CISA Releases Free Detection Tool for Azure/M365 Environment

This article is contributed. See the original author and article here.

Original release date: December 24, 2020

CISA has created a free tool for detecting unusual and potentially malicious activity that threatens users and applications in an Azure/Microsoft O365 environment. The tool is intended for use by incident responders and is narrowly focused on activity that is endemic to the recent identity- and authentication-based attacks seen in multiple sectors.

CISA strongly encourages users and administrators to visit the following GitHub page for additional information and detection countermeasures.

This product is provided subject to this Notification and this Privacy & Use policy.

CISA Releases CISA Insights and Creates Webpage on Ongoing APT Cyber Activity

This article is contributed. See the original author and article here.

CISA is tracking a known compromise involving SolarWinds Orion products that are currently being exploited by a malicious actor. An advanced persistent threat (APT) actor is responsible for compromising the SolarWinds Orion software supply chain, as well as widespread abuse of commonly used authentication mechanisms. If left unchecked, this threat actor has the resources, patience, and expertise to resist eviction from compromised networks and continue to hold affected organizations at risk.

In response to this threat, CISA has issued CISA Insights: What Every Leader Needs to Know About the Ongoing APT Cyber Activity. This CISA Insights provides information to leaders on the known risk to organizations and actions that they can take to prioritize measures to identify and address these threats.

CISA has also created a new Supply Chain Compromise webpage to consolidate the many resources—including Emergency Directive (ED) 21-01 and Activity Alert AA20-352A: Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations—that we have released on this compromise. CISA will update the webpage to include partner resources that are of value to the cyber community.

To read the latest CISA Insights, visit CISA.gov/insights. For more information on the SolarWinds Orion software compromise, visit CISA.gov/supply-chain-compromise.

More money from the government?

More money from the government?

This article was originally posted by the FTC. See the original article here.

Congress has just passed another bill to help the people whose finances are taking a beating from the pandemic. Once again, some of us will be getting money by check or direct deposit. The timing and details are still TBA, but here’s what we know:

  1. The government won’t ask you to pay anything up front to get this money. Anyone who does is a scammer.
  2. The government won’t call, text, email, or contact you on social media to ask for your Social Security, bank account, or credit card number. Anyone who does is a scammer.
  3. There’s no such thing as getting your money early, or faster. Anyone who says they can hook you up now (or soon) is both lying and a scammer.

We know from the early days of the CARES Act that scammers will be using numbers 1, 2, and 3, above, as part of their playbook. So, if you spot someone who says any of these things, you (a) know they’re a scammer; (b) can warn someone you know about the scam, because (chances are) they’ll get that call, text, or email, too; and (c) can tell the FTC so we can work to stop scammers and warn people about them: ReportFraud.ftc.gov.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

Investment coaching scams are trending

Investment coaching scams are trending

This article was originally posted by the FTC. See the original article here.

You’ll make a lot of money. I’m going to show you how to do it — and using my program, I guarantee you’ll be successful.

If you see that in an ad, there’s likely a scammer behind it. Just last week, the FTC announced Operation Income Illusion, a nationwide effort to shut down income scams that used false promises like this to trick people into believing they would make a lot of money if they bought one of these programs. In each case, it turned out to be, well, an illusion.

One of the cases announced is against RagingBull.com, an online operation that the FTC alleges took in at least $137 million. The people who paid believed the defendants’ promises about their so-called unique and proven techniques to make profits in the stock market. In ads, the defendants touted people’s ability to make money during the pandemic, and featured people who claimed to have been successful using their program. But the FTC says it was all smoke and mirrors. People didn’t make the returns advertised and many lost money instead. And those glowing testimonials? The FTC alleges the defendants admitted — in the fine print of the ads — that they don’t even verify if those testimonials are true.

Before you pay for a program that promises to help you invest your money, consider these things:

  • Statistics and testimonials can be faked. Scammers want you to believe their program is always successful and low-risk.
  • Scammers exaggerate the press of time. They want you to feel pressured to commit now without doing research on the offer.
  • No one can guarantee a specific amount of return on an investment. Scammers might claim that you can make thousands of dollars per day or per month for life, but no one can actually guarantee that an investment will be successful.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.

New tools to fight gift card scams

New tools to fight gift card scams

This article was originally posted by the FTC. See the original article here.

This holiday season (and year-round), gift cards are on scammers’ wish lists. Scammers always have a reason for you to pay them immediately with a gift card. And they often tell you which card to buy and which store to visit. That’s why the FTC is launching a new Stop Gift Card Scams campaign to work with stores and law enforcement to fight these scams. And it’s also why the FTC has taken another look at reporting data to see what’s happening lately.

At ftc.gov/StopGiftCardScams, you can find materials to help people avoid gift card scams. If you’re a retailer (or even if you visit one), you can download, print, and share these materials in your store and community. You’ll find a display rack sign, cashier infographic card, bookmark, and a sticker. Stop Gift Card Scams is also available in Spanish. In fact, the FTC is working with our friends at the U.S. Department of Justice and in local law enforcement to help get the word out nationwide.

This is pressing because the FTC’s data show that, nationwide, gift cards are a top way that people report paying most scammers. People tell the FTC that, since 2018, they’ve paid almost $245 million to scammers, with a median loss of $840. Just today, the FTC released an updated Data Spotlight with some interesting new developments:

  • Reports suggest eBay is scammers’ current gift card brand of choice. It was Google Play and iTunes, but eBay has claimed the uncoveted top spot.
  • People most often report using gift cards to pay scammers pretending to be the government, a business, tech support, or a friend or family member in trouble.
  • People report that scammers tell them to buy gift cards at Walmart, Target, CVS, and Walgreens. And once they have you there, they’ll keep you on the phone as you pay for the gift cards.

Which brings us full circle back to the Stop Gift Card Scams campaign. Read lots more in the Spotlight itself, and find out more about avoiding gift card scams at ftc.gov/giftcards. And if anyone, no matter who it is, tells you to pay with a gift card, that’s a scam. Stop, don’t pay, and then tell the FTC at ReportFraud.ftc.gov.

 

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.