access trojans, granting attackers full control over infected devices. What is the most popular type of malware? In addition to the FakeUpdates attack, the threat index from Check Point Research, whose researchers have warned about this new attack, reveals around 200 suspicious content websites directed by ransomware groups. They utilize double extortion tactics to pressure victims into paying immediate ransoms. These attacks have impacted many companies, with the Lockbit3 ransomware being the most utilized by cybercriminals, followed by Play and 8base. The most exploited vulnerabilities by malicious actors include 'Web Servers Malicious URL Directory Traversal,' 'Command Injection Over HTTP,' and 'Zyxel ZyWALL Command Injection,' affecting numerous companies worldwide and allowing attackers to access and manipulate files or execute commands on compromised systems. In Spain, despite a 7% decrease in malware attacks in February, the most sought-after malware includes FakeUpdates, Qbot, and Pandora. In the case of FakeUpdates, it has affected 11.9% of companies in Spain. Mobile Malware In the realm of mobile devices, Anubis remains the most utilized malware in Spain, followed by AhMyth and Hiddad, all designed to compromise the security and privacy of Android device users by collecting confidential information and executing malicious actions.
[ ... ]
Surfshark VPN
Surfshark VPNProtecting your digital life has never been easier than with Surfshark VPN. If you need a tool to feel safe from hacking, phishing, malware, or identity theft, Surfshark VPN software is for you. Established in 2018 and conveniently headquartered in the Virgin Islands, Surfshark is an excellent VPN provider that is on par with the best and most popular VPNs out there. It stands out because of its low prices, easy-to-use software, useful additional features, and browsing speed. In addition, Surfshark has a "zero logs" policy. Its developers strive to request as little personal information as possible for the VPN to work.
[ ... ]
How can I hide my IP?
Accessing the Internet involves connecting our computer, smartphone, tablet, etc. to a communications server that is responsible for providing access to the network. This connection involves the identification and exchange of data about our identity, IP address, and online activities that are recorded forever as a trace of our navigation. Can I be tracked through my IP address? Yes, it is possible to trace an IP address and for those who consider privacy a priority, this is a major problem because, in addition to being exposed throughout the network, the increasingly intensive use of the Internet has led to this type of data becoming an object of interest for cybercriminals seeking personal or confidential information that can be used for their benefit. To safeguard against all this, there are several methods to hide the IP address, ensure our online privacy, improve our security on the Internet, and prevent anyone from knowing what pages we visit, the time we have spent on every connection, or what we are downloading. What are the advantages of hiding my IP? Apart from everything related to privacy and security already mentioned, hiding the IP offers different advantages for users in multiple circumstances: There are IP hiding services that prevent IP geolocation when we travel and allow us to connect to the network as if we were doing it from our own country, overcoming, for example, any network access limitations that may exist in the place where we are. We will be able to download files anonymously avoiding that the rest of the users can see our IP location. If our IP is not "in sight", the possible limitations and blockages of the Wi-Fi network and even of our ISP (Internet Service Provider) disappear. Thanks to the data encryption system of the most advanced IP hiding services, our vulnerability in connections to public Wi-Fi networks is minimized. When the system detects a location different from the real one, this can give us advantages to buy in online stores with different offers according to the country or to avoid the blocking of games, maps, and online game add-ons that may have restrictions on our location. How can I hide my IP? IP hiding is achieved through the use of specific services and tools to hide the IP and encrypt our traffic, those services allow us to hide the real communications we make during our navigation. Besides those techniques that are based on the modification of network protocols and require certain skills to carry them out, there are several technologies within the reach of all users: VPN or Virtual Private Network Proxy or Web proxy Tor Public Wifi How to hide the IP address with a VPN? VPNs are services that connect us to the Internet through intermediate servers, in which our original IP address is " masked " by the IP address of that secure server. This concealment ensures that anyone tracing our connection will only see the IP address and location of the VPN server, but not our own. In addition, to safeguard our activity on the network, VPNs use tunneling and data encryption, encrypting the information we exchange with the VPN server, hiding it, and preventing third parties from being able to read it during its transit. The security of VPN connections is determined by proprietary VPN protocols, based on different standards and encryption and authentication methods, which depend on each developer. The range of options is wide and this allows us to choose between, for example, options that prioritize speed over security, options that do the opposite, options with a greater or lesser degree of reliability, etc. VPN applications always run in the background and do not hinder browsing. How to use a proxy server to hide the IP address? Unlike VPN services, proxy servers focus their activity solely on hiding the IP, without performing any type of concealment on our network traffic or any other data that could reveal our identity. Proxy servers act as intermediaries between our device and the destination server to which they transmit our requests on our behalf. Therefore, our IP will be hidden and the only one they will see will be the proxy one. There are different types of proxy services, from the simplest ones that only help us to hide the IP to others with extra functionalities such as blocking cookies, scripts, and other files hosted on websites and sent to the user. Browsers or applications based on the HTTP protocol offer the manual proxy configuration function so that we can indicate the proxy web address and port to which we want to connect before browsing. In this way, any activity that we perform through that browser will always be routed to the proxy. Alternatively, you can also opt for the automatic proxy format that searches through DNS or DHCP for the URL from which to download the wpad.dat file that runs and allows the proxy connection with automatic authentication on your computer. How to hide your IP with Tor? Tor is a free software developed to ensure anonymous browsing of users on the Internet. To mask the IP Tor uses a network of volunteer computers or nodes through which it redirects our traffic and encrypts it before it reaches its destination. At least this redirection goes through three of these nodes, achieving repetitive re-encryptions so that any possible clue about our identity disappears. In this process, Tor assigns a random and geographically different IP to our connection so that the location by third parties is impossible (if you are curious to know the IP you have been assigned you can check it through our tool). This system allows different configurations depending on whether we are using a firewall, if our ISP is blocking Tor connections or if we navigate through proxy for example. Can I hide my IP with a public Wi-Fi connection? The answer is yes. A public Wi-Fi network can also be used to hide our IP address, although if we do not have it constantly at our disposal, the IP hiding is limited to the time we have access to a public network. As this type of network is a connection shared by many other people, this makes it impossible to trace a particular user or identify them on the destination server. However, it is precisely this general access that also makes us more vulnerable. And although through a connection to a public Wi-Fi we will solve the issue of IP hiding, security will never be total, because being an open network, we can be exposed to the will of hackers and other threats, including malware and viruses. And if I want to hide my IP address, how can I change it? It may also be the case that instead of masking the IP all we need to do is change our IP address at a given moment. Then, the solution is as simple as disconnecting the modem from the power supply and restarting it after a few minutes. In that time, if your IP address is dynamic (you can check it through the network connections tab on your computer), it will be deleted and your Internet provider will give you a new one. To make sure that everything went well, we recommend doing something as simple as writing down the IP address before turning off the router and checking it again once it is up and running again. Another possible way to achieve the same result if you have a smartphone with a data plan is to turn this device into a wireless access point to which you can connect your computer, thus hiding your usual connection. There are many options to hide the IP or to change it and now that you know how each of them works you will be able to decide which one suits you best.
[ ... ]
Google launches ChromeOS Flex to give a second life to outdated computers
21/07/2022Google has just introduced ChromeOS Flex, a new version of their cloud-based operating system that will allow "rejuvenating" Windows and Mac computers that have become available. The system must be downloaded directly from the web and can be installed on the computer via USB or the company network. ChromeOS Flex is now ready to give outdated Windows and Mac computers a second life. At the moment, Google has already certified nearly 300 devices compatible with ChromeOS Flex, from leading brands on the market such as Apple, Acer, Dell or Microsoft. Although Google has advanced that not having the certification does not prevent the installation of the operating system on our old computer. Some of the services offered by this operating system are, the protection against ransomware and malware; background updates; remote management of applications and, of course, the possibility of giving a new life to an outdated computer. “By installing ChromeOS Flex on an older computer, you're not only getting a great experience, you're also contributing to an important cause. Every year 40 million tons of electronic waste is generated worldwide, which is equivalent to throwing away 800 laptops every second. Updating devices to ChromeOS Flex instead of completely replacing them is one way to reduce this waste.
[ ... ]
The use of magnetic tapes to store data is growing
11/05/2022Although cloud storage continues to be a growing resource for many companies to promote hybrid work environments, for security reasons, many other companies have decided not only to return to hard drives, SD cards or pen drives, but even to magnetic tapes. According to the Swedish firm Sweclockers, storage on this format skyrocketed in 2021 and grew, compared to the data recorded in the previous year, by 35%. Being a format that is not connected to the internet and therefore free from the threats of ransomware and malware, magnetic tapes are increasing their popularity again and companies such IBM, HP or Seagate/Quantum have already launched updated versions of these tapes on the market that include Linear Tape-Open (LTO) technology and high storage capacity, according to the current needs of companies. The main difference from other digital storage media is that magnetic tapes can only read and write data sequentially, and this cannot be done simultaneously.
[ ... ]
How to know if Pegasus has infected our mobile
05/05/2022The news of recent weeks, in which it is claimed that the Pegasus espionage program has been used to enter the mobile devices of Spanish politicians, has put a lot of people on alert. Pegasus is a malicious software that, once introduced on a device, has the ability to collect information and transmit it to an external entity without the consent or knowledge of the owner of the device, be it a mobile phone, a computer or a tablet. Pegasus also erases its trail after it is installed. Among its main features, it also stands out that Pegasus is capable of detecting who the owner of the device has been with. Pegasus also, can send and recive messages autonomously and recording conversations by manipulating the attacked mobile, computer or tablet. The two ways that this spy program uses to enter on a devices is through an SMS or a fraudulent link and, according to experts, despite the fact that it is a very difficult spyware to detect, there are some signs that can make us suspect that we have been infected. Overheating or slowdown of the system are two of the main ones, but also the fact that the battery life is decreasing or that there is excessive data consumption when we are not using the device. How to make it difficult for Pegasus To try to avoid being infected by Pegaus or by any other malware, the director of Systems Engineering at Fortinet from Spain and Portugal, José Luis Laguna, in statements collected by Europa Press, recommends taking extreme precautions and a make a double-checking when personal and confidential information is provided. In addition, the Fortinet expert explains that instead of clicking on the link that we have received, to verify that it is legitimate, it is recommended to write the address of the site in the web browser, even though this means taking an additional step and not accessing directly to this service. Using protection 'software' based on behavior - EndPoint Detection and Response (EDR) -, keeping the system updated, avoiding public Wi-Fi connections and checking the permissions granted to applications, are other precautions that are also recommended.
[ ... ]
How to keep your Mac safe?
28/06/20215 things you should do to protect your Mac How many times have we heard that Mac is a more than secure and unbreakable system? For years, Apple has made its security through obscurity, or in other words, its proprietary software, flagship and brand guarantee. Today, however, just when Mac is no longer a minority option, Steve Jobs' system has become another favorite target for hackers and cybercriminals. The market has responded to this with the development of specific protection tools for Mac, while Apple works on optimizing its system in each version. Knowing what kind of tools exist for Mac and which ones are already included in our computer will help us to stay safe and choose the best strategy that fits our needs and use of the equipment. 1. Use computer security tools Cybersecurity is a universal and necessary practice in all operating systems today. The objective is to ensure protection against attacks and theft by cybercriminals who are looking for personal or confidential information stored on our computers or that enters or leaves them, in order to use it for their own benefit. What is VPN security? Cybersecurity tools help us to minimize our footprint on the Internet and thus increase our privacy and security. In this regard, VPN services for Mac stand out, as they incorporate advanced protection technologies capable of connecting to the Internet through intermediate servers, so that our IP address - our identification on the network - is replaced by the IP address of this secure server, without anyone being able to trace our connection. This type of VPN service also encrypts any information leaving our computer, thus preventing it from being accessed on its journey to its destination. This is essential, for example, when using public Wi-Fi networks to connect to the Internet. 2. Keep the operating system and software up to date As simple as it may seem, one of the best and easiest ways to protect a Mac is to always have the latest version of the operating system installed and to work with updated software downloaded from the Mac App Store. System updates usually include security patches, among other things. How do I update my Mac? Through the System Preferences Panel of our computer we can set that when there are available updates we receive a notice from MacOs warning us of it or that these updates, whether system data files, security updates or official software are installed automatically. To check if we are working with the latest versions available and our Mac is up to date we can do it by checking through this same panel if there are updates available at that time. If we have checked the automatic updates option, Mac will do this task for us routinely. 3. Use secure settings Mac's default security settings can be greatly enhanced by manually configuring the security and privacy terms of our computer. How to change the Privacy and Security preferences on the Mac? By accessing the "Privacy" tab of the "Security and Privacy" option of the Control Panel we will have the option to manage what information we allow our computer to make available to others over the Internet or on a network and what applications we allow access to our data and files. In the same way, but through the "Security" tab, we will be able to incorporate passwords for the access to different tasks and operations of the computer and through the "FileVault" tool we will be able to ensure the encryption, for example, of our personal information or certain documents for which a password will be required to unblock them. 4. Use an Antivirus for Mac There are antivirus programs developed specifically for Mac. Some of them are special for certain threats, although in general most of them offer a wide range of services to help us keep our computers safe. Which is the best antivirus for Mac? The range of antivirus for Mac, free and paid, is nowadays much wider than a few years ago, highlighting among the most complete and advanced, antivirus with malware protection functions in real time, tools against digital identity theft, protection against spyware or advanced detection and removal of blackmail programs. 5. Make regular backups Apple has a native function, Time Machine, which makes backup copies of our hard disk on a separate secondary disk, so that if for any reason we suffer an attack or a breakdown we can recover all the information. Many antiviruses offer a backup service, backup or backup similar but in the cloud, as a preventive measure against writing errors on the disk, theft of devices or even against data hijacking or ransomware.
[ ... ]
What is IT maintenance? Prevention is better than cure
19/04/2021Keeping our IT equipment in good condition is essential for the smooth running of the business. The main goal of a good IT maintenance is to ensure the proper functioning of the hardware and software of our network and IT equipment and thus contribute to the overall efficiency of our business. What is the purpose of computer maintenance services? Computer maintenance services try to anticipate failures and offer us solutions to manage our computers and computer network, optimize their operation and secure all the information contained in our machines. In case of incidents, a good computer and systems technician will solve them and also find the cause of the error to prevent it from happening again. Benefits of hiring a computer maintenance and web maintenance service Common computers, servers, hard drives, networks, connections and antivirus problems can be avoided or prevented if we carry out all their preventive maintenance needs. Advance failure detection. Incidents can occur at any time, nipping them in the bud can save us a lot of headaches throughout the life of equipment. Improve the performance and reliability of your computers and network. This ensures our software is always up to date, thus improving the efficiency, speed and machines operation and other connected equipment. Prevents data loss. Data loss can wreak havoc. Keeping the equipment in good condition reduces the chances of these accidents that are completely neutralized if, in addition, our computer maintenance services include backups and contingency and recovery plans in case of disaster. Improve our protection against cyber-attacks. Regular maintenance means that our systems have the latest and, potentially, most effective security software installed to prevent any problem with malware, viruses, spyware or other unwanted attacks. Reduce our costs. With up-to-date computers we will always maximize their useful life and minimize the risk of loss due to unplanned downtime caused by computer problems. It helps us to keep the website properly updated and backed up. The most complete IT services include additional high-value services such as web maintenance for companies and backups of the entire project so nothing is lost in case of problems. What are the functions of a computer maintenance technician? Periodic reviews of computers, equipment and networks. To ensure from day one that everything is working properly, the software is up to date and the hardware is adequate. Server management with activity monitoring. To anticipate incidents or react immediately if they occur. Backup copies. To prevent data loss both on physical equipment and in the cloud. IT security. To keep machines protected and minimize the risks of viruses, computer attacks and improper intrusions. User management. To guarantee exhaustive control of how and who can access the data stored on the company's computers and servers. Remote and on-site technical assistance. Telephone support. To ensure quick resolution for major incidents and restore the service in the shortest possible time.
[ ... ]
Microclaudia, the Spanish antivirus that makes the attacker think the system is already infected
28/01/2021The National Cryptologic Center (CCN-CERT) and the cyber security company S2 Grup have created "Microclaudia", a tool designed as a vaccine against malware that makes the attacking agent to believe the computer is already infected. "Microclaudia", which can work in parallel to any other protection system already installed on the computer, runs on the system and prevents the attacking of several malwares that are currently in circulation. According to the creators of "Microclaudia", this new antivirus is an important step forward to put an end to the damage caused daily by cybercrime in Spain, the second most common crime, only after theft.
[ ... ]