Live Blog

The RACK59 Blog

rss

Focusing on technology, security, innovation and our community


Protect Yourself Against the DNS Changer Malware

On July 9, your Internet could mysteriously stop working. Unless you just happened to forget to pay your bill, the culprit will likely be a sneaky piece of malware that is hiding somewhere on your machine. Sound too far-fetched to be true? This isn’t another scare by the Conflicker worm, most commonly known as the malware that has been rumored to shut down systems operating on a certain day, usually April 1; CNET has verified the DNS Changer Malware to be a legitimate threat. The malware works by altering user DNS settings to redirect them to malicious websites and show them a “fake” version of the Internet. The DNS Changer Working Group (DCWG) has a website with information about how to detect, fix and protect yourself from this malware.

From the DCWG website: “The botnet operated by Rove Digital altered user DNS settings, pointing victims to malicious DNS in data centers in Estonia, New York, and Chicago. The malicious DNS servers would give fake, malicious answers, altering user searches, and promoting fake and dangerous products. Because every web search starts with DNS, the malware showed users an altered version of the Internet.”

The malware originates from cyber criminals operating under the name of Rove Digital. The criminals were arrested back in November, but the malware is still active and floating around cyberspace. Under a court order, victims have until July 9 to identify and fix infected machines before they are cut off from the Internet.

Fortunately, detecting the malware is incredibly easy and requires no scans or downloads. The DCWG website has a link users can click to check if their DNS is looking up addresses properly. If you believe your machine is infected, they also have information on how to remove the malware.


Most Common Ways Malware Compromises Security

Scamming and malware is a constant worry for Internet users. Many people use the Internet to pay bills and manage their finances. Almost every website requires a username and password to access information and keeping track of all the logins can be a hassle. Often, people will let their guard down, share information with friends, or be careless while browsing from a public location. Sometimes, even while practicing safe browsing habits, people can find themselves in a sticky situation where their accounts are compromised. There are many factors involved in staying secure. Knowing how the criminals gain access to your information can help you be more aware of common traps while surfing the web.

One of the most popular ways cybercriminals gain access to private information is by exploiting backdoor openings in browsers. It works better than any other tactic because it doesn’t require the user to willingly do anything such as click on a harmful link or download an infected file. Malicious sites are often accessed while clicking on results from a search engine. That isn’t to say that fake websites and malware-laden websites aren’t the typical fare for a crook; the most commonplace scam is the one that involves a hacker redirecting you to a website that looks identical to another and requests your login information. If you are socially network savvy, you may be aware of these types of scams since they are commonly spread as links from a hijacked account. What the hacker wants most of all is to be profitable with his craft, so it goes to figure that websites like Paypal and banking services are highly targeted.

False websites coupled with malware such as keylogging tools are bundled together to lure the victim in and steal his sensitive data. Even websites that have a multi-login process aren’t 100% secure; creative hackers have created ways around these by stealing the credentials in real time and entering them while the user is temporarily blocked from accessing his account.

The best ways to stay protected? Practice safe browsing. Safeguard your personal information. Avoid spam and suspicious links. And most importantly, scan your computer frequently.


Test Drive the Cloud: Top 6 Services with Free Storage

Sometimes, you just need to experience things first-hand. If you’ve been itching to find out what the cloud is all about, or are just in search of some free storage for your personal documents, here are several services that offer free storage to customers. These services are available cross-platform and are usually made for use between a PC and personal handheld device.

- Google Drive: The latest and most highly anticipated Google service launched at the end of last month and was met with a positive reaction. Google Drive is a basic storage service that syncs between anything on the Google cloud network, including Android devices. It’s essentially a mutation of Google Docs, but now offers more powerful collaboration tools and 5GB of free storage to customers. Users can make files available offline and have the ability to edit them directly from the interface. Upgraded storage plans are relatively cheap; 25 or 100GB of additional storage costs $2.49 or $4.99 yearly respectively.

- Dropbox: With its easy-to-use controls and accessibility across multiple platforms, Dropbox is a fan favorite for syncing and sharing files and folders. It has a very simple and limited user interface, but it’s made even more functional with add-ons such as Dropbox Folder Sync. Dropbox offers 2GB of storage to users starting out and has several ways to obtain free space, such as with referrals or camera uploads. Paid accounts are less flexible than some alternatives with the lowest plan starting at 50GB for $9.99 per year, but they also offer large storage (starting at 1TB) for groups. Paid Dropbox users can also reap the benefits of referrals to increase their storage even more.

- Microsoft Windows Live SkyDrive: This service rivals Google Drive; they recently added more functionality and improved management features. It integrates with Windows and Live users. Unfortunately, they reduced the amount of free storage offered to customers from 25GB to 7. Additional storage will run users $10 for 20GB, $25 for 50GB, or $50 for 100GB annually.

- SugarSync: As a self-proclaimed “personal cloud service,” SugarSync is similar to Dropbox except it offers 5GB of free storage to new users. It also has more complex tools for file management and sharing.

- iCloud: This is the default storage solution for Apple users and is integrated with all of their products. Users get 5GB of free storage and can upgrade to a maximum of 50GB. Paid music, books, and photos aren’t counted against the free storage limit.

- Amazon Cloud Drive: Amazon is a newcomer to the cloud scene but is catching on quickly. The service offers 5GB of free storage to users and guarantees secure storage for music, videos, photos, and documents. Paid storage plans flexible and go up to 1,000GB.

10 Reasons to Choose Cloud Services for Your Small Business

If you’re still uncertain cloud computing is right for your small business, here are the top 10 benefits that the cloud has to offer small businesses.

1. Lower costs – The cloud reduces dependency on excess hardware and software and maximizes your IT expenses. Instead of paying a flat rate for storage and data usage, you only pay for what you use.

2. Scalability – The cloud is a ubiquitous, elastic entity. It can stretch and shrink at will to fit the needs of a wide range of tasks, including application use. In times of higher traffic, the cloud scales up temporarily to suit the user’s increased needs, and shrinks when it is no longer in use.

3. Automated Updating – This takes the burden off of the shoulders of the IT guys, who will no longer need to worry about paying for expensive hardware and software upgrades.

4. Remote Access – Information is automatically synced via the Internet in a remote location. This allows anyone to access and update their information from any location as long as they are connected to the Internet.

5. Disaster Preparedness – Data is stored in external location away from the main office. In the event of natural disasters or fires, the data will always be backed up and there when you need it. Users no longer need to worry about losing important documents in the event of a power outage.

6. Ease of Use – You won’t need to depend on IT resources as much; cloud services are easy to set up and maintain. Instead, you will be able to focus your energy (and money) on areas that may need additional work.

7. Dependable Third-Party Vendors – Companies who offer cloud services are reliable and have several years of functional knowledge in the industry. They have great customer service for any concerns or problems you may have. The bottom line: you’ll be partnering with people who are qualified to handle your data.

8. Reaction Time – The cloud responds notoriously faster than physical servers.

9. Closing the Competition Gap – One of the biggest struggles a small business faces is competition from larger companies. By using cloud services, a small business is able to fight back by using the same powerful tools that top-profiting companies use. As an added bonus, you’ll only be paying a small fraction of the cost.

10. Customization – Shaping the cloud has limitless possibilities. Users have thousands of tools from various vendors directly at their fingertips. It’s a fully customizable space with endless potential.


The IT advantages of cloud computing

Many businesses are switching their infrastructure to a cloud-based one, and it’s clear to see why. The benefits are abundant; it gives a business more freedom and customization while freeing up valuable budget resources for more important processes. It’s not just the business that reaps the benefits from the change. IT departments have the most to gain from the conversion, and here’s why:

Simplified Model: IT organizations are mostly concerned with the costs related to maintenance and how to align their budget with the needs of the business. Implementing cloud services in their infrastructure gives the company more direct control over operating expenses (OPEX) and capital expenditure (CAPEX). Freeing up the budget for the IT department will also give them room to focus on increasing revenue and growing the company.

Appropriate Size: The cloud is not limited by spatial restrictions like typical data hosting; it can grow and shrink depending on necessity. It offers rapid deployment that enables it to quickly scale in size to meet the need of application usage and can accommodate “peak times” of increased traffic.

Ease of Integration: The cloud is flexible, secure, and has access mechanisms that make it a great option as a core platform. Many applications for use by enterprises require integration outside of the structural mainframe.

Security: Cloud services are system-based and not point-based, meaning they are secure on all levels of the infrastructure, including applications, remote networks, and software. It also supports users connecting from non-secure sources, such as from a mobile network. These safeguards protect the database on multiple levels and helps prevent gaps that hackers and get into.

Infrastructure Safeguards: One of the most vital things a business can do to protect itself is to have preparedness in case of disaster or other situations. Standard recovery systems only protect the most important applications of a business. With cloud services integration, the entire infrastructure can be protected because its scalability incorporates into data recovery.

Cloud Computing vs. SaaS

You’ve no doubt heard the terms “cloud computing” and “software as a service” tossed around almost interchangeably, so what is the difference between the two?

The term “cloud” refers to the type of Internet networking that is more of an abstraction than a physical anomaly. In early network drafts, the concept of interconnected computers was originally depicted as clouds linked together on a flowchart. The intricate system of networked computers that came to make up modern Internet eventually adopted the term “cloud computing” to describe its functionality. With early computers, users didn’t own the computer and merely rented time from a server. Many years later, users owned personal computers but had the added responsibility of keeping software up to date and had to manually backup data. Now, the two models of computing have meshed together; consumers own personal computers and devices but are also renting out server time elsewhere. Instead of relying on one server to complete tasks, we’re now drawing information from several different sources.

Any time you use a computer that is not in your physical location, it’s some form of the cloud. Most often, you use the cloud in terms of “software as a service” (SaaS), such as with online versions of applications and software like e-mail, online financing, social media, or data hosting. SaaS can either be free or require a paid subscription. With SaaS, your personal account is connected to data stored outside of your computer or device. As long as you have an Internet connection, you can access the software and information.

So, what is the difference between cloud computing and SaaS?

Pure cloud computing is distinctly different from SaaS in that you create and customize an environment to suit your needs. It is more customizable with unique opportunities for storage and content creation. With SaaS, you are restricted to the features available to you by default through the program or application, though you are able to receive software updates and can back up data automatically. As a true cloud user, you are responsible for the upkeep of applications and servers you own. The price for cloud services can also fluctuate based on usage, whereas paid SaaS subscriptions are a flat rate.

For both choices you need to trust the organization you partner with. Both cloud and SaaS users have to rely on external servers to continue operating as promised. You need to know that the company or service will continue running and have a backup plan in the event something should happen to discontinue its usage. SaaS users can run the risk of restricted functionality or service termination due to a subset of people who use the software illegally or to perform harmful actions. Companies can also change hands and be bought out; this is something that happens quite frequently. In those cases, service agreements and terms of use are subject to change.

What to Expect: Security in 2012

Computer security is often a huge game of cat and mouse – antivirus software companies are always in a race against to protect against the multitude of threats facing the public. Companies and consumers alike are constantly under siege from malware, viruses, hacking attempts, and phishing scams. If you want to be better prepared, keep a lookout for these top security trends in 2012:

Hacking and security breaches are inevitable. They happen every day, and even big companies are not immune. The problem? The large volume of attacks launched every day. Last year, Sony’s Playstation Network went down for several consecutive days and the personal information of several million customers was compromised. Businesses have accepted that it’s no longer about preventing these attacks from occurring; it’s acknowledging that it will happen and plans need to be made for how to respond. The quicker a breach is detected, the easier it is to recover.

Mobile threats are on the rise. To date, the Android OS has attracted the most attention in this area, although it’s highly ineffective since most users don’t keep financial information – the stuff that makes criminals money – on their devices. Smartphone users are essentially in the clear for now, with malware threats being not much more than a nuisance in most cases. However, it’s only a matter of time before the threats become dangerous, especially for other platforms, namely Windows Mobile OS.

Social networks are a large target. Social network attacks work because they fool the users into willingly giving out information. It’s very easy for hackers to engineer a link that will redirect a user to a website that looks identical, but fake version of a well-known website, such as Paypal or the social network itself. Unsuspecting users then enter their log in information, thus giving the hackers direct access to their information. With 800 million registered members on Facebook alone, the market for hacking attempts has
unlimited potential for criminals.

Code is constantly under scrutiny. Hackers often use known vulnerabilities in programs to launch their attack. An abundance of bugs and flaws means there are that many more openings for a hacker to gain unwanted access. Developers need to take the time to make sure their code is flawless and release updates when they’ve detected a problem.

Personal Devices and Cloud Computing Changing the Way We Think About Security

Mobile carriers and tablet developers boast that this is the age of portable personal devices. With cloud computing services booming along rapidly, consumers have many new resources to add to their browsing repertoire. Along with a new era of computing comes a new way of illegitimately obtaining personal information from consumers. In 2011, the sheer amount of cyberattacks and criminal activity was vast. The majority of these attacks were made against businesses and companies over the Internet. However, experts claim that personal devices have inherent problems when it comes to keeping them secure.

“The rapid inflow of consumer-owned smartphones and tablets is causing significant security challenges for many organizations. IT departments are being asked to connect devices to corporate networks and secure data on these devices, which they have very little control over,” Gerhard Eschelbeck, CEO of Sophos, explained in a letter addressing security concerns. “Due to the high degree of mobility, security requirements are plentiful, including enforcement of use policies, corporate data encryption, access to corporate networks, productivity/content filtering, and of course malware protection. The unique nature of modern form factors (in terms of processing power, memory, battery life) requires rethinking of security and defense mechanisms.”

Eschelbeck believes that cloud computing holds the key for revolutionizing security systems and how threats are handled. He says that by using the cloud as a resource for protecting consumer data, it takes the burden away from the consumer and sets a new standard for regulating security practices. Of course, creating a privacy standard and security system for the cloud imposes a new, unique challenge that developers will have to face.

The Internet will remain the number one source for attacks; it’s been around longer and criminals have developed methods of obtaining information that continue to be successful and lucrative. It will take some time before targeted attacks on personal devices are refined and worthwhile for criminals. In that time, it’s important that the security of consumers is addressed and devices are made more secure.


Adobe trying to revolutionize big data analytics

Analysis of big data is typically a slow and lengthy process that requires a large amount of computing resources and power. Still, consumer data is important for predicting trends and helping companies see the results and outreach of their marketing campaigns. As big data becomes more popular, companies are racing to find the best way to harvest and analyze such vast and expanding amounts of consumer information.

During the Adobe Digital Marketing Summit, Adobe recently announced that its forthcoming Digital Marketing Suite would boast new predictive marketing capabilities that would make it easier to detect patterns and reoccurring behaviors present in big data. This groundbreaking news comes as a relief to market researchers that have been in dire need of a better way to filter through an abundance of data. 

Brad Rencher, senior vice president of digital marketing at Adobe, stated “[…] the data is getting bigger, the details that matter are getting smaller.” Adobe’s marketing suit will help improve on existing digital marketing strategies and offer a wider range of tools to customers, including improved personalized engagement and media monetization. In addition, the predictive analytics will allow marketers to forecast campaign results with multiple ‘what-if’ scenarios and allow them to easily identify risks.

“In the early days of digital marketing, analytics emerged to tell us what happened and, as analytics got better, why it happened,” Rencher said. “Then solutions emerged to make it easier to act on data and optimize results. But the sheer amount of available data presents a challenge to quickly extract insights and act while those insights are still valuable. The new predictive capabilities within the Digital Marketing Suite address these challenges and help marketers turn big data into a big opportunity.”


What about mobile data security?

When smartphones first became popular, the threat of viruses, spyware and malware was little to none. There was less than a 1 percent chance of downloading a malicious app or running across spyware on a mobile browser. Now, consumers have to proactively safeguard themselves against dangerous threats that can target their most sensitive data. Luckily, as hazards become more targeted and sophisticated, antivirus software steps up and stays one step ahead.

While the risk for downloading malicious software is still relatively low – at least for users who stick to using their stock app store – mobile security is a must for smartphone users who want to keep their data and identities safe from criminal hands. Below are the top choices for mobile security. Each comes with its own trial or free version, as well as a paid version that comes with premium features. It is also important to note that every app on this list proactively scans new apps when downloaded them and offers to show relevant privacy information.

McAfee: McAfee was recently nominated the best overall mobile security app. It’s an aggressive antivirus scanner with many additional features, including data backup and restore, anti-theft, and privacy measures. The UI is less user-friendly compared to some as it is more 

of a direct port from the desktop version. Negativities aside, McAfee demonstrated a 100% detection rate of malware. After a seven day free trial, a paid subscription will cost you $29.99 a year.

Lookout: Lookout for Android is a mobile-only security company. They specialize in data backup, antivirus software, privacy protection, and tools that help you find your phone when lost. The UI is simple and easy to use. Even the free version comes packed with a bunch ofhandy features to keep you safe on the go. The paid subscription costs $29.99 a year.


F-Secure: F-Secure for Android is a top-tier antivirus that comes bundled with parental controls as well. This makes it appealing to parents of young children. It doesn’t have someof the extra features touted by other software, but what it does, it does incredibly well – AV-Test.org noted that it successfully blocked 90% of all threats it came into contact with. The downside is that F-Secure is one of the pricier options, with the premium version going for$39.99/year.

Bitdefender: Bitdefender is a lightweight app with a simple, easy-to-use UI. It offers additional features aside from basic antivirus, including a firewall and anti-theft features. Unfortunately,the firewall will only protect the stock browser on your phone and the antivirus is average at best. This has the cheapest paid option on this list, with premium access costing only $9.99 per year.