Sonoma Tech Support

Security Alert!!

I'll post a link to the article, but here it is. If you get a strange email from somone you know but sent from Adobe, dont' click the links. Here is a transcript of the article:

Hackers are exploiting Adobe Creative Cloud to harvest user credentials
By Anthony Spadafora published January 13, 2022
New campaign hides links to credential harvesting pages inside PDF files

Hacker Typing
(Image credit: Shutterstock)
Hackers have come up with a new way to leverage the popularity of Adobe Creative Cloud to bypass email security solutions and harvest user credentials.

Beginning in December of last year, Checkpoint-owned Avanan observed a new wave of hackers creating Adobe accounts for nefarious purposes. After creating an account, the hackers then import a PDF file into Adobe's cloud storage which contains links to sites used to harvest the credentials of unsuspecting users.

By sharing files containing malicious links using Adobe Creative Cloud, attackers are able to appear legitimate to potential victims while also ensuring that their emails will be able to bypass Advanced Threat Protection (ATP) and other endpoint protection software.

Hiding credential harvesting pages
In a new blog post, Avanan explains that these attacks begin with an innocent-looking PDF sent via Adobe Acrobat and shared with a user over email. These emails arrive directly from Adobe and a sense of urgency is instilled by an attacker to trick potential victims into opening them.

When a user clicks “Open”, they are redirected to a fake Adobe Document Cloud page where they'll need to click on another button to access their document. While a discerning user may notice the spelling and formatting errors, those in a hurry might click through without thinking. If they do, they are then redirected to a classic credential harvesting page hosted outside of Adobe Creative Cloud where they're prompted to log in and in doing so, give up their email address and password to an attacker.

Over the course of last few weeks, Avanan has observed thousands of these attacks including 400 in 2022 alone.

To avoid falling victim to this and other similar attacks, end users should carefully inspect all Adobe Creative Cloud pages for grammar and spelling, hover over links to ensure the intended page is legitimate and ensure their antivirus software can open PDF files in a sandbox and inspect all links contained within them.

You can read the original article here:https://www.techradar.com/news/hackers-are-exploiting-adobe-creative-cloud-to-harvest-user-credentials

Scam alert!!!
I have seen a Google document going around supposably from Gavin newsom suspending all rent and mortgages for 3 months during the crisis. It comes with a form to fill out.

I think it's a scam, I think it's identity theft. I don't think California would put up a Google doc.
Also I have not seen this in the news anywhere.
I hope I'm wrong, because that would be really nice but I don't think so.

Re: Computer Support during quarantine.
So far Sonoma County does not have a mandatory shelter in place order. But if you are having tech problems and still have Internet, I can still help remotely. This is probably the best option if possible.
If you need something more and I need to come to your business/home, I am wearing Nitrile gloves, and wiping everything down with disinfectant both before and after I'm done to keep both of us safe.
Hang in there and we can get through this.
Feel free to call with questions...707-703-2711
Stay well.
Craig

Scammers and IRS Impersonation - Did You Know?

The IRS has issued alerts about scammers that are continuing to contact taxpayers. Among the most common are phone calls and fake emails. Thieves use the IRS name, logo or a fake website to try and steal money from taxpayers.

Any first contact from the IRS will typically come in the mail.

Please note that the IRS will never:

- Call to demand immediate payment using specific payment method such as a prepaid debit card, gift card or wire transfer
- Threaten to immediately bring in local police or other law-enforcement groups to have you arrested for not paying
- Demand payment of taxes without giving you the opportunity to question or appeal the amount owed
- Ask for credit or debit card numbers over the phone

For information on how to report scams or phishing attempts, visit http://IRS.gov/phishing.

Report Phishing | Internal Revenue Service Report phishing and scams. Find out what to do If you receive unsolicited communications claiming to be from the IRS.

Are you still in Windows 7? You only have till January to upgrade or get a new PC. I'm getting great deals on new computers and can help you move all your data and get it all set up. Don't wait till the end and think I'll have time for you. Do it before the cut off date.
Call me 707-703-2711 and let's make an appointment. 😊

Do you still have Windows 7 on your computer? It's either time to upgrade, or get a new computer.
Come January Microsoft will stop supporting Windows 7. That means software you buy, upgrade, updates and security patches will no longer work. Basically if the bad guys find a flaw in Windows, nobody is going to patch it up. We are getting down to the line and I'm going to be crazy busy. I can help you find the right computer for you, update it, secure it and move all your data.
Call me and let's get this done before it's too late, and before I'm too busy.