Posts

Showing posts with the label computer help

Office Depot to Pay $25 Million to FTC to Settle Bogus Tech Support Scam

Image
Office Depot  and a California-based tech support software provider,  Support.com  will  pay $25 Million & $10 Million  respectively to the U.S. Federal Trade Commission (FTC) for  pushing innocent users  into buying the products they didn’t need. According to a recent FTC press release, the agency will use the entire settlement amount to  issue refunds to the customers impacted by the treacherous  Tech Support Scam  cascaded by Office Depot & Support.com. The devious practices of Office Depot were  exposed by Jesse Jones ’ undercover investigation, a renowned news personality from Kiro 7 News Channel. Joe Simons, the Chairman of FTC said that protecting the computers from malware, virus & other cyber threats is an arduous task for the customers. Further, he added that a case like this should send a strong message to the companies that  swindling the users into buying expensive services they do not need can...

Flawed API of US Postal Services Exposed 60 Million Users Data

Image
A ruinous security flaw in Application program Interface of US Postal Services  exposed personal data  of over  60 million users over the course of 2017 & 2018. This vulnerability on USPC’s website allowed anyone with an account at usps.com to view personal information & account details of other users. In some cases, this flaw even allowed users to modify the details in the affected accounts. The leaked information included  user name ,  user ID ,  e-mail address ,  account number ,  street addresses  &  contact numbers  of the users. An anonymous researcher discovered this problem a year ago & informed US Postal Services, however, USPC failed to pay heed to researcher’s warning at that time. USPS patched this issue last week when a cyber security investigator, Krebs flagged it. Insight into the API Defect The root-cause of the vulnerability is hitched to an authentication weakness in the site’s Applicati...

Adware Doctor: A Security App for Apple users with malicious intentions

Image
Ever wondered that the Guardian of your system software that is meant to protect your system against malware attacks can step into the breach? A recent security research demonstrated a popular anti-malware app called Adware Doctor that was supposed to protect Apple MAC users against privacy and security threat, ironically, siphoned off browsing history and information about system processes and applications. It turns out that Apple; the most convincing consumer electronics and computer software brand in terms of security is under interrogation for not acting quickly in removing the dubious app. What is Adware Doctor? Adware Doctor was one of the top paid apps (sold for $14.99) in the Mac app Store with 4.8 star rating and over 7,000 reviews. The app claimed to: 1. Remove suspicious and unwanted extensions 2. Clear Browser cookies and caches to restore your browser 3. Remove Adware, malware and other nasty system infections from Apple PCs. 4. Kill annoying pop-ups and 5. R...

Site Isolation Feature enabled by Google for 99% of Chrome Desktop Users

Image
Earlier when most web browsers were designed, the web pages were simple and hence were rendered in the same process, to keep resource usage low. However, with the growing technology, there has been a significant shift in the active web page content. Ranging from pages designed using JavaScript to make the web pages interactive and create richer user interfaces with reduced server load to Flash, a technology used by Adobe to show animation on web pages, web-pages nowadays are full of “web apps”. Browsers that keep all the running apps in one process may face real challenges related to security, responsiveness and robustness. 1. If one web app crashes, it will take the entire web browser with it, including all the web apps that are open. 2. Web apps have to compete for CPU time, on a single thread rendering the browser unresponsive at times. 3. Some webpage may have malicious code embedded that may compromise the entire system. Hence the browser must keep different apps isolated ...

ZeroFont Technique – An easy way to bypass office 365

Image
Phishing activities are becoming a flop with growing Artificial Intelligence powered phishing detection technologies. Email services and web security scanners use these anti phishing mechanisms to detect malicious emails. One such attempt is implemented by Microsoft in their Office 365 version to safeguard users from harmful emails and links. In Microsoft Office 365 Advanced Threat Protection (ATP), a cloud based email filtering service is used to protect users and their organizations against malware and viruses. Like Microsoft Office 365, many emails and web security services are based on natural language processing and to identify malicious or phishing emails faster. However cyber criminals can’t take a back seat! Recent news reveals that email scammers and cyber crooks have come up with a new technique that would allow their phishing emails to bypass the protection implemented by Microsoft in office 365. This new technique evolved by maleficent developers involves manipulating ...