Sheffield Computer Services

Wishing you a safe and happy new year! We’ve had too many ransomeware attacks on customers this year, each time resulting in vast numbers of important files being encrypted rendered useless. This has affected both business and residential customers.

What is ransomware?

Sophos How to Stay Protected Against Randomware says,

“Ransomware is one of the most widespread and damaging threats that internet users face. Since the infamous CryptoLocker first appeared in 2013, we’ve seen a new era of file-encrypting ransomware variants delivered through spam messages and Exploit Kits, extorting money from home users and businesses alike.

“The current wave of ransomware families can have their roots traced back to the early days of Fake AV, through “Locker” variants and finally to the file-encrypting variants that are prevalent today. Each distinct category of malware has shared a common goal – to extort money from victims through social engineering and outright intimidation. The demands for money have grown more forceful with each iteration.

“And the financial consequences can be severe. The Hollywood Presbyterian Medical Center reportedly paid 40 Bitcoins ($17,000) to regain access to its files, while the Kansas Heart Hospital despite paying an undisclosed sum, was faced with a second ransom demand and not given access to all of its files.”

How to stay protected against randsomeware?

• Have an anti-virus installed. Avast free (PC / Mac) and Sophos home (PC/Mac) are good free antivirus protection tools, or Kaspersky is great if you choose to pay (recommended).
• Don’t open emails from unexpected sources, especially attachments.
  • Some of the cases we’ve seen have been cause with a DHL missed delivery email. The customer was expecting a delivery so open the email thinking it was legitimate. If you miss a delivery the driver will leave a note, maybe an email, not always a note so expect that.
• Be alert for files you don’t recognise. If you don’t know what it is or what it does and won’t miss it, DON’T OPEN IT, just delete it. Especially, .exe files, javascript files, and office documents with macros inside.
• Make sure you’re on the correct website…before entering your username and passwords. Good sites will have their own security certificate.
  • www.g00gle.co.uk is not www.google.co.uk
  • www.facebok.com is not www.facebook.com
  • www.microsoft.computersupport.com is not www.microsoft.com (it is www.computersupport.com)

Prepare for the worst: BACKUP!!!! Copy your files to a USB hard drive and then keep it disconnected. If you leave the backup drive connected to your computer the ransomware virus will encrypt all the files on it too.

Bottom line, back up as often as you can and keep the backup drive disconnected from the computer. Also install and antivirus and educate your self (start with a google of ‘how to avoid getting caught with ransomeware’).

Hello. Thought I’d share with you a suspicious email that came into my inbox the other day. A speeding fine from Great Manchester Police! Take a look at the screen-shots.

It’s a good looking email, in the sense it appears to look genuine. But be careful with something like this. Don’t click on anything. Best to not even open it at all in the first place (but it’s often too late) because just opening an email can send a message back to the sender that the email address is active and ok to send more spam to. Worse still to open any attachment. If you do open the email (and worse click on a link within it) at best nothing will happen, at worse your computer or phone will get hacked leading to possible data or financial loss. Here’s how I know this wasn’t legitimate:

• Sent to an email address I rarely use and certainly never use for anything official like car registration or tax details. Think about whether the company/organisation/individual has your email address and if they do would they contact on using it?
• The email was sent from an email address that is clearly nothing to do with the police. The Greater Manchester Police’s website is http://www.gmp.police.uk/ so one would expect an email from them to come from speeding@gmp.police.uk or fines@gmp.police.uk, not mail@localmail.com.
• After checking the links within the email (before opening them) you can see their destinations don’t match the domain the email address if from and more importantly didn’t correspond to anything to do with organisation (in this case the police). This is an easy way to tell that things aren’t what they appear to be. Hovering-over / long-pressing on / right-clicking on a link will usually tell you the full address of where it is going: in this email the link to ‘Examine Speeding Device Proof’ is going to angyscreations.com…. which is strange….

• I’ve never heard of police contacting people caught speeding via email – letters are sent to the registered address of the vehicle owner. This address system is old, tried and tested – police won’t abandon this easily or at least without letting people know about it loudly (through TV, radio etc.). The same applies to being able to view photographic evidence online – never heard of this.
• The email gives lots of information, but nothing personal to you: ‘Speeding Device UIN’, offence location, speed could all be made up; and no personal identifiable is given such as registered driver, address, vehicle registration etc.

There’s a lot of signs and I certainly didn’t think about all of the above straight away, but with a moment’s hesitation before clicking on things I give myself a chance to consider more and make the right choice to ignore the email. Like I said before it’s better not to even open the email at all but if you do I would open it on an up to date iOS device like (iPhone or iPad) as they are more secure.

Disclaimer: I have not followed any other links in this email, so cannot say for certain what was to happen.

If you need help after a virus infection please feel free to contact us for some advice and help getting you safe again. Best practise is to avoid infection and we also offer sit down sessions where we can run through best practises with you on your machine.

(Image made from icons provided by Picol and Freepikfrom www.flaticon.com is licensed by CC 3.0 BY)

Interesting article about the UK out of the EU from a tech point of view:

http://www.theinquirer.net/inquirer/analysis/2462789/weve-really-not-thought-this-brexit-thing-through-from-a-tech-point-of-view

We speak to many customers who have had bad experiences dealing with companies/individuals claiming to be someone else. The worst of these stories usually ended with a fair bit of money lost, and the horrible feelings being scammed leaves (lower self-confidence, increased scepticism, worries about future security etc.). We thought it was time to write a little bit about ‘phishing’ and scams relating to computers.

Phishing (Pronounced, ‘fishing’)
Definition: “the fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers, online.” For this article, we also consider telephone calls as well as email contact methods.

Top ‘scams’ we come across

• Phone calls from [insert big company here] claiming something is wrong with your computer. The victim is tricked into giving remote access to the scammer who shows some errors/viruses/problems on their screen and then the user is required to pay a large amount of money for any fixes required.
• Phone calls to [insert big company here] – there are many websites pertaining to be a company they are not. Person with problem calls big company, they fix the problem (maybe quickly, maybe making a mountain out of it) and charge a large sum of money. If you are paying for a service, you can probably get through to them on the phone but you shouldn’t expect to pay. If you use a free service such as Gmail, Hotmail, Yahoo Mail I don’t think there are any ways to phone those companies/departments directly and free services don’t offer ‘pay help’ – they would more than likely more you to a ‘pay tariff’ which includes support (and instructions on how to use it).
• Emails from the similar companies (often linked to a financial service such as your bank, PayPal, Amazon etc.) claiming your account has been hacked. Best thing here is to have a strong password to begin with that means it is much harder to hack (think long mixed case alphanumeric non dictionary combinations). Second thing to do, if you really do think the email is genuine, is to ignore the email entirely and open you web browser and log into to services/website as you would normally do. You can expect to be alerted to any problems after logging in or by looking at the ‘my account’ section. Clicking on a link in an email can take you to a genuine looking website and you can easily be tricked into giving your details away. Using the hyper link or viewing images in an email can also alert the send so they know your email address is active (so they can send more spam).
• Similarly, the police won’t send you an email if they think you have/are committing a crime. They definitely will not give you an option to pay to get out of a crime (without you going to court). A classic virus, the Metropolitan Police Virus, says you’ve been looking at inappropriate material (animal/child porn) and locks you out of the computer until you pay a ransom fee. If anything pops on the computer claiming to be from the Police, check with the police themselves or give us a bell – sometimes it may be too late, other times the situation can be rectified.

Things to consider to stay out of trouble / best practice guidance

• Use strong unique passwords. Harder to hack any account and allow a scam to be engineered.
• Changing your password, often. A good idea, but realistically perhaps at least once a year. If you suspect any account/service you use has been compromise change the password immediately.
• Stay away from ‘dodgy’ websites such as steaming video sites, live football, porn sites, pirate software/video download sites etc. These are prime places to catch a virus/hack. If you must use these, find trustworthy ones (a trustworthy pirating/streaming site doesn’t seem likely but some are run by people with interesting ethical opinions).
• Learn what popups look like from (these are generally the only popups you should see, so ignore and close (x in the top right) any others):
  • your antivirus program
  • Microsoft Windows / MacOS
  • your web browser
  • any other programs you have installed to run in the background such as CCleaner.
• There are loads of websites that create popups designed to make you think it is a legitimate program installed on your computer or from a trustworthy company. Be cautious, assume the worst and ignore – if you restart the computer and it appears again (when you do something else on the machine) it’s more likely to be legitimate. Knowing what is good/bad here is easier said than done and we appreciate it comes with experience and knowledge.
• Read more about viruses and online safety.

Things to consider if you feel like something isn’t right

If you think you have been scammed out of money call your bank immediately to inform them. They get this sort of thing all the time. Banks can protect you account but only if you tell them too. Likewise, if you paid by credit/debit card, call the card issuer, tell them what happened and request a new card. We do a lot of credit/debit card transactions online and get replacement cards regularly to be safe (every 6-12 months). Using a credit card online usually offers you more protection than a debit card but investigate your card issuers to see which gives you the best cover and use that card online.

Cold call/email? Behave like you would if someone turned up from your house claiming to be from British Gas. You wouldn’t call a number that they provided you to verify them – you would find the number for British Gas in the phone book or online and call that. Do the same for computer companies.

Before letting anyone take control of your computer, be 100% sure they are who they say they are and you can trust them. Once you have handed control over the remote person could do anything very quickly. There is no way to say for certain that the computer is clean and safe after someone has been on it without wiping it completely or through a costly very inspection/observation.

Companies probably wont call you…unless you are already in a dialogue with them (or somehow manage to owe them money).

• Microsoft won’t ring you about Windows.
• Not heard of Apple calling anyone.
• Google won’t ring you, and there is no telephone support for Gmail problems. We believe this is the same for Microsoft’s Hotmail/Live/Outlook accounts.
• If you are paying for advertising, contractors do work for Google and Microsoft.

Your WiFi, phones and computers can’t infect your neighbours equipment.

Always ask how much the work is going to cost before letting it happen. To give you an idea of prices, Sheffield Computer Services nearly always charge far less than £100 to fix any problem (excluding hardware costs). Sometimes bills have been larger but on those occasions it tends to be a ‘fix everyone’s laptop, the family desktop, set up an iPad, iPhone and smart TV’ type of job. A good company will stick to their quote or warn you if the cost is going to increase.

If you’re paying for a service (antivirus, software suite etc.) the price of support is usually included.

If you are in a contract with a company and you end up in a situation such as ‘owing’ them money for a remote fix and you feel things are wrong, tell them. Tell them that you will call them back and settle the bills – they must be able to put the bill ‘on the system’ so you can settle it later by calling a number on their official website.

Remember, take a cautious approach, and if in doubt give us a call.