Spectre makes a comeback in NetSpectre
When one cyberattack is stopped, another more powerful variant almost always takes its place. It happens all the time with ransomware, computer viruses, and Trojan horses. Recently, this has become the case with Spectre attacks, which exploit a fundamental flaw in modern computer chips. Here’s everything you need to know.
Spectre 101
For those who don’t know, Spectre is a vulnerability in modern computer chips like Intel and AMD that allows hackers to steal confidential information stored in an application’s memory, including passwords, instant messages, and emails. Malicious code running on a computer or web browser could be used to exploit this vulnerability, but ever since Spectre was discovered, Microsoft, AMD, Intel, and other tech companies released a series of updates to fix it.
What is NetSpectre?
To perform Spectre attacks, malware would have to run on a targeted machine to extract sensitive data. But in late July, Austrian security researchers found a way to launch Spectre-style attacks remotely without locally installed malware. The new attack is called NetSpectre and it can be conducted over a local area network or via the cloud.
So far, it’s impractical for average hackers to use this method to steal data. In tests, researchers were able to steal data at a rate of between 15 to 60 bits per hour, which means it would take days to gather corporate secrets and passwords. As such, NetSpectre will probably be used by hackers who want to target specific individuals but don’t want to resort to obvious methods like phishing scams or spyware.
Experts also warn that while NetSpectre may be impractical now, hackers may develop faster and more powerful variants in the future.
How should you protect your business?
NetSpectre attacks exploit the same vulnerabilities as the original Spectre so it’s important to install the latest firmware and security updates. You should also secure your networks with advanced firewalls and intrusion prevention systems to detect potential NetSpectre attacks.
Last but not least, working with a reputable managed services provider that offers proactive network monitoring and security consulting services can go a long way in protecting your business from a slew of cyberthreats.
If you’re looking for a leading managed security services provider, why not talk to us? We provide cutting-edge security software and comprehensive, 24/7 support. Call Multi IT on 011 435 0450 today for more information.
VIEW MORE
Time-saving tips for Microsoft Word
Microsoft Word remains one of the most popular and user-friendly apps for business. It is compatible with both Windows and Mac and can be used to create a wide array of business documents. While millions of people use Word every day, most don’t know how to maximize its potential. And since it is constantly being updated, you need to check out these tips that will help you save time.
Edit simultaneously
You and your colleagues can now edit the same Word document at the same time. Just save yours in the cloud on OneDrive, click Share, then send the link to your colleagues. You’ll even be able to see them editing in real time.
Continue your work with Word Online
Don’t have the Word app on your computer, tablet, or smartphone? Go to word.office.com, sign in with your Microsoft account, and open Word Online, the browser version of Word. By clicking the blue Share button, your colleagues can access your document using Word Online or the Word app, which means anyone with the link and an internet connection can jump right in
Keep editorial control
With the Track Changes function, Word monitors all the edits that everyone makes to your document so you can go through the changes and accept or reject them accordingly.
To turn on Track Changes, click on the Review tab then select Track Changes. When reviewing a colleague’s edits, you have control to click on Accept or Reject as you see fit.
Format the easy way: Write first, format later
The Style Gallery in Word makes it easy to format your document, despite the huge number of font types, sizes, colors, and effects to choose from. After finishing writing and editing your document, click the Home tab and you will see the Style Gallery prominently on top. Select the appropriate Headings in the font, size, and color that you like, and change any other text in any way you like -- just make sure you don’t make any changes to the actual content that’s already been edited!
Insert photos faster, more conveniently
No need to open your browser to look for photos for your document. Just place the cursor on the area where you intend to insert the photo, click on the Insert tab, select Online pictures (type “clip art” on the search box if that’s what you need), select a photo, then click Insert.
Edit a PDF file
Click on the File menu, select Open, and choose Browse. Highlight the PDF you want to edit, then click Open. Word will convert files to the new format using text recognition, so double-check if the conversion is correct. Make the appropriate changes, then click File, then Save As, then Browse. A “Save as type:” dropdown menu will appear at which point you will choose “PDF” then click Save.
These tips may seem straightforward, but over time they can make a big difference in helping you work faster. Want to learn more Microsoft Word tricks and tips? Get in touch with Multi IT's Microsoft Office experts today on 011 435 0450!
VIEW MORE
7 Ways to More Twitter Retweets
It can be discouraging for any business to post a thoughtful tweet in the morning just to see that it barely has any retweets by the end of the day. To maximize your tweets’ exposure, consider these 7 ways to increase your retweets.
Schedule your tweets
There is absolutely no point in tweeting out any content if your audience isn’t even awake for it. That’s why it’s important for you to tweet at the right time to get the most retweets. Most people are likely to retweet between 2pm and 6pm. However, if your followers live in different time zones and countries, the time you should be tweeting may vary. Twitter tools like Tweriod track down the geographical distribution of your audience and pinpoints the optimal time you should be tweeting to get the most retweets.
Use links
The next time you tweet out something, try embedding a link in your post. Whether it’s news, sports, or celebrity updates, people will put some effort in staying up to date with their interests. Studies have also shown that links to instructional posts get the most amount of retweets as well. The problem is, 140 characters is not enough content for your followers. So by satisfying your audience’s curiosity, you motivate them to pay you back by sharing your tweet out to their friends.
Ask for retweets
This is perhaps the most obvious tactic to get some retweets. Using call to action phrases such as “please retweet” significantly increases your chances of a retweet. Of course, you probably aren’t the only one asking for retweets. Adding something to sweeten deal, like a prize for one lucky person who retweets you, gives people incentive to do so.
Use visuals
Intriguing images can inspire retweets. Images are a great way to convey a lot of information in a short amount of time, and social media users love that. Some have found that using colorful images and infographics in their tweets significantly increased their engagement rates and led to more followers retweeting their content. It’s probably because there’s just more content to engage with compared to a brief 140 character thought.
Use retweetable words
Research has shown that some words are more retweetable than others. Words like you, twitter, please, retweet, post, blog, social, free, media, help are the top 10 most retweetable words. However common-use words in any conversation such as “lol, haha, work, sleep or watching” are less likely to get retweeted. Unless you’re someone incredibly famous, it’s best to avoid using conversation filler words and stick to the buzzwords that encourage people to share your tweets out to everyone they know.
Use quotes
Quotes express a lot in one simple line, making it perfect for any Twitter posts. Depending on your audience, a thoughtful quote can really move their fingers to click that retweet button. The next time you’re running out of ideas for tweets, dig up some good quotes relevant to your topic to get those retweets going. However, don’t continuously plug in quotes into your tweets. The trick is to do it occasionally, so you don’t risk people tuning out of your tweets.
#Hashtag
You’ll notice that the more popular tweets tend to have at least one hashtag. Using hashtags on keywords helps categorize your tweets with similar ones, giving your posts a bit more reach and, hopefully, more retweets. Just make sure you don’t overdo it as #thiscanbequiteannoying.
We get that small business may find it tough getting their name discovered among so many social media accounts. But if you consider some or all of these Twitter tactics, you have a better chance of getting more eyes on your tweets. If you want to learn more about useful Twitter tactics to increase your exposure and engagement, give Multi IT a call on 011 435 0450 today.
VIEW MORE
Phishers use encrypted sites to scam
Just when you thought cyber criminals couldn’t get smarter, along comes a new scamming technique. Previously used for safeguarding browsing activity, encryption tools are now used by hackers in carrying out phishing scams. This means some fraudulent sites may have HTTPS on their address, giving users a false sense of security.
How hackers use encryption to carry out phishing scams
According to recent research, 24% of phishing scams in 2017 use web encryption -- an astounding increase from last year’s 3%. This means more HTTPS sites may not be truly safe.
Phishing scammers rely on their victims to do what they ask, which is why it’s so effective. And with this new trick, unsuspecting users are more likely to be deceived. What makes this encryption-aided scam even more effective -- and dangerous -- is that it makes hackers’ phishing email or text that much more authentic-looking.
For example, if you receive an email that purports to be from Amazon and includes a link to an encrypted site, there’s now a slightly higher chance you’d believe this email is the real deal. Clearly, if you’ve never purchased anything from Amazon, you’d know that this is a fake. But then again, there are millions of Amazon customers who could be misled into thinking that that email is legitimate.
Does encryption mean a safer internet?
With organizations like the Internet Security Research Group and Google promoting encryption, the world wide web should be a safer place, but that’s not necessarily the case. In fact, encrypting more legitimate websites could simply result in an increased number of encrypted phishing sites.
It may also be useful to know that not all phishing sites use encryption. Many phishing scams are still carried out using websites that may or may not be encrypted.
What you can do to ensure safety
This isn’t meant to cause panic, and despite this new phishing tactic, encryption is still an essential security tool that every business must implement.
Websites with HTTPS are still much safer than unencrypted ones. This is why it’s more important than ever to be vigilant when visiting suspicious sites and clicking on links. If you receive an email from PayPal asking you to verify your bank account details or password to a seemingly secure link, be wary. Some phishing scams are easy to detect, but some are not.
Practice extreme caution when responding to requests for sensitive data. Consider the source of the message, think before clicking, and don’t hesitate to seek the advice of an expert in case you have doubts. Phishers succeed only if you do what they ask you to do.
Phishing and other cyber scams are constantly getting upgrades, and no single solution can prevent hackers from attacking you. But your business could be much safer with the right cyber security protections in place. If this is exactly what you need, get in touch with Multi IT's cyber security technicians on 011 435 0450.
VIEW MORE
6 Microsoft Teams tips
Despite being late to the group chat scene, Microsoft Teams is equipped with a handful of features and impressive integration that set it apart from its competitors. So if you’re already subscribed to Office 365, here’s how you can take Teams to the next level.
Use SharePoint to store and share files
You might already be using SharePoint to store files and collaborate with your teammates. But did you know that in every Teams channel, you can click the Files tab to share files from SharePoint with team members? You can also access SharePoint files that are already shared in the channel and use Office Online or Office Desktop to collaborate on those files, too.
Forward emails into a channel
You get countless emails every day, some of which might be lost in your inboxes. Fortunately, Microsoft makes it easy to forward any email message from Outlook to a channel in Teams so that messages show up in both places. Just click the ellipsis next to any channel name and select “Get email address”. This generates an email address for the channel which you can copy and use to forward files, documents, and messages.
Stick with a few groups
While you can create as many groups within your organization as you like, going overboard can result in a cluttered messaging interface that overwhelms team members. We recommend you create groups based on the number of projects and each members involved; you can always add more if necessary.
Set up audio conferencing
Teams lets you host voice meetings in groups or with just one team member. This is particularly useful when communicating with remote workers or clients, in which case you can give them guest access to your Teams channel. This ensures they’re able to communicate with you but not see history of other confidential information.
Test communication strategies
Just because some of the features in Teams overlap with Yammer and Skype for Business doesn’t mean they’re all redundant. Think of it as a chance to test different communication strategies to find out what works best for you. For instance, if most of your clients have a Skype ID, you can use Skype for client calls and Teams for internal calls.
Share conversations with new team members
Teams makes onboarding easy. Rather than forwarding numerous emails and documents to new employees, you can use Teams to share conversations from a thread or project with them. This enables everyone to catch up easily without having to deal with cumbersome documents.
Microsoft Teams and other Office solutions are equipped with plenty of useful features that can take some time to master. But by taking advantage of these tools, you’ll be able to save time and maximize efficiency, all without having to spend a dime. If you have any questions about Microsoft Office and how it can benefit your business, don’t hesitate to give Multi IT a call on 011 435 0450.
VIEW MORE
Data safety: The non-technical way
Keeping up with advancements in technology as a business owner is tough, especially when those advancements relate to information security. However, it doesn’t have to be. Here are a few physical security tips you can implement to protect your data before calling us!
Cover up your webcam
There must be some credibility to doing this if Facebook founder, Mark Zuckerberg, former FBI director, James Comey, and NSA whistleblower Edward Snowden all believe their webcams could be compromised. This is not just another paranoid celebrity reaction to ruthless paparazzi, there’s a genuine reason behind it. Kindly take a moment to consider the following scenario: hackers using your webcam to spy on you.
Though it might sound unrealistic, this actually happened on several occasions. Sometimes for purely voyeuristic reasons and sometimes what appeared to be espionage. This is a very real threat with disturbing repercussions. Hackers aim to gain personal information based on your surroundings, deduce your location, as well as spy on the people you’re with, ultimately using this information to hold you ransom, threatening to broadcast your most intimate and vulnerable moments if you don’t pay up.
Fortunately, guarding yourself against such danger is really easy and some painter’s tape over your webcam should do the trick. If you’re not confident about regular tape, you can purchase a cheap webcam cover online or at any hardware store.
Purchase a privacy shield
Think of privacy guards as those iPhone scratch protectors, but with an anti-snooping feature. These are thin covers you put on your computer, laptop or smartphone screen to limit viewing angles. Once installed, anyone trying to look at your screen from anywhere -- except straight-on -- sees nothing. Privacy filters are commonly used to protect work devices, particularly which display or contain critical files with sensitive data or confidential information. However, less sensitive, personal devices are still vulnerable to ‘shoulder surfing’ -- the act of peeking at someone else’s screen, with or without ill intent, which is why we recommend using these protectors on all your devices.
Use a physical authentication key
Requiring more than one set of credentials to access sensitive resources is common sense, and has become standard practice for established online services. With something called two-factor authentication in place, you gain access to your account only after you’ve entered the authentication code, which the website sends to your smartphone once you’ve entered your account credentials. Until recently, two-factor authentication relied mostly on text messages that were sent to mobile phones. But professionals have now realised that phones can be hijacked to redirect text messages.
Moreover, authentication codes can be stolen, or users can be tricked into entering these codes via a convincing phishing website. If you’re looking for authentication services that cannot be hijacked, stolen or lost, your best bet is a USB or Bluetooth key you can carry on your keychain. This means nobody -- not even you -- will be able to access your account without the physical key. Ultimate security at your fingertips.
If you need help setting up two-factor authentication, or any IT security services, contact Multi IT's experts on 011 435 0450 and experience true peace of mind as we fortify your data to no end.
VIEW MORE