Here come the blood suckers trying to take advantage of the global crisis and the season of giving with phishing attacks, fraudulent donation phone calls, false collection websites, and other forms of thievery from the victims of these terrible acts of Mother Nature. The best advice that can be given is, take precautions: First, make…
Details
Data protection has become part of our daily lives, hopefully. Just as we lock the doors to our house or car, we must secure our mobile devices for everyday activities without even thinking about it. A relaxing visit to the local cafe could become an event where your personal or corporate data is compromised. …
Details
JohnsTek Capability Statement JohnsTek, Inc. is a Strategic Technology Engineering company providing solutions in two primary categories: Cyber Risk Management and Systems Integration. With a primary focus on Enterprise Security, Critical Infrastructure Protection, and Emergency Management, JohnsTek’s client profiles typically are Fortune 500 companies and Government Organizations in Defense, Intelligence, Law Enforcement, and Homeland Security.…
Details
Planning and preparation for disaster response can be a daunting task for any size government. Municipalities, Towns, Cities, and States all have a responsibility to be prepared to respond when the unexpected happens suddenly. Each of the areas listed below require several layers of details to be added for the activities to be effective. …
Details
Organizations of all sizes should understand by now that they face threats to their data, whether it is stored or accessed on a private network, internet cloud service, or mobile device. Whether the organization is one person or one million people, we are all targets of malicious cyber activity. Hopefully this list will challenge you…
Details
JohnsTek has partnered with IBM, a security systems powerhouse! The alignment to IBM Security will benefit our current and future customers in Analytical Systems and Cybersecurity. Through JohnsTek, IBM offers affordable solutions that lead the areas of National Security and Law Enforcement Analytical systems, Cybersecurity, Cloud Services Security, and Mobile Device Security, among others. Our…
Details
Date/Time of Report – 20180319 1415 APT/Vector Name – BlackTDS AKA Names – N/A Purpose/Target – Cybercriminals consistently utilize Traffic Distribution Systems to determine traffic type, which will aid them in directing users to certain malicious sites and in determining what malicious payloads to execute on particular systems. [1] Method – Spam, malvertising, distributing malware…
Details
Date/Time of Report – 2018-22-3 14:30 APT/Vector Name – Criminal Hacker Organizations, Ransomware-as-a-service (RaaS), Malware-as-a-service (MaaS) Examples – Raas; Cerber, Satan, Hostman, Flux, Atom – MaaS; WannaCry Purpose/Target – Financial remuneration, intellectual challenges, vengeance against certain organizations, alleviation of boredom, and social gains Method – Most commonly spear-phishing Source – First seen from Russia over…
Details
Date/Time of Report – 2018/03/22 14:53 APT/Vector Name – Fancy Bear AKA Names – APT28, Pawn Storm, Sofacy Group, Sednit and STRONTIUM Purpose/Target – The threat group is known to target government, military, and security organizations, especially Transcaucasian and NATO-aligned states. Fancy Bear is thought to be responsible for cyber-attacks on the German parliament, the…
Details
Draft Special Publication 800-202 Guide Helps Digital Forensics Investigators Place Data on Mobile Devices NIST is releasing a guide that describes procedures for documenting and populating test data on a mobile device before testing a mobile forensic tool—the recovery and interpretation of data found on digital devices is often part of a criminal or civil…
Details