eMail Password Phishing Scam:
Several people have recently reported receiving bogus password re-set request notifications. The sender address and links are "spoofed", which means that they look like they come from your own domain, but they're fake. The links that you see in the text of the email are NOT the actual links. The few examples I have seen go to foreign web sites. DO NOT click on the links or give any information over the web. Unfortunately, this is just another trick to try to steal your personal information. Always be alert on the Internet!

Spoofed "Undeliverable" Messages
As if there isn't enough to worry about while running a business, there was another threat floating around last week related to fake "undeliverable" messages. Several people called out of concern that their email wasn't working as they were receiving many "undeliverable" responses. Looking carefully at these messages, the text resembles the real thing, but they were also fakes. In fact, one of the messages I saw had a link as an attachment (instead of the bounced email message that's supposed to be included). The link went to a fake Antivirus site: the kind where a window pops up and says your system is infected (when its not!) and asks for money or infects your system.

The reason these messages can temporarily get through a spam filter is that the content looks "official" on the surface. Another wave of these messages occurred about a year ago. If we block by content, then "real" undeliverable messages won't get through which could be a problem. After a while, the source IPs are discovered and the spam gets stopped. Things have quieted down this week, but there is always a new threat around the corner.

You've heard it a hundred times, but always stay alert on the Internet. A few years ago, threats like this had so many spelling errors and such poor graphics they were obvious fakes, but now it's hard to know the real thing.

Port 25 Blocking:
Verizon and Comcast are both blocking Port 25 for email in an attempt to cut down spam on the Internet. Port 25 has been the standard channel for an email client (such as Outlook) to communicate to an email server to send mail. The problem is that many viruses infect systems and then send out automated mail over Port 25. With blocking, this automated mail is stopped, but it means that your email configuration needs to change for your "real" mail.

Verizon sent out a warning to customers a while back and we got a few calls from folks who suddenly lost the ability to send email. If this happens to you, it's a quick fix to change the outgoing Port number. To make the change in Outlook, go to: Tools / eMail Accounts / View or Change / Highlight the account to change / hit "Change" / Go to "more settings". The last tab is "advanced settings". Look for "Server Port Numbers" "Outgoing Server (SMTP)" and enter "587" in the box. Call us if help is needed.

The flip side of this is that it's time to consider establishing Port 25 blocking for your own network to prevent the possibility of spam being sent out from your network from a system infected with a Virus. Your own network can be black-listed if you don't catch this quickly, so we are advising clients to upgrade their router configurations, and if it's been a while since you upgraded your router, you may want to consider going with a higher end router with more security coverage.

REMINDER - Microsoft End of Support for Windows XP SP2.
The End of Support date for Windows XP Service Pack 2 was YESTERDAY (July 13, 2010). If you haven't already done so, you should update to Service Pack 3 (don't worry, it's a free update!). To be compliant to the new MA Data Protection Law, any system containing personal information connected to the Internet must have up to date operating system security patches. For more information on End Of Support, go to windows.microsoft.com/eos.

  Enjoy Summer!

Sincerely,
Team Ekaru

Introductory Technology Assessment Over 400 local small businesses have chosen Ekaru to manage their computers and networks. We offer a free, no-obligation initial consultation to get started. We'll visit your office, review your network, and make recommendations. Call us at 978-692-4200 or email us to schedule a no-obligation assessment. If you know someone who could benefit from this offer, simply forward this email to them. Thank You!

           
  ©2010 Ekaru, LLC. All Rights Reserved.