Addressing the Dangers of Browser Extensions

Addressing the Dangers of Browser Extensions

How many browser extensions have you downloaded? Do you know the Dangers of these Browser Extensions?

People download browser extensions as common as they us mobile apps. Once downloaded they tend to not use them? There are over 176,000 browser extensions available on Google Chrome alone. These extensions offer users extra functionalities and customisation options.

Today we look at this and the risks to online security and privacy.

The Allure and Perils of Browser Extensions

Browser extensions are often hailed for their convenience and versatility. They can be a wonderful addition to the browser, and we use them to help use the systems we use every day. But the ease with which users can install these extensions is a weakness. Because it also introduces inherent security risks.
Next, we’ll delve into the hazards associated with browser extensions. It is imperative to strike a balance between the benefits and dangers.

What are the Key Risks Posed by Browser Extensions

Phishing and Social Engineering

Some malicious extensions engage in phishing attacks. As well as social engineering tactics. These attacks can trick users into divulging sensitive information.
This can include creating fake login pages or mimicking popular websites. These tactics lead unsuspecting users to unknowingly provide data. Sensitive data, like usernames, passwords, or other confidential details.

Malicious Intent

There are many extensions developed with genuine intentions. But some extensions harbor malicious code. This code can exploit users for financial gain or other malicious purposes. These rogue extensions may inject unwanted ads. As well as track user activities or even deliver malware.
These extensions often use deceptive practices. They make it challenging for users to distinguish between legitimate and malicious software.

Privacy Intrusions

Many browser extensions request broad permissions. If abused, they can compromise user privacy. Some of these include accessing browsing history and monitoring keystrokes. Certain extensions may overstep their intended functionality. This can lead to the unauthorized collection of sensitive information.
Users often grant permissions without thoroughly reviewing them. This causes them to unintentionally expose personal data to potential misuse.

Outdated or Abandoned Extensions

Extensions that are no longer maintained or updated pose a significant security risk. Outdated extensions may have unresolved vulnerabilities. Hackers can exploit them to gain access to a user’s browser. As well as potentially compromising their entire system. Without regular updates and security patches, these extensions become a liability.

Browser Performance Impact

Certain extensions can significantly impact browser performance. This can happen due to being poorly coded or laden with unnecessary features. This results in a subpar user experience. It can also lead to system slowdowns, crashes, or freezing. An extension’s perceived benefits may attract users. But they end up unwittingly sacrificing performance.

Mitigating the Risks: Best Practices for Browser Extension Security

1. Stick to Official Marketplaces

Download extensions only from official browser marketplaces. Such as those connected with the browser developer (Google, Microsoft, etc.). These platforms have stringent security measures in place. This reduces the likelihood of encountering malicious software.

2. Review Permissions Carefully

Before installing any extension, carefully review the permissions it requests. Be cautious if an extension seeks access to unusual data. Such as data that seems unrelated to its core functionality. Limit permissions to only what is essential for the extension’s intended purpose.

3. Keep Extensions Updated

Regularly update your browser extensions. This ensures you have the latest security patches. Developers release updates to address vulnerabilities and enhance security. If an extension is no longer receiving updates, consider finding an alternative.

4. Limit the Number of Extensions

It’s tempting to install several extensions for various functionalities. But each added extension increases the potential attack surface. Only install extensions that are genuinely needed. Regularly review and uninstall those that are no longer in use.

5. Use Security Software

Use reputable antivirus and anti-malware software. This adds an extra layer of protection against malicious extensions. These tools can detect and remove threats that may bypass browser security.

6. Educate Yourself

Stay informed about the potential risks associated with browser extensions. Understand the permissions you grant. Be aware of the types of threats that can arise from malicious software. Education is a powerful tool in mitigating security risks.

7. Report Suspicious Extensions

If you encounter a suspicious extension, report it. You should report it to the official browser extension marketplace and your IT team. This proactive step helps browser developers take prompt action. That action protects users from potential threats.

8. Regularly Audit Your Extensions

Conduct regular audits of the extensions installed on your browser. Remove any that are unnecessary or pose potential security risks. Maintain a lean and secure browsing environment. This is a key aspect of online security.

Contact Us for Help with Online Cybersecurity

Browser extensions are just one way you or your employees can put a network at risk. Online security is multi-layered. It includes protections from phishing, endpoint threats, and more.
Don’t stay in the dark about your defenses. We can assess your cybersecurity measures and provide proactive steps for better protection.
Give us a call today to schedule a chat.

Read more

This new search feature in Edge is a revolution

This new search feature in Edge is a revolution

Microsoft’s at it again, presenting us with new features week after week. This time it’s all about making our online searches smarter and more efficient in the Edge browser. If you’ve been on the fence about switching to it, this might just be the push you need.

Edge has a cool new feature, as revealed by Mikhail Parakhin, CEO of Advertising and Web Services at Microsoft. Imagine this: you’re searching for something important for your business – maybe it’s market research or the latest trends in your industry. You type in your query, and you get results from not one but two search engines at the same time.

How does it work?

Let’s break it down. Say Bing is your default search engine. Now, when you hit the search icon, you won’t just see Bing’s results, you’ll also get a peek at what Google (or your alternative search engine of choice) has to offer. This dual view works both ways, ensuring you’re not missing out on any valuable information.

In business, information is gold. Having access to comprehensive search results means you’re more likely to find the most relevant, diverse, and valuable information. No more switching between browsers or tabs to compare search results – Edge now does that for you in a single view.

Some people have raised concerns about potential visual clutter from combining two engines’ results. It’s a valid point, and thankfully, Microsoft is listening. Parakhin hinted at the possibility of customising your ‘backup’ search engine to streamline the experience. While the sidebar’s width is currently fixed, there’s an openness to explore deeper customisation options soon.

This feature in Edge is quite a lure. It simplifies the task of searching, making research quicker and more effective. You get the best of both worlds without the hassle of juggling multiple windows.

And it’s more than just a convenience; it’s a step towards smarter, more efficient browsing, especially for us in the business community. It demonstrates Microsoft’s commitment to improving user experience and staying competitive in the browser game.

For current Edge fans, this is an exciting upgrade. For everyone else, it’s a compelling reason to consider making the switch.

Need a hand finding time-saving tools for your business? Get in touch.

Read more

New! A better way to find Chrome extensions

New! A better way to find Chrome extensions

If you use Google Chrome, you’ll love this. Google has just rolled out a game-changing update that’s going to make your browser more powerful than ever.

It’s the revamped Chrome Web Store, featuring a fresh design and exciting new features.

Now, if you’re like me, you’ve probably spent more time than you’d care to admit sifting through the Chrome Web Store in search of the perfect extensions for your browser. Those days of endless scrolling and hunting for that elusive add-on are officially over.

First off, they’ve introduced new categories to help you quickly find what you need. Whether you’re shopping, looking for productivity tools, or are just in the mood for some entertainment, there’s a category for you. And the cherry on top? There’s now a dedicated section for AI-powered extensions.

AI Powered

These AI-powered extensions are not to be underestimated. Many of them integrate popular chatbots and even some of the best ChatGPT extensions available. Imagine having your own virtual assistant right in your browser, ready to answer questions, provide recommendations, and assist with various tasks.

And it doesn’t stop there. Google has also included a ‘suggested extensions’ section that tailors recommendations based on what you’ve previously downloaded.

There’s an ‘Editors’ spotlight’ section which promises to showcase up-and-coming extensions you might have otherwise missed.

Navigating the Chrome Web Store has become even more intuitive. The search bar has moved to the top-right corner of the screen, and Google has enhanced its capabilities. You can filter by all items or focus on featured extensions and themes, making it a breeze to find exactly what you want.

In the top-left corner, you’ll find the Extensions tab to dive deeper into add-ons for your browser. Fancy changing the look of Chrome? Simply navigate to the Themes tab. Customisation has never been this easy.

While this new Chrome Web Store update is undoubtedly exciting, let’s not forget about the importance of staying vigilant when it comes to browser security. Here are a few reminders:

  1. Monitor downloads to make sure they’re safe and relevant
  2. Never download extensions from third-party websites
  3. Make sure everyone in your business is aware of and follows the correct security measures.
  4. Regularly update Chrome and your extensions and educate your team about the importance of strong passwords and safe browsing practices.

If you’d like help finding even more productivity-boosting tools for your business, get in touch.

Read more

What Is Microsoft Sales Copilot& What Does It Do?     

Microsoft surface

The use of AI-driven processes is exploding. Every time you turn around, software has gotten more intelligent. Harnessing the power of AI and machine learning is crucial for staying competitive.

Microsoft is a pioneer in the tech industry and this new AI era. It continues to lead the way with innovative solutions designed to empower businesses. One such innovation is Microsoft Sales Copilot.

This is a tool poised to reshape the future of business. Next, we’ll delve into what Microsoft Sales Copilot is. As well as how it is revolutionizing the world of sales and customer insights.

The Birth of Microsoft Sales Copilot

Microsoft Sales Copilot is the latest addition to the company’s robust portfolio. It was officially introduced in July 2023. It represents a significant leap forward in leveraging AI and machine learning. It’s designed specifically to enhance sales processes and customer engagement.

This groundbreaking tool is built on the foundation of Dynamics 365 Customer Insights. This is Microsoft’s platform for unifying customer data and delivering actionable insights. The tool combines the capabilities of Customer Insights with AI-driven features. Sales Copilot offers sales teams a comprehensive and intelligent solution. Both for customer engagement and relationship management.

What Can Microsoft Sales Copilot Do?

Personalized Customer Insights

Personalised customer insights is one of the core features of Microsoft Sales Copilot. It achieves this by leveraging AI and machine learning to analyze a wide range of data sources. This includes:

  • Customer behavior
  • Buying history
  • Customer interactions

By aggregating and processing this data, Sales Copilot saves salespeople time. It can provide sales professionals with a 360-degree view of their customers. As well as help them understand preferences, needs, and potential pain points.

AI-Driven Recommendations

Sales Copilot doesn’t just stop at providing insights. It goes a step further by offering AI-driven recommendations. These recommendations guide sales teams in their interactions with customers.

For example, the tool can suggest things like:

  • The most appropriate communication channels
  • Timing for follow-ups
  • Tailored, client-specific content recommendations

This level of personalization enables sales teams to engage with customers more effectively.

Enhanced Collaboration

Collaboration is a cornerstone of successful sales processes. Sales Copilot recognizes this by facilitating collaboration among team members. It provides a centralized platform where sales professionals can do things like:

  • Share customer insights
  • Discuss strategies
  • Collaborate on deals

This improves internal communication. It also ensures sales team alignment in the approach to engaging with customers.

Predictive Analytics

Predictive analytics is another powerful aspect of Microsoft Sales Copilot. The tool analyzes historical data and customer behavior patterns. This allows it to predict future customer actions and trends.

This empowers sales teams to make informed decisions. As well as proactively address customer needs, rather than simply reacting to them.

Seamless Integration

Sales Copilot seamlessly integrates with other Microsoft tools and services. This creates a unified ecosystem. This integration allows for a smooth flow of data between applications. It eliminates the need for manual data entry, reducing the risk of errors. It also ensures the consolidation of all customer interactions and data. Having customer information in one place makes for easy access and analysis.

Cloud Migration Program

Besides Sales Copilot, Microsoft also introduced a new cloud migration program. This is in conjunction with Dynamics 365 Customer Insights. This program aims to simplify the process of migrating customer data to the cloud. The integration of Sales Copilot with this program further enhances its capabilities. It does this by providing access to a wealth of cloud-based data.

How Does Sales Copilot Benefit Your Business?

Microsoft Sales Copilot holds immense promise for businesses across various industries. It enables sales teams to work more intelligently and efficiently. The tool has the potential to drive revenue growth and enhance customer satisfaction. Here are some ways in which Sales Copilot can benefit your business.

Improved Customer Engagement

Personalized insights and AI-driven recommendations have many benefits. For one, they enable sales professionals to engage with customers more meaningfully. This can lead to higher conversion rates and increased customer loyalty.

Streamlined Sales Processes

The tool’s predictive analytics and collaboration features can streamline sales processes. It can make them more efficient and effective. This, in turn, can reduce the time and effort required to close deals.

Data-Driven Decision-Making

Sales Copilot provides access to a wealth of customer data and insights. This empowers businesses to make data-driven decisions. This can lead to better-targeted marketing campaigns, product development, and customer service strategies.

Enhanced Competitive Advantage

Businesses that leverage Sales Copilot can gain a competitive advantage. It helps them stay ahead of customer trends and needs. This can be particularly valuable in fast-paced and competitive industries.

Scalability and Flexibility

Microsoft’s cloud-based solutions, including Sales Copilot, offer scalability and flexibility. This allows businesses to adapt to changing market conditions and customer demands.

You Don’t Have to Face the AI Frenzy Alone

AI and machine learning are transforming business tools rapidly. This can cause business owners to worry about falling behind competitors.

You don’t have to figure this all out yourself. We can help. Give us a call today to schedule a chat.

Read more

What is Zero-Click Malware?

How Do You Fight It?  

Zero Click Malware

In today’s digital landscape, cybersecurity threats continue to evolve. They pose significant risks to individuals and organizations alike. One such threat gaining prominence is zero-click malware. This insidious form of malware requires no user interaction. It can silently compromise devices and networks.

One example of this type of attack happened due to a missed call. That’s right, the victim didn’t even have to answer. This infamous WhatsApp breach occurred in 2019, and a zero-day exploit enabled it. The missed call triggered a spyware injection into a resource in the device’s software.

A more recent threat is a new zero-click hack targeting iOS users. This attack initiates when the user receives a message via iMessage. They don’t even need to interact with the message of the malicious code to execute. That code allows a total device takeover.

Below, we will delve into what zero-click malware is. We’ll also explore effective strategies to combat this growing menace.

Understanding Zero-Click Malware

Zero-click malware refers to malicious software that can do a specific thing. It can exploit vulnerabilities in an app or system with no interaction from the user. It is unlike traditional malware that requires users to click on a link or download a file.

Zero-click malware operates in the background, often unbeknownst to the victim. It can infiltrate devices through various attack vectors. These include malicious websites, compromised networks, or even legitimate applications with security loopholes.

The Dangers of Zero-Click Malware

Zero-click malware presents a significant threat. This is due to its stealthy nature and ability to bypass security measures. Once it infects a device, it can execute a range of malicious activities.

These include:

  • Data theft
  • Remote control
  • Cryptocurrency mining
  • Spyware
  • Ransomware
  • Turning devices into botnets for launching attacks

This type of malware can affect individuals, businesses, and even critical infrastructure. Attacks can lead to financial losses, data breaches, and reputational damage.

Fighting Zero-Click Malware

To protect against zero-click malware, it is crucial to adopt two things. A proactive and multi-layered approach to cybersecurity. Here are some essential strategies to consider:

Keep Software Up to Date

Regularly update software, including operating systems, applications, and security patches. This is vital in preventing zero-click malware attacks. Software updates often contain bug fixes and security enhancements. These things address vulnerabilities targeted by malware developers. Enabling automatic updates can streamline this process and ensure devices remain protected.

Put in Place Robust Endpoint Protection

Deploying comprehensive endpoint protection solutions can help detect and block zero-click malware. Use advanced antivirus software, firewalls, and intrusion detection systems. They establish many layers of defense. These solutions should be regularly updated. This ensures the latest threat intelligence to stay ahead of emerging malware variants.

Use Network Segmentation

Segment networks into distinct zones. Base these on user roles, device types, or sensitivity levels. This adds an extra layer of protection against zero-click malware. Isolate critical systems and install strict access controls to limit the damage. These help to mitigate lateral movement of malware and its potential harm.

Educate Users

Human error remains a significant factor in successful malware attacks. A full 88% of data breaches are the result of human error.

Educate users about the risks of zero-click malware and promote good cybersecurity practices. This is crucial. Encourage strong password management. As well as caution when opening email attachments or clicking on unfamiliar links. Support regular training on identifying phishing attempts.

Use Behavioral Analytics and AI

Leverage advanced technologies like behavioral analytics and artificial intelligence. These can help identify anomalous activities that may indicate zero-click malware. These solutions detect patterns, anomalies, and suspicious behavior. This allows for early detection and proactive mitigation.

Conduct Regular Vulnerability Assessments

Perform routine vulnerability assessments and penetration testing. This can help identify weaknesses in systems and applications. Weaknesses that enable an exploit by zero-click malware. Address these vulnerabilities promptly through patching or other remediation measures. These actions can significantly reduce the attack surface.

Uninstall Unneeded Applications

The more applications on a device, the more vulnerabilities it has. Many users download apps then rarely use them. Yet they remain on their device, vulnerable to an attack. They are also more likely to lack updates.

Have employees or your IT team remove unneeded apps on all company devices. This will reduce the potential vulnerabilities to your network.

Only Download Apps from Official App Stores

Be careful where you download apps. You should only download from official app stores. Even when you do, check the reviews and comments. Malicious apps can sometimes slip through the security controls before they’re discovered.

Get the Technology Facts from a Trusted Pro

Zero-click malware continues to evolve and pose severe threats to individuals and organizations. It is crucial to remain vigilant and take proactive steps to combat this menace. Need help with a layered security solution?

Give us a call today to schedule a cybersecurity risk assessment.

Article used with permission from The Technology Press.

Read more

Do You Still Believe in These Common Tech Myths?

Common Tech Myths

In today’s digital age, technology plays a significant role in our lives. But along with the rapid advancements and innovations, several myths have persisted. 

Is it okay to leave your smartphone charging overnight? Do Macs get viruses? And what about those 5G towers? What’s going on with those?

Common tech myths can often lead to misunderstandings. They can even hinder your ability to fully use various tools and devices. In this blog post, we will debunk some of the most common tech myths that continue to circulate. We’ll also explore the truth behind them.

Myth 1: Leaving your device plugged in overnight damages the battery

First is one of the most persistent tech myths. Leaving your device plugged in overnight will harm the battery life. But this myth is largely outdated.

Modern smartphones, laptops, and other devices have advanced battery management systems. These systems prevent overcharging.

Once your device reaches its maximum charge capacity, it automatically stops charging. This is true even if it remains connected to the power source. In fact, it is often recommended to keep your device plugged in overnight to ensure a full charge by morning.

So, feel free to charge your gadgets overnight without worrying about battery damage.

Myth 2: Incognito mode ensures complete anonymity.

Many users believe that using incognito mode in web browsers guarantees complete anonymity. They feel completely secure while surfing the internet using this mode. But this is not entirely accurate. While incognito mode does provide some privacy benefits, they’re limited.

For example, it mainly prevents your device from saving the following items:

  • Browsing history
  • Cookies
  • Temporary files

However, it does not hide your activities from your internet service provider (ISP). Nor from the websites you visit. ISPs and websites can still track your IP address. They can also still watch your online behavior and collect data.

Do you truly want to remain anonymous online? Then consider using a virtual private network (VPN). Or other specialized tools that provide enhanced privacy protection.

Myth 3: Macs are immune to viruses.

Another prevalent myth is that Mac computers are impervious to viruses and malware. It is true that Macs have historically been less prone to such threats compared to Windows PCs. This does not make them immune. 

Some people that tout this myth point to malware statistics. For example, in 2022, 54% of all malware infections happened in Windows systems. Just 6.2% of them happened in macOS.

But you also need to factor in operating system (OS) market share. As of January 2023, Windows had about 74% of the desktop OS share. Mac’s OS had just 15%.

When you consider this, it turns out the systems aren’t that different when it comes to virus and malware risk. The infection rate per user on Macs is 0.075. This is slightly higher than on Windows, at 0.074. So, both systems have a pretty even risk of infection. This is the case even though Macs have a significantly lower infection count.

As the popularity of Macs has grown, so has the interest of hackers in targeting these devices. Malicious software specifically designed for Macs does exist. Users should take proper precautions, no matter the operating system in use.

Limbtec have always stated the need to install reliable antivirus software. As well as keeping the operating system and applications up to date. Exercise caution when downloading files or clicking on suspicious links. Being aware of potential security risks and practicing safe browsing habits is crucial. This is true for Mac users, just as it is for any other platform.

Myth 4: More megapixels mean better image quality.

When it comes to smartphone cameras, savvy marketing sometimes leads to myths. Many people believe that more megapixels equal better image quality. This is a common misconception.

Megapixels are an essential factor in determining the resolution of an image. But they are not the sole indicator of image quality. Other factors play a significant role. Such as:

  • The size of individual pixels
  • Lens quality
  • Image processing algorithms
  • Low-light performance

A camera with a higher megapixel count may produce larger images. But it does not guarantee superior clarity, color accuracy, or dynamic range.

Manufacturers often strike a balance between pixel count and other image processing technologies. They do this to achieve optimal results. When choosing a smartphone or any camera, consider the complete camera system.  Don’t only focus on the megapixel count.

Separate Fact from Fiction

In a world where technology is an integral part of our lives, you must separate fact from fiction. Debunking common tech myths can empower you to make informed decisions. It can also maximize the potential of your digital experiences. An understanding of the truth behind these myths helps you use technology more effectively. It can also help you better protect your privacy.

Get the Technology Facts from a Trusted Pro

Whether you need help with an infected PC or setting up a corporate network, we’re here for you. We cut through the tech myths to bring you reliable and efficient service.

Give us a call today to chat about your technology goals and challenges.

Article used with permission from The Technology Press.

Read more

Browse with confidence: Microsoft Edge’s security boost

Edge update - Browse with confidence

Browsing the web can be risky. It only takes one click on one bad link to put your business’s data at risk.

With cyber criminals constantly targeting businesses using automated tools, it’s important to stay one step ahead with your online security.

That’s why we’re excited that Microsoft is working on a major security update for its Edge browser, which will bring enhanced security to everyone using it.

It’s adding new security features and beefing up existing ones.

Maybe you’ve already seen features such as Password Monitor. This alerts you if any of your saved passwords have been compromised in a data breach, prompting you to change them immediately.

There’s also SmartScreen technology, which will help safeguard you from phishing scams and malware.

This checks websites against a list of known malicious sites, as well as analysing URLs for any suspicious patterns or characteristics. If it detects something that’s not right, you’ll be warned before you proceed to the site.

Why should you care about all these security updates?

It comes down to this: Using a less secure browser could leave you vulnerable to all sorts of online threats. Cyber criminals are constantly coming up with new ways to exploit weaknesses in software, so it’s important to stay up-to-date with the latest security measures.

Plus, let’s face it – no one wants to deal with the aftermath of a cyber attack. Whether it’s dealing with financial losses, identity theft, or just the hassle of cleaning up the mess, the consequences of a breach can be far-reaching.

By using a secure browser like Edge, you can reduce your risk of falling victim to such attacks.

Of course, we know that not everyone is an expert on cyber security. That’s why Microsoft is making it easy to stay safe without needing a degree in computer science.

The new security features are built-in and easy to use so you don’t have to worry about configuring anything yourself. You can browse the web with peace of mind.

If you’re not already using Edge, give it a go. And if you need help getting your 365 suite optimised for your business, get in touch.

Read more

What is AI?

The whole world is suddenly talking about Artificial Intelligence.

From Alexa in your kitchen, to Siri on your phone, AI is already all around us, but new names like ChatGPT, Dall-E, Jasper and more feel like they’ve blown up the internet.

These new concepts take things WAY further, helping us to write articles, search the web with natural conversation, generate images, create code, and introduce new ways to make our daily lives even easier.

But emerging technology nearly always launches in a blizzard of geek-speak before it settles into everyday life. Early PC users might remember the ‘DOS prompt’. And when did you ever have to ‘defrag’ your phone?

Experts believe that these new AI tools will become the building blocks of a whole new world of tech, redefining the way we interact with computers and machines.

So let’s help you decode some of the terms you’ll hear this year.

Chatbot Starting with the basics, a chatbot is an app that mimics human-to-human contact. Just type or speak normally, and the chatbot will respond the same way. ChatGPT is a chatbot. If you haven’t tried it out yet, give it a go.

Deep learning This is the technique that’s used to imitate the human brain, by learning from data. Current search tools and systems use pre-programmed algorithms to respond to requests. AI tools are trained on concepts and conversations in the real-world, and learn as they go to provide human-like responses.

Machine intelligence The umbrella term for machine learning, deep learning, and conventional algorithms. “Will machine intelligence surpass human ingenuity?”

Natural Language Understanding (NLU) helps machines understand the meaning of what we say, even if we make grammatical errors or speak with different regional accents.

Weak AI is the most common form of AI in use right now. Weak AI is non-sentient and typically focuses on a single or small range of activities – for instance writing, or repurposing video content. Strong AI, on the other hand has the goal of producing systems that are as intelligent and skilled as the human mind. Just not yet.

This is just the tip of the iceberg, but trust us – you’re going to be hearing a lot more about AI in the months and years to come.

If you’d like more help to understand how AI might form part of your business, just get in touch.

Published with permission from Your Tech Updates.

Read more

Phishing Emails are getting better thanks to AI

AI is making phishing scams more dangerous

AI chatbots have taken the world by storm in recent months. We’ve been having fun asking ChatGPT questions, trying to find out how much of our jobs it can do, and even getting it to tell us jokes.

But while lots of people have been having fun, cyber criminals have been powering ahead and finding ways to use AI for more sinister purposes.

They’ve worked out that AI can make their phishing scams harder to detect – and that makes them more successful.

Our advice has always been to be cautious with emails. Read them carefully. Look out for spelling mistakes and grammatical errors. Make sure it’s the real deal before clicking any links.

And that’s still excellent advice.

But ironically, the phishing emails generated by a chatbot feel more human than ever before – which puts you and your people at greater risk of falling for a scam. So we all need to be even more careful.

Crooks are using AI to generate unique variations of the same phishing lure. They’re using it to eradicate spelling and grammar mistakes, and even to create entire email threads to make the scam more plausible.

Security tools to detect messages written by AI are in development, but they’re still a way off.

That means you need to be extra cautious when opening emails – especially ones you’re not expecting. Always check the address the message is sent from, and double-check with the sender (not by replying to the email!) if you have even the smallest doubt.

If you need further advice or team training about phishing scams, just get in touch.

Read more

Malicious browser extension are you using them?

There are hundreds of thousands of browser extensions designed to help us to save time, be more productive, and personalise our online experience.

And while the majority of them do what they’re supposed to, some are not designed to help you at all…

If you’re unfortunate enough to download a malicious browser extension without realising, it could harm your productivity and even flood your work with unwanted advertising.

This is known as adware. It’s a form of malware (malicious software) that’s designed to bombard you with unwanted adverts.

It can also change your search engine and send you to affiliate pages when you’re making purchases. These activities generate revenue for the extension’s creators.

In a recent report from a cyber security company, it revealed more than 4 million of its customers have been attacked by adware hiding in browser extensions over the last couple of years.

And often people didn’t realise they were under attack.

There’s a darker scenario where these malicious extensions are hiding actual malware which can infect your computer.

This can lead to sensitive data such as your logins or even payment details being stolen. And of course malware can spread across an entire network.

To keep your business and its data safe from the risk of malicious browser extensions, it’s important you only ever download them from reliable and trusted sources.

What to do

Read reviews and look at ratings. If a browser seems too good to be true it probably is.

As the business owner, you might also look into controlling which extensions can be installed by your team.

We can help with this, as well as looking at up-to-date software protection and (fun) security training for your team.

Published with permission from Your Tech Updates.

Read more