Blockchain Archives - Cyber Security Plus

ABB confirms IT security incident impacting operations

tonibennett — Mon, 01 May 2023 10:01:36 +0000

ABB, a multinational industrial tech company specializing in electrification and automation, has confirmed that certain locations and services were impacted by an “IT security incident.”

The industrial tech behemoth, with a reported revenue of $29.4 billion in 2022, said the company’s cybersecurity team is working to resolve the issue.

“ABB recently detected an IT security incident that directly affected certain locations and systems. To address the situation, ABB has taken, and continues to take, measures to contain the incident,” an ABB representative told Cybernews.

The company claims that enacted containment measures disrupted some of its operations, and ABB is addressing the issue. However, it stressed that most of its “systems and factories are now up and running, and ABB continues to serve its customers in a secure manner.”

ABB enjoys a global presence, with operations on every continent, apart from maybe Antarctica. One arm of the company’s vast business empire develops industrial control systems (ICS). ICS is a critical part of the modern manufacturing system and a juicy target for state-sponsored and financially motivated threat actors.

“ABB continues to work diligently with its customers and partners to resolve this situation and minimize its impact,” the company, with a staff exceeding 100,000 employees, said.

The company’s customer list includes several prominent names such as Volvo, Hitachi, cities Zaragoza and Nashville, PKN Orlen, Roboship, and many others.

The company supposedly fell victim to a ransomware attack by the Russia-linked cybercriminal group Black Basta as first reported by Bleeping Computer. However, ABB did not confirm that was the case to Cybernews, and the company’s name is absent from Black Basta’s leak site, a dark web blog where cybercriminals post their latest victims.

Black Basta first appeared in 2022, hitting dozens of companies in its first few weeks. According to the dark-web monitoring platform, DarkFeed, Black Basta has struck 153 organizations since its strain of malware was first discovered.

The gang employs double-extortion tactics to muscle victims into paying a ransom. Cybercriminals that use this model often publish stolen data bit by bit, expecting victims to succumb to internal and external pressure.

Researchers believe Black Basta operators are associated with the notorious Russia-linked cybercrime gang FIN7, reported in November last year as having been active players in the cyber espionage underworld for around a decade.

The post ABB confirms IT security incident impacting operations appeared first on Cyber Security Plus.

Wi-Fi users warned over signs you’re already a victim

tonibennett — Sun, 19 Mar 2023 16:52:00 +0000

The tell-tale signs your router may be hacked.

“Hackers who get a hold of and use your wi-fi connection could take complete control over your computer,”
“They’ll then transfer your data to themselves for future use or sell it on the dark web to the highest bidder.”

Simple steps – complex passwords, antivirus software, or VPNs – could keep router users safe from hacking schemes.

Here are 10 warning signs that your Wi-Fi connection may have been hacked:

Slow internet speeds:
If your internet speed has suddenly decreased, it could be a sign that someone else is using your Wi-Fi network.
Unauthorised devices on your network:
Check the list of connected devices on your router to see if any unknown devices are connected to your Wi-Fi network.
Changes to your network settings:
If you notice changes to your Wi-Fi network name, password, or other settings, it could be a sign that someone has gained access to your router.
Unusual network activity:
If you notice unusual network activity, such as large file transfers or unexpected connections, it could be a sign of a breach.
Pop-ups and advertisements:
If you start seeing an unusual number of pop-ups or ads, it could be a sign that your computer or device has been infected with malware.
Unexplained data usage:
If you notice an increase in your data usage, it could be a sign that someone is using your Wi-Fi network without your knowledge.
Problems accessing certain websites:
If you are suddenly unable to access certain websites, it could be a sign that your router or network has been compromised.
Antivirus alerts:
If your antivirus software alerts you to potential security threats, it could be a sign that your Wi-Fi network has been hacked.
Suspicious emails or messages:
If you receive suspicious emails or messages, it could be a sign that your accounts have been compromised.
Unexplained account activity:
If you notice unusual activity on your online accounts, such as unauthorised purchases or logins, it could be a sign that your Wi-Fi network has been hacked.

If you notice any of these warning signs, it is important to take immediate action to secure your Wi-Fi network and devices.

Here are 10 simple steps you can take to protect your Wi-Fi router from hackers:

Change the default admin login credentials:
The default login credentials are often easy to guess or publicly available, so change them to a strong, unique username and password.
Use a strong Wi-Fi password:
Choose a strong password with a mix of upper and lowercase letters, numbers, and symbols. Avoid using common words or phrases.
Enable WPA2 encryption:
Wi-Fi Protected Access 2 (WPA2) is a strong encryption method that secures your wireless network.
Disable WPS:
Wi-Fi Protected Setup (WPS) is a security vulnerability that can be exploited by hackers, so disable it on your router.
Change the SSID:
The SSID is the name of your wireless network. Changing it can make it more difficult for hackers to identify your network.
Disable remote management:
Unless you need to access your router remotely, disable remote management to prevent unauthorised access.
Enable firewall protection:
Most routers come with a built-in firewall that can help protect your network from external attacks.
Keep your router’s firmware up to date:
Regularly check for firmware updates and install them to ensure your router is protected from known vulnerabilities.
Turn off unused features:
Features such as guest networks or USB ports can create additional security risks. Disable them if you don’t need them.
Limit physical access:
Place your router in a secure location and limit physical access to prevent unauthorised users from accessing it.

Following these steps can significantly reduce the risk of your Wi-Fi network being compromised by hackers.

The post Wi-Fi users warned over signs you’re already a victim appeared first on Cyber Security Plus.

How schools can protect against cyber attacks

tonibennett — Sun, 19 Jul 2020 16:51:25 +0000

Increasing concerns about cybersecurity are justified, says Jamie Moles, but there’s plenty schools can do to protect themselves and their students

Cyber security in the education sector has become an increasingly pressing concern in recent years as hackers target the sensitive data of students, teachers and staff. In the UK, the issue came to a head over the Christmas holidays when a group of hackers demanded £15 million in ransom money after successfully attacking at least 16 British schools. As a result, teachers returning to work after Christmas were left unable to access their computer systems, causing major disruptions to their work.

Similarly, in the United States, an apparent cyber attack on Iowa’s largest school district, Des Moines Public Schools, led officials to cancel classes for 30,000 students for two consecutive days as technicians worked to restore the computer system and protect data. This highlights the vulnerability of schools to cyber attacks, particularly due to understaffed IT teams and a lack of cybersecurity education among staff and pupils. Last week this sentiment was echoed by a report from the National Cyber Security Centre (NCSC) and edtech charity LGfL, which revealed that 78 per cent of UK schools experienced at least one type of cyber incident in 2022, with 7 per cent reporting significant disruption.

Given the findings of the NCSC’s report, it’s clear that the education sector is a prime target for cybercriminals. The NCSC warns schools are at “particular risk” of cyber attacks. Therefore, it’s crucial that schools take proactive measures to improve their cyber security defences and be better prepared to handle incoming attacks. So, how can schools protect themselves from these threats?

Educating educators

Perhaps fittingly, education is the sector’s best bet. One of the most effective, low-cost measures to ensure safety is through staff training and awareness efforts. By educating staff on how to spot and avoid phishing attempts and providing training on best practices, schools can significantly improve their defences against these types of attacks. This is particularly important as phishing is a major threat to staff members who may have a lack of awareness about how hackers gain access to systems, steal data or spread malware.

However, education may not be enough. In today’s digital age, schools are faced with the constant threat of cyber attacks. With intruders attempting to breach networks at a near-constant rate, it is essential for schools to have extra levels of defence in place. It isn’t only a question of how and when a bad actor will breach the network, but also how much damage they will cause once inside.

Network Detection and Response

To combat these threats, schools must act quickly and efficiently. A few seconds can mean the difference between a minor inconvenience and a major disaster.

One way to keep schools’ computer networks safe is by using advanced technology like Network Detection and Response (NDR) systems. These systems use real-time information to watch over the network, determining whether or not something is a problem. These tools measure the risk level of a problem and how often it has happened before, which helps to filter out false alarms and lets the security team focus on the most serious threats.

NDR systems are powered by AI and machine learning, which means they can work on their own and take some of the burden off a school’s IT team.

Endpoint protection and updates

Another important technology to consider is endpoint protection. This helps protect devices like laptops, desktop computers and mobile phones from harmful software and viruses. Additionally, schools can keep networks safe by diligently making sure software is always up-to-date with the latest patch and using two-factor authentication for sensitive information access.

Ultimately, the education sector will continue to be a target for cyber criminals. Hackers are constantly evolving and developing new methods to penetrate networks. To stay ahead of these threats, schools must implement robust cyber security measures such as staff training, advanced technology solutions and regular software updates and monitoring.

In particular, utilising smart technologies like machine learning and artificial intelligence can help improve defences and help schools keep up at a time when resources are stretched.

The post How schools can protect against cyber attacks appeared first on Cyber Security Plus.