Google was forced to remove 500 malicious Chrome extensions from its web store after it was discovered that many extensions carried malicious ads which siphoned off browsing data to servers being controlled by attackers.
It’s been reported that the extensions were part of an Ad-fraud campaign that’s been operating since January 2019. However, some evidence shows that the actor may have been operating from as early as 2017.

The extensions posed as promotions and advertising services. Unfortunately, this was not the first time Chrome extensions on chrome were caught stealing data from browsers. For now, individuals are cautioned to continue reviewing extension permission, uninstalling extensions not often used or don’t require access to your browser activity.

If you or your business are unsure on how to handle ad-fraud, OptfinITy can help.  Call us at (703)790-0400 or contact us at info@optfinity.com for  more information.

Background of the Law

The CCPA (California Consumer Privacy ACT) is a new California law which allows residents of California to learn what data companies are collecting about them, as well as requiring companies to delete their data and not sell it, upon request.

The Beginning Impact

Although the full force of the new privacy law isn’t entirely transparent since regulations are still being finalized, companies outside and inside of California are already taking action to remain complaint so they can continue doing business with California.

There is no doubt that this law will have an effect both inside and outside of California. In the past, companies weren’t legally required to tell you what data they’ve collected of you or how they plan on using it.

What are the Implications?

With the CCPA in force, you’ll be able to ask companies to delete your private information or refrain from selling it. This law will apply to even major tech companies such as Facebook and Google – who already let you delete some of your data off their systems but not in a way where it fully disconnects user from the data it has collected. This new law changes that.

If organizations fail to follow this law, they could be fined up to $2,500 per violation, and up to $7,500 if the violation is found to be intentional.  Californians can sue businesses directly even if their data was released through an accidental breach.

This law will also allow users to continue to use free services even if they ask bigger companies not to collect their data. After California’s legislature passed CCPA, several major tech companies told federal lawmakers that they would like to see one privacy law that covers the whole country.

The Importance of Limiting Administrative Access

In today’s day of cyber attacks, viruses, and ransomware, business owners and executives are always asking: What can we do to limit our exposure?

An Industry Standard: Restrict Administrative Access

One of the easiest recommendations we provide—and a widely recognized industry standard—is to never allow end-users to have administrative access to their computers.

Real-World Impacts of Administrative Access

In our over 17 years of being in business, it is really easy for us to pull up thousands of tickets related to viruses, computer slowness, and operating system issues that are a direct result of an end-user having local administrator access to their computer.

Productivity and Cost Implications

Giving users administrative access not only can make your staff less productive, it raises the cost of doing business. Examples include:

• Fixing computer issues caused by unauthorized changes.
• Employee downtime due to system problems.
• Data loss from virus infections.

Risks of Administrator Accounts

Administrator accounts on a computer allow the user to install software, make any change to the system settings, and override local folder permissions. While this might not seem like a big deal at first glance, let’s consider the potential issues:

1. Unauthorized Software Installation

• Leads to non-work-related activities.
• Causes potential computer slowdowns or shutdowns.

1. Unlicensed Software Installation

• Opens your business to hefty fines from software vendors.

1. Execution of Malicious Programs

• Users can unintentionally execute malware, leading to infections that could span many computers on your network.
• These infections are often undetectable by antivirus programs when the user specifically allows them to execute.

1. Data Breaches and Privacy Concerns

• Administrator accounts can be used to access data in other user profiles on shared PCs.
• This poses risks of data breaches and theft.

1. Unfavorable System Changes

• Operating system settings can be altered, intentionally or unintentionally, leading to significant consequences.

The Benefits of Limiting Access

While limiting user access might seem inconvenient for some, mitigating the significant risks and costs associated with running with administrator access is well worth it. When combined with a 24 x 7 helpdesk to provide controlled access and oversight, businesses can ensure that the right components are being installed without compromising security.

The High Cost of Administrator Access Exploitation

We have seen firsthand the devastation that can occur when malware runs with full administrator access. In today’s environment, the cost of such incidents can easily exceed hundreds of thousands of dollars. By restricting administrative access, you take a vital step in protecting your business and its assets.