Business Security Information

Keyloggers monitor computer activity by capturing the keystrokes of the computer user.  The captured information is then sent to some individual(s) who should not have access to this information.  This should be a concern to all computer users who log into and access email accounts, online accounts, bank accounts, and other such information that should not be shared with others.  With a keylogger, someone else can capture this information and use it to gain access to any account or system that has been logged into.  Also, depending on the keylogger capabilities, all the information the user views can  be captured and sent to these individuals.  Keyloggers allow others to bypass security measures you have in place, and that is never a good thing.

The use of smartphones has led to a whole new set of security issues. Since there is no standard definition of a smartphone, for the purpose of this article and for future reference, I will refer to them as a mobile phone which provides advanced capabilities similar to those found on a personal computer.  These capabilities can include internet access, e-mail, downloadable applications and even e-book reading capabilities.  As time goes by, as with all technology, the capabilities of smartphones will increase and change just as they do for computers.

Crimeware is a form of of malware (malicious software) that is  used to attack your computer and/or network.  Crimeware is designed for one purpose which is to facilitate illegal or criminal activity.

This type of software is often used to commit identity theft.  Also, crimeware allows attackers to capture and export sensitive information which they can sell or use to exploit for some other type of financial gain.  Another common type of crimeware includes phishing kits that allow an attacker with little or no technical skill to launch a phishing attack.  This type of crimeware may include website development software, content for the site, and spamming software that will allow the attacker to send out mass e-mails to their phishing targets.

A rootkit is a collection of software programs that contain a variety of tools and allow an attacker root or administrative level access to a computer or network.  Attackers install rootkits usually after having obtained basic user level access to a system, then gaining higher access to the account by using a cracked password or through some other vulnerability on the system which allows them to install software on the system.  Once a rootkit is installed, it allows the attacker to bypass security measures and hide the intrusion.  Rootkits do this by replacing normal operating system components or altering existing system tools or software so as to escape detection.

In security, a Trojan Horse is similar but not the same as it was described in Greek mythology in which the Greeks presented the city of Troy with a wooden horse in which they had hidden their soldiers.  After the Trojan Horse was inside the city and night had fallen, the soldiers emerged from the wooden horse and overtook the city.

Spyware is a specific form of malware which tracks a person or gathers information about them without their knowledge.  This means that spyware is usually hidden from the user. Software that is installed with the user’s knowledge is not considered spyware.

Spyware can include software that secretly monitors a user’s behavior, but it can also include much more such as collecting personal and account information and e-mail addresses, changing computer settings, installing additional software, and other similar types of activities.  Spyware can be an issue also from the stand point of slowing down your computer and your internet connection speed.

Malware is a term you hear a lot in the security field, and I am not always sure if everyone understands what the term means.  Malware is basically a generic term used to describe a variety of bad software that is meant to damage, annoy, or infiltrate a computer or network without the user’s consent or knowledge.  Malware includes software such as viruses, worms, trojans, spyware, rootkits, adware, crimeware and any other type of malicious software.

What do you and your employees use mobile phones for?  Of course, phone calls and checking voice mail, but what about checking any of your online accounts or purchasing items online?  Well, lately, I have been reading a lot about mobile phone spy software, and then this past weekend, I watched the movie “Mall Cop” with my kids.  A character in the movie called Pahud uses his girlfriend’s cell phone to spy on her location using GPS tracking.  It turned out to be a good thing as far as the movie ending    was concerned, but in real life most people do not like to be tracked or spied on.