The DVR that became a launch point
Softfusion discovered a compromised DVR with an altered web server that was being used to target other offices. Devices outside the usual laptop inventory need attention, too.
MANAGED IT + CYBERSECURITYCYBER / FIELD GUIDESupport
A two-minute field guide for business owners
The attack rarely looks like an attack.
A camera recorder. A familiar-looking web address. An unexpected VPN login. Ordinary details can be the first visible signs of a much larger problem.
What we have encountered
Small clues.
Serious implications.
The domain that looked almost right
We identified domains registered to resemble a customer’s domain. A lookalike creates an opportunity for impersonation; registration alone does not prove an attack is underway.
The suspicious way in
We have seen suspicious VPN login activity aimed at network resources, received alerts, and terminated the connection. Unfamiliar access deserves prompt investigation.
Softfusion Cyber
Detect. Investigate. Contain.
Security signals need a response. Softfusion Cyber combines monitoring technology with our team to review what happened, communicate what matters, and coordinate next steps.
Depending on the package and deployment, Field Effect MDR can monitor endpoints, cloud activity, and network traffic from devices such as cameras and recorders. A protected endpoint showing signs of compromise can be isolated according to response settings and investigation.
Ask us about your current coverage →The practical checklist
Six habits that close common gaps.
Share this with whoever manages your computers, email, remote access, and business devices.
Know every device
DO Include cameras, DVRs, printers, servers, and vendor-installed equipment in your inventory.
DON’T Assuming a device is harmless because nobody uses it like a PC.
Guard remote access
DO Require MFA for VPN and administrative access. Review unusual sign-ins promptly.
DON’T Leaving old accounts, shared credentials, or unused VPN access in place.
Verify the sender
DO Confirm changed payment instructions or urgent requests using a known phone number.
DON’T Trusting a familiar display name or a web address that merely looks close.
Control remote tools
DO Keep an approved list of remote administration software and investigate surprises.
DON’T Leaving unrecognized tools installed without an owner or explanation.
Prepare to contain
DO Agree in advance who can isolate a computer and how your team will continue working.
DON’T Waiting for an incident to decide who has authority to act.
Practice recovery
DO Patch promptly, keep tested backups, and teach staff how to report suspicious activity.
DON’T Treating monitoring as a replacement for these basics.
The next move
What is your current coverage missing?
In a 20-minute security review, we can discuss your devices, remote access, and response plan—and identify where a closer look makes sense.