Connect with us

E-Business

Microsoft Exposes 250m Customer Records

Published

on

Kindly share this post

Over the New Year, software giant Microsoft exposed nearly 250 million customer service and support (CSS) records on the Web.

This is according to UK-based firm Comparitech, which says the records contained logs of conversations between Microsoft support agents and customers from all over the world, spanning a 14-year period from 2005 to December 2019.

All of the data was left accessible to anyone with a Web browser, with no password or other authentication needed, the firm says.

The Comparitech security research team led by Bob Diachenko uncovered five Elasticsearch servers, each of which contained an apparently identical set of the 250 million records.

Diachenko immediately notified Microsoft upon discovering the exposed data, and Microsoft took swift action to secure it.

“We’re thankful to Bob Diachenko for working closely with us so that we were able to quickly fix this misconfiguration, analyse data and notify customers as appropriate,” says Eric Doerr, general manager of Microsoft.

Timeline of the exposure

Comparitech says in total, the data was exposed for about two days before it alerted Microsoft and the records were secured.

–    28 December 2019: The databases were indexed by search engine BinaryEdge.

–    29 December 2019: Diachenko discovered the databases and immediately notified Microsoft.

–   30 and 31 December 2019: Microsoft secured the servers and data. Diachenko and Microsoft continued the investigation and remediation process.

–   21 January 2020: Microsoft disclosed additional details about the exposure as a result of the investigation.

“I immediately reported this to Microsoft and within 24 hours all servers were secured,” Diachenko says.

“I applaud the Microsoft support team for responsiveness and quick turnaround on this despite [it being] New Year’s Eve. We do not know if any other unauthorised parties accessed the database during that time.”

Diachenko explains that most of the personally identifiable information – e-mail aliases, contract numbers and payment information – was redacted.

However, he points out that many records contained plain text data, including but not limited to customer e-mail addresses, IP addresses, locations, descriptions of CSS claims and cases, Microsoft support agent e-mails, case numbers, resolutions and internal notes marked as “confidential”.

Comparitech notes that even though most personally identifiable information was redacted from the records, the dangers of this exposure should not be underestimated.

The data could be valuable to tech support scammers, in particular, it says.

“Tech support scams entail a scammer contacting users and pretending to be a Microsoft support representative. These types of scams are quite prevalent, and even when scammers don’t have any personal information about their targets, they often impersonate Microsoft staff. Microsoft Windows is, after all, the most popular operating system in the world,” the firm says.

It points out that with detailed logs and case information in hand, scammers stand a better chance of succeeding against their targets.

“If scammers obtained the data before it was secured, they could exploit it by impersonating a real Microsoft employee and referring to a real case number. From there, they could phish for sensitive information or hijack user devices.

“Microsoft customers and Windows users should be on the lookout for such scams via phone and e-mail. Remember that Microsoft never proactively reaches out to users to solve their tech problems – users must approach Microsoft for help first. Microsoft employees will not ask for your password or request that you install remote desktop applications like TeamViewer. These are common tactics among tech scammers,” Comparitech says.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

ISDL Achieves IMS Certification

Published

on

Kindly share this post

Integrated System and Devices Limited (ISDL), a major provider of electronic security solutions, is delighted to announce the successful attainment of ISO 14001:2015 and ISO 45001:2018 certifications following a rigorous audit process conducted by Bureau Veritas Certification Holdings SAS-UK Branch.

ISDL Achieves IMS Certification

In 2021, ISDL bagged the Quality management systems ISO 9001:2015, and now in 2024, with unwavering dedication to customer satisfaction, the occupational Health and Safety system ISO 45001:2018 and the Environmental management system ISO 14001:2015 have been consolidated to form an Integrated Management System.

These certifications, covering ISDL’s headquarters and branches, signify the company’s unwavering commitment to upholding the highest standards of quality management across all facets of its operations.

According to Oluseun Mabogunje, managing director of ISDL, the scope of the certifications encompasses the design, procurement, supply, installation, integration, maintenance, and after-sales support of various electronic security and Extra Low Voltage (ELV) equipment.

Mabogunje expressed his elation at receiving the IMS certifications, emphasizing ISDL’s dedication to delivering exceptional quality and service to its clientele. He emphasized that this achievement underscores the company’s ongoing pursuit of continuous improvement and customer satisfaction.

 

 

 


Kindly share this post
Continue Reading

E-Business

Cybervergent’s Q1 2024 Report Reveals Rising Threat of Remcos RAT Malware in Financial Sector

Published

on

Kindly share this post

Cybervergent, a foremost technology company providing automated cybersecurity solutions, in its Quarterly Brief has revealed a troubling trend in the financial sector that shows a spike in attacks utilising the deceptive Remote Control and Surveillance Access Trojan (Remcos RAT) in Q1, 2024.

The findings affirm a stark forewarning to the financial institutions and organisations in the African continent, urging heightened vigilance and proactive measures to mitigate potential escalating risks.

Previously marketed as a legitimate software, Remcos got co-opted by malicious actors and is now a prevalent tool in cybercrime campaigns. This remote access tool grants attackers hidden entry into victims’ devices, allowing them to seize control, pilfer sensitive data, and even introduce stealth backdoors to compromise entire systems. The capabilities of Remcos are diverse and frightening, ranging from disabling vital security features like User Account Control (UAC) to covertly recording user activities.

“As vigilant cybersecurity gatekeepers, we have observed a significant surge in attacks leveraging the Remcos RAT malware,” said Gbolabo Awelewa, the Chief Solutions Officer, Cybervergent. “Financial institutions are particularly targeted due to the sensitive nature of their data and assets. Organisations must remain diligent and adopt proactive monitoring measures to safeguard against such threats.”

The proactive approach adopted by Cybervergent’s Cyber Operations Centre involves meticulous analysis of attacker tactics, constant updating of threat intelligence, and implementing robust endpoint security solutions. These measures are designed to detect, prevent, and neutralise Remote Access Trojans like Remcos, ensuring the continued security and compliance of organisations in the face of evolving cyber threats.

“Our mission is to fortify our clients’ defenses and ensure the seamless operation of their organisations,” added Gbolabo. “By staying ahead of emerging attack vectors and vulnerabilities, we empower businesses to take proactive measures and protect their valuable assets.”

Looking ahead, Adetokunbo Omotosho, Chief Executive Officer of Cybervergent emphasised the firm’s focus on empowering organisations to navigate the complexities of cybersecurity and compliance with dexterity and confidence.

“Cybervergent’s Assurance and Compliance Team has demonstrated unparalleled leadership in the cybersecurity domain, achieving significant milestones and delivering transformative solutions. Our journey through Q1 reflects a deep commitment to advancing the state of cybersecurity compliance, paving the way for a secure and resilient digital future for organisations in Africa and across the world”, he added.


Kindly share this post
Continue Reading

E-Business

Konga Launches Free Same Day Deliveries on Starlink, Apple & Samsung Nationwide

Published

on

Kindly share this post

Konga, the only authorised shop-in-shop for Starlink Internet kits in Nigeria, is offering its customers free same day delivery across all major cities in the country.

With prices of Starlink Internet kits slashed by 50%, Konga is delivering additional value so that both homes and businesses in urban and remote places can enjoy infinite possibilities with their internet on both their standard and enterprise installations. This offer which is available both online and in its retail stores nationwide is exclusive to new and existing customers this month.

With the improvement in prices on both original standard and enterprise Starlink kits, customers can now enjoy a global warranty and direct installation services by purchasing only on Konga.

Since the launch of the partnership with the Elon Musk owned satellite internet provider, Nigerians have continued to celebrate the uninterrupted supply of fast and efficient cyber network services from the authentic devices available on Konga.

In addition to Starlink, other unique items from leading global companies such as Apple, HP, Lenovo, Samsung, Zinox, Philips, Intel and many more are available at unbeatable discounts in the Konga Tech Month from the 1st and will run till the 31st of May 2024.

The Konga Tech Month was extended from its traditional 7day promotion to 30days to give more people access to exclusive deals throughout the month. To enjoy these mouthwatering offers, visit konga.com or any of its physical outlets today.


Kindly share this post
Continue Reading

Trending