MSP Dispatch 7/15/22: Vishing, N-able Launches Solution Bundle for MSPs, and Phishing even with MFA

TL;DR

Quickbooks phishing scams are targeting small businesses, using voice phishing to deceive users and evade detection.

Transcript

V is for fishing yet another option for your PSA rmm bundle and sharing is caring when it comes to MFA these stories and more on today's episode of MSP dispatch good morning and welcome to the July 15 2022 episode of MSP dispatch I'm Ray Rossini joined as always by my co-host Mr Tony Francisco how you doing Tony excellent brother excellent how the ... Read More

Key Insights

• 💗 Quickbooks phishing scams are a growing threat to small businesses, leveraging deceptive tactics to trick users into sharing sensitive information.
• 💁 Voice phishing, or smishing, is an emerging form of phishing, where scammers use voice calls to deceive users and gain access to their personal information.
• 👊 Maintaining awareness and verifying the authenticity of requests for personal information is essential in preventing falling victim to phishing attacks.
• 😶‍🌫️ The MSP industry is introducing new solutions, like Enable's Insight RMM, which combines cloud-based RMM, remote access, and PSA applications for growing MSPs.
• 👾 There is a debate about the benefits of all-in-one solutions versus using separate specialized tools in the MSP space.
• ❤️‍🩹 Strong education and training about phishing attacks and cybersecurity practices are crucial for both MSPs and end-users.
• 👋 Despite the increasing sophistication of phishing attacks, user education and implementing good security practices can help mitigate the risks.

Questions & Answers

Q: Why are Quickbooks phishing scams targeting small businesses?

Small businesses are often seen as easy targets due to their limited cybersecurity measures and lack of awareness about phishing scams.

Q: How do users fall victim to voice phishing scams?

Scammers deceive users by impersonating trusted entities, such as Intuit, and prompt them to call a provided number to dispute false charges. Users may unknowingly provide personal information during these calls.

Q: How can users protect themselves from phishing scams?

Users should always verify the authenticity of calls and emails by contacting the organization directly using official contact information. Avoid sharing personal information over the phone unless the caller's identity can be verified.

Q: Are more sophisticated phishing attacks on the rise?

Yes, phishing attacks are evolving and becoming more targeted, making it crucial for users to stay vigilant and practice good cybersecurity hygiene.

Key Insights:

• Quickbooks phishing scams are a growing threat to small businesses, leveraging deceptive tactics to trick users into sharing sensitive information.
• Voice phishing, or smishing, is an emerging form of phishing, where scammers use voice calls to deceive users and gain access to their personal information.
• Maintaining awareness and verifying the authenticity of requests for personal information is essential in preventing falling victim to phishing attacks.
• The MSP industry is introducing new solutions, like Enable's Insight RMM, which combines cloud-based RMM, remote access, and PSA applications for growing MSPs.
• There is a debate about the benefits of all-in-one solutions versus using separate specialized tools in the MSP space.
• Strong education and training about phishing attacks and cybersecurity practices are crucial for both MSPs and end-users.
• Despite the increasing sophistication of phishing attacks, user education and implementing good security practices can help mitigate the risks.
• Recent outages in services like Twitter and Keeper Security's Chrome extension highlight the importance of keeping systems up-to-date and having contingency plans in place.

Summary & Key Takeaways

• Cybercriminals are using Quickbooks phishing scams to target small businesses, posing as Intuit and prompting users to dispute false charges by calling a provided phone number.

• The scam is highly effective due to its similarity to non-fraudulent Quickbooks notifications and the use of authentic Intuit IP addresses.

• Fishing attacks, including voice phishing (also known as smishing), are a growing concern, and users need to be cautious about providing personal information over the phone.