Introducing Kaseya Center and Rorschach Ransomware Encryptor

Table of Contents

1. Introduction
2. Ransomware Goes Super Saiyan
3. The Miami Heat's New Agreement
4. Microsoft's COPILOT for OneNote
5. Life Cycle Insights Acquired by Scale Pad
6. 10-Year-Old Windows Bug Exploited in 3CX Attack
7. Google Requires Android Apps to Allow Account Deletion
8. Apple Shuts Down Services for Older Devices
9. AI Roundup Highlights
10. Upcoming Events in the MSP Community
11. Conclusion

Ransomware Goes Super Saiyan

Ransomware attacks have been on the rise, and now there's a new threat called Rorschach. This malware, attributed to the Wizard Spider cybercrime group responsible for the infamous Trickbot malware, is the fastest encryptor discovered so far. It uses a unique encryption method that can encrypt files up to 2.6 times faster than other ransomware screens, making it particularly dangerous. Rorschach is distributed via phishing emails and employs various techniques to evade detection, including process hollowing. Once inside a system, it encrypts files and demands ransom in Bitcoin. Unfortunately, there's currently no known way to decrypt files encrypted with Rorschach without paying the ransom. However, experts advise against paying since there's no guarantee of receiving a working decryption key.

Pros:

• None.

Cons:

• Rorschach is the fastest encryptor discovered, making it a significant threat.
• Uses unique encryption method and evasive techniques to avoid detection.
• No known way to decrypt files without paying the ransom.

The Miami Heat's New Agreement

The Miami Heat basketball team recently secured a three-year agreement for the naming rights of their arena. The FTX Arena, formerly known as American Airlines Arena, will now be called the Cassaya Center. The deal, which took effect immediately, was worth $117.37 million over 17 years. While the majority of the funds go to Miami-Dade County, the Miami Heat team will receive $2 million per year, totaling $34 million. This agreement comes after the previous naming rights deal with FTX collapsed due to the company's bankruptcy filing. The decision to rename the arena has sparked mixed reactions, with some questioning the allocation of funds in the midst of other pressing issues.

Pros:

• The Miami Heat secured a new three-year agreement for the naming rights of their arena.
• The deal brings in significant revenue for Miami-Dade County and the team.
• The renaming of the arena could potentially attract new sponsorships and partnerships.

Cons:

• Some individuals question the allocation of funds, pointing out other pressing issues that would benefit from the funds.

Microsoft's Copilot for OneNote

Microsoft has introduced a new feature called Copilot for its popular note-taking app, OneNote. This AI-powered digital assistant aims to enhance note-taking by making it easier and more efficient. Users can now Type natural language queries, such as creating a list of action items or adding a reminder for the next day, and Copilot will generate the necessary content in the note automatically. The assistant also provides suggestions for meeting notes, task lists, and to-do lists, aiding users in organizing their work. Microsoft plans to further expand Copilot's capabilities, including language and platform support, in the future.

Pros:

• Copilot simplifies and streamlines the note-taking process in OneNote.
• Natural language queries make it easier for users to generate content.
• AI-powered suggestions assist with organization and productivity.

Cons:

• None.

Life Cycle Insights Acquired by Scale Pad

Life Cycle Insights (LCI), a respected player in the VCIO management space, has been acquired by Scale Pad. Although Scale Pad and LCI were once competitors, LCI's co-founder, Alex Farling, believes that joining forces with Scale Pad will allow LCI to achieve its big, hairy, audacious goals (beehags) more effectively. This acquisition signifies the increased interest and growth in the VCIO space, as more companies are stepping up to provide solutions for managed service providers (MSPs). While this move may Create confusion initially, it ultimately benefits the MSP community by providing more resources and options for their VCIO management needs.

Pros:

• The acquisition of Life Cycle Insights by Scale Pad brings more resources and opportunities to support MSPs.
• The VCIO management space is expanding, providing MSPs with additional options and solutions.
• Alex Farling's recognition of the benefits that can be gained through this acquisition shows a focus on the betterment of the MSP community.

Cons:

• Some individuals may find the acquisition confusing due to previous competition between Scale Pad and Life Cycle Insights.

10-Year-Old Windows Bug Exploited in 3CX Attack

A 10-year-old Windows bug has been exploited in an attack targeting 3CX, a popular business phone system. The vulnerability allows attackers to use an NTLM relay attack to gain remote access and control over systems. Although the bug has been known for a decade, Microsoft has not pushed a mandatory update to address it due to concerns about compatibility issues. However, the recent attack on 3CX has emphasized the urgency for organizations to Apply the fix and protect their systems from potential breaches.

Pros:

• The exploitation of the 10-year-old Windows bug highlights the importance of keeping systems up to date and secure.
• Microsoft has released an opt-in fix for the vulnerability, offering a solution to organizations using affected systems.

Cons:

• The delay in addressing the bug may have left systems vulnerable to attacks.
• The compatibility concerns raised by Microsoft are understandable but may have prolonged the window of vulnerability.

Google Requires Android Apps to Allow Account Deletion

Google has announced a new policy that requires all Android apps to allow users to delete their accounts and associated data directly from the app itself. Starting from October 15, 2023, developers will need to implement this feature in all new apps and app updates submitted to the Google Play Store. Additionally, developers must provide a clear and detailed privacy policy explaining how user data will be collected, used, and shared. Consent from users will also be required before collecting sensitive data such as health or financial information. These changes reflect Google's ongoing efforts to increase transparency and give users greater control over their personal data.

Pros:

• Google's new policy gives users more control over their personal data.
• The requirement for a clear privacy policy helps users make informed decisions about app usage.
• Consent for collecting sensitive data is now mandatory, ensuring user privacy.

Cons:

• Developers may need to invest additional resources to implement the account deletion feature and update their privacy policies accordingly.

Apple Shuts Down Services for Older Devices

Apple has begun shutting down certain services for older devices that are no longer supported by the company. This includes iCloud, the App Store, and email services. The affected devices are iPhones, iPads, and iPods running earlier versions of Apple's operating systems, such as iOS 9 or earlier, OS X 10.10 or earlier, and watchOS 2 or earlier. While Apple has not provided an official statement, this move is likely part of the company's ongoing efforts to streamline its services and focus on newer devices.

Pros:

• Streamlining services for older devices may allow Apple to allocate resources more efficiently.
• Focusing on newer devices ensures that users benefit from the latest features and security updates.

Cons:

• Users with older devices may experience a loss of functionality and access to certain services.