Topic: blog posts

10 Cyber Attack Techniques You Should Know(2023)

Posted on April 14, 2023 by Rachel Morrow - Blog

In our latest blog post, “10 Cyber Attack Techniques You Should Know,” we identify vulnerabilities found in the latest ConnectWise threat report and provide insight into their latest findings. Throughout 2022, ten of the most utilised attack techniques from a sample of 440,000 cyber attacks have been identified. Often, the rate of innovation and keeping pace with business competitors can override the need for cybersecurity. To contrast this, we offer a guide for decision-makers to make informed determinations on their tools and processes.

Cyber Attack #1:

Exploitation for Client Execution

If software has a vulnerability, malicious actors can leverage this knowledge to pose a significant cyber threat. Once gaining entry through these means, attackers can execute malicious code on a system. Subsequently, this may give access to secure data, enable full system control, or provide a launching pad for future attacks. More specifically, access enables the attacker to spread malware via spear phishing or drive-by downloads. This facilitates further exploitation of computers in a network and may lead to financial and reputational losses for businesses.

For further information regarding the dangers of phishing, read our recent article – Cyber Security: Plenty of Phish in the Sea

Here are a few common targets:

Browser-Based Exploitation:

With the prevalence of drive-by compromise and spear phishing, web browsers are a common cyber risk. Adversaries may exploit a specific individual by spear phishing or simply through typical web browsing. The latter may come in the form of manipulating a browser or browser plugin, typically used by the victim. For instance, an attacker could set up a dummy website that exploits a vulnerability every time the end-user visits the site. Conversely, they could insert malicious code on a legitimate site, primed to execute when visited by the victim. Both scenarios can lead to disastrous consequences.

Office Applications:

Common software vulnerabilities have been exploited to transmit malicious files either via attachments or download links. This phishing technique requires the user to open the attachment or download the link.

Common Third-Party Applications:

Common enterprise applications such as Adobe Reader or Flash have been targeted as a vehicle for cyber intrusion. Many exploits are delivered as objects within an app, e.g. a malicious pdf used to execute code on the victim’s reader software.

Detecting software exploitation varies depending on the cybersecurity solutions available, but there are signs:

Abnormal behaviour of browsers or applications
Suspicious files
Evidence of attempts to hide execution
Unusual network traffic

For further reading on cybersecurity best practices, see our article 10 ways to prevent cyber attacks.

Cyber Attack #2:

Boot or Logon Autostart Execution

A boot or logon autostart execution runs malicious code when a device is starting up, or when a user logs in. Similar to your morning routine, a computer completes a set of actions to start the day right, but an attacker can set those actions to suit their means. Usually, an attacker will use this technique to maintain control of a targeted system or extend access privileges. Operating systems may have features to enable the automatic startup of some software, attackers use these autostart programs to change the way an operating system works.

Cyber Attack #3:

System Binary Proxy Execution

Attackers clone trusted, pre-installed software, known as system binaries, to avoid security checks for unauthorised programs.

Cyber Attack #4:

Indirect Command Execution

Indirect command execution is a covert technique to extract sensitive data from an infected computer. Consider this scenario: an adversary infects a computer through a phishing email and creates a script to extract sensitive data. Then, the attacker uploads the script onto a computer and schedules it to run outside of business hours. Due to already having access, the script runs as the usual employee account and can extract financial data without triggering any alarms. As a result, the attacker maintains anonymity.

The 2023 SonicWall Cyber Threat Report is your guide to attackers’ rapidly evolving tactics.

See the SonicWall Cyber Threat Report for more

Cyber Attack #5:

Process Injection

Process injection involves running malicious code within a legitimate process on a target system. Essentially, malware disguises itself by using a trusted program, which helps it avoid detection by security tools and enables it to steal resources and access sensitive data. It’s similar to a petty criminal escaping through a crowded train platform, using the chaos to blend in with the crowd.

Cyber Attack #6:

Data Destruction

As the name suggests, data destruction is a process where attackers aim to cover their tracks by erasing all evidence of their activity. This technique prevents victims from recovering sensitive information and also makes it harder for data forensic professionals to investigate the breach.

Cyber Attack #7:

Data Encryption

Data encryption is another technique that hackers use to conceal their activity. This process involves scrambling data so that only the owner of the encryption key can access it. Ironically, we use encryption to secure our sensitive data, but in this case, it’s being used for nefarious purposes.

For example, a hacker might gain access to your personal information and encrypt the files, demanding a ransom in exchange for the encryption key. Using encryption maliciously can cause a business to grind to a halt and result in significant financial damage, as well as damage to its reputation.

One real-world example of this is the 2017 Wannacry ransomware attack. The attack disrupted key healthcare infrastructure in the UK and postal service FedEx in the US, resulting in hundreds of millions of dollars in damages. The attackers encrypted data, held hospitals and postal services for ransom, and put lives at risk.

See our case study on the efforts of Microsoft Digital Crime Unit for more.

Cyber Attack #8:

Valid Accounts

One way for threat actors to gain access to a system and evade security measures is by compromising existing employee credentials. Even dormant accounts can be targeted, allowing attackers to escalate their privileges and carry out malicious activities.

Cyber Attack #9

Execution Guardrails

Execution guardrails are security measures designed to prevent malware from running on a system. Similar to air traffic controllers, they ensure the safe passage of data and processes in a digital environment. However, like data encryption, they can be used for nefarious purposes. If a hacker has already used a process injection, they may attempt to manipulate the execution guardrails to run the code when the computer is inactive. By monitoring the user’s keystrokes and waiting for a period of inactivity, the attacker can increase their chances of success.

Cyber Attack #10

Command and Scripting Interpreter

Command and scripting interpreters are programs used to modify settings and carry out actions on a computer. Attackers can exploit these programs to exfiltrate data or download malicious code onto a target system. To minimise the risk of such attacks, it’s important to limit access to relevant employees, explore detection software options, and keep software and operating systems up-to-date.

For more information on the importance of patch management, check out our article on the topic.

In Conclusion

In conclusion, the list of cyber attacks highlights various techniques that malicious actors use to compromise computer systems, steal sensitive data, or cause disruption. These attacks range from exploiting software vulnerabilities, using autostart programs, cloning system binaries, to injecting malicious code into legitimate processes. Additionally, attackers may use techniques like data destruction or encryption to cover their tracks and evade detection. To protect against these attacks, it is essential to employ robust cybersecurity measures, such as keeping software up-to-date, using strong passwords, and implementing multi-factor authentication. Regular employee training and awareness programs can also help prevent successful attacks.

If you require an experienced and knowledgeable IT consultation, our experts are waiting to hear from you. We have product and service offerings to neutralise potential threats, empower your workforce and protect your business. Fill out the form below to get in touch.

Cybersecurity Training: Plenty of Phish in the Sea

Posted on April 5, 2023 by Rachel Morrow - Blog

In a world of increasingly sophisticated cyber threats, it pays to know your zero days from your APTs. Nevertheless, the growing arsenal of cyber weapons pales compared to breaches caused by another more familiar means: human error. In this article, we offer insight into protecting your business and hard-earn reputation in Cybersecurity Training: Plenty of Phish in the Sea.

Safeguarding against evils such as phishing scams and social engineering is as much about people as it is about tech. While not an excuse to divest from your cybersecurity infrastructure, it is a call to action to educate and empower your team.

According to an IBM Cybersecurity Intelligence Index Report, investigating thousands of breaches in 130 countries, human error was the main contributing factor to security breaches.

‘Human error was a major contributing cause in 95% of all breaches’

Since this report, there have been various findings corroborating these conclusions. In light of this, what can be done to protect your business? In this article, we explore the measures you can take to minimise your risks and tasks you can implement to help staff navigate cybersecurity dangers.

Phishing Scams

Phishing is broadly defined as an attempt to acquire sensitive data by impersonating a customer or a trustworthy figure via email. While phishing is a scattergun approach, businesses can be targeted in a focused attack. This approach is called spear phishing.

According to a report by our partners ConnectWise, here are some of the common techniques used in phishing scams:

Embedding links to unsecured websites requesting sensitive information
Malicious email attachments
Spoofing the sender address to impersonate a reputable source

Cybersecurity Training: Phishing Attack

Don’t reveal sensitive information – never reveal personal information i.e. passwords or financial information
Check website security measures – an ‘HTTP’ indicates the domain has not applied for security measures however, ‘HTTPS’ is a sign it has
Be aware of website URL variations – be wary of different spellings of domain names. Pay close attention to whether the URL has been altered in some way to masquerade as a trusted sender
Verify suspicious emails by reaching out directly to the business – should you receive an email requesting information, reach out through other means to verify before any transaction takes place
Update and protect – periodically update your operating system, software and web browser. In addition, install robust antivirus and malware protection

Social Engineering

In addition to phishing, there is a threat of a more personal and persuasive variety: social engineering. Rather than trying to guess passwords, cybercriminals often take advantage of personal vulnerabilities instead. Below are some social engineering techniques to be aware of:

Pretexting – the creation of a narrative to elicit the trust of the target. Consider this scenario: a call comes into the front desk at your bank. They claim to be a remote worker and have an access issue, they bemoan the timing of the problem as they have an important task due. Subsequently, they will need the issue resolved as soon as possible and apply considerable pressure on the front desk team to resolve it. This example has the front desk on the back foot due to the time sensitivity of the problem and the believable pretext of the remote worker.
Baiting – when an attacker bargains with an employee for the exchange of sensitive information. Imagine a malicious actor offering an employee access to their next salary increase. The information the employee requires can be found on a USB device they have found. After some persuasion, the employee gives in to temptation, plugs the device into their computer and now the attacker has access.
Impersonation – the invention of an authority figure or impersonation of an authority figure, to gain trust and access to an account.
Spear phishing – unlike phishing, spear phishing is a targeted attack on an employee or organisation. In this context, an attacker with have gathered some information to make them more convincing. Often this involves the name, address or job title of the victim.

Targeted Attacks

In 2020, the French Engineering company Altran Technologies were the victim of a spear-fishing attack. The cybercriminals impersonated the boss and CEO of the company to request a payment order from finance. To gain their trust, the attacker recreated an identical payment portal and invoice. Consequently, a member of the finance department approved the payment, resulting in a $3.6 million loss for the company.

Human error has been at play in this example. To avoid these attacks, a stringent verification procedure is a must, alongside cybersecurity awareness training for the frontline staff likely to encounter these scenarios. Unfortunately for Altran Technologies, their attackers effectively targeted specific employees and took advantage of their vulnerabilities to achieve their aims. Therefore, highlighting the potential damages caused by practised and ruthless spear-fishing.

Cybersecurity Training: Social Engineering

Businesses can arm themselves with preventative tactics:

Staff cybersecurity training – training enables staff to better recognise suspicious behaviour and therefore, offers the best course of action to avoid them.
Two-factor authentication – this offers an added layer of security for accounts and increases the difficulty for attackers to gain access
Strong password policy – implementing a company-wide password policy goes a long way to establishing a strong defence against brute-force password hacks (see our article for more information)
Access controls – assigning access based on job roles can reduce the blast radius of an attacker accessing your systems.
Security software – investing time/money into researching and purchasing relevant security products is a crucial part of modern business’s cybersecurity strategy
Disaster response – settle on an agreed protocol for the event of an attack and train your workforce to cooperate on an agreed response
Physical security – setup security cameras to monitor and protect areas where sensitive information or expensive equipment is stored

Cybersecurity Training for C-Level Professionals

Two-factor authentication – this is more important for professionals who have access to highly-sensitive data
Regular cybersecurity training – run threat scenarios and simulate attempts to gain unauthorised access. As a consequence, your team can be aware of threats and you can implement an effective threat protocol
Spam filters – equip your business with up-to-date spam filtering software to gatekeep staff email inboxes
Monitor logs – keep an eye out for suspicious activity i.e. multiple failed login attempts, access from unusual locations
Disaster protocol – in the event of a phishing attack, setting an agreed protocol is vital. Create reporting procedures, isolate affected systems and delegate the roles and responsibilities company-wide
Update and refine – stay informed on the latest cybersecurity protocols and threats so you can protect your business into the future

Conclusion

Achieving robust security is a layered and accumulative process. The problem is not just about the technology, it’s also about the people who interact with it. Alongside the preventative measures such as two-factor authentication, password policy and disaster protocol; staff training is equally as important. Parallel to these efforts, businesses are adopting proactive and iterative cybersecurity training processes. Without this approach, futureproofing your reputation and profits may become fraught with risk and possible disaster.

MS Teams Retires Wiki

Posted on March 31, 2023 by Rachel Morrow - Product Updates

At Leaf, it’s our mission to keep customers abreast of updates on the products we provide. In light of this, we are raising awareness of the latest developments in MS Teams. In this guide, we will offer our advice on the retirement of Wiki pages. Read on for more information.

See more information on the updated Teams platform here.

Phase One:

Starting in early March, users can no longer create new Wiki pages. However, they can read and edit existing Wiki pages and begin exporting to OneNote.

*An important detail to keep in mind: once you complete your export to OneNote your Wiki page becomes a read-only document.

Phase Two:

Come January 2024, the Wiki integration will no longer be accessible via Teams and users cannot export to OneNote.

However, the content will be accessible via SharePoint and previous Wiki content can be downloaded for the length of your company’s retention policy.

*If possible, delay your Teams update for the purposes of exporting to OneNote.

Discover how Teams can help you deliver seamless communication in your business, read our Teams article here.

Downloading Your Wiki Files

Before the Teams end-date for Wiki, follow the below steps to make sure you are prepared for January 2024.

With Teams open, navigate to the menu on the left-hand side and select Teams
Go to the channels section and select the relevant channel
Navigate to files
Select open in SharePoint
When in SharePoint, bring your cursor to the menu on the left side and select site contents *Note that only the site owners will have access to the site contents
Notice a folder called Teams Wiki Data

Before carrying on, there is something worth sharing. Once you’ve accessed Teams Wiki Data, you may notice that your files are in .mht format and the images are in jpeg format. As a result, you will not always know which image aligns with the corresponding file.

In addition, when selecting files to download, you have a couple of options. First, if you are only downloading select files, you can check the circle next to the file and download. However, if you require a bulk download, check the box as seen below and hit download.

Upon completing this process, the files download in a zip folder for you to use at your convenience.

After completion, you should have the option to “extract all” (see below)

When opening files, you will likely encounter some formatting issues (see below)

After Downloading Your Data

As seen above, there are a few formatting issues and a general cleanup needed to maintain your data. While there are a few steps to this process, after following our guide you will avoid losing your data from Wiki.

If you have any further questions, don’t hesitate to call +44(0) 2890 8976 50 (UK) or +353(0) 1582 4075(IRE) or drop us a line and our team will answer any questions you may have.

Alternatively, email us via hello@leaf-it.com and we will advise further.

Cybersecurity Case Study: Microsoft Digital Crimes Unit

Posted on March 28, 2023 by Rachel Morrow - Blog, Case Study

The Microsoft Digital Crimes Unit is a cybercrime prevention organisation operating on a global scale. In this case study, we explore its practices, its innovations and the takedowns it has helped coordinate over the years. In addition, we take a closer look into the malicious threats they have helped to neutralise and discover the extent of global cybercrime prevention efforts.

MS Digital Crimes Unit Origins

Following the success of Microsoft’s Global Security Strategy and Protections team, MS moved decisively to establish the Digital Crimes Unit in 2008. Comprising of skilled legal professionals, investigators and forensic analysts, the Digital Crimes Unit shoulders the responsibility of cybercrime prevention. Led initially by a former federal prosecutor, Richard Boscovich, the DCU has gone on to play a pivotal role. They are guided by several key tenants:

Collaboration

An understanding that cybercrime prevention requires collaboration between law enforcement and a host of various industries. This collaboration comes in the form of sharing information, resources and a shared motive to prevent cybercrime on a global scale.

Gain further insight into cybercrime prevention with our cybersecurity listicle 10 Ways to Prevent Cyber Attacks.

Innovation

In order to fulfil its mission, the DCU deployed innovative technologies and established new cybercrime protocols and initiatives. The DCU utilise the below technologies in their efforts:

PhotoDNA: a technology that analyses image files and produces an unrepeatable signature for each image. PhotoDNA is used in the fight against child abuse and exploitation
Machine Learning: machine learning algorithms parse patterns from large datasets to identify cyber threats. Moreover, this technology is used to predict future cyber threats that traditional methods may miss
Forensic Analysis Tools: the tools used to gather evidence of cybercrime and prosecute cyber criminals. Investigators will use forensic imaging software, file analysis and network analysis tools to prosecute a suspect
Malware Analysis Tools: malware analysis and risk eradication tool
Botnet Disruption Tools: designed to disrupt and ultimately neutralise botnets. They can take control of the botnet’s traffic and send it to a server they control, therefore countering its ability to carry out attacks
Threat Intelligence Platforms (TIP): a centralised platform to organise intelligence, prioritise and act on insights regarding a threat landscape
Open-source Intelligence (OSINT) Tools: a collection of social listening tools for dark web search engines and forums

If you’re seeking to find out more about multilayered security systems, read our article on Cisco Umbrella.

Legal and Policy Expertise

The DCU’s legal and policy experts combined their efforts to develop strategies and deliver on their objectives. These included policy, cybersecurity advocacy and input into legislative proposals. See the initiatives below:

Coordinated Malware Eradication: a centralised reporting technology that signals and shares information about malware incidents. This system was developed in concert with law enforcement, industry partners and stakeholders to encourage a multi-disciplined effort to prevent malware infections
Cyber Threat Intelligence Programs (CTIP): a real-time alarm system to enable a timely response to emerging threats and protect vulnerable end users
Digital Crimes Academy: a training program for law enforcement and stakeholders involving cybercrime investigation and digital forensics upskilling. Attendees can access resources, master cybersecurity tools, online courses and in-person training
Cybersecurity Policy and Advocacy: alongside law enforcement and cybersecurity partners, MS drew attention to cybercrime and influenced policy around it

Global Focus

Cybercrime affects aspects of business and public institutions, and as its sophistication increases it has become an international problem. The Digital Crimes Unit seeks to coordinate its efforts with a wide variety of professionals, on a global scale.

Customer Protection

Firstly, MS have a responsibility to protect and inform their users in regard to cyber criminality. A safer environment translates into a better experience with MS products and user awareness reduces the damages caused by cyber-attacks.

MS Digital Crimes Unit Takedowns

Over the years, the DCU has been pivotal in neutralising the threat of organised cybercrime groups. Takedowns neutralise botnets and prevent them from doing further harm. As a result, they protect typical end-users, businesses and organisations by limiting financial and personal loss.

Waledac Botnet A.K.A. “Storm Botnet”

Believed to have originated from eastern Europe the Waledac sent spam phishing emails, targeting recipients’ personal information i.e logins and credit card details. In addition, it also infected other computers with malware and enabled cybercriminals to access banking information and dangerously sensitive data.

The botnet grew at a staggering pace. Having first appeared in 2008, Waledac reportedly infected 70,000-90,000 computers and consequently, became a global threat. Law enforcement, industry partners and the Digital Crimes Unit married their expertise and in 2010, they seized control of Waledac. Microsoft executed a strategy called a “sinkhole operation”. Thanks to the sinkhole, Microsoft seized control of the botnet’s domain names and redirected traffic from infected computers to their own servers. As a result, communications between infected computers could be analysed, furthermore, the DCU then gathered information about infected computers and the botnet operators.

Rustock Botnet

During its period of activity from 2006-2011, the Rustock botnet was the sender of over 48% of spam emails. Rustock would capitalise on link clicks, information access and drive-by downloads to silently infect a computer.

The damages caused were not limited to individual computer users; businesses and organisations were also targeted. It’s estimated that billions of emails were sent daily, resulting in significant revenues for organised crime gangs.

Kelihos Botnet

Similar to our previous botnets, the Kelihos relied on infected or “zombie” computers to spread infection. After infecting a computer, Kelihos receives commands from the central command and control server. Moreover, Kelihos had a sophisticated layered infrastructure which enabled it to evade detection and evade takedown attempts. Moreover, its architecture was peer-to-peer(P2P) and infected computers communicated directly with each other instead of your traditional centralised server. Importantly, Kelihos had no single point of failure. This meant that no single component, function or process could cause the system to fail.

In further evasive tactics, a domain generation algorithm (DGA) generated a large number of random domain names. The Kelihos server constantly fluctuated between domains to avoid detection. In addition, a technique called “fast-flux” would rapidly change the IP address attached to the domain names in use. Despite a failed takedown attempt in April 2011 and a brief resurrection in 2012, there have been no reports of the Kelihos botnet being active since.

In January 2012, Russian citizen Andrey Sabelnikov was identified as one of the creators of the botnet. After being released on bail in 2013, Sabelnikov eventually pleads guilty to a single charge of conspiracy to commit computer fraud and subsequently reached a settlement with Microsoft in exchange for his cooperation in the case.

ZeroAccess Botnet

ZeroAccess utilised a P2P architecture and exhibited more resilience to takedowns than traditional botnets. It utilised a custom-built protocol that enabled its bots to communicate and continually update. ZeroAccess bot could pass on new instructions, configuration data and new peer addresses, therefore making it difficult to identify the true location of the command and control servers and decipher its communication.

First discovered in 2011, ZeroAccess was unique for its high level of sophistication and by 2012 it had become one of the largest botnets in the world. Estimated to have infected millions of computers and consequently stolen millions of dollars through its click-fraud operations. By July 2013, Microsoft’s partnership with law enforcement and partners, conducted a takedown of the botnet’s servers and attempted to disrupt its infrastructure. Since the takedown, researchers and cybersecurity professionals have observed a sharp decline in ZeroAccess appearances but variants continue to emerge.

Necurs Botnet

One of the largest and most adaptable botnets in the world, the Necurs botnet was a wholesale distributor of malware, a consistent source of phishing attacks and a procurer of personal information on a massive scale. Necur has infected an estimated nine million computers worldwide.

While the original location for Necurs is unknown many believed it to have been controlled by a Russian cybercriminal gang. Initially, the botnet came to the attention of a group of cybersecurity experts in 2012 who were able to gain insight into its operations and various attack capabilities.

By 2014, Necurs upgrades its malware delivery platform, to include ransomware and banking trojans. Subsequently, researchers in 2017 discovered that Necurs distributed the prevalent banking trojan Dridex and the Locky and Jaff ransomware.

Finally, in 2020, Microsoft seized control of its domains and IP address. Not only disrupting the botnet’s infrastructure but preventing the cybercriminals from launching new iterations of Necurs.

Conclusions

In conclusion, cybercriminal infrastructure, evasion tactics and technological innovation are concerning. However, the impressive cooperation of the DCU and its partners has pathed the way for optimism. The global tech industry is taking serious steps to tighten the net on criminality and their methods are improving every day. Moreover, businesses of all sizes are investing in cybersecurity tools and educating their workforce on cyber threats. The fight against cyber criminality will rage on for the foreseeable future but tech is rising to meet it.

The Digital Academy – NOW Group Partnership

Posted on November 15, 2021 by Rachel Morrow - Uncategorized

Launching the new digital academy are (from left) Megan McCleave, strategic partner champion at NOW Group; Steven Goldblatt, CEO Leaf; Hanna Mawhinney, NOW Group service development manager; and Gerard McStravick, head of digital transformation, data and operational excellence at Danske Bank

The NOW Group, which helps people with learning disabilities and autism get into the workforce, is launching a new digital inlusion programme to bridge the skills and diversity gap within the digital sector.

The programme, launched in October 2021, will serve as a digital learning centre, delivering qualifications in data analytics and providing participants an opportunity to work within the digital sector through work placements, leading to progression pathways and employment.

The first intake of the programme – the only one of its kind in Northern Ireland – will see 20 individuals with newro-diverse conditions take part in the 12-week academy, which is sponsored by us, Leaf and our friends at Danske Bank.

Leaf CEO, Steven Goldblatt said: “We live in an increasingly neuro-diverse world with no real strategy about how to change with it, so we support the vision and work of the NOW Group and commit to sponsor this Digital Academy for years to come.

“If we can change the lives of adults with a learning difficulty or autism and help them into the world of work, then we will have made a real difference together.”

Gerard McStravick, head of automation and digital development at Danske Bank, says: “While the digital skills shortage and need for greater digital inclusion is a daily topic of conversation amongst employers, people with disabilities are rarely mentioned as part of the solution.

“We want to play our part in changing that and bringing more diverse skills into the workplace. We’re looking forward to engaging with all the participants through the academy and identifying suitable opportunities for work placements within the bank.”

The programme is being delivered virtually to allow participants from across the north access to the training, giving them an opportunity to gain insight, learn new skills and foster relationships with some of the leading names in the sector.

Maeve Monaghan, chief executive of NOW Group, added: “We know that businesses across Northern Ireland need staff with digital experience. Our academy is specifically targeting people with disabilities who don’t always feel that they fit in in mainstream provision but provide a valuable service in entry level digital positions.

“We work with businesses to help them understand the value of having a neuro-diverse workforce and the competitive advantages this brings, and are delighted Leaf IT and Danske Bank are funding the programme.”

Mark Huddleston, former UK Skills Commissioner and member of MATRIX panel, said: “The recent 10X Economy and 10X Skills strategy documents emphasise the importance of a digital spine in the Northern Ireland skills ecosystem and the need to build capacity and capability in new and emerging technology.

“The foresight and vision of NOW Group to develop a Digital Academy to widen participation and do this on a co-design basis with the sector is an exciting development. Social inclusion and utilising the full extent of our human capital is vital.

“The benefits in creativity and computational thinking that neuro-diverse learners can bring to the tech-sector cannot be underestimated.”

Other partners on the programme include Kainos, Deloitte, Imperva, Fujitsu, Fibrus, AllState, Version 1 and Sentireal, who will offer placements, employment pathways and specialised professional skills workshops.

Windows 365 – Cloud computing made easy

Posted on October 27, 2021 by Rachel Morrow - Uncategorized

In June this year, Microsoft revealed their brand new operating system, Windows 11, with it they announced a whole bunch of new features, from MS Viva, and Windows 365.

Windows 365 is your new Cloud PC; as numerous businesses across the world are going hybrid, a one fits all solution is needed. Cloud computing isn’t something that’s new, but Windows 365 makes it easier than ever to have the one desktop wherever you go. Windows 365 will allow you to stream your own Windows Desktop wherever you are and on any device of your choice.

Instead of hosting your OS and applications on your computer, using your storage and hardware resources, Windows 365 lets you stream your apps, data and settings to any device, including MacOS, Linux devices or Android devices.

Features.

Built with hybrid working in mind, Windows 365 will enable your workforce to switch from desktop to laptop in the easiest way possible and pick up where they left off in a heartbeat.

“The ability to work whenever, however, and wherever it’s needed has become the new normal. All employees want technology that is familiar, easy to use, and available across devices,” said Wangui McKelvey, GM Microsoft 365, when the service was first announced.

“In the most complex cybersecurity environment we’ve ever seen, businesses need a solution that helps their employees collaborate, share and create while also keeping their data secure. We have an opportunity to design the tools that will empower this new world of hybrid work with a new perspective – and the power and security of the cloud.”

Configuring Cloud PC security measures (IC: Microsoft)

Integrations with your company’s security and identity management tools (Azure AD, MS Defender for endpoint) make setting up two factor authentication and conditional access simple. Encryption is also applied across the board, from data to network traffic running to and rom Cloud PCs.

Pricing and availability.

Pricing varies depending on what performance you wish to have for your Cloud PC, it is also based on a per user/month basis.

The lowest configuration would be targeted to frontline and call center workers or even staff that only have access to light programs or CRM software.

The highest configurations on the other hand is targeted to workers that perform computer heavy tasks, think creatives or software engineers.

Let’s sum it up.

What is it? A virtualization service for Windows 10 and Windows 11.
How much does it cost? Charged on a per user/month basis, varies by configuration.
Who is the target audience? Businesses of all sizes.

Windows 365 is made for workers that are looking to have the one desktop wherever they go on any device they have on hand, from a laptop to a tablet or even your phone.

If you wish to learn more about Windows 365 or pricing. Contact us below.

Staff Profile: Danielle Magee

Posted on September 14, 2021 by Rachel Morrow - Uncategorized

This month our Digital Marketing Executive, Jessen Armstrong, will be putting our Customer Sales Advisor, Danielle Magee, under the spotlight.

Danielle just recently celebrated her 15 years with Leaf! She has been working with us since she came out of school at the age of 16 after passing her NVQ Level 2 in Business Administration.

l-r, Steven Goldblatt, CEO ; Danielle Magee, Customer Sales Advisor; celebrating Danielle’s 15 years with Leaf

Jessen: Hi Danielle! Could you give your area of expertise as a Customer Sales Advisor?

Danielle: Within Leaf I work as part of the sales team, as a Customer Sales Advisor my areas of expertise would be helping to find that right endpoint device suited best for the client’s need, helping to manage their subscriptions, and providing services to accommodate the growth of the customers from O365, to CloudAlly Enterprise Backup solutions to Email Security, MS Azure storage, Sophos and Sonicwall Managed Firewalls, Cyber Security and Cloud Technologies.

Jessen: Could you describe the best parts of your job?

Danielle: The best parts of my job are that I get to facilitate the service desk, solutions, projects and I get to work with the Senior management team. From every aspect of the company to onboarding new customers to seeing the long-standing customers expanding and providing them support to grow. I have grown with the company you might say as I enter my fifteenth year with Leaf, learning the ever-evolving products and solutions that arrive in the markets so everyday continues to be like a school day.

Jessen: What’s your favourite technology?

Danielle: There are so many technologies out at the minute. The Internet of Things that make todays tasks so easy from your mobile phone apps that let you remotely control things in your home like the brightness of your living room lights to a timer to start recording your favourite TV show, from wirelessly controlling voice activated devices. I like the many streaming technologies that are out now for gaming communities bringing them together from their multiplatform games being able to play together on PC or console using platforms such as Steam and watching friends and gaining new ones on the services such as Twitch or YouTube.

Jessen: What are your hobbies outside of work?

Danielle: Outside of work I enjoy keeping fit and socialising, nowadays given the pandemic it has made things a little trickier to do so. As an avid gamer I like to stream online games, so I do get to meet new people from across the world, hearing about their cultures and interests and converse about my own. I enjoy listening to music whilst sketching and doing art in my spare time if I’m not out with my camera trying to find that perfect picture that just draws you in to another world of wonder.