You are here:Home > Articles/Newsletter
Enter HERE to view our archived Newsletters!

           Vaccinating Disasters:
How the cold and flu season should motivate you to look at your Disaster Recovery plans

by Max Huang and Ken Hunt

There's been a great deal of publicity surrounding this year's cold and flu season, and for understandable reasons given the introduction of the H1N1 vaccine around the U.S. The amount of literature in airports, on TV and in magazines have been clear and concise; take simple, but effective and necessary, precautions against catching and spreading the seasonal bacterial and viral bugs to family, friends and co-workers.            
This good advice should not be lost to those in charge of corporate networks. In fact, now is one of the best times for you to review your IT Disaster Recovery Plans before it becomes too late to do so.  
Read More          


4 Swine Flu Scams Making the Rounds

From bogus influenza medication to useless prevention products, here are the latest criminal schemes using H1N1 headlines to grab attention

By Joan Goodchild, Senior Editor

October 28, 2009 — CSO —

The words "swine flu" had barely been uttered last spring when spammers and malware authors, hoping to take advantage of fears and curiosity about the virus, began devising ways to trick people with clever subject lines and fake web sites. In April, only days after officials began to talk about the virus, officially known as H1N1, researchers with several security firms reported spam relating to the virus already accounted for 4 percent of all unwanted emails.

More than six months later, H1N1 has indeed spread to large numbers of people around the world. So have related scams and schemes cooked up by the bad guys, either looking to infect your computer, steal your credit card information or sell you phony products. Here, we detail some of the most common lines being used online lately.

Treat swine flu virus! Buy Tamiflu without a prescription
Researchers at McAfee Labs have found that a great deal of the spam ending up in inboxes lately has a subject line that offers Tamiflu, a prescription-only medication that can stop influenza from further mutating in the early stages of the virus, without a prescription. According to McAfee Labs lead researcher Adam Wosotowsky, the link offering Tamiflu usually directs users back to an alleged Canadian pharmaceutical site that likely sells fake products. In fact, spam that advertises websites for "Canadian pharmaceuticals" accounted for more than 70 percent of global spam volume in September, according to McAfee analysis.

In the past few weeks, fraudulent offers of so-called swine flu treatments and medications have become so widespread that the FDA and the FTC has issued warnings to consumers to avoid them. Earlier this month, the two agencies released a joint warning letter to one website offering fraudulent H1N1 flu supplements. The FDA also maintains a list of fraudulent 2009 H1N1 influenza products so consumers can check out what snake oil is being sold claiming to cure or prevent the virus.

"Products that are offered for sale with claims to diagnose, prevent, mitigate, treat or cure the 2009 H1N1 influenza virus must be carefully evaluated," said Commissioner of Food and Drugs Margaret A. Hamburg, M.D., in a statement. "Unless these products are proven to be safe and effective for the claims that are made, it is not known whether they will prevent the transmission of the virus or offer effective remedies against infection. Furthermore, they can make matters worse by providing consumers with a false sense of protection."

Officials warn much of what is being offered online is fake, and even dangerous. FDA evaluation of one such product claiming to be Tamiflu revealed it was only a mixture of talc and generic Tylenol. So other than the obvious possibility of being ripped off, is the chance that the product could be dangerous.

Takeaway: The only safe and legal way to get Tamiflu is to see your doctor

Swine flu cases tripled over night!
The subject itself us usually pretty catchy, said McAfee's Wosotowsky. When H1N1 first made its appearance several months ago, the commonly-used line was "Obama catches swine flu!" These days, Wosotowsky is seeing spam ploys that tend to prey more on the pandemic implications of the virus, such as "Swine flu cases tripled overnight" or "Help swine flu victims."

The "interesting news item" is just another common spam scheme criminals use to get your attention. But instead of taking users to a legitimate news story, those that click either find themselves directed back to a bogus drug site, or have malware downloaded onto their computer. This is also a technique that has been employed on Twitter, where bad links have been shortened to obscure their origin (Read more about this trick in 5 More Facebook, Twitter Scams to Avoid).

Takeaway: Resist the urge to click links in emails with swine flu news. Get the latest information about H1N1 off of legitimate news sites or government sites, such as the CDC's, which is tracking the viruses spread and has daily updates about vaccine availability.

Searching the term 'swine flu' leads to fake AV sites
Now, we did just advise you to do your own searching for swine flu news, rather than trusting unsolicited emails offering you information. But when you Google "swine flu" or "H1N1," you still need to be careful. That's because security researchers are seeing more use of shady search engine optimization techniques, which draw users to spoof web pages where malware is downloaded.

PandaLabs, the research arm of Panda Security, recently released a quarterly report on cyber-threat activity and revealed that they have detected a major growth in the distribution of malware through such blackhat SEO techniques, which often exploiting current issues such as swine flu.

If your computer isn't equipped with one of the many online tools that can determine if a site is risky, you can check out the site's rating with Google safe browsing. Simply replace "" with the site in question. IE:
Takeaway: Use care when searching for information about swine flu/H1N1. If it is not a site you recognize in the search results, you should think twice before heading there with out checking out its safety rating first.

Swine flu prevention kits! Medical grade protection!
The swine flu kits that are being sold online and through spam emails are not necessarily harmful, but items in them are of little use in preventing H1N1, according to FDA officials. And even if they are, most can be purchased at hardware, grocery, and drug stores.

Some of the "kits" being sold online include items such as masks, air purifiers, diagnostic tools to determine if you are infected -- and even one that is hocking something called "9-1-1 Water." The kits are being sold for $100 or more according to many search results.

But FDA officials say by buying these kits you will needlessly part with your dollars. And security researchers like Wosotowsky are quick to point out that purchasing a less-than-legitimate product probably means you are dealing with a questionable operation. Do you really want to put your credit information in the hands of a shady company?

Takeaway: The current medical advice for H1N1 flu defense is to practice thorough hand washing and avoid touching your face. And, if there is a miracle product that can prevent H1N1, you can bet you won't be hearing about it from a spam email.


Home Defense Training

By Simon J Oram - OSC  

Do you have a firearm that you plan to use to defend your family incase of a home invasion? One of the most important, if not the most important thing, is to be proficient in its use.  Now, is your firearm available for your spouse to use if you are not home and the need to use it arises?  You may feel that you are confident in its use, but are they?  The trouble is that many families will purchase a firearm for home defense that their spouse can use, take them to the range once and then stick it in the bedside table or closet and forget about it.  While that plan may give you a bit of psychological comfort, it is certainly not the best plan of action for dealing with the deadliest of threats - someone breaking into your home and placing your family at risk.

If your spouse is not a regular shooter, their familiarity and comfort level with a firearm isn't going to be very high. All too often they are given a quick course on loading, aiming, and shooting the home defense gun. The gun is then loaded and put up. When faced with an unforeseen deadly threat we expect them to grab the gun and successfully defend their lives and possibly those of our children.

Maintaining proficiency in any skill requires regular practice. Shooting skills are perishable. Understanding how to make a firearm work and being able to make it work are not necessarily the same things. I understand how a helicopter can fly.  That being said, you will not see me at the airport tomorrow trying to fly one.
"Maintaining proficiency in any skill requires regular practice. Shooting skills are perishable."

Most ranges in NY and CT will not let you draw from the holster, and that is fine since we are talking about home defense and not Personal Protection Outside the Home. Time at the range should be spent reviewing the basics of the firearms use.  Grip, Sight Picture, Trigger Control, Breathing, Loading, Unloading. I have spoken in the past about "Slow is smooth and smooth is fast".  If you do something slowly and correctly at first, it will become smooth. Once you can do it smoothly it will become much easier to do it fast. Fast and accurately. 

Don't forget to practice shooting single-handed and weak (off handed). You might not always have two hands to steady the weapon. The first time you fire a pistol one-handed should be on the range, not in a fight.  If you decide to use a shotgun for home defense, you should also practice firing it weak side, or off hand as well.  Do you wear glasses or contacts?  When you hit the range be sure that you take the time to practice shooting without them.  Can you guarantee that you will have them on if you wake up in the middle of the night and need to quickly use your firearm? What if in a rush and in the dark you trip and they fall off?  In the military they stress the need to "train like you fight".  This is a maxim that we should all strive to follow as well.

Once we are done at the range, it is now time to take our training into our home. In the home, the best thing to do is to take an NRA Personal Protection in the Home course?. And yes we do teach that course.  Shameless plug!  The next step is to come up with a plan and practice it.  You should have a plan if the smoke detector goes off, and you should if the burglar alarm goes off as well.  What do you do?  Do you have a safe room?  If the alarm goes off at night, do your kids and family know what to do?  Do they stay in their rooms and secure their doors or do they go to the master bedroom as fast as they can? What do you do?  If you think it is a true threat your best decision is to stay in your room, secure the door and call the police.  Once you have done that, take cover behind your bed and, keeping your family behind you, aim at the door.  Do not hang up the phone after calling 911, leave the phone open on the bed or give it to your spouse.  They will now have a recording of everything that happens, and they can update you on the response of the police.  Yell as loud as you can that you have called the police and you have a firearm and will use it to defend yourselves.

Learning what to do is just the first step. After that, you need to practice, practice, practice.....