Great Lakes Computer Corporation

Managed Service Provider

You are here: Home / Great Lakes Blog

Great Lakes Blog

By

Ransomware: To Pay or Not To Pay?

RansomwareWe’ve talked a lot about ransomware in the last year. Frankly, the whole world has been talking about it as it becomes one of the leading global cybersecurity threats. The biggest problem with this type of malware is the urgency it creates. Because of an impending threat of data loss and being locked out of your own machine, you feel the need to act immediately. So the question becomes should you pay the ransom? The answer is tricky.

Almost all sources would suggest that if you have access to an expert that can help you circumvent the ransomware code, then by all means, that is what you should try. There are risks of losing your data, but your expert should be able to determine fairly quickly if they can work around it. If they can’t, then you’re faced with the pay or not decision.

When these attacks first started occurring in 2015, the advice from many sources, like this 2015 blog post, would suggest you evaluate how important that data is to you. “If the crooks have implemented the encryption process properly, the only way to get your files back is to to pay them for a copy of the decryption key.” Is it worth risking complete loss for a couple hundred dollars? In that moment of panic, that may seem like a simple decision depending on the information you’ve lost control of. And, more often than not, payment would solve the problem. “For better or for worse, most ransomware gangs have acquired a bit of an ‘honour among thieves’ reputation, so that if you do pay over the money, you almost certainly will get your files back.” (NakedSecurity)

Some people spoke out against paying the ransom. “Paying ransom makes the situation worse because it rewards criminal behavior. The groups behind ransomware know victims will pay, which has resulted in more ransomware variants and new attack vectors. It’s basic game theory: One victim pays the ransom, so the game will be repeated for the next victim, who will look at what the first victim did.” (Infoworld)

Now, the voices are overwhelmingly leaning towards not paying. “As the attacks… around the world continue, with the latest number of compromised databases ranging between 29,000 to more than 32,000 depending on whom you ask, virtually none of the victims who have paid the ransom have gotten their data back.”

“In fact, many ransom payments are going to criminals who didn’t compromise the database in the first place. One attacker steals the data, wipes the database, and leaves behind the ransom note. Another attacker comes along and overwrites the ransom note with their own, and other attackers keep piggybacking on top of each other. At this point, there’s no reason to pay because victims don’t know who actually has their database.” (Infoworld)

So, what should you do? The first step is to do everything in your power to prevent ransomware from getting into your system in the first place.

    • Invest in best-in-class cybersecurity, including antivirus software that actively monitors and prevents malware attacks. Keep it up to date!
    • Create secure backups of your data on a regular basis. Whether this means flash drives, an external hard drive, or automatic cloud back up.
    • Keep informed and alert. Read up on new malware attacks. Don’t click on or open sites, emails, or messages that seem fishy… or “phishy.”

If you think your data security is at risk and you don’t know how to protect it, call the experts at Great Lakes Computer. We have many services, including cybersecurity programs, to help you keep your data protected. Read the case study below to learn how we have helped clients in ransomware situations get their data back. And in the event of a breach, we have digital forensic specialists to help find the source of the breach and make sure it doesn’t happen again. Let us worry about your cybersecurity so you don’t have to.

By

Digital Forensics Is the New Cybersecurity CSI

Digital ForensicsYou’ve certainly heard the term ‘cybersecurity’ plenty in the last year. Between the high profile cyber attacks on big box retailers to the newsworthy ransomware attacks on hospitals, if you haven’t heard it, you must be intentionally living off the grid, and we don’t blame you. Getting in front of cybersecurity issues is front of mind as we enter the new year. But, breaches can occur an average of 140 days before being detected. That’s a long time for someone to have access to your data without your knowledge! Once the breach has occurred, how do you determine its source and scope? Digital forensics.

According to Techopedia, “Digital forensics is the process of uncovering and interpreting electronic data. The goal of the process is to preserve any evidence in its most original form while performing a structured investigation by collecting, identifying and validating the digital information for the purpose of reconstructing past events. The context is most often for usage of data in a court of law, though digital forensics can be used in other instances.”

After you’ve determined a breach has occurred, the legal ramifications must be considered. “Breaches often involve complying with multiple state data breach notification laws because of affected individuals residing in different states. Lawyers must know the facts to provide appropriate legal advice. Information security professionals that can analyze how a breach occurred and what information was impacted can thus be invaluable for a breach response. An information security professional can provide a clearer picture of the scope and impact of a security incident. Ultimately, that information is what drives the response and is the foundation for a lawyer to provide legal counseling about whether a breach has occurred under any applicable law and, if so, how to respond.” (Read our full whitepaper, Crossing the Breach, below)

What does a digital forensic specialist do?

    • Identifies the cause and assesses the scope of an incident
    • Preserves the evidence to support any notification duties and potential litigation
    • Understands the totality of the situation to ensure remediation is complete
    • Recommends an appropriate course of action to prevent/follow-on or mitigate future attacks

There’s a war between hackers and IT security professionals, and the battle field and weapons are evolving every day. How can we possibly win the battle? Proactive and vigilant cybersecurity procedures are critical. If we can stop them from getting in to our networks, we can protect our data. If they manage to get by our defenses, we need to know how and to what end in order to prevent the same thing from happening in the future.

If you are ready to take your cybersecurity seriously, contact the experts at Great Lakes Computer. We have an extensive offering of antivirus, antimalware, data backup, and monitoring services to help keep your data secure. If you suspect you’ve been a victim of a breach, we have computer forensic investigators to help you determine the source and scope of the breach.

By

Stay On Point with Proper Point-of-Sale System Maintenance

POS System MaintenanceAll types of businesses use Point-of-Sale systems, but each uses them a little differently. Where an automotive repair shop may just have a single, fixed terminal, a popular restaurant may have several fixed terminals as well as a series of handheld units that are constantly on the move. No matter what type of system you have, it’s crucial to protect your investment and keep it running smoothly as long as possible. Glitches in sales processing can cause huge headaches and potential income loss. Here are some suggestions from our experts to make sure your POS system lasts.

Dedicated Power Source.

Challenges related to a stable and steady electrical supply are the number one cause of problems with POS equipment. This only stands to reason; since POS systems contain highly sensitive and sophisticated electronics, even small fluctuations in the supply of power can lead to adverse effects. These fluctuations can occur when other machines consuming electricity are located on the same circuit, like fax machines and copiers.

POS equipment should be installed on a dedicated circuit used only by the system itself. This circuit should be supplied with an isolated ground wire. Another alternative is to use power filtering. This can help to eliminate “noise” in the circuit and level out spikes in power. It is, however, considered less of a complete solution than moving the POS system to a dedicated circuit.

Strong Protection for Portable Devices. 

Mobile POS units can help servers and staff interact more efficiently with customers, which can increase customer satisfaction as well as sales. However, they are far more susceptible to the human element which can include dropping. Businesses with tile or concrete flooring need to invest in the most rugged units possible. Even though these tend to be more expensive, they will reduce the need for POS system repair.

Regular and Thorough Cleaning. 

Keeping POS equipment clean is the single most important proactive step that businesses can take to make their systems last longer.  Grime, dust, and grease can play havoc with the responsiveness and reliability of a POS system.  When it comes to equipment featuring touch screens, a glass cleaner is a must. But, avoid any trace of ammonia, which over time can damage the screen’s responsiveness.  Glass cleaner should never be sprayed directly on a screen; instead spray a cloth and then use the cloth to wipe the screen.

To clean fingerprint readers, use a strip of clear plastic tape. This removes built up residue that inevitably accumulates on such devices.

If your POS equipment takes more of a beating than you can keep up with, call Great Lakes Computer. We offer both on-site or depot repair service to keep your Point-of-Sale equipment humming along.

Learn more about Great Lakes POS Systems Depot Repair

By

Cybersecurity Tip: Voice-Activated Smart Hubs Are Listening

CybersecurityDid you get an Amazon Echo or Google Home for Christmas? They may be really nifty gadgets that make hands-free operation fun, but they’re listening to more than just your music requests. These devices have become increasingly popular for their ability to make to-do lists, play music, turn electric appliances on and off, and provide weather and traffic updates after a simple voice command from their owner. But, in order to learn your voice and preferences, they record all of your commands as well as other detectable noises, even without the activation phrase (like “Alexa”). So what does this mean for our privacy?

In Arkansas, an Echo’s data is being requested by police in the investigation of a murder. An article from Vocativ tells us more:

For the first time, Amazon has received search warrants demanding access to audio recordings and other data transmitted to their servers by an Amazon Echo device, which uses voice controls to play music and interact with other “smart” home appliances. The warrants, issued by a court in Benson County, demand anything recorded by an Amazon Echo device belonging to a murder suspect during two days in November of last year, according to documents first uncovered by The Information. The suspect has since been charged for the death of a man found strangled in a hot tub.

Amazon’s servers store everything the Echo’s microphones pick up after the user speaks an activation word, using the audio data to train and improve the company’s speech recognition algorithms. But there’s technically nothing preventing the live microphone from also overhearing casual living room conversations. In the affidavit requesting an extension of the search warrant, police detective Josh Woodhams specifically notes the device stores recordings in its local memory and that it could be recording “possibly at all times without the ‘wake word’ being issued.” He also points out that ambient noise could have triggered the device to begin recording unprompted.

As more devices are created to operate in the Internet of Things, security is going to become an increasingly big concern. All of these devices are storing your data and may be transmitting it without your knowledge to unknown parties. Being mindful of the cybersecurity risks you take is crucial. When adding new devices to your network, you create a portal to your data that increases security risks. If you’re having doubts about the devices accessing your network, call the experts at Great Lakes Computer. We can ensure your network is protected no matter what new gadgets your staff might introduce to your office.

Learn more about our Data Security Product Suite

By

Is 2017 the Year to Replace Your Server?

Server RepairEvery IT Manager will need to face this costly decision at some point in their careers. Some see the warning signs and put in the due diligence to research their options. Some see the warning signs but wait to take action until there is a critical failure. Some are blind-sided and have to act on the fly. Being unprepared can lead to lost data and huge expenses. So how do you know if you need server repair or replacement?

Disk Space Is Running Low

Over time, applications have grown in functionality, which inherently means growth in storage space required as well. You can certainly add space to existing hardware, but at some point, this is no longer an option. It’s like trying to string too many Christmas light strands together… at some point you put too much strain on the original hardware. If you are running low on space and spending too much time finding old data to delete to make room for the new, then it’s probably time to consider a new server. If you foresee a continuous growth in your storage needs, a cloud computing solution may be a good option for you.

Your Manufacturer’s Warranty  Is Expiring

You’ve received notification that your equipment will no longer be serviced by the manufacturer – do you plan for the expense of a new one? You don’t have to. The manufacturers used to hold all the cards here. When they decided they wanted to push customers to a new model, they just quit servicing the old ones. However, server monitoring and maintenance firms, like Great Lakes Computer, have become experts in maintaining server hardware long past the maker’s expiration. If you have a team of server experts with access to parts, there is no reason the life of your server can’t be extended. Don’t feel bullied into an upgrade you’re not ready for.

Performance Is Slowing

This is one of those signs that may take time to really notice because it occurs gradually. By the time you notice it, it may have gotten far worse than you realized because you’ve grown used to poor performance. If your apps are taking too much time to process, emails aren’t sending, your server is making a lot of noise like it’s working too hard, and you can sense that every move is wasting precious time, then it’s time to start planning your next steps. The first step should always be to have a professional come and inspect your equipment to make sure it’s not something easily fixed. Servers will run slow once performance reaches about 70% of maximum and/or drive space runs low, and a technician can tell you what your performance and space is looking like.

Regardless of the option you take, extending the life of your legacy system, buying a new one, or moving your operations to the cloud, Great Lakes Computer can help. We know everything there is to know about data storage and processing, from old equipment to virtual servers. We can help keep your data safe, and your operations running at full speed.

Learn More About Server Maintenance

By

New Year’s Resolution: Grow Your Business with Managed Services

Managed ServiceAs we get ready to enter 2017, we think ahead to our plans for the new year. If you’re a business owner, you are hoping and planning for growth. But how do you find time to focus on the where, when, why and how to get that growth happening? You need to free up some of your time so you can focus on the business you excel at. A great way to find that time is by outsourcing some of the time consuming daily maintenance associated with running a business. Managed Service Providers (MSPs) can give you the expert support you need. Here are just a few of the functions you can consider outsourcing:

    • Data Security: Keeping your data secure is crucial to keeping your business running. With almost all businesses running at least some or all of their functions through the internet, cybersecurity risks are prolific. Hackers know there is value to be gained in all sorts of data and they are inventing new ways to access it everyday. The huge uptick in ransomware attacks in the last year alone should be enough to scare any business owner. Monitoring and maintaining network security should be the full-time job of a team of experts.
    • Moving Your Equipment: If your business is growing and moving to a new location, you need to hire a managed IT services provider. Moves don’t sound like much. But once you think of all the steps involved with an office move, like planning when it will happen, how much power and cooling you’ll need, how many man hours it takes, and what your downtime will be, you can see how complex it gets. Then, multiply that complexity by the amount of IT equipment you have, and you can see why moves are worth outsourcing. This goes doubly if you’ve never done one before.
    • Printing Process & Printer Maintenance: 80% of the cost of printing comes after you purchase the printer. Ink is generally the main culprit of the additional costs. Paper and maintenance can both increase costs substantially too. At Great Lakes, we’ve found printer issues account for the most help desk calls (even more than laptops and personal computers). Hiring a Managed Print firm can save you time, money and a lot of headaches.
    • Server Storage Devices & Storage Maintenance: Monitoring your company’s server is critical to the smooth day-to-day operations of your business as well as maintaining satisfied clients. Unfortunately, some companies only casually observe daily issues involving the server, often allowing small, correctable problems to develop into major ones. Outsourcing server monitoring, which can be completed remotely with the help of advanced software programs, will save you money and the hassle of dealing with unexpected server outages. Continuous, remote monitoring of your server ensures your system stays up to date with updates and backups, and will alert you to any issues of concern before they become a crisis for your entire organization.
    • Cloud Computing. More than 80% of all businesses report greater in-house efficiency as well as financial savings after integrating cloud computing into their IT structure. There are many levels of integration available for businesses to use the cloud, ranging from a single application to a complete cloud solution. Complete cloud solutions tend to be more cost effective than hybrid models, where data is stored on the cloud but PCs and other aspects of IT hardware remain the responsibility of individual companies as opposed to the cloud service provider.

All of these services can be outsourced to a trusted Managed Service Provider, like Great Lakes Computer. You will see benefits in the form of longer equipment life, less time wasted on maintenance, and cost savings from more efficent system uses. Make 2017 the year you get your head back into growing your business.

Contact Us Today!

Contact Us