CALL US: 216-397-4080  | CLIENT HELP DESK: 216-539-3686

Thoughts From Abbott’s Inbox September 23rd, 2022

Thoughts From My Inbox

September 23rd, 2022

MFA Bombs, Real Estate Phishing, and Automated Hotels

It’s been another quiet week in the inbox, but what was lacking in quantity was made up for with quality. Scroll down to find out more about the cool new options for your iPhone with iOS16, how to prevent being “MFA-bombed”, and the difference between selling processes vs. outcomes.  

 

Apologies for the delay in getting this to you.  Just got situated in our NYC hotel (a very nice place, but definitely not automated and no sign of a bourbon dispenser) where we’re visiting for the weekend.  Love to share a great image from outside our window, but there isn’t one.  So, you get one I took at the Browns game last night.  Unlike last week, we didn’t leave with 1:55 left and they didn’t choke away a victory like only the Browns can do.  

 

Something About…

 

Apple iOS 16
Need to learn some more of the new tricks and gadgets available on the newest iOS for your Apple phone.?  Here’s a detailed list.

 

MFA Bombing
I don’t recall hearing the term “MFA Bombing” before, but it makes sense that a user might get sick of continued multifactor authentication attempts and just allow the login.  Actually, it happened to me last night after the Browns game as we were making our way home.  My phone lit up with an alert, asking me to accept a login attempt through Microsoft Authenticator.  Having no idea who or what was trying to get into my account, I refused the attempt and went along my way (I’m told by the smart people here at Ashton that if somebody has gotten to the point of attempting to authenticate, they probably already have my password.  So a change is required.) 

It seems, however, that Uber wasn’t so fortunate.  Investigators now believe that the recent data breach suffered by Uber stemmed from a contractor being hit with an MFA bombing attack and finally granting access to their account when told that it was “tech support”.  Oops.

 

Real Estate

We do a fair amount of work in the real estate industry and have seen plenty of attacks due to the various financial transactions that take place;  this piece about a new phishing attack aimed at realtors and their affiliates (title, legal, mortgage, etc.) jumped out at me.  As is often the case, this phish uses Microsoft 365 to entice users into providing the login creds for their 365 email accounts, and claims to be important documents from a mortgage company.   As is always the case, think before you click.  And if you weren’t expecting a specific email, call the ‘sender’ to verify!

Ransomware Declining
Interesting article about the evolution of ransomware, with some eye-opening statistics.  Research shows that ransomware incidents declined in the first half of 2022.  More importantly, however, estimates show that between 50-80% of organizations that pay a ransom are hit again.  Reason being that the hackers now know who’s willing to pay and who won’t. 

In any case, the Ashton team implements security solutions such as advanced threat detection and managed threat response, across our entire client base.  The article suggests that these are the solutions that are necessary in keeping up with today’s hackers, and based on our experience, we’d agree, wholeheartedly.

Selling Outcomes

It doesn’t happen often, but there are instances when our engineering team solves a client’s problem and that client then questions the bill.  “Why should I pay for this?”  Well, where would you be if we hadn’t fixed the problem (even if all it took was tapping the hammer in the right place)?  Probably not able to run your business.  As this article suggests, some people want to pay for a process rather than an outcome.  We’re a very process driven organization, but in the end, we provide outcomes.  Some people just don’t get it.

Cybersecurity Awareness Month
October is National Cybersecurity Awareness Month (because every month and almost every day have to be in honor of something, right?) and we’ll be sharing helpful tips across all of our social media platforms.  Keep an eye open and make sure that you and your team are secure.

 

Have a great weekend!

 

Abbey

Related Posts