Dental practices, veterinary clinics, and small businesses must keep their guard up in the effort to maintain cybersecurity. Vulnerabilities can spell disaster. IT managed services are a burden that most small businesses are unable to shoulder alone. An outsourced managed IT solutions provider, such as Mobile Computer Services, Inc. of Wake Forest, is an affordable way to gain the cybersecurity every business needs to stay safe and functional in the “new normal” of accelerated cybercriminal activity.

Four types of phishing pose a critical threat to dental practices, veterinary clinics, and small businesses:

1. Spear phishing
2. Clone phishing
3. Whaling
4. Pop-up phishing

Spear phishing

The majority of phishing emails targets large groups of people. Spear phishing is a type of attack that is more personalized and individual in its approach and focus.

A spear-phishing email, as the name implies, targets a specific individual, business, or organization. Dental practices and veterinary clinics are prime examples of entities that this variety of phishing expedition would single out. The scammers who spear phish invest time to research their niche targets. This more sophisticated phishing is sometimes referred to as social engineering. The emails are configured to closely resemble legitimate sources.

In 2016, millions of Amazon customers received an email containing the same subject line message about an order status with an order code following directly after it. Upon opening the email, consumers found no message, only an attachment. Customers who opened the attachment put themselves or their companies at risk of installing ransomware on their computers or other devices.

Another example of spear phishing emails specifically involves small businesses, including dental practices and veterinary clinics.  The target, in this instance, might be a company employee. The email may seem to originate from higher up the management chain, and it requests access to sensitive company information. If the spear-phishing target responds, a data breach could ensue in which company or employee information is accessed and stolen.

Clone phishing

Another type of malicious phishing, clone phishing, is very difficult to detect. This phishing attack involves creating a version of an email that victims have already received. The email address is very close to the address of the original email, and the formatting of the body of the email resembles the original email, as well. The only difference is the attachment or link in the message has been changed. Unwary victims who click on the link or open the attachment will be taken to a fake website or open an infected attachment. This type of email phishing requires a keen eye and attention to detail to notice.

Whaling

Some phishing expeditions focus on the large catch, the whales. Whaling attacks target chief executive officers, chief operating officers, or other high-level executives in a business. The phisher’s aim is to con these powerful individuals into divulging sensitive corporate information. Any key decision-maker with sensitive information qualifies as a high-value target, including dentists and veterinarians, as well as other small business owners.

These attacks require a higher level of sophistication and much more research. The scheme usually relies on fraudulent emails that seem to originate from trusted colleagues within the company or from legitimate external agencies.

Pop-up phishing

Pop-up phishing utilizes pop-up ads to entice users into installing malware on their computers. The ads may seek to convince the recipient to purchase unnecessary antivirus protection. Scare tactics may be employed. The user might be warned that their computer has been infected with a virus and the only remedy is to install a particular antivirus software. Upon installation, the user discovers this software is non-functional. Sometimes the supposed remedy actually infects the computer with malware.

How can a dental practice, veterinary clinic, or small business protect against a phishing attack?

Small businesses can take simple, common sense, proactive steps to avoid being scammed by phishing expeditions. The application of several commonsense principles and a healthy dose of suspicion are a good combination when dealing with potential cybercrimes. Cybercriminals are smart. Their subtle machinations can hook the most astute business owner or employee. The following principles will help safeguard against falling for the scammer’s tricks.

• Delete suspicious emails.
• Do not click on suspicious links in emails.
• Do not send financial information through email.
• Avoid clicking on pop-up ads. Hackers can add fraudulent messages that pop up when the victim is visiting legitimate websites.
• Protect computers and other devices with strong, multi-layered security software.

Managed IT services are indispensable for cybersecurity in the twenty-first century. An outsourced IT support service is an affordable strategy to gain bullet-proof security and achieve peace of mind. For more information about IT solutions that work, contact Mobile Computer Services, Inc. of Wake Forest by phone at (919) 230-2900.

The following post was originally seen on Managed IT Service Explains Four Common Cybercriminal Phishing Emails and is courtesy of Mobile Computer Services, Inc. Find more on: https://ncmobilecomputerservices.com

The COVID-19 pandemic has created subtle cybersecurity issues for small businesses. Mobile Computer Services, Inc. of Wake Forest provides cybersecurity advice on how to identify and avoid dangerous COVID-19 email phishing scams. The managed IT service providers build an email infrastructure that ensures a business can continue to utilize email as a safe and beneficial business tool.

A headline from The Wall Street Journal reads, “Don’t Click! Coronavirus Text and Phone Scams Are Designed to Trick You. Swindlers are taking advantage of the global health crisis, so watch out for email phishing, robocalls, and “smishing”—text-message scams sent to your phone.”

Billions of robocalls are annoying tens of millions of Americans. Unsuspecting and trusting individuals have shelled out vast sums of money to phone scammers and cybercriminals pretending to be government officials, health-care providers, IRS representatives, and more. As far as the robocalls, lawmakers find it all but impossible to make the calls stop. With the phishing (emails) and smishing (text messaging), commonsense strategies and IT managed email infrastructure security can address the cybersecurity issues. 

The Wall Street Journal article begins with an all too common scenario. “A text comes in on your phone. It’s from the IRS, and your economic relief check is ready, pending your acceptance. There’s a form to fill out. All you have to do is click the link.”

With this introduction, author Nicole Nguyen brilliantly sets the stage for a straightforward solution that works every time. She writes, “If you don’t have time to read this whole column, please—for the love of sweatpants—just read this: Don’t Click The Link.”

The solution is not magical, nor is it an industry trade secret. Success at thwarting scammers does require some basic commonsense, self-discipline, and understanding of how to recognize fishy emails phishing for personal information.

News coverage in the dominant media culture surrounding COVID-19 has fostered phishing attacks seeking to exploit fears in the general population about the highly contagious and sometimes fatal virus.

How does the phishing scam work? Cybercriminals send bogus emails claiming to originate from legitimate organizations with vital data regarding COVID-19.

The email might direct the recipient to open a file attachment to read the latest statistics. Clicking on the file or embedded link may download malicious software onto the recipient’s device. The malicious software or malware enables cyber scammers to gain access to a computer, record keystrokes, or harvest personal information and financial data. Identity theft could be one of the painful consequences of this scam.

COVID-19 has impacted millions of lives worldwide. The long-term impact is impossible to predict. Effective steps are available to protect against COVID-related scams and mitigate the risk.

Spotting a coronavirus phishing email

Coronavirus-themed phishing emails appear in various forms, including the ones listed below.

1. CDC alerts

Cybercriminals are creating emails that appear to originate from the U.S. Centers for Disease Control. The email may claim to link to a list of local coronavirus cases. The recipient is urged to immediately read the cases and glean safety hazards to avoid. Warning: Avoid clicking on the links! Granted, the emails may look official. Stay safe. Visit the CDC website directly for COVID-19 information.

2. Emails giving advice on health issues

In these emails, scammers send offers of medical advice to help guard against COVID-19. The emails may purport to come from medical experts in Wuhan, China, the COVID-19 epicenter. The advice promises, “This little measure can save you!” Another scam strategy is “Use the link below to download Safety Measures.” Here is a simple, flawless cybersecurity safety measure: do not click on the link.

3. Workplace policy emails

This form of phishing scam deserves extra attention. Employees’ workplace email accounts are information-rich targets for cybercriminals. A sophisticated phishing email might open with the casual greeting, “All, Due to the pandemic outbreak of COVID-19, [company name] is actively taking safety precautions by instituting a Communicable Disease Management Policy.” Clicking on the fake company policy will download malicious software onto the device. The eventual legal and financial impact could destroy the company.

How to avoid scammers and phony ads

Scammers post ads claiming to offer COVID-19 remedies and use language that creates a sense of urgency. “Buy now, limited supply” is a prime example.

Responding to the ads could have several negative consequences.

• Malware could be downloaded onto the device when a malicious link is clicked. 
• The product is purchased but turns out to be worthless.
• Personal information such as name, address, and credit card number has been shared with a stranger who may use the information for identity theft or sell or trade the information to another cybercriminal who may use the information to cause mayhem in some person’s life.

A simple solution is to avoid any ads seeking to capitalize on the COVID-19 pandemic.

Tips to spot and avoid phishing emails

Follow these tips to spot and avoid pandemic-themed phishing emails.

• Be very cautious of online requests for personal information.

A pandemic-themed email requesting personal information such as a Social Security number or login information is a phishing scam. Legitimate government agencies do not request information of such a personal nature. Do not provide personal data to such an email.

• Verify the link or email address.

Hover the mouse button over the URL to inspect where the link leads. Sometimes, the website address is obviously fake. Scammers have become more sophisticated and will create links closely resembling a valid address. Take action if the ad is a scam and delete the email.

• Keep an eye out for spelling and grammatical mistakes.

As mentioned above, phishers have perfected their messaging either by hard work or through artificial intelligence and grammar tools.

• A generic greeting is a giveaway.

Phishing emails are unlikely to use the target’s name. Greetings like “Dear sir or madam” signal an email is not legitimate.

• Avoid pushy emails insisting on fast action and little research.

The heightened sense of urgency or demand for instant action is to drive readers to respond in fear and click on a link to provide personal information. The simple, failsafe solution is to delete the message right now!

To learn more about IT managed solutions and email cybersecurity, visit the Mobile Computer Services, Inc. of Wake Forest website at http://www.ncmobilecomputerservices.com/locations/wake-forest. Contact the office by phone at (919) 230-2900.

The next post was first published to How to Spot COVID-19 Scam Emails and is republished from Mobile Computer Services, Inc. Read more on: Mobile Computer Services, Inc. website

source https://www.ncmobilecomputerservices.com/managed-it-services/how-to-spot-covid-19-scam-emails/

The COVID-19 pandemic has created subtle cybersecurity issues for small businesses. Mobile Computer Services, Inc. of Wake Forest provides cybersecurity advice on how to identify and avoid dangerous COVID-19 email phishing scams. The managed IT service providers build an email infrastructure that ensures a business can continue to utilize email as a safe and beneficial business tool.

A headline from The Wall Street Journal reads, “Don’t Click! Coronavirus Text and Phone Scams Are Designed to Trick You. Swindlers are taking advantage of the global health crisis, so watch out for email phishing, robocalls, and “smishing”—text-message scams sent to your phone.”

Billions of robocalls are annoying tens of millions of Americans. Unsuspecting and trusting individuals have shelled out vast sums of money to phone scammers and cybercriminals pretending to be government officials, health-care providers, IRS representatives, and more. As far as the robocalls, lawmakers find it all but impossible to make the calls stop. With the phishing (emails) and smishing (text messaging), commonsense strategies and IT managed email infrastructure security can address the cybersecurity issues. 

The Wall Street Journal article begins with an all too common scenario. “A text comes in on your phone. It’s from the IRS, and your economic relief check is ready, pending your acceptance. There’s a form to fill out. All you have to do is click the link.”

With this introduction, author Nicole Nguyen brilliantly sets the stage for a straightforward solution that works every time. She writes, “If you don’t have time to read this whole column, please—for the love of sweatpants—just read this: Don’t Click The Link.”

The solution is not magical, nor is it an industry trade secret. Success at thwarting scammers does require some basic commonsense, self-discipline, and understanding of how to recognize fishy emails phishing for personal information.

News coverage in the dominant media culture surrounding COVID-19 has fostered phishing attacks seeking to exploit fears in the general population about the highly contagious and sometimes fatal virus.

How does the phishing scam work? Cybercriminals send bogus emails claiming to originate from legitimate organizations with vital data regarding COVID-19.

The email might direct the recipient to open a file attachment to read the latest statistics. Clicking on the file or embedded link may download malicious software onto the recipient’s device. The malicious software or malware enables cyber scammers to gain access to a computer, record keystrokes, or harvest personal information and financial data. Identity theft could be one of the painful consequences of this scam.

COVID-19 has impacted millions of lives worldwide. The long-term impact is impossible to predict. Effective steps are available to protect against COVID-related scams and mitigate the risk.

Spotting a coronavirus phishing email

Coronavirus-themed phishing emails appear in various forms, including the ones listed below.

1. CDC alerts

Cybercriminals are creating emails that appear to originate from the U.S. Centers for Disease Control. The email may claim to link to a list of local coronavirus cases. The recipient is urged to immediately read the cases and glean safety hazards to avoid. Warning: Avoid clicking on the links! Granted, the emails may look official. Stay safe. Visit the CDC website directly for COVID-19 information.

2. Emails giving advice on health issues

In these emails, scammers send offers of medical advice to help guard against COVID-19. The emails may purport to come from medical experts in Wuhan, China, the COVID-19 epicenter. The advice promises, “This little measure can save you!” Another scam strategy is “Use the link below to download Safety Measures.” Here is a simple, flawless cybersecurity safety measure: do not click on the link.

3. Workplace policy emails

This form of phishing scam deserves extra attention. Employees’ workplace email accounts are information-rich targets for cybercriminals. A sophisticated phishing email might open with the casual greeting, “All, Due to the pandemic outbreak of COVID-19, [company name] is actively taking safety precautions by instituting a Communicable Disease Management Policy.” Clicking on the fake company policy will download malicious software onto the device. The eventual legal and financial impact could destroy the company.

How to avoid scammers and phony ads

Scammers post ads claiming to offer COVID-19 remedies and use language that creates a sense of urgency. “Buy now, limited supply” is a prime example.

Responding to the ads could have several negative consequences.

• Malware could be downloaded onto the device when a malicious link is clicked. 
• The product is purchased but turns out to be worthless.
• Personal information such as name, address, and credit card number has been shared with a stranger who may use the information for identity theft or sell or trade the information to another cybercriminal who may use the information to cause mayhem in some person’s life.

A simple solution is to avoid any ads seeking to capitalize on the COVID-19 pandemic.

Tips to spot and avoid phishing emails

Follow these tips to spot and avoid pandemic-themed phishing emails.

• Be very cautious of online requests for personal information.

A pandemic-themed email requesting personal information such as a Social Security number or login information is a phishing scam. Legitimate government agencies do not request information of such a personal nature. Do not provide personal data to such an email.

• Verify the link or email address.

Hover the mouse button over the URL to inspect where the link leads. Sometimes, the website address is obviously fake. Scammers have become more sophisticated and will create links closely resembling a valid address. Take action if the ad is a scam and delete the email.

• Keep an eye out for spelling and grammatical mistakes.

As mentioned above, phishers have perfected their messaging either by hard work or through artificial intelligence and grammar tools.

• A generic greeting is a giveaway.

Phishing emails are unlikely to use the target’s name. Greetings like “Dear sir or madam” signal an email is not legitimate.

• Avoid pushy emails insisting on fast action and little research.

The heightened sense of urgency or demand for instant action is to drive readers to respond in fear and click on a link to provide personal information. The simple, failsafe solution is to delete the message right now!

To learn more about IT managed solutions and email cybersecurity, visit the Mobile Computer Services, Inc. of Wake Forest website at http://www.ncmobilecomputerservices.com/locations/wake-forest. Contact the office by phone at (919) 230-2900.

The next post was originally published on How to Spot COVID-19 Scam Emails and is republished from Mobile Computer Services, Inc. See more on: Mobile Computer Services, Inc. LLC

A virtual private network or VPN provides a secure internet connection and grants anonymity to a user’s web traffic. A VPN functions to establish a secure connection between a user’s device and a remote location by creating a tunnel from the device in use to the network of the VPN service provider. The internet traffic routes through this tunnel to the VPN server. From the server, the traffic flows to the desired website or internet service. The origin of the traffic is hidden by making it appear to originate from the network of the VPN service provider. All traffic is encrypted, thus veiling the actual IP address. Only the service provider is privy to the activity.

Most service providers allow users to choose the server location to which the VPN tunnel is connected. Traffic routes from the country of the server chosen for the connection to the user’s VPN.

Safe connection in public networks

When connecting to a Wi-Fi network, it is never possible to know if the connection is safe. The VPN encrypts the data in the connection, making web traffic interception by a hacker significantly harder. Joining unsafe networks becomes much less risky. Leisure and business travelers find the encryption feature to be of use since traveling often requires connecting to unsafe networks. Many countries engage in strict internet censorship and surveillance, and a particular internet destination might be blocked or illegal.

IP address hidden by VPN

Accurate web tracking requires many factors, and the IP address is only one way to trace a device. Concealing the IP address complicates the process of connecting web traffic to a specific individual. The user is not entirely unable to be traced on the internet, but tracking is more difficult.

Hiding the IP address prohibits the user’s internet service provider from seeing what a user is doing on the internet. The service provider cannot store personal or company data, sell it to advertisers, or relinquish it to authorities. A measure of anonymity is important because many governments do not respect internet privacy.

Virtual location changed to another country

With a VPN, a user is able to change the virtual location so that web traffic goes through another country. VPNs are useful to bypass limitations in countries where access to the internet and some internet services is more highly restricted. The same feature also enables accessing geo-blocked material, such as videos. Websites can detect VPNs and block such traffic if so desired.

The downsides of a VPN

VPN may slow the internet connection to some degree. The user may not notice any fluctuation or the speed may plummet. The use of a VPN can also decrease battery life on mobile devices and laptops.

Another downside is related to the VPN service provider. All web traffic goes through the service provider when a VPN is in use. Since the VPN service provider is in control of all the web traffic data, users must trust the VPN service provider to handle their data properly.

Free VPN services

If the desire is to access geo-blocked material or to reduce lag for gaming, then a free VPN service may be sufficient. If the VPN service is free, do not be surprised to discover that important personal data is being sold to third parties. Many free VPN providers are scams intended to spy on user data. Free VPNs may also run slower than paid options. If privacy is a priority, connect with a paid VPN.

Some VPN service providers also log user activity. Users should know if activity logs are being kept of their activity and for what purpose. The solution is to use a VPN service provider that can be trusted.

Location matters

The physical location of the VPN service provider is an essential piece of information to know. The laws of the host country prevail in matters of privacy. These laws can require the VPN providers to relinquish data to authorities upon request, thus potentially eliminating any privacy gained with the use of a VPN. Some VPN service providers issue a warrant canary to inform their users of any request to provide data to the authorities.

Conclusion

The VPN is a useful tool in the IT management toolbox that further enhances security and privacy. VPN is not a panacea. The technology and its applications have limitations. Consulting with a managed IT solutions provider can yield a strategy that meets the growing and changing needs of small businesses, such as dental practices and veterinary clinics.

For more detailed information about a VPN and its application in a specific setting, visit the Mobile Computer Services website at www.ncmobilecomputerservices.com/locations/wake-forest. Contact the office by phone at (919) 230-2900.

The next blog post was originally published to IT Management Company Explains How a VPN Protects Internet Activity and is republished from Mobile Computer Services, Inc. Read more on: https://ncmobilecomputerservices.com

A virtual private network or VPN provides a secure internet connection and grants anonymity to a user’s web traffic. A VPN functions to establish a secure connection between a user’s device and a remote location by creating a tunnel from the device in use to the network of the VPN service provider. The internet traffic routes through this tunnel to the VPN server. From the server, the traffic flows to the desired website or internet service. The origin of the traffic is hidden by making it appear to originate from the network of the VPN service provider. All traffic is encrypted, thus veiling the actual IP address. Only the service provider is privy to the activity.

Most service providers allow users to choose the server location to which the VPN tunnel is connected. Traffic routes from the country of the server chosen for the connection to the user’s VPN.

Safe connection in public networks

When connecting to a Wi-Fi network, it is never possible to know if the connection is safe. The VPN encrypts the data in the connection, making web traffic interception by a hacker significantly harder. Joining unsafe networks becomes much less risky. Leisure and business travelers find the encryption feature to be of use since traveling often requires connecting to unsafe networks. Many countries engage in strict internet censorship and surveillance, and a particular internet destination might be blocked or illegal.

IP address hidden by VPN

Accurate web tracking requires many factors, and the IP address is only one way to trace a device. Concealing the IP address complicates the process of connecting web traffic to a specific individual. The user is not entirely unable to be traced on the internet, but tracking is more difficult.

Hiding the IP address prohibits the user’s internet service provider from seeing what a user is doing on the internet. The service provider cannot store personal or company data, sell it to advertisers, or relinquish it to authorities. A measure of anonymity is important because many governments do not respect internet privacy.

Virtual location changed to another country

With a VPN, a user is able to change the virtual location so that web traffic goes through another country. VPNs are useful to bypass limitations in countries where access to the internet and some internet services is more highly restricted. The same feature also enables accessing geo-blocked material, such as videos. Websites can detect VPNs and block such traffic if so desired.

The downsides of a VPN

VPN may slow the internet connection to some degree. The user may not notice any fluctuation or the speed may plummet. The use of a VPN can also decrease battery life on mobile devices and laptops.

Another downside is related to the VPN service provider. All web traffic goes through the service provider when a VPN is in use. Since the VPN service provider is in control of all the web traffic data, users must trust the VPN service provider to handle their data properly.

Free VPN services

If the desire is to access geo-blocked material or to reduce lag for gaming, then a free VPN service may be sufficient. If the VPN service is free, do not be surprised to discover that important personal data is being sold to third parties. Many free VPN providers are scams intended to spy on user data. Free VPNs may also run slower than paid options. If privacy is a priority, connect with a paid VPN.

Some VPN service providers also log user activity. Users should know if activity logs are being kept of their activity and for what purpose. The solution is to use a VPN service provider that can be trusted.

Location matters

The physical location of the VPN service provider is an essential piece of information to know. The laws of the host country prevail in matters of privacy. These laws can require the VPN providers to relinquish data to authorities upon request, thus potentially eliminating any privacy gained with the use of a VPN. Some VPN service providers issue a warrant canary to inform their users of any request to provide data to the authorities.

Conclusion

The VPN is a useful tool in the IT management toolbox that further enhances security and privacy. VPN is not a panacea. The technology and its applications have limitations. Consulting with a managed IT solutions provider can yield a strategy that meets the growing and changing needs of small businesses, such as dental practices and veterinary clinics.

For more detailed information about a VPN and its application in a specific setting, visit the Mobile Computer Services website at www.ncmobilecomputerservices.com/locations/wake-forest. Contact the office by phone at (919) 230-2900.

The following information was first published to IT Management Company Explains How a VPN Protects Internet Activity and is courtesy of Mobile Computer Services, Inc. See more on: Mobile Computer Services, Inc. website

source https://www.ncmobilecomputerservices.com/managed-it-services/it-management-company-explains-how-a-vpn-protects-internet-activity/

IT management and cybersecurity require a comprehensive strategy and constant attention.  Threats are ever-present, and hackers are adapting and adjusting to perfect their cyber mischief. Mobile Computer Services, Inc. of Wake Forest is available as a resource for website hosting and cybersecurity solutions, along with full-service managed IT solutions. The services include network services, business continuity planning, IT consulting, cybersecurity, on-demand services, office moves, VoIP, email protection, and HaaS (Hardware as a Service).

Key features of the web hosting service include:

• Optimized cybersecurity strategies to thwart lurking cyberattacks
• Password and device safety
• Domain-based business-class email instead of a free service like Yahoo or Gmail

Web hosting services without comprehensive cybersecurity strategies leave a business vulnerable and can result in a cyber disaster, which may cost tens of thousands of dollars to repair. A hacked website can devastate a business, whether large or small. Nearly 60% of malware attacks are aimed at small businesses. Losing customer trust, website files, or search engine rankings is the last thing a busy small business owner needs to worry about.

Most cyberattacks are carried out by automated bots that crawl the web looking for vulnerable sites without considering the size or popularity of a business. No website is immune to a hacker attack. A bot can attempt to hack any website at any time, so security features are essential for every site.

Websites hosted by Mobile Computer Services, Inc. have access to a variety of security features already. Before considering a security upgrade, make sure to take care of the basics listed below.

Choose strong passwords and usernames

The easier a password is to guess, the more susceptible it is to being hacked. Components of a strong password include:

• Contains at least ten characters
• Uses both uppercase and lowercase letters
• Includes symbols such as asterisks, parentheses, and numbers
• Does not use common words like “password”
• Is not tied to known information about the user, like a last name or date of birth

Avoid common usernames like “Admin,” “Administrator,” or the name of the business. Instead, choose something personally meaningful but not obvious to a stranger.

Prevent brute force attacks

Coming up with strong passwords can be a challenge, which is why brute force protection is so important. Brute force attacks take place when a hacker or bot attempts to guess the correct username/password combination for a website’s admin dashboard. Automated software accelerates the process tremendously, up to several thousand attempts a second. Inquire about an MCS-hosted website with security features that can block these login attempts.

Use two-factor authentication to access the company website

Secure authentication provides an extra layer of security to a website login. After entering the website username and password, a code is sent to the user’s cell phone. The user will then have to input that code in order to access the dashboard.

Instead of just requiring a user to know the password, it requires a phone in their possession. Even if hackers or bots can identify a username and password, they will not be able to access the website without also having the user’s phone.

Two-factor authentication is incredibly effective. Google found that sending a code to a phone number blocks 100% of automated bots, 96% of bulk phishing attacks, and 76% of targeted attacks.

Use domain-based business-class emails instead of a free email service

Using domain-based business-class emails impacts brand value and cybersecurity.A business cannot distinguish itself as a business brand with an email ID like companyname@gmail.com. Anything less than a domain-based email looks unprofessional and fails to make a positive first impression with colleagues and customers.

Without the professionalism and credibility that a domain-based email lends to a business, customer trust is compromised. Most spammers and frauds also use a free email service.

Using a free email service like Gmail or Yahoo makes it easier for hackers and scammers to steal or compromise a company’s identity. Anybody can create an email ID on any free mail platform. By creating a mail ID with a business name with slight variations such as company-name@gmail.com, frauds can irreparably harm a business.

A business that uses a free email service instead of a domain-based business-class email has not positioned itself as well as it could. Using a free email service for a business is like having a well-known business at a great location (company domain name) with a well-developed infrastructure (company website) but using a nearby telephone booth (free email) for communication needs. When a business uses a free email service, it cannot be regarded as a reliable business by customers, competitors, or Google.

The benefits of having a domain-based business-class email include:

• Offers instant recognition and branding
• Promotes the business brand
• Conveys trustworthiness and integrity
• Communicates size and organization
• Looks more professional and earns credibility

Free email service providers offer nominal security and privacy features which expose critical business data to serious risk. Having emails on a private domain makes communication and confidential data more secure because many additional security measures can be utilized.

A domain-based business-class email is like a direct line specially installed to serve business communication needs while distinguishing the business as trustworthy, reliable, and professional.

Conclusion

Mobile Computer Services, Inc. offers these basic recommendations as a starting point for improving business IT management and cybersecurity. The web hosting resources complement the menu of services that the IT management company offers customers.

For more information about web hosting services, visit Mobile Computer Services, Inc. of Wake Forest on the web at www.ncmobilecomputerservices.com/locations/wake-forest. Contact the office by phone at (919) 230-2900.

The next post was first published to Wake Forest IT Management Company Provides Web Hosting Services and is republished from Mobile Computer Services, Inc. See more on: https://ncmobilecomputerservices.com

IT management and cybersecurity require a comprehensive strategy and constant attention.  Threats are ever-present, and hackers are adapting and adjusting to perfect their cyber mischief. Mobile Computer Services, Inc. of Wake Forest is available as a resource for website hosting and cybersecurity solutions, along with full-service managed IT solutions. The services include network services, business continuity planning, IT consulting, cybersecurity, on-demand services, office moves, VoIP, email protection, and HaaS (Hardware as a Service).

Key features of the web hosting service include:

• Optimized cybersecurity strategies to thwart lurking cyberattacks
• Password and device safety
• Domain-based business-class email instead of a free service like Yahoo or Gmail

Web hosting services without comprehensive cybersecurity strategies leave a business vulnerable and can result in a cyber disaster, which may cost tens of thousands of dollars to repair. A hacked website can devastate a business, whether large or small. Nearly 60% of malware attacks are aimed at small businesses. Losing customer trust, website files, or search engine rankings is the last thing a busy small business owner needs to worry about.

Most cyberattacks are carried out by automated bots that crawl the web looking for vulnerable sites without considering the size or popularity of a business. No website is immune to a hacker attack. A bot can attempt to hack any website at any time, so security features are essential for every site.

Websites hosted by Mobile Computer Services, Inc. have access to a variety of security features already. Before considering a security upgrade, make sure to take care of the basics listed below.

Choose strong passwords and usernames

The easier a password is to guess, the more susceptible it is to being hacked. Components of a strong password include:

• Contains at least ten characters
• Uses both uppercase and lowercase letters
• Includes symbols such as asterisks, parentheses, and numbers
• Does not use common words like “password”
• Is not tied to known information about the user, like a last name or date of birth

Avoid common usernames like “Admin,” “Administrator,” or the name of the business. Instead, choose something personally meaningful but not obvious to a stranger.

Prevent brute force attacks

Coming up with strong passwords can be a challenge, which is why brute force protection is so important. Brute force attacks take place when a hacker or bot attempts to guess the correct username/password combination for a website’s admin dashboard. Automated software accelerates the process tremendously, up to several thousand attempts a second. Inquire about an MCS-hosted website with security features that can block these login attempts.

Use two-factor authentication to access the company website

Secure authentication provides an extra layer of security to a website login. After entering the website username and password, a code is sent to the user’s cell phone. The user will then have to input that code in order to access the dashboard.

Instead of just requiring a user to know the password, it requires a phone in their possession. Even if hackers or bots can identify a username and password, they will not be able to access the website without also having the user’s phone.

Two-factor authentication is incredibly effective. Google found that sending a code to a phone number blocks 100% of automated bots, 96% of bulk phishing attacks, and 76% of targeted attacks.

Use domain-based business-class emails instead of a free email service

Using domain-based business-class emails impacts brand value and cybersecurity.A business cannot distinguish itself as a business brand with an email ID like companyname@gmail.com. Anything less than a domain-based email looks unprofessional and fails to make a positive first impression with colleagues and customers.

Without the professionalism and credibility that a domain-based email lends to a business, customer trust is compromised. Most spammers and frauds also use a free email service.

Using a free email service like Gmail or Yahoo makes it easier for hackers and scammers to steal or compromise a company’s identity. Anybody can create an email ID on any free mail platform. By creating a mail ID with a business name with slight variations such as company-name@gmail.com, frauds can irreparably harm a business.

A business that uses a free email service instead of a domain-based business-class email has not positioned itself as well as it could. Using a free email service for a business is like having a well-known business at a great location (company domain name) with a well-developed infrastructure (company website) but using a nearby telephone booth (free email) for communication needs. When a business uses a free email service, it cannot be regarded as a reliable business by customers, competitors, or Google.

The benefits of having a domain-based business-class email include:

• Offers instant recognition and branding
• Promotes the business brand
• Conveys trustworthiness and integrity
• Communicates size and organization
• Looks more professional and earns credibility

Free email service providers offer nominal security and privacy features which expose critical business data to serious risk. Having emails on a private domain makes communication and confidential data more secure because many additional security measures can be utilized.

A domain-based business-class email is like a direct line specially installed to serve business communication needs while distinguishing the business as trustworthy, reliable, and professional.

Conclusion

Mobile Computer Services, Inc. offers these basic recommendations as a starting point for improving business IT management and cybersecurity. The web hosting resources complement the menu of services that the IT management company offers customers.

For more information about web hosting services, visit Mobile Computer Services, Inc. of Wake Forest on the web at www.ncmobilecomputerservices.com/locations/wake-forest. Contact the office by phone at (919) 230-2900.

The following post was first seen on Wake Forest IT Management Company Provides Web Hosting Services and is courtesy of Mobile Computer Services, Inc. Find more on: Mobile Computer Services, Inc. LLC

source https://www.ncmobilecomputerservices.com/managed-it-services/wake-forest-it-management-company-provides-web-hosting-services/

A prophetic vision for the future of teledentistry was cast over twenty years ago. “Teledentistry is a rapidly forming subset of telehealth, a field that already has a considerable impact on the healthcare industry. Recent advances have created new opportunities for teledentistry, and changes in diverse technologies have created new tools for the practitioner. Technologies currently available are beginning to change the dynamics of dental care delivery. As teledentistry evolves, it will offer new opportunities to improve the level of patient care and reshape current business models.”

While advances have been made in the area of telehealth in general, stringent HIPAA regulations have slowed or halted the technology’s advancement until the advent of COVID-19. In anticipation of a massive pandemic that would cause patients to flood the health care system, HIPAA relaxed some of the more restrictive regulations that made little sense in the age of VoIP, Zoom, cybersecurity, and the VPN.

Dental practices are utilizing telehealth technology solutions to address patient concerns, but HIPAA compliance, patient confidentiality, and cybersecurity issues must be addressed. In light of the current COVID-19 situation, the American Dental Association has released video teleconferencing guidelines to protect patient privacy while at the same time providing a friendly and caring patient experience.

The ADA Addresses Telehealth and HIPAA Compliance Issues

Are dental practices legally vulnerable when using teleconferencing technology to see patients? The American Dental Association is offering recommendations for best practices to address the issue of HIPAA compliance as it relates to telehealth. “The Office for Civil Rights (OCR) may waive penalties for dentists who fail to fully comply with HIPAA requirements when communicating with patients via video-teleconferencing during the pandemic providing they act in good faith and do not use public-facing video communication applications.”

Dentists who use video-teleconferencing to see patients during the COVID-19 pandemic “will not be subject to penalties for HIPAA violations by the Office for Civil Rights (OCR) even if the communications do not fully comply with HIPAA requirements, provided the dentists act in good faith and do not use public-facing video communication applications. See COVID-19 Interim Coding and Billing Interim Guidance. State law restrictions may continue to apply.”

Some important observations from the ADA statement can be summed up as follows:

1. In good faith, make every effort to be HIPAA compliant. Intentionality has a bearing on the matter.
2. Mistakes will be made, but good faith mistakes may not be penalized during a crisis.
3. Public-facing applications are not acceptable under any circumstances. Dentists should exercise due diligence in discovering and implementing secure teleconferencing technology.

Outsourcing IT management, including telehealth technology, to a highly competent firm is a requisite for doing business in this new environment. Failure to manage IT cyber vulnerability is no excuse for HIPAA non-compliance or errors. Although some guidelines have been broadened, dentists should strive to stay clearly within the new boundaries. Seeking outsourced IT management for teledentistry activities constitutes legitimate effort on the part of the dentist to be HIPAA compliant.

The ADA Offers Guidance on Video Teleconferencing Cybersecurity

The ADA statement also provided specific guidance on using Zoom, which appears to be the most favored teleconferencing tool emerging from the COVID-19 shakeup. On April 4, OCR shared an update from the Cybersecurity and Infrastructure Security Agency (CISA) advising dentists to take these steps to improve video teleconferencing cybersecurity.

First, meeting privacy is to be ensured by either requiring a password for entry or controlling guest access from a waiting room. Second, when selecting vendors, dentists should consider security requirements.  For example, if end-to-end encryption is necessary, the dentist should ask if the vendor offers it. Failure to have this cybersecurity measure in place could be a reason to refuse the vendor or to terminate the vendor relationship until sufficient cybersecurity measures are in place. Third, dentists (and all healthcare providers who must be HIPAA compliant) should have video teleconferencing software that is up to date. The ADA statement advises dentists to review Understanding Patches and Software Updates.

OCR also shared an FBI warning concerning hijacking that may occur when using video-teleconferencing platforms. One such example is Zoombombing. The ADA statement communicated the FBI warning, which included five steps to help reduce teleconference hijacking threats.

1. Meetings or classrooms should not be made public. Zoom provides two options to make a meeting private. The host can either use a meeting password or use the waiting room feature to control the admittance of guests.
2. Do not share a link to a teleconference or classroom on a social media post that is unrestricted and publicly available. Provide the link directly to specific people.
3. Manage screen sharing options carefully. In Zoom, change screen sharing to “Host Only.”
4. Make sure the updated version of remote access/meeting applications is being used. In January 2020, Zoom updated its software and added passwords by default for meetings. The update also disabled the ability to randomly scan for meetings to join. This blocking feature reduces the likelihood of unwanted guests in a Zoom meeting.
5. An organization’s telework policy or guide must address requirements for physical and information security.

Conclusion

These recommendations should be reviewed carefully, fully understood, and taken seriously. Honest mistakes will not be ignored entirely; the consequences may only be less punitive. Blatant neglect and malfeasance will be held accountable. Embracing managed IT services that include VoIP, a teleconferencing application, a robust cybersecurity protocol, and other IT solutions and services makes sense for all healthcare providers, especially dentists.

For more information about HIPAA compliance, telehealth, and overcoming the IT challenges of the COVID-19 crisis, visit the Mobile Computer Services, Inc. of Wake Forest website at ncmobilecomputerservices.com/locations/wake-forest. To speak with an IT services professional in Wake Forest, call (919) 230-2900.

The next post was originally published on Telehealth and HIPAA Compliance in the COVID-19 Crisis and Beyond and is courtesy of Mobile Computer Services, Inc. Read more on: Mobile Computer Services, Inc. LLC

source https://www.ncmobilecomputerservices.com/dental-it-services/telehealth-and-hipaa-compliance-in-the-covid-19-crisis-and-beyond/

A prophetic vision for the future of teledentistry was cast over twenty years ago. “Teledentistry is a rapidly forming subset of telehealth, a field that already has a considerable impact on the healthcare industry. Recent advances have created new opportunities for teledentistry, and changes in diverse technologies have created new tools for the practitioner. Technologies currently available are beginning to change the dynamics of dental care delivery. As teledentistry evolves, it will offer new opportunities to improve the level of patient care and reshape current business models.”

While advances have been made in the area of telehealth in general, stringent HIPAA regulations have slowed or halted the technology’s advancement until the advent of COVID-19. In anticipation of a massive pandemic that would cause patients to flood the health care system, HIPAA relaxed some of the more restrictive regulations that made little sense in the age of VoIP, Zoom, cybersecurity, and the VPN.

Dental practices are utilizing telehealth technology solutions to address patient concerns, but HIPAA compliance, patient confidentiality, and cybersecurity issues must be addressed. In light of the current COVID-19 situation, the American Dental Association has released video teleconferencing guidelines to protect patient privacy while at the same time providing a friendly and caring patient experience.

The ADA Addresses Telehealth and HIPAA Compliance Issues

Are dental practices legally vulnerable when using teleconferencing technology to see patients? The American Dental Association is offering recommendations for best practices to address the issue of HIPAA compliance as it relates to telehealth. “The Office for Civil Rights (OCR) may waive penalties for dentists who fail to fully comply with HIPAA requirements when communicating with patients via video-teleconferencing during the pandemic providing they act in good faith and do not use public-facing video communication applications.”

Dentists who use video-teleconferencing to see patients during the COVID-19 pandemic “will not be subject to penalties for HIPAA violations by the Office for Civil Rights (OCR) even if the communications do not fully comply with HIPAA requirements, provided the dentists act in good faith and do not use public-facing video communication applications. See COVID-19 Interim Coding and Billing Interim Guidance. State law restrictions may continue to apply.”

Some important observations from the ADA statement can be summed up as follows:

1. In good faith, make every effort to be HIPAA compliant. Intentionality has a bearing on the matter.
2. Mistakes will be made, but good faith mistakes may not be penalized during a crisis.
3. Public-facing applications are not acceptable under any circumstances. Dentists should exercise due diligence in discovering and implementing secure teleconferencing technology.

Outsourcing IT management, including telehealth technology, to a highly competent firm is a requisite for doing business in this new environment. Failure to manage IT cyber vulnerability is no excuse for HIPAA non-compliance or errors. Although some guidelines have been broadened, dentists should strive to stay clearly within the new boundaries. Seeking outsourced IT management for teledentistry activities constitutes legitimate effort on the part of the dentist to be HIPAA compliant.

The ADA Offers Guidance on Video Teleconferencing Cybersecurity

The ADA statement also provided specific guidance on using Zoom, which appears to be the most favored teleconferencing tool emerging from the COVID-19 shakeup. On April 4, OCR shared an update from the Cybersecurity and Infrastructure Security Agency (CISA) advising dentists to take these steps to improve video teleconferencing cybersecurity.

First, meeting privacy is to be ensured by either requiring a password for entry or controlling guest access from a waiting room. Second, when selecting vendors, dentists should consider security requirements.  For example, if end-to-end encryption is necessary, the dentist should ask if the vendor offers it. Failure to have this cybersecurity measure in place could be a reason to refuse the vendor or to terminate the vendor relationship until sufficient cybersecurity measures are in place. Third, dentists (and all healthcare providers who must be HIPAA compliant) should have video teleconferencing software that is up to date. The ADA statement advises dentists to review Understanding Patches and Software Updates.

OCR also shared an FBI warning concerning hijacking that may occur when using video-teleconferencing platforms. One such example is Zoombombing. The ADA statement communicated the FBI warning, which included five steps to help reduce teleconference hijacking threats.

1. Meetings or classrooms should not be made public. Zoom provides two options to make a meeting private. The host can either use a meeting password or use the waiting room feature to control the admittance of guests.
2. Do not share a link to a teleconference or classroom on a social media post that is unrestricted and publicly available. Provide the link directly to specific people.
3. Manage screen sharing options carefully. In Zoom, change screen sharing to “Host Only.”
4. Make sure the updated version of remote access/meeting applications is being used. In January 2020, Zoom updated its software and added passwords by default for meetings. The update also disabled the ability to randomly scan for meetings to join. This blocking feature reduces the likelihood of unwanted guests in a Zoom meeting.
5. An organization’s telework policy or guide must address requirements for physical and information security.

Conclusion

These recommendations should be reviewed carefully, fully understood, and taken seriously. Honest mistakes will not be ignored entirely; the consequences may only be less punitive. Blatant neglect and malfeasance will be held accountable. Embracing managed IT services that include VoIP, a teleconferencing application, a robust cybersecurity protocol, and other IT solutions and services makes sense for all healthcare providers, especially dentists.

For more information about HIPAA compliance, telehealth, and overcoming the IT challenges of the COVID-19 crisis, visit the Mobile Computer Services, Inc. of Wake Forest website at ncmobilecomputerservices.com/locations/wake-forest. To speak with an IT services professional in Wake Forest, call (919) 230-2900.

The next article was originally seen on Telehealth and HIPAA Compliance in the COVID-19 Crisis and Beyond and is courtesy of Mobile Computer Services, Inc. Read more on: Mobile Computer Services, Inc.

The recent COVID-19 pandemic has created a temporary remote workforce that has swelled to unprecedented levels and may signal a larger and more permanent shift to remote work. Working from home reduces certain health risks associated with the coronavirus. However, working at home also creates cybersecurity risks and other IT management issues that must be resolved before any work is done remotely.

Defining Remote Work Helps Identify Risk

Remote work involves working away from the office. The worker may be entirely home-based. More frequently, time is shared between home and the office. Remote work may be temporary and only involve an occasional business trip. Remote work may also involve daily sales or service calls. For the cybersecurity provider, the challenges are many, depending on the circumstances.

The Cybersecurity Issues With Remote Work

Managing the cybersecurity of a blended or fully remote workforce is more challenging than managing the cybersecurity of on-site endpoints.

Three Risky Practices That May Endanger Business IT

1. Ignoring Basic Physical Security Practices in Public Places

Cybersecurity encompasses not just digital security but also physical security. Sensitive information can be stolen when an employee talks loudly on the phone while working in public places. They may unintentionally expose their screen to prying eyes at a nearby table or venue. Devices may be left unattended while taking care of personal matters.

1. Accessing Sensitive Data Through Unsafe Wi-Fi Networks

When remote workers connect to the home wireless network or access corporate accounts using unsecured public Wi-Fi, malicious actors in the vicinity can easily spy on the connection and harvest confidential information.

Data sent in an unencrypted form in plain text is easily intercepted by cybercriminals. Employees should never access any unknown Wi-Fi networks unless they are using a VPN connection.

1. Using Personal Devices for Onsite or Remote Work

Employees frequently transfer files between work and personal computers when working from their homes. This practice is a cause for worry. At the same time, some companies allow employees to use their personal devices at work. This “Bring Your Own Device” or BYOD policy is trending in popularity, but it is very risky.

Remote workers may not be updating their software. This neglect or oversight creates security gaps in the work environment. Employers and their managed IT company team must continuously stress the importance of applying software patches in a timely manner and for a good reason.

An employee may quit or be terminated but keep the confidential information stored on their device. IT management must have in place a strategy that controls endpoints. Otherwise, critical data or valuable trade secrets may be lost or stolen.

Teaching employees basic remote security measures is an IT management imperative. Periodically, remind employees not to expose company data while working remotely, whether at home or on the road.

Secure the Remote Workforce: Formalize a Remote Work Security Policy

Employers must ensure that their remote workforce is secure. This can be done by creating a security policy specifically designed for remote workers.

Essential Security Items That Should Be Included in a Remote Work Policy

1. Clearly define which positions are eligible for remote work.

Some job functions are too risky for remote environments except under the most controlled conditions. Establish clear guidelines for which positions are a good fit for remote fulfillment. Where appropriate, provide some explanation for why some jobs are excluded from the work-at-home option.

1. Specify the platforms and tools remote workers should be using.

Both on-site and remote staff should use the same approved tools, such as project management tools, cloud storage platforms, and communication/video conferencing tools.

1. Train employees on how to respond to the first signs of account compromise.

Every company should have mandatory cybersecurity training and a clear, understandable policy and procedure manual for both on-site and remote workers. The environments have their own complexities and need individual attention.

Indispensable Tools That Both Regular and Remote Workers Should Have Installed on Their Devices

1. Multi-Factor Authentication

This authentication provides a strong additional layer of security.

1. Password Manager

Besides multi-factor authentication, employees should also be using a password manager. With this tool in place, workers will not need to remember the different passwords for work-related accounts.

1. VPN

VPN connections are crucial when remote workers connect to unsecured networks, such as Wi-Fi hotspots. It is recommended that employees use the company’s VPN. The VPN routes the traffic through the internet from the business’ private network, ensuring even more security.

1. Firewall

A firewall prevents unauthorized access to and from a network. This tool strengthens the security of the employees’ devices. A firewall monitors network traffic, blocking unwanted traffic.

1. A Strong EDR Solution

The exact details of endpoints always need to be visible to system administrators. A complete endpoint detection and response (EDR) solution be deployed. It will allow the IT management team to remotely prevent next-gen malware, data leakage, respond quickly to threats, and automatically manage software deployment and patching.

Conclusion

Innovation and agility are needed to remain competitive when a crisis challenges future business success. Implemented properly, remote work is a safe and effective solution for the workforce and business. Yet, remote work comes with security risks that should be addressed and mitigated before employees work from outside the office. A seamless and multi-layered IT managed solution can protect against cyberattacks whether the workforce is on-site or remote.

For more information about managed IT solutions, contact Mobile Computer Services of Wake Forest at (919) 230-2900.

The following post was originally published on The Remote Workplace and Cybersecurity Concerns and is republished from Mobile Computer Services, Inc. Read more on: Mobile Computer Services, Inc. website

source https://www.ncmobilecomputerservices.com/security/the-remote-workplace-and-cybersecurity-concerns/