Beware of Email Attachments

A new email attack has been making the rounds recently, as well as similar copycat attacks. Since this attack is new some anti-virus systems may not detect the attack.

Look out for email attachment called: final_invoice.doc, Subject line: Re: payment ready

Please let all staff know about this attack and to NOT open ANY attachments unless absolutely sure they are expecting a file attachment and it is from someone they know is sending an attachment.

  • Some more examples include:
  • Receiving a Resume as a .zip file attachment
  • Receiving some shipping notification via an .scr attachment
  • Receiving a Payment Request for overdue ivoice with a .exe file attached
  • The list goes on and on depending on what week it is and what is going around.

These attacks play on the users emotions of some issue that has gone wrong. Rarely, but we are seeing new instances of, the attachments are actual Office Document files.

This document will infect your PC and do the following:

  • A process attempted to delay the analysis task.
  • File has been identified by at least one AntiVirus on VirusTotal as malicious
  • Performs some HTTP requests
  • Steal private information from local Internet browsers
  • Contact C&C server HTTP check-in (Banking Trojan)
  • Harvest credentials from local FTP client softwares
  • Install itself for autorun at Windows startup
    Generates some ICMP traffic

    The key thing to be aware of here in any of these scenarios is, if you were not expecting an attachment, do NOT open it. Also, if you know the sender, please reach out to them to ask if they sent you an attachment for verification sake.

Contributed by Patrick Rice/ Tech Assurance Corporation

Beware the Cyber Phisherman!

SWLS libraries have reported a few instances of fake Microsoft support phishing scams on library computers during May and June.

The appear as typical pop-ups. The best thing to do is reboot ASAP. If the PC was protected by Deep Freeze, further issues can probably be avoided. If this happened on an unprotected PC and the user clicked anywhere inside the pop-up box, that PC would then be infected. In addition to the tools we already have against these types of attacks, EDUCATION is the best protection. Attacks are rising and becoming more effective. Stay on guard.

Here is a sample phishing scam pop-up

phisher

“Phishing email messages, websites, and phone calls are designed to steal money. Cybercriminals can do this by installing malicious software on your computer or stealing personal information off of your computer.

Cybercriminals also use social engineering to convince you to install malicious software or hand over your personal information under false pretenses. They might email you, call you on the phone, or convince you to download something off of a website.”

Reference: Microsoft Safety and Security Center,  How to recognize phishing email messages, links, or phone calls

Recommendation: Read the entire article

Wisconsin Digital Archives Collection Connection : E-Cycling in Wisconsin

Electronics recycling or ‘e-cycling’ is a growing industry in the state of Wisconsin. Computers, TVs, cell phones, and other electronics make up some of the millions of devices discarded each year that may end up in landfills if not properly disposed of. These items contain valuable materials that can be recovered through responsible recycling as well as potentially hazardous materials, like lead and mercury, that can also pose a risk to human health and the environment.
The E-Cycle Wisconsin Program, managed by the Dept. of Natural Resources, is supported by Wisconsin’s electronics recycling law (2009 Wisconsin Act 50), which bans electronics such as TVs, computers, cell phone from Wisconsin landfills, and incinerators. The Wisconsin Digital Archives is a great place to learn more about e-cycling and the important work the E-Cycle Wisconsin Program is doing to education people about how to participate in the program.

E-Cycle Wisconsin program information

E-Cycle Wisconsin is a statewide, manufacturer-funded program that recycles certain electronics used in homes and schools. Individuals, K-12 public schools and Parental Choice Program schools can use E-Cycle Wisconsin to save on electronics recycling. Others may use the program to find responsible recyclers. Manufacturers, recyclers, collectors, retailers, local governments and others have important roles to play in making E-Cycle Wisconsin a success.

Reference: Wisconsin Libraries, June 25, 2015

Browser Plug-ins: All Things Must Pass

A browser plug-in (or plugin) is extra software installed on a PC that allows a browser to display additional content it was not originally designed to display.  Some examples of popular plug-ins are Flash Player, Java and Silverlight.  Plug-ins were created because, at the time, browsers were fairly immature and browser development was not happening fast enough, if at all.  So this created big opportunities for plug-in developers to create software that would expand the capabilities of browsers.

Now, let’s talk about what the problems are with plug-ins.  The biggest problem that I see is  the fact that they are not very secure.  There have been numerous attacks through either Flash or Java and since everyone has the same plug-in an attack works across every browser and operating system.  Other problems include not working on different operating systems as they are designed to only work on certain ones or they can be be very unstable which can cause your browser to crash or just behave badly.  These are the reasons why Mozilla announced in 2013 that they would changing the way Firefox loads third party plug-ins such as Flash, Java and Silverlight. Google has also announced their three-step approach to plug-in elimination:

  1. In January 2015 they began blocking plug-ins by default.
  2. In April 2015 they will begin to disable Chrome’s ability to run plug-ins at all, unless a user specifically enables it by setting a flag in Chrome’s technical preferences.
  3. In September 2015, they will begin to completely remove all ability to run plug-ins from Chrome.

So now you’re probably wondering, “If they’re going away, what’s going to be replacing them?”.  The answer is that we are in a much healthier environment of rapid browser development (Firefox and Chrome both release a new browser version every 6-weeks) and web standards.  Many of the features plug-ins implemented are now being introduced in the form of built-in browser features.  Don’t feel bad that plug-ins are going away — they had their time and now like everything else on the Internet it’s time for a change.

Source: TechBits, Posted by Brian on Mar. 9, 2015

Tech Tip – Heidi Yelk

Search Within A Website With Firefox

In the last Tech Tip, we talked about search engine management in Firefox. This month, I’d like to suggest another enhancement to Firefox search: Search Site 5.1. Just as the name implies, this Firefox extension allows searchers to search within a website, targeting only content on that site. This can be useful if the site does not include its own search box. To install Search Site 5.1, simply visit the Add On page and click the green “Add to Firefox” button then “install now.” You will have to restart Firefox after the installation for it to take effect.

Once installed, the extension displays when search terms are entered into the search box. You will notice a green magnifying glass now appears next to the search arrow, giving you the option to search just the site you are on.

search site 5.1 screenshot

Source:Wisconsin State Law Library / WSLL @ Your Service, March, 2015 

Tech Tools with Tine

Tech Tools with Tine is a series of archived 1-hour webinars from the Texas State Library & Archives Commission.

This is just a small sampling of what is available:

Tech Tool Ready Reference

COMING UP: Taming Tech Tools for Libraries, a WebJunction webinar (1:00 PM Central on September 18, 2014)

Explore Kieran Hixon’s toolbox of 25+ free tech tools that can help your library better engage with patrons and build digital literacy skills. From completing daily tasks to growing advocacy efforts, these web based tools can help you work smarter.

For example, Kieran suggests an intriguing use of IFTTT (If This Then That)- to “automate all the library’s social media so one blog goes everywhere.” Might there be other high-efficiency tools to be had!

techtoolreadyreference

View the Tech Tool Ready Reference table…