The Bottom Line
Small business is important to Central Oregon, and to Mid Oregon. Find tips and resources for business, and information about Mid Oregon’s commercial services and business members.
How to Stay Safe and Avoid Password Fatigue
Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more.
RedLine Stealer Malware
Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware RedLine Stealer can hijack those stored passwords in a heartbeat.
Looking deeper into RedLine Stealer shows that the malware is capable of stealing more than passwords from browsers. Even though browsers encrypt what they store, RedLine can decrypt it. This info-stealing trojan takes more data such as usernames, credit cards, cookies, FTP credentials, and files if they also are stored in the browser. RedLine Stealer also downloads and runs other malware, takes screenshots of active Windows’ screens, and executes additional commands. In short, RedLine hijacks every bit of data stored in a browser.
Security experts note RedLine also sneaks past anti-virus solutions, making it nearly impossible to prevent infections. It doesn’t help that this malware is readily available on hacker websites like 2easy and others. Apparently, half the stolen data sold on 2easy is there thanks to Redline Stealer’s, well…stealing. Experts also saw evidence of spam campaigns using website contact forms and discussion forums and a host of other lures that download and install RedLine.
Adding to RedLine’s success is that it exploits a substantial security gap for password-storing browsers that is yet to be acknowledged and fixed. And since that day isn’t today, browser password storage remains a convenient but very risky road to take.
How to Avoid RedLine and other Password Stealing Malware
Rather than store your passwords in the browser, consider another solution to remember them. Writing them down with the old-fashioned pen and paper and storing them securely is one option. Another is using clues to trigger your memory. But if you want to use a password manager, use caution.
Password managers are an alternative to having a browser store them. They keep usernames, passwords and other guarded data like credit card info that is encrypted and in theory is safe. But most also have a master password that if stolen, gives up all the usernames and passwords they store. Think “keeping all your eggs in one basket.” Be sure to shop around, as password manager providers offer different services at differing prices. Use MFA (multi-factor authentication) to secure your password manager. Even if a hacker gets hold of the password, they won’t have the required MFA to abuse it.
Alternative Password Storage
Alternative methods to password managers are giving users a way to authenticate their identity without relying on passwords at all. They include using alternate options like a smartphone, hardware token, one-time passwords (OTP), or a biometric measure like a fingerprint. Many mobile devices use this already. However, those are coming our way in the future for our laptops and desktops. For now, it’s best to find another option besides storing them in browsers.
A Simple Way to Create Unique and Easy To Remember Passwords
The folks at Stickley Security suggest a quick and easy way to create a secure password to help avoid password fatigue. First create a strong base password. Use a number, lower case and uppercase letters and a special character (!#$%*;). For example: 89!ApikT. This ‘core’ or base password can be used in combination with a part of the URL for the account you are creating a password for.
Combine the URL with the base password and create a secure, unique combination that will be easy for you to remember. For example a password for facebook could be: fb89!ApikT or 89!ApikTfb. Anyway you combine it, you’ll be able to remember it.
Mid Oregon provides a valuable resource for enhancing your online security. We invite you to explore our Stickley on Security section within the Security and Fraud Center. This platform offers timely articles covering a range of digital security topics, along with informative videos. Additionally, you can subscribe to receive news and alerts via email, ensuring you stay informed with the latest updates to keep your financial accounts secure in the digital landscape.
Read additional blog articles on cyber security and fraud.
As a reminder, Mid Oregon will never initiate a call asking for personal or account information via phone, text, or email.
Visa Gift Cards Convenience!
Convenient & Flexible
We are almost at the last minute, when we can’t find the right gift, don’t have time to shop or when we don’t know what a person wants. Visa Gift cards remain an extremely popular gift choice. Mid Oregon Visa Gift Cards convenience can help you give that perfect gift without stressing out trying to find it.
A Mid Oregon Visa Gift Card can also be the tool that allows you to hold to your spending plan. By loading our Visa Gift Cards with your budget amount(s), you can limit your spending, and still have a great gift.
Shopping Flexibility
Mid Oregon Visa Cards can be used almost everywhere Visa cards are accepted in Central Oregon, and at millions of places around the world-including retail and online merchants as well as mail and phone orders. The only exclusions are gas stations, ATMs, hotels, car rentals and airline reservations. It has all the protection and security features you expect from a Visa Card.
Gift Visa Card recipients can go on-line to view transactions or update personal information. Lost or stolen cards are replaceable with the unused money still available, unlike cash. There is no disruption with your debit card and checking account, or hassle with your credit cards.
Great For Children, Too!
Mid Oregon Visa Gift Cards can also help young people with their Christmas giving. You can get each child a card with their Holiday gift giving money loaded and help them learn about sticking to a plan, how to use a card and have the safety of not losing cash.
Even those teenagers with whom your are helping learn money management with their own Mid Oregon Simply Free Checking account and debit card can benefit. Removing overspending temptations and reducing the risk are values for all of us.
How the Mid Oregon Visa Gift Card Works
Members can visit any Mid Oregon branch and buy Visa Gift Cards from one of our tellers. Activation of your cards happen within 24 hours, There is a one time cost of $3 per card, and the card will not expire for up to five years. There are no monthly maintenance fees unless the card is unused for 12 months. There is a minimum amount of $10 loaded onto the card, and a maximum of $1,000. Replacement cards are handled through the convenient Visa customer service center, and there is a modest fee to replace the card. More details are available at any Mid Oregon branch.
To purchase Mid Oregon Visa Cards a non Mid Oregon member would need to join the credit union. Details on joining are available on our website or by contacting us as per above.
Tis the Season to Avoid Online Shopping Fraud
Online holiday shoppers, gear up and hunker down. You could fall victim to serious scams unless you know how to distinguish a legitimate site from a rip-off.
“You really have no idea who’s on the other side of the transaction when you make a purchase online,” said Jim Stickley, founder of San Diego-based Stickley on Security. “You have a pretty good comfort level with big online retailers or known brick and mortars, but the same can’t be said for a no-name website that has an amazing deal that might be a little too good to be true.”
Stickley, whose education videos have been viewed more than one million times by credit union members, warns that there is no one simple thing you can do to guarantee an online website is real. But using a few different strategies together may help you separate safe sites from questionable sites:
Check for a security certificate
Before typing in any confidential information or account numbers, make sure the link changes from http:// to https://. That “s” at the end does not guarantee trust, but it does mean the retailer has filed for a security certificate, paid a fee, and given at least some verified contact information.
Find a real person
Call the contact phone number, but if all you get is a recording don’t count on getting satisfaction if a product fails.
Look for broken links and missing images
Poor website design is a warning sign; an even bigger danger now is a thief who knows you’re looking for errors and creates an error-free illegitimate site.
Use user reviews–with caution
Not all reviews are accurate, and some reviewers have a financial interest in an item or a competing item. Find sources with many reviews and look for patterns where reviewers agree on what they like and don’t like. Compare user reviews with those from the Better Business Bureau and Consumer Reports. Then conduct a separate search on the Internet by typing the website or company name and such terms as “complaints” and “reviews.”
Safeguard your computer or device
Don’t shop online unless your operating system, browser, and security software are up to date. If your smartphone doesn’t have security software, don’t use it to shop online until it’s protected.
By staying informed and following these tips, you can help protect yourself from identity theft and fraud, ensuring a safe and enjoyable shopping experience during the holiday season.
Mid Oregon provides a valuable resource for enhancing your online security. We invite you to explore our Stickley on Security section within the Security and Fraud Center. This platform offers timely articles covering a range of digital security topics, along with informative videos. Additionally, you can subscribe to receive news and alerts via email, ensuring you stay informed with the latest updates to keep your financial accounts secure in the digital landscape.
Read additional blog articles on cyber security and fraud.
As a reminder, Mid Oregon will never initiate a call asking for personal or account information via phone, text, or email.