IT Tech Tips

Summer is a popular time for vacation travel. If you’re looking to squeeze in any last-minute travel, there is a scam circulating that you need to be aware of. As costs for everything from food to travel continue to increase, the logical step is to search for the best deals online to book a memorable trip without breaking your budget. According to Booking.com, cybercriminals have decided to capitalize on this need and are now using one scarily convincing, AI-generated phishing e-mail that can cost victims way more than their vacation fund. Booking.com’s CISO, Marnie Wilking, shared that the organization has seen a 500% to 900% increase in travel-related scams in the past 18 months using this malicious tactic. How are these scammers doing it? Phishing e-mails have existed since the dawn of the Internet, but AI tools like ChatGPT are making it increasingly easy to create realistic and professional scam e-mails that are more likely to trick readers. In the past, phishing e-mails were riddled with red flags such as spelling and grammatical errors. With the rise of AI, it’s easier for cybercriminals to pump out dozens of seemingly legitimate e-mails that often go undetected by software and readers. Here’s how they work: Scammers will use sites like Booking.com or Airbnb.com that allow people to list their places as short-term rentals. The scammers send out e-mails offering incredible rates or time-sensitive deals on nonexistent properties. After someone pays, the cybercriminals will either disappear with the money, leaving the renter without a place to stay, or use follow-up e-mails to collect additional “fees” or “charges” before vanishing. To be clear, these vacation-focused phishing scams are NOT new. The problem now is that, with AI, more people are falling for them because these e-mails are becoming more convincing. What can you do? Vacationers can take several key steps to ensure they’re not being duped. The most important thing is to stay vigilant. Analyze every e-mail offer you receive and follow cyber security best practices. Standard security software can help detect some of these scam e-mails, but often not all of them, so it’s important to be cautious and look for red flags. Personal scams may ruin a vacation, but business breaches can cost you and your family their livelihood. To keep your network secure, call us at 774-241-8600 or click here to book a FREE 10-minute discovery call with our cyber security experts, who can help you create a plan that protects you. We are here to help! Enjoy a well-deserved break this summer, and remember to be cybersmart.

Each year on February 1st, we celebrate Change Your Password Day. While it’s not a holiday that gets you off work, it serves as a good opportunity each year to do a quick check-in and make sure you’re using strong passwords that will keep your accounts protected. The suggested ‘rule’ used to be to change your password every three months. With advanced tools like password managers and data encryption, experts now say the type of password you use is more important than how often you create a new one. We’re sharing up-to-date advice on how to create a strong password that will keep your account secure and hackers guessing. Make It Complex Aim for complexity by combining uppercase and lowercase letters, numbers and special characters. Avoid easily guessable information like birthdays, names or common words. The more intricate and unique your password, the harder it is for hackers to crack it. Longer Passwords Are Harder To Crack Long passwords provide an added layer of security. According to Hive Systems, brute-force hacking can crack an eight-character password in less than one hour! When creating a new password, aim for a minimum of 12 characters, and consider using passphrases—sequences of random words or a sentence—which can be both strong and easier to remember. A random passphrase would be something like: cogwheel-rosy-cathouse-jailbreak. This passphrase was generated from the website useapassphrase.com, which will auto-create a four-word passphrase for you if you’re stumped. Use Unique Passwords For Each Account Resisting the temptation to reuse passwords across multiple accounts is crucial. If one account is compromised, having unique passwords for other accounts ensures that the damage is contained. Consider using a reputable password manager to help you generate and store complex passwords securely. *Do NOT use Google or your browser’s password manager. If your Google account is compromised, all of your passwords will be too. Talk with your IT team about what password management tool they recommend for you and your organization. Update Passwords Yearly As long as your account hasn’t been compromised, you only need to change your passwords once a year to minimize the risk of unauthorized access. The only time a regular password change routine would be exceptionally helpful is if someone has access that you don’t know about. A frequent password change can make it more challenging for attackers to maintain access to your accounts over an extended period of time. Engage Multi-Factor Authentication (MFA) Implementing multi-factor authentication is another easy way to make your password bulletproof. MFA typically involves combining something you know (your password) with something you have (like a code sent to your phone). Even if your password is compromised, MFA significantly reduces the chances of unauthorized access. Set Up Strong Password Recovery Alternatives Leverage password recovery options like security questions or alternative e-mail addresses. It’s important to choose questions with answers that are not easily guessable or have publicly available information so “What’s your mother’s maiden name” is out! Use Password Managers You don’t have to try and remember every password, and you shouldn’t write them down on a sticky note on your desk. Instead, use a good password management tool that is secure and will handle keeping track of your passwords for you. Bonus points for turning off the auto-fill feature. Hackers can infiltrate sites and install a little bit of code on a page that creates a second, invisible password box. When your password manager autofills the login box, it will also fill in the invisible box, giving hackers your password. This isn’t overly common, but it still poses a risk. Regularly Review Account Activity Monitor your account activity for any suspicious logins or activities. Many online platforms offer features that notify you of login attempts from unfamiliar devices, allowing you to take swift action in the event of unauthorized access. It’s also always good to be aware of phishing attempts, never click suspicious links or attachments in e-mails, avoid public Wi-Fi and only use secure connections and educate and train your team on what to look for when it comes to cybercrime so they can protect themselves, you and the company. As cyber threats continue to evolve, mastering the fundamentals of cybersecurity, like creating strong passwords, becomes paramount. By making informed choices and staying proactive, you can significantly enhance your online security. However, as the leader of your organization, it’s important to remember that nothing is foolproof. Educating your team on cybersecurity best practices is essential, but mistakes can and will still happen. For most, it’s not a matter of if, but when. You must have a robust cybersecurity plan in place. The right IT team will make sure you have every protection in place to keep you safe and a crisis management plan ready if something goes wrong. To find out what gaps you have in your cybersecurity system, we’ll do a FREE Cybersecurity Risk Assessment. Click here to book yours now.

Long gone are the days when phones were simple devices used to make calls. Today our phones are advanced, handheld supercomputers that can do everything from pay a bill to order lunch for delivery to edit videos and more. But with more capabilities come more risks. Because our phones are computers and connected to the Internet, they are susceptible to the same security risks that any other computer would be. Worse yet, personal devices often contain private information like bank account numbers, which, if accessed by the wrong person, could result in dangerous and expensive problems like drained bank accounts, identity theft and so on. Still, despite the obvious risks, most people do not treat phones like the security threats they pose, making them easy, no-brainer targets for cybercriminals. To give perspective on how severe the problem is, Apple recently shared a study from MIT revealing a shocking 2.6 billion personal records were breached in 2021 and 2022 and were expected to increase in 2023. According to Kaspersky Security Network, in Q3 of 2023 alone, a total of 8,346,169 mobile malware, adware and riskware attacks were blocked, with adware being the most common tactic at 52% of total detected threats. The risks are even more serious for business owners. Does your organization have a mobile policy for employees? Are employees accessing sensitive work documents or accounts using unprotected devices? If you’re not sure, you need your IT department to look into this immediately. It only takes one entry point for a hacker to break into your network. There are a few ways to protect your devices now. Both Apple and Android have developed powerful security systems with advanced protective features you can start utilizing today. Apple: End-to-end encryption has been the default for Apple iMessage, iCloud Keychain, and Health data, but with a recent update, Apple rolled out Advanced Data Protection (ADP). This feature is an optional setting that offers Apple’s highest level of cloud data security by encrypting messages in iCloud, iCloud Backup, Notes, Photos, Safari bookmarks, Siri Shortcuts and more. Activating this setting protects your data in the event of a cloud-based data breach by only allowing trusted devices added by you to decrypt the information. Not even Apple can access your data. Here’s how to enable Apple’s Advanced Data Protection Setting: NOTE: If you don’t have a recovery contact or key set up, you’ll be prompted to do that first. NOTE: You may be asked to update other devices signed into your iCloud account before enabling end-to-end encryption (E2E). You can also remove devices with old software to continue the process. If your device is new, for security reasons, Apple might make you wait to enable the feature. If that’s the case, that timeframe will show on your screen during setup. Android: While Apple is known for having a robust security system that reduces vulnerabilities and protects users’ data, Android’s security features are not far behind. Google Play Protect analyzes every app before it’s available for download, and any new apps where a security risk is detected are unable to be accessed. The software also runs daily scans to help identify and disable malware and other harmful applications installed on your phone to protect your data. Furthermore, Android backups are regularly uploaded to Google servers and encrypted with your Google Account password for security purposes. How to keep data secure if you’re using an Android: If you’re using Google One, you can set up automatic backups on your Android device to ensure that if disaster strikes, your data is securely stored in the cloud: NOTE: If you get a message to install an app, update an app or change your settings, follow the onscreen steps. Then, go back to the Google One app to finish. NOTE: Google One backups may take up to 24 hours to complete. How To Protect All Of Your Devices: These features are not the end-all, be-all for phone security, but they will add a layer of protection for your data. To ensure every device on your network is secure, we recommend getting a third-party Cybersecurity Risk Assessment. This is a free, no-obligation assessment where one of our experts will examine your network and let you know if and where you’re vulnerable to an attack, including your mobile device policy. Schedule your assessment with one of our senior advisors by calling us at 777-241-8600 or going to https://centrend.com/contact/

The holiday season is in full swing, which means so are the cybercriminals! While you’re making holiday gift lists, they’re plotting and scheming new ways to take advantage of unsuspecting online shoppers. Holiday phishing scams have become an all-too-common threat, targeting customers to steal personal information, financial data and even identities. To help reduce the chances that a cybercriminal will ruin your much-deserved holiday fun, we’ve outlined a few of the most common and dangerous scams that you should be on the lookout for, how they work and tips to help you avoid becoming their next victim. Understanding Holiday Phishing Scams: Phishing is a deceptive technique cybercriminals use to trick individuals into sharing sensitive information such as passwords, credit card details or Social Security numbers. During the holiday season, these scams often take on a festive disguise, tricking victims with holiday-themed e-mails, messages and websites. Whether you’re ordering gifts for clients or friends and family, here are some common tactics used by holiday phishing scammers to be aware of: Recognizing and Avoiding Holiday Phishing Scams: Now that we understand how holiday phishing scams operate, it’s essential to know how to recognize and avoid falling victim to them. 1. Verify The Sender: Always check the sender’s e-mail address or domain. Be cautious of misspelled or suspicious e-mail addresses. Legitimate companies and organizations use official domains for their communication. 2. Don’t Click On Suspicious Links: Hover your mouse over links to see the actual URL they lead to. Be wary of shortened links or URLs that don’t match the sender’s domain. If in doubt, visit the website directly by typing the URL into your browser. 3. Beware Of Urgency And Pressure: Scammers often create a sense of urgency, claiming limited-time offers or imminent problems. Take your time to verify the authenticity of any claims before taking action. 4. Double-Check Websites: Before entering personal or financial information on a website, ensure it’s secure. Look for “https://” in the URL, a padlock icon in the address bar and a valid SSL certificate. 5. Use Two-Factor Authentication (2FA): Enable 2FA wherever possible, especially for online shopping and banking accounts. This provides an extra layer of security, even if your password is compromised. 6. Educate Yourself And Others: Stay informed about current phishing tactics and share this knowledge with friends and family. The more people are aware, the harder it becomes for scammers to succeed. 7. Protect Personal Information: Avoid sharing sensitive information via e-mail or text messages, even if the request seems legitimate. Use secure channels for such communication. While the holiday season is a time for celebration and togetherness, it’s crucial to remain vigilant against holiday phishing scams. Cybercriminals prey on the festive spirit and increase online activity during this time. By recognizing the signs of phishing attempts and following best practices for online security, you can protect yourself and ensure a safe and joyous holiday season for you and your loved ones. Business owners: If your staff will be ordering gifts online for clients, make sure they know how to spot a phishing attack and that your network is properly secured in case something slips through the cracks. You don’t want your organization to be negatively impacted by extending holiday goodwill. If you aren’t sure if you’re protected, please give us a call or schedule a 10-minute discovery session with our team. We can help give you peace of mind this holiday season. Click here to book now, and happy holidays!

There is one extremely common threat to our security that nearly everyone has witnessed but hardly anyone talks about – bad bots. These silent attackers are often thought of as annoying spam accounts posting computer-generated comments online. They are so common that most of us tend to scroll by them without noticing, but in reality, bad bots are much more dangerous, particularly for business owners. What Are Bad Bots? Bad bots are software applications that are programmed to run automated tasks with malicious intent, such as brute force attacks, data mining, ad fraud and more. These stealthy assailants are the tireless, automated “employees” of cybercriminals that help them wreak havoc at scale. And they are everywhere. A study by Imperva revealed that of all Internet traffic in 2022, 47.4% was made up of these automated bots. The activities of these bad bots can range from annoying to outright malicious. The most common ones we see that can affect any business are: Reputation Attacks: Bots can be configured to leave comments on your social media or website with malicious codes and links, post provocative or spammy comments, leave scathing reviews and so on, all of which affect consumer trust. Web Scraping: Bad bots can scrape your website for valuable data, such as pricing information or customer reviews, which they might use for various purposes, including undercutting your prices or selling your data to competitors. They could also use it to duplicate your website and set up phishing scams to trick visitors. This can be particularly dangerous for industries with sensitive data, like health care. Bots can scrape sensitive health information, such as patient records, medical history and insurance information, which is often later sold on the dark web for profit. Brute Force Attacks: These bots attempt to gain unauthorized access to your systems by repeatedly guessing passwords, making your accounts vulnerable to breaches. This is a popular tactic against financial services companies. If cybercriminals get access to accounts that contain sensitive financial information, they can open up new credit card accounts. Distributed Denial of Service (DDoS) Attacks: Bad bots can be used to launch DDoS attacks, overwhelming your website or online services with traffic and causing downtime. Ad Fraud: Some bots engage in click fraud, repeatedly clicking on online ads to deplete your advertising budget without delivering real human engagement. This will skew analytics and often lead to poor decision-making for the marketing department. Detecting bad bots can be challenging since they often mimic human behavior. The hardest ones to identify are evasive bots, which get their name from their ability to sidestep security by cycling through random IPs, rapidly changing their identities, mimicking human behavior and defeating CAPTCHA challenges. However, there are a few methods to help you identify bad bot attacks: Watch Traffic Patterns: Monitor website traffic patterns for irregularities, such as high traffic from a single IP address or a single region. Monitor All Comments Sections: Check in regularly on social media sites for spam comments or fake bad reviews and delete them. Use CAPTCHA Challenges: Implement CAPTCHA challenges or bot detection tools to filter out automated traffic automatically. Implement Anomaly Detection: Use anomaly detection algorithms to spot unusual behavior, like rapid data scraping or suspicious login attempts. Track Bot Signatures: Maintain a list of known bot signatures and compare incoming traffic against it. If you notice repeated issues, there are a few actions you can take, such as: Educate Your Team: Train your employees to recognize and report suspicious activities, as humans are often the first line of defense. Create a process that includes who to notify and what steps to take when each issue is noticed. Use Bot Detection Solutions: Invest in bot detection software or services that can help identify and block bad bot traffic. Maintain Regular Updates: Keep your software and security systems updated to patch vulnerabilities that bots may exploit. Implement Rate Limiting: Limit the number of requests an IP address can make in a given time frame to thwart scraping attempts. Hire An IT Professional: Bots are tricky. IT companies deal with them regularly and have advanced solutions that can help eliminate these annoying and dangerous issues for you. The impact of bad bots on business owners can be significant and lead to financial losses, reputational damage and legal complications. If you’re worried about bad bots causing a problem for your organization, schedule a FREE 10-Minute Discovery Call and we’ll help figure out where your company is vulnerable and how you can protect yourself and your business today. Click here to book now.

When you run your own business, it feels like there are never enough hours in the day. Even when you start early and end late, there’s always something else, another e-mail or task, nagging for your attention. If you want to be productive, and ultimately successful, it’s important to prioritize what tasks you’ll allow to fill your schedule. Not everything needs to be or should be done by you. Easier said than done. One of the issues we frequently see business owners struggle with is to delegate the tasks they don’t need to be doing. “It’s faster if I just do it” and “They won’t do it like I do” are two statements we often hear. For some tasks, that’s probably true, and those should stay on your plate, but when it comes to IT and technology, there are always several tasks business owners are doing themselves that they could and should hand off to someone else. Some are obvious, like security. Quality cyber security requires 24/7 monitoring, and it’s unrealistic for busy business owners to be able to handle that effectively. They simply have too much to do! Another mistake is when they hand it off to an employee, family member or friend to do for them. These people are typically not qualified to protect you correctly. However, there are dozens of other to-dos that you might not realize you can hand off to your IT team Here are 10 tasks you can delegate to your IT team so you can focus on running your business. And the list goes on. IT providers can also aid with HIPAA, CMMC and PCI compliance, file sharing for external/remote access users, data loss recovery plans, office relocation, cabling and so much more. Most business owners we consult with are surprised by the number of responsibilities a tech team can take on beyond cyber security. The best thing to do is book a FREE Network Assessment. During this assessment, our team will look at your entire system for areas of opportunity and improvement. We’ll conduct a full audit, provide you with a plan of action to optimize your business for productivity, efficiency and security, and answer any questions you have. Click here to book your Assessment now.

Nothing is more aggravating than attempting to watch a video or use your PC when the Internet is operating slower than molasses flowing uphill in winter. For our clients, we have many solutions to make your Internet connection faster, more reliable and secure. But what about at your home? Spotty, unreliable Wi-Fi is almost certain to happen at the most inconvenient time, like when you’re about to watch a great movie on a Friday night. Here are our top 7 fixes for slow home WiFi signals. Step 1: Make sure your Internet Service Provider (ISP) isn’t having issues. Most ISPs will have outages published on their website using your phone’s mobile network instead of your home Wi-Fi. If there are no outages or known problems, you can move on to the next steps. Side Note: If you haven’t talked to your ISP in over a year, you should call and see if they have new plans that will give you more bandwidth for less money. You might also shop other providers to see if they have recently upgraded their network and can offer better, faster service than your current ISP. Step 2: Update your router, especially if you haven’t done so in the last 2 to 3 months. This will not only reset your router with the latest (and fastest) connection speeds but also ensure you’re up-to-date with security patches and other preventative programs. You might just reboot it as well, powering it off and on again. Sometimes that’s enough to fix the problem. I would also suggest you get a new router if yours is over 3 years old. Aim for one with Wi-Fi 6 and dual or triple band capabilities, which allows your router to connect with multiple devices without sacrificing any speed or bandwidth. Step 3: Change the channel. Download the app Network Analyzer to help find the most appropriate channel for your connection. If you’re using the 2.4 GHz frequency, change to another less “noisy” channel. How you do this depends on the brand and model of your router, so refer to your router’s manufacturer for details. Step 4: Upgrade to a mesh Wi-Fi router. When too many devices connect, Internet speeds decline. One option is to get a mesh router like Google Mesh routers, NETGEAR’s Nighthawk Mesh, or eero Mesh from Amazon.  Unlike a traditional router which broadcasts it’s signal from a single device, a mesh router emits a signal from multiple units strategically placed around your home.  In smaller homes, upgrading to a single, more expensive router like a Nighthawk could help. Step 5: Turn on QoS, or Quality of Service. This is a router feature that lets you prioritize traffic and apps, such as Zoom or gaming programs. Essentially, your router will prioritize certain uses over others. Of course, how this is done varies by router, so you’ll have to check your router’s manual for details. Step 6: Check that you haven’t been compromised. If your Wi-Fi network is open without security or is using WEP, WPA or WPA2, change your settings immediately. Go with WPA3 encryption (which is the most secure) and disable any remote management options on your router. Viruses and hacks can suck up resources and may be the reason for your network grinding to a halt. Step 7: Change your router’s location. The basement might not be the best place to store your router. Try placing it up high and as close to the center of your home as possible, free from obstructions and appliances, mirrors, concrete walls and metal materials that can cause signals to bounce or be blocked. If you put your router on a wall of your house, your signal is only impacting half of your home. If you have a large house, you will probably need to invest in Wi-Fi extenders around the house to boost the signal. If your business Wi-Fi is slow, spotty and problematic, click here to request a free diagnostic of your office Internet connection to see what’s causing the problems you’re experiencing. Obviously, business Wi-Fi is more important than home Wi-Fi and can cost you in untold frustration and low productivity if not fixed. Contact us today!

Every business needs the right tools to get the job done and to keep your team on track. But juggling multiple apps and software can be a nightmare when trying to keep information streamlined and easily accessible. That’s where Microsoft Teams for small businesses comes into play. In this article, we’ll explore the 10 best Microsoft Teams hacks so everyone in your company has everything they need at their fingertips.  The 10 Best Microsoft Teams Hacks For Small Businesses 1) Share And Co-Edit Files The demand for coworking capabilities has risen in recent years. And while modern working conventions have dictated the need for more collaborative software, there are real statistics to back up the benefits of co-editing.  According to a study from Deloitte, “When workers collaborate, 73% do better work, 60% are more innovative, 56% feel more satisfied, and 15% work faster.”  Microsoft Teams understands this and has continued to develop its ability to share and co-edit files. With 10 GB of cloud storage per user, it’s easier than ever to work on documents with others no matter where you are.  You can also quickly share document files by attaching them to a chat within Microsoft Teams so there’s no need for extra emails to share information. 2) Filter Messages  Along with our previous point, running an efficient business often means having messaging software that can keep up. However, it can be overwhelming when you have a sea of messages and no way to mark or find what you’re looking for.  Not anymore. With Microsoft Teams, you’re able to filter messages and find exactly what you need. This replaces the need to use an additional messaging service, such as Slack, and keeps everything within one comprehensive platform.  This eliminates the headache of switching back and forth between platforms and having to have multiple windows open all the time to get work done.  3) Host Meetings Hosting meetings is another huge capability of Microsoft Teams. The software allows you to schedule virtual meetings with hundreds of participants at a time. That means you have everything you and your team need, no matter the size of your business. Recent updates have also expanded the ability for co-hosting breakout rooms as well. More features mean more ways for your team to connect! 4) Live Translated Captions  2023 updates for Microsoft Teams have increased accessibility as well. For example, there’s a new setting you can toggle on and off that will allow for live translated captions to appear during meetings.   The system will save your settings for every meeting, or you can simply toggle it off when you no longer need it. The choice is ultimately yours. You can also get the meeting transcripts when done to quickly review just the one part you were looking for! 5) Chat Features  One of the best features of the Microsoft Teams experience is the chat. With unlimited chats and the ability to filter through them, as we mentioned earlier, your team can have important conversations while also getting work done in the same place. New this year, the platform now allows you to delete chats on your end while leaving them open on the other person’s when you no longer need the information. In addition, you can easily add people to existing conversations, and AI technology can suggest who you might want to talk to next. These features make it easier than ever to collaborate with others and keep everyone on the same page. 6) Picture-In-Picture Functionality  Not every meeting needs your full attention. Teams have picture-in-picture functionality that allows you to have a meeting playing while you are doing other things.  That means you don’t have to put down other work while you’re on less important calls and can multitask.  7) Do Not Disturb In addition to picture-in-picture display options, there are other ways you can value your time with Microsoft Teams settings.  This platform allows you to toggle on “do not disturb” when you need to step away from your desk, are taking a vacation, or going home/logging off at the end of the day.  There are plenty of things that can wait until tomorrow, and you deserve to set healthy boundaries when it comes to getting work done and taking time for yourself and your family.  8) Data Encryption When you’re using an all-in-one comprehensive platform, a lot of information is exchanged. Between attaching important documents to chat threads to day-to-day communications, you need to know that all your information and your client’s information is safe.  Microsoft Teams has you covered. With data encryption, you don’t have to worry about private information leaking on the internet. That means peace of mind for you and everything you work with. 9) Multi-Question Polls The last feature we’ll mention that’s new in 2023 is the ability to have multi-question polls within a meeting. This gives you more flexibility to ask the questions you need and gives you an easy place to collect that data. It’s never been easier to run a meeting and gather information. 10) Save MONEY (Thousands a month!) Most businesses already have Microsoft Teams included in their current software package and can save a lot of money by eliminating redundant services. Paying for dozens (or hundreds) of employee licenses for Slack, Zoom, Monday, Basecamp and more may be a thing of the past using the features already included in Microsoft Teams. Many companies we look at are needlessly spending tens of thousands or more on these other services and that money goes straight to the bottom line.  Microsoft Teams For The Win Whether you’re looking for a solution to messaging, collaborative working, video calls, document sharing, or accessibility features within your organization, Microsoft Teams can help your small business accomplish exactly what you need.  With these 10 features — and many more — you will be better equipped to work together as a team and won’t have to waste time cobbling together multiple apps along the way.  Centrend Inc. specializes in working with small businesses to make them more productive and profitable while keeping their data and business protected. To see what we can do for you, click here https://calendar.app.google/jSA1tteBxFJKnJkX6 or go to: www.centrend.com to schedule a quick discovery call.