Category Archives: Uncategorized

Phishing Lessons to Pass On

While last year saw a significant decrease in its number of data breaches, the number of records that were leaked doubled… and then some. Part of this can likely be attributed to a spike in the use of ransomware, indicating a resurgence in interest of the mean-spirited malware. This means that your business may very well see more ransomware infection attempts coming its way—the only question is, are your team members prepared for them?

To keep your business and its data sufficiently secured, it will be important to teach your team to effectively identify and avoid phishing. One effective way to do it: try and phish them yourself, via a phishing attack simulation.

How Does a Phishing Attack Work?

Let’s go through the basic process of a phishing attack, just as a quick review:

An attacker, posing as someone else, sends their victim a message making some promise or threat that somehow—either through fear or temptation—coerces their contact into reacting to it, usually by following a link or opening an attachment. This methodology allows such schemes to bypass many restrictions set by security protocols and solutions, as the vulnerability it takes advantage of is the human user.

Therefore, when it comes to defending against the phishing attempts that are virtually guaranteed to target your business at some point, your team members need to be prepared. Let’s discuss what you need to teach them, and how to best prepare them to make sure they’ll overcome any they encounter.

Remind Them How Hackers Think

It’s important that your users are cognizant of how clever hackers and scammers can be when it comes to their ruses, and how they often take advantage of current events and information. Many phishing attacks as of late have been themed around COVID-19, pertaining to updates, warnings, and offers of personal protective equipment.

Hackers will try to capitalize on user panic and knee-jerk reactions whenever they possibly can to keep these users from thinking before they act. Therefore, it makes sense to have users look more critically at their incoming messages to evaluate whether a message seems “phishy” or not.

Provide Signs of Problematic Links

A favorite tool of these hackers is that of the spoofed link—basically, a link to one website disguised as a link to another. Others will just use a URL that is different but looks passable enough to slip by unnoticed.

These domains can be tricky. Let’s look at a few red flags to keep an eye out for (in this case, the attacker using Amazon as a disguise):

If the email is from Amazon, a link should lead back to Amazon.com or accounts.amazon.com. If there is anything strange between “Amazon” and the “.com” then something is suspicious. There should also be a forward slash (/) after the “.com.” If the URL was something like amazon.com.mailru382.co/something, then you are being spoofed. Everyone handles their domains a little differently, but use this as a rule of thumb:

• com – Safe
• com/activatecard – Safe
• amazon.com – Safe
• amazon.com/retail – Safe
• com.activatecard.net – Suspicious! (notice the dot immediately after Amazon’s domain name)
• com.activatecard.net/secure – Suspicious!
• com/activatecard/tinyurl.com/retail – Suspicious! Don’t trust dots after the domain!

Some of these things can be challenging to spot, so you and your users need to be extra careful about checking (and double-checking) links.

Give Safe Links to Use

Even better, you could provide your team members with the links they are expected to use when being directed to certain places by their clients, rather than using the links potentially given in an email. These trusted links can be a real lifesaver, particularly when it becomes apparent that an email was an attack that a trusted link has helped your team to avoid.

Enforce Password Practices and Processes

The security of your team’s collective password policies is important for you to address, as these passwords are often the keys to the castle that cybercriminals are phishing for. Therefore, you need to ensure that your team is not only using best practices but are also handling these passwords appropriately, using tools like two-factor authentication wherever applicable and being generally cautious.

Evaluating Their Preparedness

Finally, once you’ve taught them the signs and precautions, you need to make sure that you check their proficiency in following through. To do this, a phishing test is in order.

A phishing test is simply a phishing attack you run against your own business to help identify where your weaknesses are. By showing you which team members are susceptible to an attack, you can correct the vulnerability through training and other assistance.

What Makes a Successful Phishing Test?

To effectively run a phishing test, you should not inform your team that one is incoming. To do so would defeat the purpose of the evaluation. If you do, make sure you keep it vague and never specify when they should expect it. That way, you can avoid skewing your results.

However, you also need to keep basic ethics in mind. Being shady will not help your security. You want to communicate trust with your team, and hope it is reciprocated.

As for your other security needs, lean on Point North Networks, Inc. for assistance. Give us a call at 651-234-0895 to learn more.

Secure File Storage in the Cloud

Cloud-based file storage is nothing new, but it has become an important part of cloud service delivery. The world’s most trusted name in consumer and business software, Microsoft, offers a file storage platform, OneDrive for Business, that gives each individual employee using Microsoft Office 365 individual storage for their files.

Point North Networks, Inc.  is known for proactive IT management, but what you may not realize is that we are also a one-stop shop for all of your hardware, software, cloud, and support needs. We proudly offer Microsoft products, including OneDrive for Business and Office 365, as we believe that businesses should have access to the very best resources.

About OneDrive for Business

A Strong Cloud-Storage Option with Powerful Integrations

OneDrive for Business may be a separate product than OneDrive, but it functions exactly the same on the surface. The benefit is in the integration that provides enterprise features not found on the free-to-use OneDrive platform. OneDrive for Business is an excellent collaboration tool for business users, providing them the storage and file sharing element necessary to give Office 365 value as a productivity tool.

OneDrive for Business Features

Huge Benefits from Using OneDrive for Business

Microsoft has been developing an enterprise-grade, cloud-hosted file sharing platform for much of the past two decades, and with OneDrive for Business, they’ve succeeded. In fact, OneDrive for Business is constantly adding features to make it as useful as possible for today’s business professional. Some of its features include:

• Plenty of space – OneDrive for Business, even as a stand-alone platform, offers users 1 TB of cloud storage, and the ability to store files as big as 15 GB. This provides users with enough space to store most types of files.
• Office 365 integration – Most OneDrive for Business accounts will be tied to a Microsoft 365 Business account. It provides dedicated cloud storage to store all the files that are made using productivity and collaboration apps like Word, Excel, PowerPoint, SharePoint, Teams, and Outlook.
• Promotes collaboration – By providing a place to quickly store and manage data, it promotes the use of Microsoft applications, which are some of the best on the market for team collaboration.
• Easily share files and manage their security – OneDrive for Business allows users to control levels of file security. Users can share direct access to a file or simply give other users permissions to view files. This integrated security promotes comprehensive project management and collaboration.
• Mobility and flexibility – OneDrive for Business is available on any device either through an Internet browser or via mobile apps. It doesn’t matter if you are using a smartphone, tablet, Mac, or a PC, if you need access, all you need is an Internet connection.
• Teams and SharePoint Integration – Users can share files with two of the most dynamic project management titles on the market today.
• Support for versioning and data backup – Files that are saved from Office apps in the OneDrive for Business platform all support versioning capability, where files are backed up so that users can go back and see periodic edits to the file.
• File sync – When working on a Mac or PC, users can choose to sync OneDrive to the file system of the OS. This is now a default setting in Windows 10.

With all these options, and more, OneDrive for Business is right for any organization looking to utilize cloud-based storage to fuel gains in collaboration and productivity.

If you are looking to make a jump to the cloud, OneDrive for Business is a sound option. Point North Networks Inc.’s consultants have access to attractive packages that are designed to promote business growth while maintaining the security you expect. Call us today at 651-234-0895 for more information.

2020 was… well, 2020… so it really isn’t any surprise that those businesses that made it to 2021 aren’t quite out of the woods yet. The many difficulties and challenges that 2020 brought will carry over into this year, many of them pertaining to information technology and how businesses utilize it. Let’s take a few moments to anticipate how these IT challenges will manifest this year.

Where Work Can Be Done

In the recent past, remote work was almost seen as a taboo subject—many businesses either discouraged it or neglected to implement any organized policies in the first place. Even amongst those businesses that did adopt some form of remote work, only 20 percent or so of their employees were able to work remotely.

2020 changed this considerably, as many businesses hastily adopted remote work as a means of remaining operational. Some businesses—if they were able to do so—completely transitioned to remote work.

These shifts have necessitated numerous changes to be made so that businesses can ensure their workforce’s productivity and safety simultaneously. These changes won’t go away anytime soon if projections are to be believed.

Moving forward, companies will need to ensure that the correct security protocols are implemented, and processes carried out, particularly because many users will likely be working on their personal devices. This means that implementing remote monitoring and management solutions will be an important step for businesses to take from here on out.

Fighting Burnout and Downtime

With the prospect of remote work preserving productivity, it becomes important to protect it from other negative influences. The fight against downtime should be a matter any business takes very seriously… after all, its clients will expect 100 percent uptime, and anything less than that will quickly erode the trust they have.

After the year we’ve all just experienced, that trust is something no business can squander.

In addition to having trustworthy technology, businesses must also make sure that their team members are receiving the requisite TLC. Technology solutions aren’t the only component of your business subject to downtime: fatigue and burnout can each have a considerable impact on morale and output. Considering this, these factors also need to be addressed.

Budgeting

The past year flushed many business’ budgets down the proverbial toilet, which will carry over into this year by some measure. Money is bound to be tight. As a result, any proposed investments need to be scrutinized for the return they provide to the business.

We predict that this will lead many more businesses to the cloud as a means of acquiring the services and solutions they need. In addition to this, we expect automation and tools like it to be given much more consideration.

One way or another, 2021 will see some considerable changes to how businesses do their business. Point North Networks, Inc. can be here to help you see them through, and beyond. Learn more about our solutions and how they can benefit you by calling 651-234-0895 today.

It isn’t often that you’ll hear a managed service provider say something like, “There’s no school like the old school.” In many ways, however, the basic principles of a solid business IT strategy haven’t changed all that much… despite the momentous changes that we’ve witnessed in terms of the technology we use. Let’s consider some of these principles, and how they’ve changed over time (if at all).

Securing Your Hardware Solutions

Restricting access to your business’ essential hardware solutions is certainly not a new idea. Even when on-site network and storage infrastructures were the way of doing things, these elements were restricted to employees who needed to work with the equipment—and had the key needed to get in.

Of course, these hardware solutions can be expensive to procure, run, and maintain, particularly for a small business. So, rather than investing the time, space, and energy into supporting these processes, businesses have instead shifted to procuring cloud services. This gives the subscribing organization access to the computing resources required for their needs, while freeing them of the associated responsibilities.

This also helps secure the business’ hardware, as the important stuff is tucked away in a provider’s data center. Since it is stored there, it is under their care and protection… certainly an effective means of restricting access.

The Purpose of IT

Let’s make something clear: information technology was never to be—and should never be—seen as a luxury investment for a business to make, or to simply be procured for the sake of having it. Rather, every new solution brought into your business needs to have an operational benefit.

Therefore, a business should not look to its IT resource to constantly be adding to its solution set, but it should also anticipate that the IT resource will do more than just keep their operations going. Instead, there needs to be a concerted effort by IT to establish how a new technology or approach to the business’ processes would provide some observable, positive results. In this regard, any IT resource that an organization leans on should be considered a consultant: an expert voice providing beneficial feedback and input—not just the reason that the computers work.

Threat Management

The typical processes for a business’ IT threat management have gone through a few iterations. Initially, a lot of these processes were responsive in nature—if a hacker could potentially get in, throw a few restrictions and password requirements into the mix. As time passed and threats developed further, this restrictive approach was amplified.

More recently, this has seen a bit of a shift, although keeping a network secure is still a priority. Nowadays, however, the solutions that are being utilized themselves feature greater security features, with more emphasis placed on educating users to better identify threats. After all, the employees a business hires are going to inherently be one of its bigger security liabilities without some understanding of how they make a company vulnerable.

Clearly, while the available technology we have access to has improved, the practices we’ve developed have needed to in kind. Point North Networks, Inc. is here to help you implement the technologies and processes that can make your business operate to its highest efficacy. To learn more about the solutions we can help you put into place, and how to leverage them to their full potential, call 651-234-0895 today.