Rightway Technologies

Wednesday, July 10, 2024

Hackers grow more sinister and brazen in hunt for bigger ransoms

Cybercrime crews are increasingly turning to more sinister techniques to try to bend major companies to their will, abetted by new technology. — Image by freepik

A hack on a London hospital has left hundreds of millions of health records exposed and forced doctors to reschedule life-altering cancer treatments. In North America, a gang tried auctioning off data about LendingTree Inc customers after finding credentials in another breach. And in the recent compromise of car-dealership software provider CDK Global, hackers took the brazen approach of attacking not just once, but twice.

These recent high-profile incidents show how cybercrime crews are increasingly turning to more sinister techniques to try to bend major companies to their will, abetted by new technology.

"They’re becoming more aggressive in the ways they try to make money,” said Kevin Mandia, co-founder of Ballistic Ventures and the former chief executive officer of Google’s threat intelligence firm Mandiant. "It’s trying to create more pain so they get paid more, or they cause more disruption.”

The one-two punch approach used in the CDK incident indeed delivered a blow to its customers: Auto dealerships throughout the US were slowed for days. If a ransomware victim isn’t quick to pay an extortion fee, the logic goes, a second hit could be crippling enough to blackmail them into paying up.

Tactics like leaking sensitive records and double-hacks aren’t completely new, but have become more common and represent an evolution from traditional ransomware attacks, when scammers simply would encrypt data, demand a payment and then move to the next victim.

These days, when hackers ask for money, they’re sometimes refusing to negotiate ransom demands, according to one expert not authorised to speak about the matter, and they are insisting on extraordinary sums. The Russian-speaking hackers in the London hospital attack demanded US$50mil (RM235.92mil). UnitedHealth Group Inc made a US$22mil (RM103.80mil) payment to a cybercrime group after a February hack on the insurance giant’s subsidiary Change Healthcare.

Those kinds of demands point to hackers putting significantly more pressure on victims. The average ransom payment was US$381,980 (RM1.80mil) in the first quarter of this year, according to the incident response firm Coveware.

Another reason hackers are growing more demanding: They’re getting smarter about picking their targets, homing in more often on victims whose systems are critical to entire supply chains. The so-called ransomware-as-a-service model has made this strategy easier. A core hacking group will develop and lend its malware to other scammers, known as affiliates, in exchange for a cut of their ransom proceeds.

This is a favourite technique of the group known as BlackCat, according to the blockchain analysis firm Chainalysis Inc. That’s one reason known ransomware payments exceeded US$1bil (RM4.71bil) in 2023, a new record, Chainalysis determined.

Harassing researchers

Hackers have also started to harass the researchers who investigate them.

One especially ruthless group is generating fake nude photos of them with artificial intelligence, said Austin Larsen, a senior threat analyst at Mandiant, a unit of Google Cloud. Similar groups have been alerting police to false emergencies at researchers’ addresses and publishing private information about them online, he added.

Recently, Larsen said his colleagues have taken what was for them an unprecedented step of removing their names from research reports they have written about some of the nastiest gangs.

Some extortionists make phone calls to executives who work at victimised organisations to try coaxing them into paying a fee. In other cases, attackers have called executives by spoofing the numbers of their children – a new tack that Charles Carmakal, chief technology officer at Google’s Mandiant.

"As these tactics get bigger and more aggressive, they’re going to be more disruptive to people’s ordinary lives,” said Allan Liska, an analyst at Recorded Future Inc, who compared the extortion methods to real-world violence like the kind in mafia movies.

"If you send somebody a finger, they’re more likely to pay a ransom,” he said. "This is the equivalent of that.”

Health-sector attacks

The attacks in the health sector show that some of hackers’ increased brazenness is apparent in the types of targets they’ve put in their sights.

Hospitals in London for weeks have struggled to overcome a hack that forced doctors to turn away patients. Seeking to further maximise their leverage, the gang behind the breach threatened to publish data stolen in the incident, ultimately making good on that promise.

In the Change Healthcare hack, thieves from the BlackCat cybercrime group caused outages and delayed payments at pharmacies and health-care organisations for weeks. Even after UnitedHealth made a payment to BlackCat, it had little visibility into whether patient data was safe.

A 2022 attack on Medibank, one of the largest health insurers in Australia, represented a transformative moment in digital crime tactics, said Carmakal of Mandiant. In that case, scammers demanded roughly US$15mil (RM70.78mil) in exchange for not going public with patients’ most sensitive health records. When Medibank declined to pay, extortionists leaked information about Australians who had undergone abortion procedures, and hackers called patients in hospitals in a coordinated harassment campaign.

Cybercrime campaigns have continued despite more action from international law enforcement. The problem is that hackers often work from countries that protect them from extradition to the West, Liska said. "They don’t fear retaliation,” he said.

US President Joe Biden has vowed to take on ransomware, and the Department of Justice has created its own ransomware task force to tackle such aggressive attackers. That effort has led to more arrests, Liska said, but not enough to keep pace with the proliferation of new groups.

That’s in part because it has become easier to conduct such campaigns. Hackers can find pre-made ransomware kits on the Internet, paying as little as US$10,000 (RM47,190) to attack US companies, according to Liska.

"Go mow the lawn for the summer and you'll make enough money to start your first attack,” Liska said. – Bloomberg

Tuesday, July 9, 2024

Working hard is not overworking

Corporate leader: Malaysia on cusp of becoming globally competitive

Both sides of the coin: Wong (left) and Dr Prem Kumar.

GEORGE TOWN: Working hard does not necessarily mean one is overworked or that one’s work-life balance is out of whack, say corporate leaders here.

Being highly skilled at what you do as an occupation and then being driven to accomplish your goals can be rewarding in their own right, said Malaysian Semiconductor Industry Association president Datuk Seri Wong Siew Hai.

Stressing that Malaysia is on the cusp of becoming a productive and globally competitive nation, he said hard work in itself does not equate to being overworked.

In the semiconductor industry, Wong said employers strictly follow labour laws and allow workers the freedom of choosing to work long hours or even to work from home for those whose jobs allow them to do so.

“Multinational companies employ tens of thousands of workers and must strictly follow international working standards under the Responsible Business Alliance (RBA), prohibiting any infringement on workers’ rights,” he said.

Wong was responding to the recent survey on work-life balance conducted by Remote, a global human resource services company, which ranked Malaysia at 59 out of 60, with a meagre score of 27.51 out of 100, just a notch above Nigeria, which scored 17.03.

The study, done in March last year, found that workers in Malaysian were averaging a 40.8-hour work-week, with only an average of 16 days’ annual leave, and a minimum wage of RM5.05 per hour, leaving them with little time to rest and recover.

RBA is a non-profit organisation devoted to protecting the rights and well-being of workers and communities worldwide in the global electronics supply chain, with companies that are part of RBA running the risk of being blacklisted or censured if they are found to have broken the group’s rules.

Wong said Malaysia enjoys one of the highest number of public holidays in the world, so it does not make sense to say workers here do not have adequate time off.

“We absolutely should not have been put in the same category as some developed countries, which have different measurements of work-life balance that are not applicable here,” he said.

SME Association Malaysia northern chairman Calvin Kwan said even SMEs (small and medium enterprises) in Malaysia adopted the United Nations’ principles on Environmental, Social and Corporate Governance.

“Many companies actually want to create a happy working environment simply because it will increase productivity and loyalty.

“We aim to create a bond among workers so that during times of a production ramp-up, we get good teamwork,” said Kwan, who stressed that workers now are more sophisticated and know their rights.

On the flip side, there are those who have to seek therapy due to work-related issues.

Consultant psychiatrist Dr Prem Kumar Chandrasekaran from the Penang Adventist Hospital said people who sought treatment for anxiety and hypertension usually did so as a result of work.

“We are talking about people between the ages of 20 and 40, some with weak immune systems. Early intervention is necessary due to a number of them having suicidal thoughts,” he said.

“Putting in more than 55 hours of work per week is associated with 1.3 times more incidences of depression and anxiety – sleep deprivation can lead to problems too.

“Add fatigue into this and the result is diminished productivity and the risk of burnout,” said Dr Prem Kumar, adding that work hours should be capped at between 38 and 45 hours a week.

However, he clarified that those facing work-related stress may not necessarily be workaholics but may instead be grappling with a shift in the nature of work or workplace expectations, especially in the post-pandemic period.“Many of my patients are not aware of this connection between poor work-life balance and their stress symptoms.

“The best way to handle this is to pause and evaluate your situation, assess your priorities, enhance your time management, establish boundaries with management, reflect on the changes made, refine them and repeat the flow that works.

“Balance efficiency at work by rewarding that accomplishment with ‘me-time’, moments with family, and doing things that you love,” he added.

Source link

Related posts:

LETHAL LURE OF JOBS ABROAD, Baited and trapped

Malaysians fail for offers of lucrative jobs overseas only to end up scrammed

Sunday, July 7, 2024

Figuring out the best time to exercise; Any regular exercise helps maintain the brain

For some people, early morning before getting ready for the day’s duties is the best time to get their daily dose of physical activity in. — Filepic

It's a long-standing discussion for all who want to get into shape: When is the best time to exercise?

Based on member data from American fitness company Future, about 41% of workouts take place between 7-9am or 5-7pm.

“The debate is intriguing with proponents of both morning and evening workouts citing various benefits,” says sports medicine research director Dr Andrew Jagim from the Mayo Clinic Health System in Wisconsin, United States.

“From increased energy levels to enhanced performance or greater weight-loss benefits, health experts delve into the science behind exercise timing to shed light on the optimal approach for achieving fitness goals.”

In the morning

For morning exercisers, the allure of starting the day with a workout is undeniable.

“Getting your workout in and completed before you even begin your day can provide a sense of accomplishment and set a positive tone for the day ahead,” explains Dr Jagim.

“The post-workout release of endorphins and the satisfaction of accomplishing something before 9am can serve as a powerful ego boost.”

Perhaps most importantly, morning workouts eliminate the need to worry about finding time for exercise later in the day.

This is as it’s often the only time of the day that hasn’t been previously committed to work, social events or family activities.

“By completing your workout in the morning, you free up your afternoons and evenings for other activities, such as cooking dinner, socialising or simply relaxing,” Dr Jagim notes.

“This sense of freedom and flexibility can alleviate stress and enhance overall well- being.”

For people embarking on morning workouts, strategic pre-exercise nutrition can make a significant difference in energy levels and performance.

“Starting the day with a balanced breakfast containing carbohydrates, protein and healthy fats can provide the necessary energy to power through a morning workout,” he advises.

“Opt for wholegrain cereals, Greek yoghurt with fruit, and allow sufficient time for digestion to prevent discomfort and optimize nutrient absorption.

“Or, if you’re not hungry in the mornings or don’t have time, something simple like an energy bar can suffice.”

In the evening

However, for some people, waking up early to exercise is the last thing they feel like doing, and therefore, the case for evening workouts is more appealing.

“Your body’s ability to perform peaks in the afternoon and early evening, with optimal muscle function, strength and endurance,” states osteopathic medicine practitioner Jake Erickson, who specialises in sports medicine at the Mayo Clinic Health System in Onalaska, Wisconsin.

“During this time, your body has time to wake up a bit by moving around throughout the day, you’ve likely gotten a meal or two in to ensure adequate energy available to use during the workout, and you may be more mentally alert.”

Additionally, oxygen uptake kinetics are more favourable in the evening, allowing for more efficient utilisation of resources during exercise.

“Your body is primed for performance in the late afternoon and early evening, making it an ideal window for high-intensity activities like interval training or speed work,” he explains.

Conversely, people opting for evening workouts face unique considerations in balancing time commitments and mental energy.

“After a long day at work or shuttling around the kids all day, it can be hard to muster the motivation to go to the gym and put forth a lot of physical effort during a workout,” says osteopathic medicine practitioner Alecia Gende, who specialises in sports medicine and emergency medicine at Onalaska’s Mayo Clinic Health System.

“Additionally, intense physical activity in the evening may trigger a stress response and cause difficulty falling asleep or waking in the middle of the night if your cortisol is disrupted and released at an inopportune time.

“If you have to get a workout in before sleep, it would be best to be lower intensity, such as a walk or lighter (weight-)lifting session.

“If that’s the case, moving the workout earlier in the day might be more beneficial for them.”

Lastly, if you choose to work out later in the day, it’s important to ensure that you are getting adequate nutrients throughout the day to make sure you have enough fuel available to support the workout, in addition to eating a well-balanced meal after the workout.

“After a long day, it’s essential to refuel the body with carbohydrates and protein,” Dr Jagim says.

“Consuming a nutrient-rich meal within two hours of your workout can facilitate muscle recovery and enhance adaptation to training.

“Consider options such as grilled chicken with quinoa and vegetables, or a protein-packed stir-fry to refuel and replenish after an evening workout.”

For people engaging in prolonged or intense exercise sessions (more than 90 minutes), mid-workout nutrition can play a pivotal role in sustaining energy levels and preventing fatigue.

He recommends incorporating carbohydrate-rich snacks during extended workouts to maintain endurance and performance.

At midday

Whether working or at home, most people hit the dreaded afternoon slump around 3pm.

A study of more than 90,000 people recently found that working out in the afternoon reduces the risk of heart disease or early death more than physical activity in either the morning or afternoon.

The benefits of afternoon exercise for longevity were most pronounced for men and the elderly.

“Morning workouts may not be ideal for shift workers, or those working late or staying up later in the evening,” says Gende.

“In that case, it may be more prudent to allow more sleep in the morning and perform a mid-day workout or early afternoon workout before your next evening shift or late night.”

According to a OnePoll survey, the most effective activity for people during an afternoon workout is getting up and going for a walk, which is a great way to perk up both your mind and body.

Find your right time

So, what is the best time to exercise?

For those who just say I don’t have any time available, there’s always time.

“I suggest scheduling a ‘snack competing’ activity,” says Erickson.

“This can be a good excuse to flip the script, and for people who know they may choose to sit on the couch and snack in the evenings.

“They can use that time to grab a workout of some kind instead.

“This can lead to a big swing in people’s fitness as they consume less calories by avoiding the typical snacking time and burn more calories by the workout.”

There are even benefits to splitting up a workout into short 10-minute mini-sessions throughout the day if you don’t have time to get a full 60-minute session in.

ALSO READ: Always busy? Try stacking short workouts throughout your day

One thing is clear; even though science may seem contradictory, the importance of regular physical activity cannot be overstated.

“Ultimately, the best time to exercise is the time that fits into your schedule and aligns with your energy levels and preferences,” says Dr Jagim.

“Consistency and adherence to a regular exercise routine are key, and far more important, regardless of the time of day you choose to work out.

“Any time of day is better than no exercise in reducing the risk of death from any cause, including from heart disease and cancer specifically.

“Experimentation and self-awareness are essential in determining the ideal timing toward optimising exercise performance, recovery and overall well-being.” – By Rick Thiesse/Mayo Clinic News Network/Tribune News Service

Any regular exercise helps maintain the brain

Exercising even once a month at any time during middle age helps preserve brain function in older age; although the best results are gained by those who consistently exercise five or more times a month throughout their adulthood. — Filepic

Any regular leisure-time physical activity at any age is linked to better brain function in later life, suggests a study published online in the Journal of Neurology, Neurosurgery & Psychiatry.

The findings also suggested that maintaining an exercise routine throughout adulthood seems to be best for preserving mental acuity and memory.

Even though factoring in childhood cognitive ability, household income and education weakened the observed associations, the findings remained statistically significant.

Physical activity is modestly associated with a lower risk of dementia, cognitive decline and loss of later life mental acuity.

But it’s not known whether the timing, frequency or maintenance of leisure-time physical activity across the life course might be key to later life cognitive abilities.

The researchers were particularly keen to know if physical activity might be most beneficial in specific “sensitive” periods across the life course, or across multiple time periods.

To try and find out, they looked at the strength of associations between a range of cognitive tests at age 69 and reported leisure-time physical activity at the ages of 36, 43, 53, 60-64, and 69 in 1,417 people (53% women) taking part in the 1946 British birth cohort study.

Physical activity levels were categorised as: inactive; moderately active (one to four times per month); most active (five or more times per month).

These levels were added together across all five age assessments to create a total score ranging from zero (inactive at all ages) to five (active at all ages).

Some 11% of participants were physically inactive at all five time points, 17% were active at one, 20% were active at two and three, 17% were active at four, and 15% at all five.

Cognitive performance at age 69 was assessed using the validated ACE-111, which tests attention and orientation, verbal fluency, memory, language, and visuospatial function.

The 69-year-olds were also given tests of verbal memory (word learning test) and processing speed (visual search speed).

Factors associated with a heightened risk of cognitive decline – cardiovascular (heart) and mental health, and carriage of the APOE-4 gene – were also assessed to see if these modified any observed associations.

Analysis of the results showed that being physically active at all five time points was associated with higher cognitive performance, verbal memory and processing speed at the age of 69.

The effect sizes were similar across all adult ages and for those who were moderately and most physically active, “suggesting that being physically active at any time in adulthood, even if participating as little as once per month, is linked with higher cognition,” write the researchers.

But the strongest association was observed for sustained cumulative physical activity and later life cognition, and for those who were most physically active at all ages.

The positive association between cumulative physical activity and later life cognitive performance was partly explained by childhood cognition, socioeconomic position and education.

But the effect remained significant when these were factored in, and the associations weren’t explained by differences in later life cardiovascular or mental health.

“Together, these results suggest that the initiation and maintenance of physical activity across adulthood may be more important than the timing... or the frequency of physical activity at a specific period,” say the researchers.

This is an observational study, and as such, can’t establish cause, and the researchers acknowledge various limitations to their findings.

The study included only White participants and had a disproportionately high attrition rate among those who were socially disadvantaged.

No information was available on exercise intensity, duration or adherence either.

But the researchers nevertheless conclude: “Our findings support guidelines to recommend participation in any physical activity across adulthood and provide evidence that encouraging inactive adults to be more active at any time and encouraging already active adults to maintain activity, could confer benefits on later life cognition.”

Rightway Technologies

Pages