Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
Use anti-fake technologies Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
Enforce robust security protocols Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
Develop new security standards As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
Training and awareness Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
Keep user data private Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
Disinformation response policy Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Powell CPA PLLC
Increase In Deepfake Attacks and How Enterprises Can Prepare
October 1, 2022 · Blog, What's New in Technology
⏱ 4 min read
Deepfake technology utilizes machine learning and artificial intelligence (AI) to manipulate or create synthetic audio, video and images that appear authentic. Deepfakes are commonly featured in entertainment and politics to spread false information and propaganda. For instance, deepfake has been used to show a celebrity or leader saying something that they didn’t, and this creates fake news.
Unfortunately, in deepfakes, cybercriminals have found a new tool for cyberattacks. Cybercriminals are now using deepfakes to pose a variety of enterprise risks.
How Cybercriminals Are Using Deepfakes
Deepfake technology is now used to create scams, hoaxes and false claims that undermine and destabilize organizations. For instance, a manipulated video might show a senior executive associated with fake news, such as admitting to a financial crime or spreading misinformation about a company’s products. Such corporate sabotage costs a lot of time and money to disprove and can impact a business’s reputation.
Another way businesses can be negatively impacted is through social engineering attacks such as phishing, which relies on impersonation to compromise an email. Similarly, social engineering using deepfakes can feature voice or video impersonations. A good example of such an impersonation was reported in The Wall Street Journal, in which fraudsters used AI to mimic a CEO’s voice. This incident happened in March 2019, when criminals impersonated a chief executive’s voice to direct a payment of $243,000.
Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
Use anti-fake technologies Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
Enforce robust security protocols Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
Develop new security standards As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
Training and awareness Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
Keep user data private Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
Disinformation response policy Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Disclaimer
These articles provide general information on tax, accounting, and financial topics for small businesses and individuals. They are educational in nature and are not specific legal, accounting, financial, tax, or other professional advice, and should not be relied upon as such. This content was prepared by Service2Client and may have been reviewed or edited by the website owner for accuracy and compliance. Look for a trust mark below for verification details. No representation is made that any approach described will achieve a particular result, and no regulatory or professional body has reviewed or endorsed this content. Because each situation is different, readers should consult a qualified professional about their specific circumstances before acting. Images accompanying these articles are protected by copyright and may not be copied or reused.
Since this information is readily available on a user’s web browser, cybercriminals can use a malicious extension to collect the data for their gain. At the same time, the data collected is sold without user consent or knowledge and used by third-party data brokers to send users tailor-made ads.
Although not all browser extensions are a security risk, some might be built to impersonate legitimate extensions, especially those from third-party resources. In other cases, legitimate extensions have been compromised or bought by a developer who uses them for malicious purposes.
Some browser add-ons are built to download malware onto your device, redirect search traffic to malicious websites or download ad ware and Trojan horse viruses.
The extensions can automatically update without requiring any action from a user. This means that if a legitimate extension is compromised, it can be used to install malware without user knowledge. Even secure extensions are prone to attacks or can be compromised, enabling attackers to gain access to data stored by browsers.
Additionally, malicious extensions can be built to bypass fraud detection by official Web stores. For instance, in 2020, Google removed over 500 extensions from its web store that violated policies, with some already having infected users and stolen their data. This followed the discovery of some malicious extensions that users had already downloaded.
A recent report released by Kaspersky, a cybersecurity firm, shows just how dangerous malicious add-ons are. After the firm analyzed data from January 2020 to June 2022, it discovered that over this time frame, 4.3 million users were attacked by adware hiding in browser extensions. This put adware as the highest representative of browser extension risks, with malware coming second. The report also indicates that Kaspersky products prevented more than 6 million users from downloading adware, malware or riskware disguised as browser extensions.
Such figures from just one cybersecurity firm are worrying, considering the study focused only on users that use their security solutions. This creates a need for users to be more vigilant when using browser extensions.
How to Make Sure Browser Extensions Are Safe
There are various ways to help reduce the risks posed by browser extensions:
Ensure the extension is from an official web store. Since these extensions can also be compromised, it is best to find out more information about the developer.
Check reviews as they help to know what other users think of the extension and if there have been any complaints. However, users should be cautious of identical comments or too many 5-star reviews, as these could be fake.
Check whether the extension is updated regularly. An extension last updated many years ago might not be reliable.
Review extension permissions for each extension.
Check that you are not installing clones of the original extension. For instance, if you search for an extension, you can find other similar ones that look legit.
Uninstall browser extensions that you don’t recognize or those you no longer need.
Use browsers that have the features you want.
Install reliable antivirus software that will help spot malicious activities or applications.
Conclusion
Browser extensions play an important role in the user browsing experience. Although not all extensions are dangerous, users must conduct due diligence to ensure they install legitimate extensions.
Powell CPA PLLC
Risk of Browser Extensions and How to Stay Safe
September 1, 2022 · Blog, What's New in Technology
⏱ 4 min read
Web browsers such as Google Chrome, Firefox, Safari and Edge, among others, play an essential role in enabling access to websites on the internet. Most browsers allow users to install extensions, also referred to as add-ons or plug-ins. These extensions are applications or small software modules that add functionality and other useful features to a browser.
By means of the extensions, users can carry out various tasks such as password management, cookie management, ad blocking, interface modification, productivity tracking, grammar and spell-checking, etc.
However, although the extensions offer different useful functionalities, cybercriminals have taken advantage of them, creating a security risk to users and their data.
The Need to Beware of Browser Extensions
Browsers enable websites to collect information such as viewing history, adding cookies, etc. Also, when installing the extensions, some require to be allowed various permissions, like the ability to read or change data. For instance, according to a recent study by Talon, a digital security company, most Chrome Web Store extensions (62.43 percent of extensions) require dangerous permissions, including permission to read or change user data and activity. This means that an extension can see the sites visited, keystrokes, login credentials and private data, such as payment card details.
Since this information is readily available on a user’s web browser, cybercriminals can use a malicious extension to collect the data for their gain. At the same time, the data collected is sold without user consent or knowledge and used by third-party data brokers to send users tailor-made ads.
Although not all browser extensions are a security risk, some might be built to impersonate legitimate extensions, especially those from third-party resources. In other cases, legitimate extensions have been compromised or bought by a developer who uses them for malicious purposes.
Some browser add-ons are built to download malware onto your device, redirect search traffic to malicious websites or download ad ware and Trojan horse viruses.
The extensions can automatically update without requiring any action from a user. This means that if a legitimate extension is compromised, it can be used to install malware without user knowledge. Even secure extensions are prone to attacks or can be compromised, enabling attackers to gain access to data stored by browsers.
Additionally, malicious extensions can be built to bypass fraud detection by official Web stores. For instance, in 2020, Google removed over 500 extensions from its web store that violated policies, with some already having infected users and stolen their data. This followed the discovery of some malicious extensions that users had already downloaded.
A recent report released by Kaspersky, a cybersecurity firm, shows just how dangerous malicious add-ons are. After the firm analyzed data from January 2020 to June 2022, it discovered that over this time frame, 4.3 million users were attacked by adware hiding in browser extensions. This put adware as the highest representative of browser extension risks, with malware coming second. The report also indicates that Kaspersky products prevented more than 6 million users from downloading adware, malware or riskware disguised as browser extensions.
Such figures from just one cybersecurity firm are worrying, considering the study focused only on users that use their security solutions. This creates a need for users to be more vigilant when using browser extensions.
How to Make Sure Browser Extensions Are Safe
There are various ways to help reduce the risks posed by browser extensions:
Ensure the extension is from an official web store. Since these extensions can also be compromised, it is best to find out more information about the developer.
Check reviews as they help to know what other users think of the extension and if there have been any complaints. However, users should be cautious of identical comments or too many 5-star reviews, as these could be fake.
Check whether the extension is updated regularly. An extension last updated many years ago might not be reliable.
Review extension permissions for each extension.
Check that you are not installing clones of the original extension. For instance, if you search for an extension, you can find other similar ones that look legit.
Uninstall browser extensions that you don’t recognize or those you no longer need.
Use browsers that have the features you want.
Install reliable antivirus software that will help spot malicious activities or applications.
Conclusion
Browser extensions play an important role in the user browsing experience. Although not all extensions are dangerous, users must conduct due diligence to ensure they install legitimate extensions.
Disclaimer
These articles provide general information on tax, accounting, and financial topics for small businesses and individuals. They are educational in nature and are not specific legal, accounting, financial, tax, or other professional advice, and should not be relied upon as such. This content was prepared by Service2Client and may have been reviewed or edited by the website owner for accuracy and compliance. Look for a trust mark below for verification details. No representation is made that any approach described will achieve a particular result, and no regulatory or professional body has reviewed or endorsed this content. Because each situation is different, readers should consult a qualified professional about their specific circumstances before acting. Images accompanying these articles are protected by copyright and may not be copied or reused.
While this might require some prep like buying extra towels and toiletries, as well as communicating with customers, you can make a lot in the long run. It might take a couple of months to get up and running, but you can bring in around 7 percent to 12 percent of your property value per year.
Help with Finances
If you have a background in accounting or finances, you might start up a business doing someone’s books, taxes or other services that have to do with money and/or budgeting. You can make from $20 to $100 an hour. Be sure to check with your city and state to find out what licenses and certifications you need.
Walk Dogs
Yes, dog walking can bring in more than you think. And you’ve probably seen these hearty souls on the sidewalks, sometimes with more than one furry friend in tow. If you live in a big city, there’s ample opportunity to make this work: you can make between $10 and $100 per day. And this is just a ballpark estimate. Plus, you’ll get your steps in. It’s healthy both fiscally and physically.
Write Resumes and Cover Letters
With all the job seekers out there, you could make a good chunk of change doing this. And you don’t necessarily need to be a writer. If you have a background in HR, recruitment or you’ve worked as a hiring manager, you’ll be ready to go. Hesitant about all that punctuation? One word: grammarly.com. This app will help you navigate all those writing questions you might have that inevitably come up when you’re composing. The average you might earn is somewhere in the neighborhood of $500 or more.
One Thing to Note
If you make more than $600, you must report it to the IRS. If you see that your side hustle is booming, if you start making thousands or tens of thousands of dollars a year, you might want to start a business. You could enjoy additional tax write-off opportunities so you can keep more of what you earn.
So start exploring, hang those shingles and watch the extra dough come rolling in.
In our current economy, or anytime actually, it can’t hurt to have a side hustle to bring in extra cash. Some of these options can be quite lucrative, but like everything, it takes a little work to create a steady income stream. However, with a little pre-planning, you can do it. Let’s take a look.
Become a Tutor
Are you a math whiz? A wordsmith? History nut? Whatever your specialty, you can earn between $10 and $75 an hour. You might vary your price based on whether you’re tutoring high school, college or adult education classes. You can conduct your sessions online or in-person –totally up to you and your comfort level. All you have to do is create a lesson plan, then spread the word on social media, contact your local high schools and universities, or tack a notice near a central location such as a local coffee shop. When you’re sharing your knowledge and helping others, it might not feel like work at all.
Deliver Groceries with Instacart
If you haven’t heard of this, you might have seen people in grocery stores with their carts stuffed with brown paper bags full of items, list in hand – these are most likely Instacart workers. In sum, this gig is a same-day grocery delivery app. You shop for other folks; you don’t have to pay out-of-pocket when you’re at the store; and you can start earning money the very first week. Oh, and you get tips. According to ridester.com, you can make anywhere from $200 to $1,000 a week. Pretty easy and cool, right?
Rent an Extra Room Through Airbnb
While this might require some prep like buying extra towels and toiletries, as well as communicating with customers, you can make a lot in the long run. It might take a couple of months to get up and running, but you can bring in around 7 percent to 12 percent of your property value per year.
Help with Finances
If you have a background in accounting or finances, you might start up a business doing someone’s books, taxes or other services that have to do with money and/or budgeting. You can make from $20 to $100 an hour. Be sure to check with your city and state to find out what licenses and certifications you need.
Walk Dogs
Yes, dog walking can bring in more than you think. And you’ve probably seen these hearty souls on the sidewalks, sometimes with more than one furry friend in tow. If you live in a big city, there’s ample opportunity to make this work: you can make between $10 and $100 per day. And this is just a ballpark estimate. Plus, you’ll get your steps in. It’s healthy both fiscally and physically.
Write Resumes and Cover Letters
With all the job seekers out there, you could make a good chunk of change doing this. And you don’t necessarily need to be a writer. If you have a background in HR, recruitment or you’ve worked as a hiring manager, you’ll be ready to go. Hesitant about all that punctuation? One word: grammarly.com. This app will help you navigate all those writing questions you might have that inevitably come up when you’re composing. The average you might earn is somewhere in the neighborhood of $500 or more.
One Thing to Note
If you make more than $600, you must report it to the IRS. If you see that your side hustle is booming, if you start making thousands or tens of thousands of dollars a year, you might want to start a business. You could enjoy additional tax write-off opportunities so you can keep more of what you earn.
So start exploring, hang those shingles and watch the extra dough come rolling in.
These articles provide general information on tax, accounting, and financial topics for small businesses and individuals. They are educational in nature and are not specific legal, accounting, financial, tax, or other professional advice, and should not be relied upon as such. This content was prepared by Service2Client and may have been reviewed or edited by the website owner for accuracy and compliance. Look for a trust mark below for verification details. No representation is made that any approach described will achieve a particular result, and no regulatory or professional body has reviewed or endorsed this content. Because each situation is different, readers should consult a qualified professional about their specific circumstances before acting. Images accompanying these articles are protected by copyright and may not be copied or reused.
It is all about how much you keep after taxes – not what you earn from your job, a business, or investments. While it is always great to see fabulous investment gains, the only financial metric that really matters is what is in your bank account at the end of the day. One of the ways you can influence this is by minimizing the taxes you pay on your investments.
