Antivirus.

Kibosh Cloud customers should not be paying for local antivirus of any kind. In the past we’ve recommended Microsoft’s Security Essentials, but they’ve since stopped supporting that in favor of Windows Defender which only works on Windows 8 & 10.

So for those of us still using Windows XP , Vista or 7 we’ll need to find another local antivirus. When searching for an Antivirus solution please keep the following points in mind:

  1. Kibosh Cloud provides an excellent layer of malware, and phishing website protection. It blocks the site before you get to it, so it will block phishing email links, thus preventing the downloading / installation of malware.
  2. You only need local antivirus. You do not need any other feature all Antivirus companies try to upsell you. Let’s use the popular Avast as an example. It’s free to download and use, but be prepaired for the hard sell of ‘Internet Security’, ‘Email Protection’, and ‘Pro Antivirus’. You need none of these addional features, just use the ‘Free Antivirus’.
    1. What is ‘Internet Security’? It means they are sending your data through their servers and it’s being logged. Email security? Same thing, they are scanning all of your emails to give you protection. If you have a private domain with your own email address (i.e., non gmail, yahoo, live, etc) then maybe Email Security would be something to consider, but for the vast majority of us who use one of the popular, free email services like gmail – they already scan your email and block the bad stuff.
  3. Antivirus, once installed, has intimate access to your operating system. It must to provide the protection you need. Thus Antivirus is a highly desireable target for the ‘bad guys’.
    1. Is your Antivirus Software Vulnerable to Attack?
    2. Antivirus is dead: Long live Antivirus!
  4. The biggest points of threat on your Windows devices is in fact the third party apps like Java, Flash, Adobe, etc. All these apps are regularly asking you to install updates to block new, known, attacks. Keep them updated.

In summary, with Kibosh Cloud protecting your devices you only need a simple, free local antivrus for that added layer of security, but there are trade offs. Personally we still use Security Essentials + WinPatrol (the free version) + Kibosh Cloud.

Phishing E-mail Example

Hi Everyone,

This is an excellent example of a phishing e-mail (see below). An e-mail drafted to look and sound legitimate with attachments that contain malware, or hyperlinks that open to infected web pages. This particular phishing attempt had an attachment (which has been removed).

We can’t stress enough to never, ever open any attachment or follow any link from an email – no matter how legitimate it looks. Yes it’s inconvenient, but that is the digital world we live in today.

Malware today will encrypt your data and hold it ransom, along with the rest of the network’s data:

•    Hospital declares ‘internal state of emergency’ after ransomeware infection.
•    LA Hospital pays nearly $17,000 to restore data.

Many of us use multiple layers of protection:

  1. local antivirus
  2. SPAM firewall (all free e-mail services use these),
  3. DNS filtering i.e., Kibosh Filtering Service

But these tools, or any other, can only block what they know about. There are plenty of exploits unknown by any security vendor.

So when in doubt – throw it out!

Kibosh

—-PHISHING EXAMPLE—–
—–Original Message—–
From: Tia Fleming [mailto:FlemingTia78752@ecolboxmoveis.com.br]
Sent: Tuesday, March 29, 2016 7:22 AM
To: Doe, John <john.doe@somedomain.com>
Subject: Requested receipt ID:8E767D

Dear doe, John

Please find attached your receipt, sent as requested.

We are making improvements to our billing systems to help serve you better and because of that the attached invoice will look different from your previous ones.

Kind regards,
Tia Fleming
Divisional Managing Director

Great FireFox privacy add-ons.

FireFox is fast, reliable, open source and respects your privacy. However it’s default configuration is not secure as secure as it could be. The following free add-on’s will add the missing layers of security, and give you a very secure Internet experience.

Note that the number one attack vector on any browser is JavaScript. NoScript will secure this threat, but note that it requires quite a lot of interaction from you to get things working. 

WebRTC is a communication protocol that relies on JavaScript that will leak your actual IP address from behind your VPN or NAT router (99.9% of routers use NAT by default). This page will test if your internet browser is affected by the WebRTC Leak. This page will tell you how to close this security hole

Kibosh recommended – Stop tracking with Disconnect

  • Disconnect was founded in 2011 by former Google engineers and a consumer-and privacy-rights attorney. The addon is open source and loads the pages you go to 27% faster and stops tracking by 2,000+ third-party sites. It also keeps your searches private.

Kibosh recommended – Block ads with uBlock Origin

  • uBlock Origin is an lightweight and efficient blocker: easy on memory and CPU footprint. The extension has no monetization strategy and development is volunteered. OS: Firefox, Safari, Opera, Chromium. AdBlock Plus is not recommended because they show “acceptable ads”. The system behind that white list is lacking transparency

More information:

Kibosh.net