FBI Warning: Disable Local Admin Accounts to Protect Your Business from North Korean IT Worker Threat

Hackers use various methods to steal data, including cybercrime AI-chatbots, two-factor authentication bypass attacks, and novel don’t click twice hacks. However, they also attack by gaining employment with your organization, as highlighted by the FBI public service announcement I-012325-PSA. Disable local admin accounts, the FBI warns, and here’s why your business should take notice.

FBI Warning on Extortion and Theft of Sensitive Company Data

As hack attacks involving remotely-based information technology workers from the Democratic People’s Republic of Korea continue, the FBI warns the public, private sector, and international community about the "victimization of US-based businesses." FBI investigations have observed North Korean IT workers using unlawful access to systems to steal proprietary and sensitive data and facilitate other cyber-crime activity.

Victims have seen proprietary data and code held to ransom, copying of corporate code repositories to attacker user-profiles and personal cloud accounts, and attempted harvesting of company credentials and session cookies for further compromise opportunities.

The Principle of Least Privilege: FBI Advice

The principle of least privilege, recommended by the FBI, involves disabling local admin accounts. The NSA also advises restricting administrative rights available to users of both Windows and MacOS operating systems. "Only allow designated administrator accounts to be used for administrative purposes," the NSA and FBI advice document states. So, what is the principle of least privilege, exactly?

It’s any method of ensuring that all users only have access to the specific resources they absolutely need to do their job at any particular time. Admin account access should only be available to those who need it for their work and nobody else.

Consumers can apply this principle by setting up an admin account protected by a strong password and a separate user account without admin rights. Use the user account for day-to-day computing needs, and if something potentially risky, such as installing software, is required, the operating system will ask you to enter your admin credentials.

Wikipedia provides examples, such as a user account that exists solely for creating backups, which wouldn’t need to install software and therefore should only have the rights necessary to run backup and backup-related applications.

Mitigating the North Korean IT Worker Threat: Advice from the FBI and Security Experts

The FBI advises disabling local administrator accounts and limiting privileges for installing remote desktop applications, as well as monitoring for any unusual network traffic. North Korean IT workers often have multiple logins into one account in a short period from various IP addresses, often associated with different countries.

The FBI also recommends implementing strict identity-verification processes during the interviewing and onboarding stages of hiring such workers, as well as continuing to do so throughout the employment lifecycle. Cross-checking HR systems for other applicants with the same resume content and/or contact information is also essential.

Following Department of Justice indictments against individuals allegedly involved in the North Korean remote IT worker hacking campaign, Michael Barnhart, Mandiant principal analyst at Google Cloud, stated that these legal actions aim to dismantle the support infrastructure and impose substantial obstacles to their continued success.

Mandiant also provided the following mitigation advice:

• Utilizing periodic and mandatory checks where remote workers are required to go on camera
• Continuous education programs for users and employees on current threats and trends
• Mandatory use of U.S. banks for financial transactions to interfere with malicious overseas activity, as the acquisition of U.S. bank accounts entails stricter identity verification than in many countries

Conclusion

The FBI’s warning is clear: disable local admin accounts to protect your business from the North Korean IT worker threat. By applying the principle of least privilege and following the FBI’s advice, you can significantly reduce the risk of your business being targeted by these malicious actors.

Frequently Asked Questions

Q: Why is it important to disable local admin accounts?
A: Disabling local admin accounts is essential to prevent unauthorized access to sensitive data and to reduce the risk of cyber-attacks.

Q: What is the principle of least privilege?
A: The principle of least privilege is any method of ensuring that all users only have access to the specific resources they absolutely need to do their job at any particular time.

Q: How can I apply the principle of least privilege in my daily life?
A: You can apply the principle of least privilege by setting up an admin account protected by a strong password and a separate user account without admin rights. Use the user account for day-to-day computing needs, and if something potentially risky, such as installing software, is required, the operating system will ask you to enter your admin credentials.

The Future of Retail: Adapting to the New Normal

The world’s retailers face a host of challenges. Even before the pandemic, many brick-and-mortar retailers were struggling. Now, as we emerge from the liminal space of nationwide lockdowns into new psychological and social territory, shoppers will be anxious about whether visiting stores will increase their exposure to the virus. Adding to the complexity: The United States is now officially in a recession, which will dampen consumer spending for months to come.

Rethinking Retail in the Face of Adversity

As retailers anticipate reopening, they need more than a checklist of sanitization practices. They need actionable vision that will set them apart. The good news is innovative ways of operating were already being prototyped on a smaller scale before Covid-19. This moment of transition allows us to pivot toward a more resilient and meaningful future.

Three Principles to Guide Retailers

As retailers rationalize and redesign their presence, they should consider the following three principles:

Physical Spaces as an Escape

Retailers should think about their physical spaces as an escape from the chaos of the outside world. This means creating environments that are calming, relaxing, and even therapeutic. This can be achieved through the use of natural light, comfortable seating, and soothing colors.

The Store as a Stage

The store can also be seen as a stage for customers to experience a brand’s products and services. Retailers should think about how to create engaging experiences that bring products to life. This can include interactive displays, demonstrations, and workshops.

Digital Experiences as Collective Memory

Finally, retailers should consider how to create digital experiences that serve as a collective memory for customers. This can be achieved through the use of augmented reality, virtual reality, and social media platforms. By doing so, retailers can create a sense of community and shared experience that transcends physical locations.

Conclusion

As the retail landscape continues to evolve, retailers must adapt and innovate to meet the changing needs of their customers. By embracing the principles outlined above, retailers can create a more resilient and meaningful future for themselves and their customers.

Frequently Asked Questions

• What are the biggest challenges facing retailers today?
  • The biggest challenges facing retailers today include widespread lockdowns, economic recession, and changing consumer behavior.
• What are some innovative ways of operating that retailers can adopt?
  • Retailers can consider adopting innovative ways of operating, such as creating calming physical spaces, staging experiences, and creating digital experiences as collective memory.
• How can retailers create a more resilient and meaningful future for themselves and their customers?
  • Retailers can create a more resilient and meaningful future by embracing the principles outlined above and adapting to the changing needs of their customers.

Alan Kay, the renowned educator and computer designer, famously declared, “The best way to predict the future is to invent it.” But what does it take to invent the future in such a turbulent and uncertain world? To thrive in an ever-changing environment, leaders need to possess specific qualities that enable them to adapt, innovate, and navigate the complexities of the future.

The Four Types of Leaders “Fit for the Future”

1. Insatiable Learners

Insatiable learners are constantly curious and committed to staying ahead of the curve. They ask themselves, “Am I learning as fast as the world is changing?” They prioritize self-improvement, seek out new experiences, and continuously update their knowledge and skills to stay relevant. Insatiable learners are flexible, adaptable, and open to new ideas, making them well-equipped to navigate the complexities of the future.

2. Personal Disruptors

Personal disruptors know when it’s time to completely reinvent themselves. They recognize the need for transformation and are willing to take risks to achieve their goals. This type of leader is not afraid to challenge traditional norms and adopt new approaches to stay ahead of the competition. Personal disruptors are innovative, resilient, and able to adapt to changing circumstances.

3. Tough-Minded Optimists

Tough-minded optimists know how to forge ahead through sheer grit and perseverance. They believe that obstacles are an opportunity to grow and learn, and they never give up on their goals. This type of leader is courageous, determined, and able to maintain a positive outlook even in the face of adversity. Tough-minded optimists are the embodiment of resilience and can overcome any challenge that comes their way.

4. Eager Experimenters

Eager experimenters keep trying things until they find a solution that works. They are risk-takers, always willing to take the next step and experiment with new approaches. This type of leader is innovative, flexible, and willing to learn from their mistakes. Eager experimenters are driven by a sense of curiosity and a desire to improve, making them well-equipped to navigate the complexities of the future.

Conclusion

In today’s fast-paced and ever-changing world, it’s essential to be a leader who is “fit for the future.” The four types of leaders discussed above – insatiable learners, personal disruptors, tough-minded optimists, and eager experimenters – share common traits that enable them to thrive in the face of uncertainty. By adopting these qualities, leaders can better navigate the challenges of the future and create a brighter tomorrow.

FAQs

• What are the key traits of insatiable learners? Insatiable learners are constantly curious, committed to self-improvement, and prioritize learning to stay ahead of the curve.
• What is the characteristic of personal disruptors? Personal disruptors are innovative, resilient, and willing to take risks to achieve their goals.
• What is the hallmark of tough-minded optimists? Tough-minded optimists are courageous, determined, and able to maintain a positive outlook even in the face of adversity.
• What drives eager experimenters? Eager experimenters are driven by a sense of curiosity and a desire to improve, and they are willing to take risks to find innovative solutions.