Do you use Gmail? If you do, you might have noticed a new addition to…

Encryption; why it should matter to you

Springtime for us means it’s time for none another than…spring cleaning! And if there is…

How to spring clean your PC!

Remember that time that you, channeling your inner diva, began to belt it out on…

The dangers of public Wi-Fi

Chalk it up to the fact that homo sapiens have always had to find new…

Curiosity killed the computer

Perhaps it’s no coincidence that “adware” and “annoying” both start with the letter A, because…

Adware Goes Rogue

We have written a lot about ransomware in all different forms and incarnations here on…

Ransomware, Ransomware , Everywhere

We’re betting you love your smartphone. It’s okay if you do, because you’re in good…

The Banking Trojan in Your Pocket (or, Why Your Smartphone is Way Less Secure Than you Think it is)

Where were you in 2012? If you were on LinkedIn back then, there’s a good…

Have you Been Pwned in the LinkedIn Data Dump? Here is how to Tell!

Remember how your crazy old Aunt Sally stashed all her money in between mattresses because…

Lessons from the SWIFT Fiasco; Could you be Banking Safer ?

June is upon us and with it comes some of life’s sweet little pleasures –…

The Mega Hacks Cometh!

Invariably, if you use the internet a lot, you probably hear the term “The cloud”…

Are You a Closet-Cloud-Confusee? Understanding The Cloud and What it Means for Your Security

So if you remember, about two weeks ago we told you about a huge string…

Mark Zuckerberg Gets a Lesson in Password Safety

Boom! Whizz! Bang! Typically, when you think of the Fourth of July, you think about…

The How to Liberate  Your Device From Intruders Guide for the Fourth of July

Wondering what your friend or co-worker is doing, staring at his or her phone, wandering…

Go, Pokemon Go! The Latest Craze that Could Fill your Device with Malware

So not only is Pokemon go the biggest craze ever (seemingly anyway), it also seems…

Privacy in the Age of Pokemon Go!

We are well into the summer and for a whole lot of people that means…

Sure, it's Not Your Fault; But They Got Your CC Info Anyway

We’re finally in the home stretch – In just a few days, school starts up…

8 Essential Back-to-School Cyber Security Tips for a Rockin&#039; (and secure) School Year

Happy National Online Learning Day! Wait, is that even a thing? Well, it is and…

Happy Online Learning Day! (Yup, it's Really a Thing!)

Here at Reason Software, we are excited to announce the release of Unchecky v1.0. This…

Unchecky v1.0 is Here! Interview with Michael Maltsev

Attention any and all persons weighing 400 pounds or more — Donald Trump thinks you…

Is Cyber Security Worth a Spotlight at the Debates?

Gather ‘round and we’ll tell you a tale (okay, a few tales) of mystery, murder,…

Creepy Tales from the Internet of Things Crypt

As morning hits around the globe, the world is waking up to find out that…

Lessons Learned From the Election Shocker; Don't Let Hacks Take You by Surprise

For better or for worse, the biggest shopping season of the year has arrived. Now…

The Ultimate How to Not Get Hacked While Shopping Online Guide

Oh, Thanksgiving Day. You probably get a warm and fuzzy feeling even before the sugar…

The (Rotten) Gift that Keeps on Giving

As if worrying that your Android might suddenly explode wasn’t enough to worry about. Researchers…

The Gooligan Android Breach; What you Need to Know

“Um, honey, I think we have a problem. The computer is telling me that all…

Vulnerability of the year: Ransomware

2016 has come and gone and now we can look back at the year that…

A is for Apple, B is for BitCoin; The Most Noteworthy Data Breaches of 2016

It’s been a full fifteen minutes since you last checked your Facebook account (oh, the…

Fake News Flash; Think Before you Share!

Mobile devices have come a long way. We mean a reeeallly long way. In but…

Simple Tips to Spotting Evil Apps

How does the idea of a smart city sound to you? The term might conjure…

The Hidden Dangers in Smart Cities + 5 Bonus Tips to Secure Your IoT Devices

You know the only saying “Nothing is certain but death and taxes”? Seems pretty clear…

5 Tricky Tax Season Scams and How to Avoid Them

When was the last time you went to your bank? If it feels like you’re…

5 Major FinTech Security Concerns You Need to Know About Before You Bank

In honor of Mother’s Day, we thought it would be fitting to take a look…

The amazing mothers of tech

By now, WannaCry is a household name. The ransomware that shocked the world on May…

WannaCry No More? You Better Start Patching

When is adware not just adware? When it’s also malware, of course! Fireball, a new…

Fireball & the explosive malware heard around the world

Imagine this scene: You’re sitting at home one night, happily watching House of Cards on…

Attacks to critical Infrastructures: the next cyber front to worry about

“We pride ourselves on being a leader in managing and protecting data….We also are focused…

Think Your ID was Exposed in the Equifax Breach? Here&#039;s What to do About it

This post has been updated to reflect the current BitCoin to UD Dollar exchange rate,…

Everything You Need to Know About Cryptocurrency

In a recent post, we discussed the basics of cryptocurrency — what it is, how…

The Role of Cryptocurrency In Cyber Crime

Remember the Petya/NotPetya ransomware outbreak from back in June? That was the ransomware that was…

Bad Rabbit: The New Ransomware With Some Famous Cousins

“It’s the most hackable time of the year.”  Oh wait, that’s not how the song…

How To Steer Clear of Cyber Monday Scams

As the holidays draw closer, chances are you’re busy making your gift list and checking…

What NOT to buy for the holidays

Another day, another oddly named malware attack. Last week, researchers from Kaspersky disclosed that they…

ZooPark and Watering Hole Attacks

So now, May 25th has come and gone. If you live in the EU, you’re…

Oh, the irony; phishers are using GDPR to scam you

Which is worse: getting hit with crypto mining malware or falling prey to ransomware? with…

Ransomware or crypto mining malware? Rakhni is both!

You may not have known, but September 15th is National Online Learning Day. Nowadays, it…

Watch out for online learning scams!

Veux-tu Virobot? For the non-francophones among us, what we’re asking is if you’ve heard about…

Virobot: are monster mash-ups the future of ransomware?

January 28th is International Data Privacy Day. If you’re wondering why data privacy needs its…

It's Data Privacy Day: What does your camera know about you?

Today, cameras are everywhere — on our phones, our Alexas, baby monitors, desktops, laptops, home…

Webcam hacking; taking back what’s yours

In spring 2018, a powerful banking Trojan named BackSwap surfaced, targeting online banking users in…

Browser-based threats; Don’t worry, we’ve got your back

Another day, another major hack. This time around, India-based outsourcing giant Wipro was hit with…

To Scan or Not to Scan; The Proactive Way to Protect Your PC

  Today is Mother’s Day, the day set aside to honor those special women, who…

The 5 Coolest Mother’s Day Tech Gifts You Can Find (and how to secure them!)

Reason is excited to launch Reason for Business, a powerful endpoint security protection solution for…

We Invite You to Join Reason for Business Beta

Cybersecurity breaches only make the headlines when they involve large entities like banks or tech…

Think SMBs Fall Under the Radar as Targets for Cyber Threats? Think Again.

The threat landscape is undeniably becoming more challenging and more menacing every day. It seems…

Reason Download Defender- It’s time to defend your downloads.

While spring cleaning may only come around once a year, PC cleaning needs to happen…

Should I Remove It? It’s cleaning time! How to declutter your PC.

6 tips for celebrating National Online Learning Day and keeping your data safe! Magnifying the…

To learn (online) or not to learn?

Next up on the ‘crazy meter’, and probably the ‘creepy meter’ as well, is the…

What happens when ‘ransomware’ meets ‘crazy’?

Recently, the cryptoblackmail scam, “ScamYourself”, has returned to the market – many usersworldwide have been…

Threat Analysis Report: Save Yourself Malware

The advent of the Internet and Internet-enabled technologies not only ushered in the era of…

Threat Intelligence; A Unifying Force of the Future.

Halloween: Famous SMB Cyber Attacks in Disguise. Halloween normally conjures up images of costumes and…

All Tricks and No Treats

Looking for another reason to put on your party hat? Well, we’ve got one: International…

International Internet Day: A Reminder about Security Online.

Start by Installing Reason Cybersecurity – Get 70% Off Today! Think about this for a minute:…

How to Keep Your Business Safe on Cyber Monday

Before launching into a discussion on how an antivirus detects malware, it’s important to first…

How does an antivirus detect malware?

Hacking has evolved into a billion-dollar growth business, making hackers relentless in their pursuit to…

Can Antivirus Programs Stop Hackers?

Get 70% Off Reason Cybersecurity on Black Friday and Keep Your Business out of the…

Cyber attacks and Black Friday: It only takes one to put you on the red

Windows 10, according to theinquirer.net, is a particularly appealing target for hackers and virus writers…

Which Antivirus is Best for Window 10?

Antivirus programs were initially created to distinguish and expel PC infections. Be that as it…

What is antivirus software and how can it protect you?

I think we can all agree that pups, the friendly, loyal, man’s-best-friend kind are cute…

Unwanted Software Blockers: Why Small Businesses Need Them

It’s here, 2020, the start of not just a new year, but a new decade…

Small business growth and guardianship in 2020: staying safe from hackers

Today, Windows 10 comes with Windows Defender, a native, comprehensive antivirus solution already integrated into…

What antivirus software comes with Windows 10?

So you’ve finally decided on the antivirus (AV) software you want to install and are…

Will antivirus software remove existing viruses?

We hear the terms ‘antivirus’ and ‘antimalware’ bandied about so much it’s easy to understand…

Can antivirus detect malware?

While there is no quick way to answer which antivirus is better, there are at…

Which antivirus is better?

To answer the question, ‘can antivirus software remove viruses’, we should first examine what antivirus…

Can Antivirus Remove Virus?

If you perform a Google search to find out which antivirus is good, the search…

Which antivirus is good?

If Windows is your computer operating system, you’re in good company; according to statista.com, Windows…

Which is the best antivirus for Windows?

The best protection against viruses and malware is reliable, up-to-date, antivirus software. Fortunately, there are…

Which antivirus should I use?

Learning about antivirus programs and how antivirus programs protect your computer is a good first…

How antivirus programs protect your computer

“Reaper”, the first antivirus software, was created in response to “Creeper” the first computer virus,…

Are antivirus programs worth it?

If you’re alarmed by all the news reports about malware attacks and the damage they…

It’s been over 40 years since the Creeper computer virus, made its appearance, and although…

Is an antivirus necessary?

The term ‘antivirus’ is a bit of a misnomer today, since today’s antivirus software must…

why antivirus is needed?

According to cybercrime statistics from cpomagazine.com and websitehostingrating.com respectively, cybercrimes account for trillions of dollars…

Why is antivirus software important?

The first question people usually ask about antivirus (AV) software, is ‘do I really need…

How do you know what antivirus to use?

Hackers are always looking for security holes so that they can install malware on your…

Which Antivirus is Best for Laptops?

Windows 10 was first launched in 2015, but it wasn’t until January 2018 that it…

Which Antivirus is Best for Windows 7

We hear a lot about the importance of having antivirus software on our computers, but…

How Does Antivirus Software Work?

According to a recent report from statista.com, an online statistics portal, 74% of Americans own…

Which antivirus is best for a Windows 10 laptop?

To combat the continuously evolving landscape of cybersecurity threats, antivirus software has been changing and…

How Antivirus Software Works

The alarming proliferation of malware and cyber attacks, reported almost daily in the news, has…

What antivirus do I need?

If a salesperson at a clothing store asked you if you needed any help and…

Browser or big brother? ReasonLab’s secure browsing premium feature protects your business

Antivirus, aka anti-virus, aka anti-malware, aka security software, has been around since 1971, and yes,…

What do antivirus do?

Cybercrime is on the rise; it is becoming increasingly ubiquitous and menacing. From private individuals,…

Which antivirus should I buy?

Cybercrime is a global phenomenon and India has been just as affected by it as…

Which antivirus is best for PCs in India

For a very long time, it was widely promulgated that Apple computers didn’t get infected…

What antivirus does Apple use?

Pretty much anyone who uses the Internet today has heard of computer viruses and malware…

How Antivirus Protects Your Data

The right to privacy has a long, sometimes contentious history, but today it is recognized…

Can small businesses really keep their data private?

Happy Valentine’s Day to all the cyber criminals in the world! …said no small business…

Small businesses need some Valentine’s Day love too

You can’t make this stuff up. One Sunday last year, Gillian Franklin, owner of Heat…

7 Cybersecurity Beauty Hacks You Need to Know!

Looking for another reason to put on your party hat? Well, we’ve got one: **International Internet Day**. Celebrated every October 29th since 2005, International Internet Day celebrates the first electronic message ever transferred between two computers.

That first, small electronic transmission consisted of just an ‘L’ and an ‘O’ and took place back in 1969 just months after Neil Armstrong famously stated “That’s one small step for man, one giant leap for mankind” as he walked on the moon. The transmission of those two letters represented the birth of the Internet, and the world has never looked back. Today we send approximately 293.6 billion emails per day, a far cry from those two little letters of the alphabet sent 50 years ago.

![](https://i1.wp.com/blog.reasonsecurity.com/wp-content/uploads/2019/10/shutterstock_1156923271.jpg?fit=720%2C377&ssl=1)

Granted, International Internet Day may not be the type of holiday that party dreams are made of, but as holidays celebrating world-changing inventions go, International Internet Day is right there at the top. On a more serious note, it also serves as an important wakeup call about cyber safety and the need to maintain [security online](http://r.mailings.virusbulletin.com/mk/mr/izr9B8GhtRqBnoEfZ074JpJFWkdP36bpwHfSmIy1K-QO6UR3DcG5Vcv0XSl7J4O1mwpGvKWVsVEg2ft89V-TxV20lubIcR8Qa3XoAtsFUJx9OXUMOkYdww). Considering that a hacking attack takes place approximately every 39 seconds, it’s a wakeup call we can’t ignore.

**So just what are these threats to online security?**

The list of online security threats is long, growing and evolving, but there are a few threats that standout in particular:

**Malware** – Malware run the gamut from adware, ransomware, and spyware to Trojans, viruses, and worms. Hackers use malware to illegally obtain credit card details, login credentials, PINs, and other sensitive information in order to steal money from their victims or make money by selling the information on the dark web. Malware can also be used to hold data hostage or steal identities. The best way for individuals and businesses to protect their systems and data is to install powerful antivirus software that provides scanning and protection, detection and threat removal in real time.

**Phishing** – Phishing takes many forms and it is one of the most widespread types of cyber attacks. These unwelcome intruders appear as routine, everyday emails from reliable sources, but in actuality deliver malware that gives hackers unauthorized access to a user’s data or computers. Hackers love phishing attacks because they have a high success rate and because phishing tools are low cost and widespread. Whaling, vishing, spear fishing, and smishing are all types of phishing attacks and they all rely on social engineering to trick victims into clicking on malicious links, visiting malicious websites, or downloading malicious attachments. Installing a secure browsing extension and maintaining a healthy dose of caution and awareness of phishing tactics, whether by the individual or company employees, are the most effective ways to stop phishing attacks.

![](https://i2.wp.com/blog.reasonsecurity.com/wp-content/uploads/2019/10/shutterstock_1075182290.jpg?fit=720%2C480&ssl=1)

**Unsecure Web Browsing** – It’s not only phishing emails that can lure us into visiting malicious websites; innocent Web browsing or Web surfing can too. Malicious websites, which look like legitimate sites, will try to install any number of different types of malware by getting you to install software that your computer seems to need. However, there are also drive-by downloads, where all you have to do is just visit the malicious site to be infected; the actual download isn’t even necessary. In addition to keeping your web browser and operating system current, browser protection extensions, and unwanted software blockers are the best protection against malicious websites, but as with any cyber threat, cybersecurity awareness is key and you should always exercise caution before opening emails that look suspicious or visiting websites with odd URLs.

**Rootkits** – A rootkit is a program or even a collection of programs that covertly sit on a compromised computer and provide unauthorized access and control of the computer or its software to a hacker. Rootkits are difficult to detect and can go undetected for years as their principal function is to hide and protect their existence and the existence of other malware, which they often do by shutting down antivirus software. Rootkits are used to plant malware that can spy on and steal sensitive information such as banking credentials, passwords, and trade secrets, and to launch further network security attacks. Comprehensive, advanced antivirus software, browser protection and unwanted software blockers are the best defense against rootkits. Making sure your operating software and your antivirus software are always current and have the latest security patches is essential too. And if we haven’t said it enough, be aware of phishing emails, malicious websites, and attachments sent from unfamiliar sources.

![](https://i2.wp.com/blog.reasonsecurity.com/wp-content/uploads/2019/10/shutterstock_599075105.jpg?fit=720%2C360&ssl=1)

**Third party and supply chain attacks** – Specifically relevant to businesses, supply chain attacks can be devastating, especially to small and medium sized businesses that don’t have the resources to recover from such an attack. Third party and supply chain attacks take place when your business systems are compromised via an outside partner or service provider that has access to your data. Hackers will look for the weakest link in an online supply network such as unsecure network protocols or unsafe coding practices, and then slip their malware onto the target system without anyone ever noticing.

These attacks can wreak untold financial and reputational damage to businesses as they can go undetected for extended periods of time, furtively stealing sensitive information. Again, awareness and caution are requisite to a viable cybersecurity defense. Vetting your vendors to make sure they have the latest cybersecurity measures in place and making sure your operating systems and antivirus software are up-to-date are critical security steps too.

**Celebrate this holiday? Sure, but don’t forget about cybersecurity.**  
The ‘L’ and ‘O’ sent in that initial Internet transmission was supposed to be part of a larger transmission sending the word ‘Login’. The first attempt crashed, but a second attempt was successful and heralded in the era of the Internet.

![](https://cms.reasonlabs.com/cdn/shutterstock_1297517851-1375844364-1572348559937.jpg)

This day has certainly earned its place in history and deserves to be celebrated, but today the larger Internet picture includes being knowledgeable of cybersecurity issues and following good cyber hygiene. Without cybersecurity measures, your data and privacy are vulnerable and if you’re attacked, celebrating International Internet Day will be the last thing on your mind.

## Halloween: Famous SMB Cyber Attacks in Disguise.

Halloween normally conjures up images of costumes and candy, black cats and witches, ghosts and goblins, carved pumpkins, and scary activities. However, no amount of Halloween costuming or scary activities, come close to causing the amount of fear and damage that cyber attacks can cause small and medium-sized businesses (SMBs). With cyber attacks, rather than black cats poised to strike, it’s black hats poised to strike, and rather than kids disguised in different Halloween costumes arriving at your door, it’s malware disguised as innocent emails or safe websites arriving on your business’ computers. But make no mistake: malware is all trick and no treat.

Cyber attacks, whether they come in the form of identity theft, phishing, ransomware, or any other type of attack, comprise one of the biggest threats and biggest fears facing SMBs today. CPOMagazine.com confirmed this in a recent report stating that 45% of SMBs feel that they are vulnerable to cyber attacks. More worrying, however, than statistics about the number of small businesses that fear a cyber attack, are the statistics, reported by smallbiztrends.com, that 43 percent of cyber attacks target small businesses, and 60 percent of those attacked go out of business within six months.

## Not scared yet? Hold on to your pumpkins – you will be after you read about these famous and damaging cyber attacks on SMBs.

**Fake Invoices Scam** – This type of scam can take many forms, but the objective is always the same: to get a business to send a payment to a fake supplier account. To launch this attack, hackers will first monitor a business’ payment processes in order to learn how to create a convincing looking invoice. Once this step is achieved they then send an invoice requesting payment for services rendered. The invoice can appear so authentic that company accounting departments release the requested funds without ever suspecting fraud, and they’re not small funds either. CNBC.com, for example, recently reported about a small accounting firm in Brooklyn, New York that was scammed out of $700,000 in one year after receiving fake invoices for legal services. An assistant at the firm, who was in charge of releasing the funds for payments, paid the invoices without ever knowing they were fake.

**Brute Force Attacks** – One of the most popular types of hacks, are brute force attacks, which attempt to crack passwords or PINs in order to gain backend access to a website and obtain the sensitive information it holds. Any website with a password can be a target, and as the name suggests, this type of attack takes a ‘bulldozer’ type approach to guessing the passwords or PINs. While brute force attacks can take forever to uncover passwords and are not always successful if strong password security measures are in place, if passwords are weak, they can take a matter of seconds. And if successful, hackers gain illegal access to websites and the valuable information (e.g., credit card credentials) they hold. One of the largest and most well-known brute force attacks was the attack against GitHub which involved 40,000 separate hacker IP addresses.

**Identity theft** – Businesses, not just individuals, can have their identities stolen too. In fact, identity theft is big business for cyber identity thieves who steal and then use business identities to open credit card accounts, file fraudulent tax returns, obtain bank loans, initiate wire transfers, and more. The attacks have both reputational and financial consequences for businesses. According to the 2018 Business Identity Theft Report by the National Cybersecurity Society, business identity theft cases have caused $137 million in damage with some of the most frequent targets of those attacks being businesses offering services in management consulting, accounting and bookkeeping, health, and construction.  A notable example of a business identity attack is the one in Tennessee where cyber criminals created fake websites that impersonated the identity of legitimate car dealerships so they could scam people into making deposits for automobiles that didn’t exist. Indeed the 250% increase in the number of fraudulent returns reported by the IRS has many businesses wisely taking their identity theft protection far more seriously today.

**Spoofing** – A particularly cunning cyber attack, spoofing emails are sent by cyber criminals who have spoofed the email address of a company executive. The emails that are sent are received by company employees and look just like the real deal. Never suspecting that the email is not really from the boss or some high-level executive, the employee innocently executes the request in the email which usually involves making a payment… to the cyber criminal of course. Austrian aerospace parts maker FACC, lost approximately 54 million Euros in such an attack after a hacker was able to successfully pose as the CEO of the company and convince an entry-level accounting employee to transfer the funds to an account for a fake project.

**Ransomware** – Still a favorite of many cybercriminals, ransomware is perhaps one of the most pervasive types of cyber attacks on businesses with attacks estimated to cost $6 trillion annually by 2021. That figure isn’t too hard to believe when you understand that the losses caused by the NotPetya ransomware alone could exceed $1 billion. For example, FedEx lost an estimated $300 million in just the first quarter of 2017 after falling victim to a NotPetya attack.

## **Got your attention now?** 

Right about now, you’re probably wondering if and how SMBs can actually protect themselves from hackers, especially since there are so many potential vulnerabilities and different types of attacks. Well, we’re happy to report that there are highly effective cybersecurity measures that SMBs can implement to protect themselves. Here are some of the most important ones:

- **Train your employees about security basics**. SMBs that take cybersecurity seriously have established security practices and policies in place for their employees to follow such as password protocols, rules for protecting customer information and other sensitive data, rules of response in case an attack is suspected, etc.
- **Get a firewall**. Firewalls prevent unauthorized access to or from your network by acting like a shield between the Web and your company network.
- **Install a strong antivirus**. Effective cybersecurity is nothing without a strong antivirus suite that provides browser security, tracking protection, and ransomware protection, in addition to anti-malware scanning, threat removal, and real-time protection. Other security features to consider in antivirus software are camera and microphone protection, a software blocker, and multi-device options.
- **Regular backups**. Regularly backing up your data is also mission-critical. This includes data stored on the cloud. Backups should also be stored in a location that is separate from the business location in case of fire or flood.
- **Verify vendor security**. Your vendors’ security controls should also be a priority, especially if they have access to a lot of your business data. Cyber attacks on supply chains are a growing and immeasurably damaging type of cyber attack, so knowing what your vendors’ security policies are, and how your data will be stored and accessed is another vital step in cybersecurity.
- **Wi-Fi security**. Some companies use one Wi-Fi for guests and personal devices and a separate one for secure company devices. Virtual private networks (VPNs) like [RAV VPN](https://reasonlabs.com/platform/products/vpn) are another useful security solution and are used to secure remote access.
- **Response Plan**. While we hope that implementation of these security measures can prevent any type of attack, in reality, an attack is always possible. Consequently, security best practices include having an effective response plan in place. Such a plan should consider legal issues, how to inform customers, and finding out how the breach occurred among other elements.

## **Don’t be one the 60 percent…**

A scary 60 percent of small companies go out of business within six months of a cyber attack. Don’t join that statistic. Cybersecurity requires constant vigilance to the latest threats. Implementing the measures stated above will help ensure that your business is not the next victim.

**Wishing you many treats and no tricks this Halloween.**