…Gone Phishing – Examples of Phishing Attacks

“Give a man a fish and you feed him for a day. Teach a man to PHISH and he will steal your company’s money”.

(Quote by an unfortunate phishing victim)

Criminal phishing graphic


E-mail exploits have been in the news a lot lately. Our inboxes are constantly under attack. The most common and lucrative for criminals method to extract passwords and other sensitive information is through phishing. A phishing attack, or a phishing scam, is when a rogue party sends an email pretending to be someone (e.g. an officer of your organization) or something he is not (e.g. Microsoft), in order to extract sensitive information out of the target. Continue reading

SMiShing Is the New Phishing!

BEWARE of SMiShing!

Fraudsters are moving beyond your email and into your text messages! This new form of phishing aka “SMiShing” named after “Short Message Service”, is a new tactic scammers are using to obtain your personal information that could enable them access to your bank account or other online profiles. With smishing, malware such as keystroke logging can be installed on your smartphone or tablet just as it can be in phishing. With people increasingly using their mobile devices for work related duties, malware on your compromised mobile device can be used to gain access to passwords and corporate data as well as to plant malware on company servers.


One particular smishing scam Netblaze is currently seeing involves someone contacting you via text or by phone claiming to be from AT&T.  The following scenario may (or may not!) have happened to an offspring of one of Netblaze’s founders recently.  It may also have resulted in a Netblaze founder spending the good part of a precious Saturday on the phone with AT&T in an attempt to reverse the fraudster’s inflicted damage.

Continue reading

Configure Document Alerts in OneDrive for Business


OneDrive for Business by default only sends out email notifications when a folder or file is shared. If recipients upload a document for you (or modify – if permitted – a document you posted), how will you know? Does OneDrive for Business support file update notifications like file sharing services?


The answer is “yes”. The functionality however has been hidden away for some reason. The reasons are unclear, but likely have to do with Microsoft trying to combine functionality of OneDrive for Business with SharePoint and making it difficult for us in the process. But never fear – here’s how to set this up:


Continue reading

Windows Authentication fails with AWS Application ELB

While configuring an AWS Elastic Load Balancer for a customer I came across a strange issue related to Windows Authentication. Going through an internal application load balancer configured with HTTP listener, the target web server (IIS) constantly prompted for credentials and would not accept the correct ones, causing logon issues and even connections to other users’ sessions. After some investigation, I created a new network load balancer instead of the application load balancer used initially and it started working.


Continue reading

WatchGuard “unsafe” ports blocked

I ran into a nasty gotcha today. For the past few years we’ve recommended, sold, installed and configured Juniper SRX firewalls. They’re extremely flexible and can be made to do just about anything but they have one major drawback: the web console sucks! It’s slow, clunky, unintuitive, constantly crashes and is obviously a bolt-on to the command line interface.

Anyway, we decided to start implementing some of the WatchGuard “T” series firewalls because they have a very slick web console that is almost the complete opposite of the SRX: fast, smooth, intuitive, and stable. The command line interface on the WatchGuards is pretty weak but that’s a topic for another post.


Continue reading

Why should your business use “the cloud”? Well, why do you work in an office?

Here at Netblaze, we’ve helped many businesses move to the cloud in one way or another. Sometimes we see they’re doing something that could be accomplished much better (and cheaper) in the cloud; sometimes a client already knows the cloud service they want and ask us to help set it up; sometimes they come to us with a problem and ask if this cloud thingamajig might solve it.

Sometimes when talking with clients, I can hear some hesitation on the other side when the word “cloud” comes up, and I can almost hear in that hesitation: Um, I know “the cloud” is apparently the hottest thing since sliced bread, but what the heck is it really? I’m not going to ask

That’s a totally understandable reaction, because even among techies, the concept of “the cloud” is as shapeless and foggy as, well, a cloud.


Continue reading