TechPulse: Blog

antivirus_117225615_400

A Recent Data Theft Shows Us What to Watch Out For

Trend Micro, the developer of the popular antivirus program, has attracted some unwanted attention after a former employee managed to steal customer data and sell it to scammers. These scammers then use this data to call Trend Micro customers. If you use Trend Microโ€™s antivirus solutions, youโ€™re going to want to pay close attention to any calls you get.

What Happened?

We arenโ€™t shy about informing our clients about the potential dangers of allowing access to more than an employee needs to do their job. This is a practical example of why we say that.

The (now former) Trend Micro employee was able to access more data than they needed to have. Trend Micro provided a pretty succinct explanation of the situation, saying that the employee was able to โ€œgain access to a customer support database that contained names, email addresses, Trend Micro support ticket numbers, and in some instances telephone numbers. There are no indications that any other information such as financial or credit payment information was involvedโ€ฆโ€

The perpetrator’s name has not yet been made public, but whoever they were, they were able to bypass Trend Microโ€™s internal protections.

Consider what it would take for a phone scam to really be convincing: really, if you were called by someone from โ€œTrend Microโ€ who knew who you were and that you were a user of their product, you wouldnโ€™t have much reason to doubt them, would you? The data that was up for grabs at Trend Micro contained much more information than that, making it potentially even more valuable to a cybercriminal or scam artist.

You Need to Watch Out for Unsolicited Tech Support Calls

As you might imagine, this scam has been around for about as long as there have been personal computers and is in no way exclusive to Trend Micro customers. Tech support scams have been used to target users for years, often profiling users by their age to find victims more likely to fall for the ruse. Combining this profiling with scare tactics and put-on urgency, the scammer is able to shock their target into handing over their credit card information or allowing the scammer to access their PC remotely.

It isnโ€™t uncommon for these scammers to identify themselves as a member of some โ€œMicrosoft Windows support teamโ€ or another support company. If the targeted business is big enough, a scammer may just claim to be from the IT department.

This is why you have to be sure that all of your employees know how to have their technology support questions addressed through the right channels.

You Also Need to Keep Your Employees from Accessing More than They Need

Take a critical look at the permissions you afford your employees as far as your network is concerned. How accessible are the folders you store your sensitive information in, like a clientโ€™s personal data or financial information?

Best practices dictate that an employee only be given access to what they need to do their job, while common sense dictates that you canโ€™t make an employeeโ€™s job too difficult for them, either. Striking a balance between the two can be tricky but working with your IT provider to establish permissions makes it far easier.

If you want to avoid potentially running into a similar situation as Trend Micro did, enforcing security policies is a step you need to take. Doing so should include access control to certain files and areas of your network, requiring MFA/2FA (multifactor/two-factor authentication), and quite a bit of planning to put it all together. However, if it keeps your data safe from threats (inside and out), itโ€™ll be worth the damage control you get to avoid.

If you could use some assistance in securing your network and educating your employees about how scams can be identified, give COMPANYNAME a call. Our professionals are here to help – call PHONENUMBER today.

Tyler Miller

Tyler Miller

Having a reliable and passionate partner in the realm of IT services and solutions is essential for ensuring continuous growth through effective technological strategies. Our CEO, Tyler Miller, is wholeheartedly dedicated to assisting clients in optimizing their technology to gain a competitive edge in their industries. At TechPulse, Tyler leads a team of highly dedicated professionals who are fully committed to providing exceptional IT services and solutions. With his extensive expertise and practical experience, Tyler ensures that clients receive unparalleled support and guidance for their IT projects. You can trust TechPulse to enhance your business systems and stay ahead in today's fiercely competitive business environment.