Skip to content

How to change or reset your PayPal password

How to change your PayPal password

PayPal is a quick and easy way to send and receive money. But since it is usually linked to your credit card, it’s important to change your password regularly and always use a strong one.

Please note that you can’t change the password through the PayPal app — you’ll have to log in through a browser.

Here’s how to change your PayPal password in four easy steps:

  1. Log into your PayPal account and click the little gear icon in the upper right corner.

  2. Click on “Security” in the top banner.

  3. Click “Update” in the “Password” field.

  4. Enter your current and new passwords and click “Change password.” All done!

How to reset your PayPal password

If you forgot your PayPal password, you can reset it through the browser and the PayPal app. For that, you need to:

  1. Go to PayPal, click “Log in,” and select “Forgot password?.”

  2. Enter the email address you linked to your PayPal account and click “Next.”

  3. Select your preferred method for the security check, then click “Next” to proceed.

  4. After completing the security check, create a new password for your PayPal account.

How to change your PayPal security questions

Please note that you can’t change the security questions through the PayPal app — you’ll have to log in through a browser.

Here’s how to change your security questions on PayPal:

  1. Log into your PayPal account and click the little gear icon in the upper right corner.

  2. Click on “Security” in the top banner.

  3. Click “Update” in the “Security questions” field.

  4. Select new security questions and write your answers. Click “Save” and you’re done!

How to set up a passkey for your PayPal account

Passkeys are a new and secure authentication standard introduced by the FIDO Alliance. Think of passkeys as a replacement for passwords that use your fingerprint, face, or a device PIN to sign in to apps and websites across the internet. Designed for supreme security and convenience, passkeys facilitate a seamless login process.

If you are interested in setting up a passkey for your PayPal account, here’s a quick rundown of how to do it:

  • Access your PayPal account using your existing username and passwords.

  • Once you access your account you will see an option “Create a passkey.”

  • Now you will need to authenticate via biometrics.

  • Once you’re authenticated, the passkey will be automatically created, and the next time you log in to your PayPal account, you will not need your username or passwords. The passkey will do the trick.

How to use PayPal safely

Using financial services online is convenient, but it can also be risky — there are many malicious actors lurking on the internet, trying to steal your money. Follow these simple tips to increase your security while making payments online:

Avoid making transactions when connected to public Wi-Fi. Hackers can set up fake hotspots and then monitor your actions online. Using a VPN will encrypt your connection, making it impossible for anyone to see the data you send and receive. You only need to be aware of snoopers looking over your shoulder as you type in your passwords!

Keep the PayPal app up to date. Apps can have vulnerabilities and bugs that are not discovered for months. But once they are brought to light, your account could be in danger. Set up automatic updates on your PayPal app to make sure you have the latest security patch installed.

Be cautious with links and attachments in emails. If you get an alarming email from PayPal claiming that your account is in danger and you must change your password immediately, don’t click any links. Open a new tab, enter the address manually, and check to see if your account is really in danger.

Enable two-factor authentication. Passwords are your first line of defense, but using 2FA will take your account security to another level. You can choose to receive a code via text or use an authenticator app or a security key for your PayPal account’s 2FA.

Set up passkeys. Passkeys are a new, passwordless authentication method that offer a more secure and convenient way to access websites and apps using only your fingerprint, face scan, or a device PIN. Because passkeys leverage public key cryptography, they are resistant to phishing attacks, making them even more secure than most multi-factor authentication methods.

Use a unique and strong password. When you change your password, pick one that is impossible to guess. That means using at least 12 characters that include upper- and lowercase letters, numbers, and special symbols. Need help? Try our password generator.

Keep your PayPal password safe with NordPass. Let’s be frank. All of us have way too many passwords on our hands. Remembering each one — well, that’s just an illusion. But with the NordPass password manager you can have all of your passwords securely stored in a single place, and you can autofill them with just a click. The same goes for passkeys — the NordPass Passkey Holder is designed as a secure storage for all of your passkeys. Tidy mess of online life with NordPass today.

Make using financial services online stress-free with NordPass!

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

What is the dark web and how does it work?

The dark web is the underworld of the internet. A place where criminality thrives and anything is available—for a price.

Nobody knows for sure how large the dark web is. The best estimates suggest dark web markets handle around $1.7 billion annually. Data accounts for a huge chunk of that activity.

Dark websites buy and sell every type of personal data, from credit card numbers to voter registrations. Criminals use that data to profile targets and make cyber attacks more deadly.

That’s why understanding the dark web is a cybersecurity must. Companies and private users need protection against data theft and know how to respond if their data is compromised.

This blog will explore the darkest corners of the web. We will examine the dark web and how it differs from the deep web. We will also provide tips for protecting your data from dark web sellers.

Key takeaways

  • The dark web includes web content that search engines cannot access and users cannot reach with standard browsers.

  • Dark web content differs from the surface web, which is accessible via Google and browsers. The deep web is not indexed by search engines but can be accessed by browsers. The dark web is inaccessible without a Tor browser.

  • The dark web initially sought to evade censorship and ensure privacy. However, it later became linked to criminality as anonymous marketplaces and cryptocurrencies emerged. Law enforcement bodies routinely close markets, but buying and selling continues.

  • Goods available on the dark web often include narcotics, counterfeit medications, weapons, and stolen data. Users can purchase almost any illegal items via anonymous payment methods. Many customers are cybercriminals, intent on leveraging personal data to access bank accounts or company networks.

  • Safeguard data to keep it away from dark web sellers. Security measures include using VPNs, applying strong password policies, and controlling network access. Businesses should use dark web monitoring to detect potential data breaches early and mitigate the risk.

Dark web definition

The dark web refers to encrypted internet sites that are not indexed by traditional search engines. Users can only access dark web content with the Tor browser.

This browser anonymizes a user’s identity and traffic by encrypting and “bouncing” data around a series of globally distributed nodes. This process, known as onion routing, makes it difficult for outsiders to tell what content users access, enabling surveillance-free transactions or communication.

How does the dark web work?

The public internet or surface web is constructed from visible servers and web content identified by public IP addresses.

The dark web also features server-hosted content, but dark web sites lack standard identifiers or are excluded from indexing by website owners. Search engines cannot dark web sites to their indexes and search results.

Almost 99% of web content is thought to evade search engines. This includes data protected by password portals, obsolete files, and anything Google’s algorithms decide is irrelevant. However, not all this data qualifies as part of the dark web.

To be part of the dark web, sites must be invisible to a standard web browser and search engines.

How the dark web ensures anonymity

The dark web requires non-standard protocols and encryption techniques. Browsers like Tor (The Onion Router) use special protocols to generate encrypted entry points. These protocols use a layered encryption model. This wraps data packets in many layers.

Tor also plots complex pathways for dark web data. As data passes between nodes, layers of encryption peel away, like the skin of an onion. There is no traceable connection between the entry point and the destination. Users remain anonymous as long as Tor operates.

Tor differs from standard browsers in other ways. No identifiable traffic passes between users and their ISP. Tor clears cookies and browsing data after every session. It also disables geolocation features that can reveal a user’s location.

What is the dark web and how does it work scheme

Standard browsers can access most internet content, even if it does not appear in Google results. But the dark web is different.

Experts estimate the dark web comprises around 0.03% of unindexed content. The amount of hidden data is rising, though, and even 0.03% is a large amount of information.

Difference between surface web, deep web, and dark web

Before we dive deeper, let’s clear up a common misconception by defining some key terms. We cannot talk about the “dark web” without understanding how it excludes the surface web and the deep web.

surface web deep web dark web

Surface web

The surface web is the outer layer of the internet that web browser users see. When you run a Google query, the search engine delivers results from the surface web.

Algorithms process indexed data, assessing its relevance and quality. In the process, search engines miss a huge amount of data. Ideally, this doesn’t matter because indexers collect the most relevant information and ignore everything else.

For instance, Google might return a set of Amazon landing pages for a query about sports jackets. Searches won’t include back-end metadata or private vendor pages that require passwords. Users only see publicly accessible product listings.

Estimates vary, but it’s safe to say the surface web comprises about 10% of the total internet.

Deep web

The deep web comprises internet data that is not indexed by search engines. Deep web data is not really “hidden” from ordinary browsers. Content may only be accessible with login credentials, but you don’t need Tor or similar layered encryption tools.

Deep web content includes data stored behind log-in portals or paywalls. Social media profiles are a good example. However, most deep web content is mundane website data like unused or out-of-date files. Site owners use the robots.txt file to redirect search engines and avoid excessive traffic.

Estimates vary about the size of the deep web, but it forms around 90% of internet content.

Dark web

The dark web is a subset of the deep web that exists in the shadows. This hidden web features everything we cannot see without special tools.

Because of this, estimating dark web traffic is almost impossible. The same applies to monitoring dark web criminal activity. It’s hard to know whether your personal data is being sold online. Companies cannot tell when hackers conspire beyond surveillance to plan attacks.

When was the dark web created?

The dark web started life in 1999 in the research lab of University of Edinburgh student Ian Clarke. As part of his computer science degree, Clarke wrote a landmark paper on “a Distributed, Decentralised Information Storage and Retrieval System.”

In 2000, he released a working version of his project called Freenet. Clarke’s goal was to provide members of the public with total anonymity. As concerns about online privacy and government censorship grew, Freenet was a natural progression. Nobody called it the “dark web’ —at least not yet.

Ironically, US intel agencies made the next leap forward, releasing the Tor network in 2004. Scientists at the Office of Naval Research created Tor to enable anonymous battlefield and intelligence activity. However, the creators successfully argued for public release.

The designers realized that decentralized routing and layered encryption needed a large community of users. That’s why they launched the Tor Project and fine-tuned the Tor browser in 2008.

Tor could not function without a large user community, even if that meant the government losing control—which is exactly what happened.

In 2009, a shadowy website called Silk Road started to make headlines. Based on the dark web, Silk Road thrived as cryptocurrencies expanded. Dark web marketplaces soon sold everything from narcotics and firearms to pornography, pirated software, and prescription medication.

The FBI raided Silk Road founder Ross Ulbricht in 2013 and closed the site, but the dark web remains a thriving marketplace. Silk Road 2.0 appeared immediately, followed by Diabolus Market and OpenBazaar.

The dark web has also become notorious for more than illegal goods. A 2022 study found 24.6 billion pairs of credentials available for purchase. The dark web now functions as a credentials brokerage, providing access to vast private databases.

Cyber attackers obtain passwords via data breaches. Other criminals buy stolen data to use in phishing or other cyber attacks. Prices are easily affordable, with credit card details retailing for around $120 and single passwords costing just $10. It’s a cybersecurity nightmare.

Why does the dark web exist?

Given the criminal activity associated with the dark web, it’s natural to ask why the dark web exists. Scientists developed the underlying technology with noble purposes in mind. The ONS and Ian Clarke never wanted to encourage crime, but their creations made the dark web possible.

The dark web’s creators set out to protect individual privacy. By the late 1990s, early enthusiasm about the internet gave way to fears about crime and surveillance. People needed ways to browse and communicate anonymously. Tor and Freenet were effective solutions.

The dark web is still a valuable privacy tool. Media organizations like the BBC, the New Yorker, and ProPublica use dark web tools to allow censorship-free browsing in repressive countries.

Is the dark web illegal?

The legal situation surrounding the dark web is pretty simple. Using dark web tools is legal, but using the dark web to commit criminal acts is not.

The benefits above are probably why the dark web remains legal and supported by some governments. Tor is the most reliable way to escape the attention of authoritarian states.

Balancing anonymity against credential thefts and illicit selling is hard, but states tend to see legality as a better option.

Note: Some countries suppress dark web usage. China, Russia, and Vietnam all prohibit Tor usage (with variable success). Keep that in mind if you use Tor when traveling.

Types of threats on the dark web

The dark web may be legal, but it’s not safe. Many critical threats make the dark web dangerous. Here are just a few of the most concerning examples:

  • Illegal activity. When users access the dark web, it’s easy to become involved in criminal activities. Dark web marketplaces peddle illicit drugs, firearms, and even stolen information like medical and legal documents. Buying stolen or prohibited items brings the risk of legal consequences.

  • Malicious software. The dark web is unregulated. Dark web forums you visit could direct you to malware and compromise your device. They could also direct you to illegal content without warning. There’s no way of knowing.

  • Hacking. Dark websites are havens for data thieves and other hackers. These actors are happy to target customers or casual dark web visitors alike.

  • Ransomware-as-a-Service. Dark web vendors now sell off-the-shelf ransomware kits, allowing almost anyone to mount cyber-attacks. Groups like REvil and GandCrab provide specialized software that leverages stolen data.

  • Webcam attacks. One of the scariest dark web hazards is webcam hijacking. Attackers target visitors with unsecured cameras. They may then deploy remote administration tools to blackmail targets or use the camera to gather data.

  • Data breaches. The dark web is a global hub for originating and executing data breaches. Nobody is safe. For instance, in March 2024, communications giant AT&T reported a data breach involving 73 million records. Stolen data was available on the dark web from 2019. And AT&T is just the tip of the iceberg.

  • Law enforcement. Criminality is everywhere on the dark web, but so is law enforcement. Users risk detection and prosecution if they engage in illicit behavior. Never assume that contacts are who they say they are.

What is the dark web usually used for?

As the list above suggests, much dark web activity is either borderline or totally illegal. However, not all dark web activities break the law.

Almost anything prohibited by national laws appears on dark web markets. It’s common to find vendors selling drugs, weapons, medical records, prescription medications, and illegal images or videos. There are few limits on what is bought and sold.

Researchers investigating the cross-border wildlife trade found 153 endangered species for sale on 50 dark web forums. Democracy is even on the shelves. One incident found 40 million US voter registrations selling for $2 each.

Anything goes. Marketplaces are hard to track as they come and go. After Silk Road closed, Dream Market became a go-to vendor for opiates. AlphaBay expanded the use of niche crypto-currencies, while DarkMarket focused on selling personal information. All have closed, but successors continue.

The dark web has other uses, though. It’s not all about selling illegal goods. The dark web is also used to:

  • Access paywalled academic journals and enable research sharing.

  • Evade censored or geo-blocked content.

  • Search the web without ads or cookies of any kind.

  • Share information confidentially, for example, about protests or whistle-blowing.

  • Find essential medications at affordable prices.

Is your business data on the dark web?

There are some positive uses of the dark web, but we need to be aware of the dangers. Most importantly, every internet user and company must know if their data is available via dark websites. And we need ways to prevent this.

Let’s start with a simple process to check whether your information is on the dark web.

Firstly, don’t enter the dark web alone. Individual users lack the contextual data and tools to penetrate dark web defenses. Logging onto Tor and searching your name won’t work.

Companies worried about leaked credentials should use in-depth threat exposure management platforms like NordStellar.

Dark web monitoring solutions leverage huge databases of exposed credentials. Scanners constantly analyze databases of compromised credentials and scan dark web forums and marketplaces for keywords related to your business data.

How to keep your company data off the dark web

Searching the dark web for confidential data can be imprecise. A smarter solution is preventing the disclosure of your company data in the first place.

Dark web criminals are clever and ruthless, but cybersecurity measures deter even the most skilled data leeches. Many companies fail to put those barriers in place. That’s why dark web markets thrive, but it doesn’t have to be like that.

Here are some tips to secure your data and ruin the bottom line of dark web data vendors:

  • Protect traffic with a Business Virtual Private Network (VPN). VPNs encrypt traffic and hide your data in transit. Secure every endpoint with VPN coverage to block data thieves.

  • Guard your credentials like a hawk. Credential theft or brute forcing allows criminals to access your network and steal user or customer data. Enforce strong, regularly-changed passwords. Add multi-factor authentication for all log-ins. Apply Zero Trust principles to minimize access to sensitive data.

  • Be smart about phishing. Phishing encourages users to click dangerous links, leading to malware infections and data loss. Implement advanced DNS filtering solutions to prevent access to websites used in phishing attacks. Train employees to spot phishing emails and explain why phishing awareness is a critical data protection issue.

  • Use dark web monitoring. Dark web monitoring is a must-have for companies handling sensitive data. Remember the AT&T case. It took 5 years to uncover the data breach, resulting in millions of dark web sales. Monitoring informs you immediately about data exposure. It also helps you tweak your security posture to prevent cyber attacks.

  • Put in place holistic dark web protection. Don’t apply password security, VPN coverage, and access controls independently. Gather everything together in one, like NordLayer’s threat protection setup. That way, you can anticipate and neutralize threats before they cause problems.

The tips above will protect companies who do not intend to access the dark web.

But what if you need to use the dark web safely? In that case, extra data security measures come into play.

  • Be very cautious about exposing confidential information on dark web forums. Never mention your name, employer, phone number, or address.

  • Never trust dark websites. There is no SSL encryption on the dark web, and nobody certifies dark web sites as safe to use. Remember that when entering discussions or buying goods.

  • Don’t click links on forum posts. The same applies to links. Dark web links could easily be malicious or lead you to illegal content. As a rule, avoid clicking unknown links if possible.

  • Disable Java and ActiveX. You may already have done this, but disable these frameworks before firing up Tor. Both are notoriously vulnerable to exploits, especially by dark web residents.

  • Separate dark web browsing from critical assets. Ideally, only use Tor inside a well-defended network segment. Create a secure zone with minimal east-west movement. If the worst happens, this should restrict the damage.

Tips on how to protect business information from data theft

Hidden data marketplaces are alarming, but could also be a good thing. Knowledge about the dark web should motivate us to update our data security practices.

How can you safeguard sensitive information and stay one step ahead of data thieves? Let’s finish this blog with some data security essentials.

Check statements for financial anomalies

Cyber fraud often shows up first in your company finances. Don’t assume everything is fine. Checking cash flows for unusual payments is always a wise move.

Criminals often take small amounts regularly instead of withdrawing huge sums in one transaction. Minor unauthorized payments could be an early warning that business data and credentials are available on the dark web.

Lock down critical business data

If users in your business access the dark web, network segmentation is essential. Network segmentation creates secure zones within the network architecture. These zones are protected by firewalls and access controls, admitting authorized users but blocking everyone else.

Protect sensitive data within safe zones, and consider creating quarantine zones for dark web browsing. The more barriers there are between business data and dark web users, the better.

Monitor the dark web for data breaches

Stay aware of known data leaks and monitor dark web marketplaces for your business data. Dark web monitoring services scan materials on the dark web, alerting you rapidly should data theft occur.

Take advantage of security alerts provided by financial companies and online vendors. Banks and payment processors like PayPal enable customized alerts to flag suspicious activity.

The same applies to everyday business tools like social media and email. Google and Facebook enable activity alerts and they supplement dark web monitoring.

Remember: thieves may buy social media credentials on the dark web and use them to acquire more information. Any alerts are potentially worrying.

Update your security tools

Finally, only use reputable security software to safeguard devices and apps. Avoid free VPNs or virus checkers. These tools may not work effectively and could even deliver malicious software. Stick to trusted vendors and regularly patch security tools to stay ahead of attackers.

The dark web is one part of the cybersecurity puzzle, but it provides a great reason to improve your cybersecurity game. Safeguard data, learn about dark web threats, and adopt a cautious approach. But if you have any concerns, expert help is easy to find.

Contact the NordLayer team to discuss dark web threats and fine-tune your business security.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

38 Cybersecurity Subreddits Every MSP Must Join

Want to learn what cyber buyers are saying? 

Or hear about the latest breaches and ways to increase overall security measures?

Or maybe you’re looking to improve your Facebook ads to increase conversions?

You’ll find all of that and more on Reddit. Reddit has 267.5 million weekly active users as of Q4 2023. Engaging conversations. Great threads. Tons of value. Expert insights. 

Reddit isn’t just a place for celebrity news and funny cat memes that go viral. It’s a place where MSPs and other IT professionals come together in targeted subreddits to discuss the latest breaches, compare vendor technologies, discuss pricing models, and implement innovative marketing techniques to scale a business. Good enough reasons to join, right?

We’ve put together a list of 38 cybersecurity subreddits for MSPs and IT professionals. Make sure you join them all. 

  1. r/msp 

The largest MSP subreddit has over 188K members with topics that range from securing clients to product reviews from fellow industry professionals. This is THE subreddit for MSPs. 

  1. r/cybersecurity 

Whether you’re looking for endpoint security solutions or different ways to implement security measures across your organization, this subreddit is the place for you. You can also filter out the topics in the search bar as the volume of posts is incredible. 

  1. r/sysadmin  

r/sysadmin involves more technical threads geared specifically at IT professionals. A good portion of the discussions revolve around cloud services. Lots of discussions centered around Office 365. Licensing is also a very popular topic. 

  1. r/netsec  

r/netsec is a hub of technical information and security content curated by the community. It is comprised of researchers, security practitioners, students, and hackers that help moderate the discussions.

  1. r/Information_Security 

Password managers, MFA, and passwordless authentication are hot topics in this subreddit. You’ll also find plenty of insights on access management and security controls here.

  1. r/Malware 

Everything you need to know about malware. The community features malware reports, analysis, and information for [anti]malware professionals and enthusiasts. The malware analysis threads are exceptional. Learn about the latest malware stealers here.

  1. r/ComputerSecurity 

r/ComputerSecurity consists of IT security news, articles, and tools. “What exactly can hackers see?” was one of the most engaging topics. Kind of makes you wonder if your security measures are up-to-date, right? 

  1. r/ITdept  

IT pros come here to share their frustrations and talk shop. You’ll find the occasional vent or rant. The threads are very specific to IT pain points and employee training, a topic that appears often.

  1. r/MSSP 

r/MSSP covers best practices and industry knowledge that every MSP can benefit from tremendously. Compliance is a popular topic. Endpoint management is another one. Lots of vendor comparisons and reviews make this subreddit really valuable.

  1. r/IdentityManagement  

This subreddit digs a bit deeper into IAM and user access. Learn about credential management, who wins in a head-to-head comparison between SSO vs. MFA, and a very interesting thread on Using Auth0 to Collect Consent for Newsletter Signups. 

  1. r/MSPJobs 

Considering a new role? Need advice fixing up your CV? Maybe you want to just check the current job market or hire someone exceptional to join your team? This is THE subreddit for MSP job opportunities.

  1. r/datarecovery 

r/datarecovery is a place to discuss the ins and outs of data recovery, both logical and physical. Whether it’s an external hard drive or 400GB of data wiped out from a corrupted server, this subreddit offers support, advice, and recommendations for recovering lost or stolen data.

  1. r/SmallMSP  

Are you a small MSP owner or technician? Want to get insights on pricing models and advice on how to manage customer calls better? You will definitely want to check out this informative subreddit.

  1. r/InfoSecNews 

Get the latest information security-related news from around the web. Find out about the latest breaches, policies, and privacy updates from this highly engaged group of 18K InfoSec professionals.

  1. r/ISO27001 

Compliance is a huge concern for MSPs and security leaders. This subreddit focuses on everything ISO 27001 related to keep you in the loop and maintain the best ISO 27001 compliance practices.

  1. r/devops 

Managing a team of developers? Maybe you’re just curious to learn the latest CI/CD strategies to keep your clients’ pipelines and software supply chains secured? r/devops is an incredibly connected community of over 347K developers. Sharpen your technical skills here.

  1. r/networking 

r/networking is another massive subreddit that has over 348K members. Get insights on the best firewalls, routers, and switches to power up your MSP business. Tons of community-generated product reviews and gear talk.   

  1. r/networkautomation 

Networking + AI. Discover ways to automate data and workflow processes with this growing community of network automation specialists.

  1. r/outages 

There is nothing more frustrating and costly than a service disruption. Outages happen. Whether it’s an AWS outage or Safari, you’ll be kept up to speed in this community.

  1. r/ITProfessionals 

Need some cable management assistance? Untangle those cables, gain insights to improve workplace engagement, and soak in some great advice from a community of IT professionals in this subreddit.

  1. r/Hosting 

Hosting is a big part of running a successful website. Get the inside scoop on shared hosting, WordPress website hosting, cloud hosting, VPS providers, dedicated servers, and other hosting-related services here.

  1. r/macsysadmin 

Operate a Mac? It’s ok if you don’t. Your clients’ certainly do and have many connected Apple devices that you have to secure 24/7. Make sure you join the subreddit for all things related to the administration of Apple devices. 

  1. r/pwned 

Need to know which devices were recently compromised in the latest breach? Hopefully, not yours. Make sure your data is safe. Although the posts aren’t as consistent as other communities, you can still learn a lot.

  1. r/threatintel 

DDOS attacks. Trending IOcs. The latest cybersecurity challenges placing a financial dent in your business. All here. This subreddit will provide you with a wealth of information about threats, trends, vulnerability findings, and tools

  1. r/techsupportmacgyver 

302k curious minds that love to build and break apart cool tech things, just like MacGyver. You’ll find ingenious ways to put USB flash drives together and how to repair broken servers. Get ready to say “wow”. Seriously.

  1. r/windows

With over 316k members, r/windows is the largest unofficial community for Microsoft Windows. Plenty of interesting threads centered around Copliot and DYI videos for Windows-related troubleshooting issues and Windows installs.

  1. r/linuxadmin 

Linux user or admin? This subreddit covers all things Linux-related. It also has a very engaged community of 213K strong.

  1. r/aws 

Securing AWS cloud environments and S3 buckets is part of an MSP’s day-to-day. This massive subreddit covers everything AWS-related. From S3, EC2, DynamoDB, IAM, VPC, and more, you’ll find what you’re looking for here.

  1. r/talesfromtechsupport 

Everyone loves a good tech support story, especially when you get to help someone out. This subreddit is one of the best out there. You’ll find a community of 771k genuinely awesome people happy to lend a helping hand. Don’t be shy to ask a question here.

  1. r/homelab 

r/homelab is a place where over 700k techies and sysadmins unite to share their labs, projects, and builds. Draw inspiration from some of the most unique homelabs you will come across.

  1. r/SEO 

As an MSP, you’re constantly looking for innovative ways to market your business. SEO is the lifeblood of content and website optimization. Discover what type of content performs well and how you can optimize existing content to attract more clients.

  1. r/PPC 

Running paid Facebook or Google ads? Want to see the latest ad hacks and updates? Discover what paid tactics work from actual campaigns and experiments involving real money.

  1. r/SocialMediaMarketing 

Social media marketing. A topic that comes up quite often in almost every MSP discussion. Which paid social channels yield the best results? Maybe you need to outsource your ads to a good agency. You’ll find that, along with other creative ways to improve your ad campaigns.

  1. r/FacebookAds 

Facebook is one of the best places to target clients and is super popular among fellow MSPs. This subreddit will show you what type of Facebook ads perform best and ways to improve ROAS or return on ad spend.

  1. r/CybersecurityMemes 

Need a good laugh? Funny Wi-Fi names and passwords so easy to guess, you simply cringe. This subreddit will provide you with a daily dose of laughter and reality. We’re certain you can relate to some of these memes and jokes.

  1. r/phishing 

Are phishing emails bypassing your spam filters? You might want to check in with the r/phishing community before you click any suspicious-looking URL. Discover ways to spot phishing emails and what you need to be prepared for. 

Here are 33 Phishing Attack Statistics Every MSP Should Know About

  1. r/ransomwarehelp 

Has a client been hit by a ransomware attack? There might be a way to recover those encrypted files and restore those systems without paying the ransom fees. This connected community might have those answers for you.

  1. r/websecurity 

Is your website secure? How about your clients’? This subreddit is for website owners, developers, and pen testers looking to prevent web vulnerabilities such as XSS and CSRF.

And there you have it. 38 Cybersecurity Subreddits Every MSP Must Join

Just a little head’s up first. Make sure you thoroughly go over the Rules of Reddit and familiarize yourself with the reddiquette before you begin. 

Always follow the group rules or risk being kicked out in a heartbeat.

Found this insightful? We’ve got some more great resources for you. 

Here are 11 Valuable YouTube Channels Every MSP Must Follow and 14 Essential Podcasts for MSP Success. 
Make sure you follow Guardz on LinkedIn to learn about the latest cybersecurity news and tips to build a thriving MSP business.

Start Free Trial

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Guardz
Guardz is on a mission to create a safer digital world by empowering Managed Service Providers (MSPs). Their goal is to proactively secure and insure Small and Medium Enterprises (SMEs) against ever-evolving threats while simultaneously creating new revenue streams, all on one unified platform.

ESET Research investigates the Gamaredon APT group: Cyberespionage aimed at high-profile targets in Ukraine and NATO countries

  • ESET Research examined the operations of Russia-aligned advanced persistent threat (APT) group Gamaredon, which is currently the most engaged APT group in Ukraine.
  • The majority of Gamaredon’s cyberespionage attacks are directed against Ukrainian governmental institutions.
  • ESET saw a few attempts to compromise targets in several NATO countries – namely Bulgaria, Latvia, Lithuania, and Poland – but no successful breaches were observed.
  • Gamaredon notably improved its cyberespionage capabilities, and developed several new tools in PowerShell, with a focus on stealing valuable data – from email clients, instant messaging applications such as Signal and Telegram, and web applications running inside internet browsers.
  • ESET Research discovered PteroBleed, an infostealer that also focuses on stealing data from Ukrainian military system.
BRATISLAVA — September 26, 2024 — ESET Research examined the operations of Gamaredon, a Russia-aligned APT group that has been active since at least 2013 and is currently the most engaged APT group in Ukraine. Gamaredon has been attributed by the Security Service of Ukraine (SSU) to the Russian 18th Center of Information Security of the FSB, operating out of occupied Crimea. ESET believes this group to be collaborating with another threat actor that ESET Research discovered and named InvisiMole. The majority of Gamaredon’s cyberespionage attacks are directed against Ukrainian governmental institutions. However, in April 2022 and February 2023, ESET also saw a few attempts to compromise targets in several NATO countries, namely Bulgaria, Latvia, Lithuania, and Poland, but no successful breaches were observed. Gamaredon is using ever-changing obfuscation tricks and numerous techniques used for bypassing domain-based blocking. These tactics pose a significant challenge to tracking efforts, as they make it harder for systems to automatically detect and block the group’s tools. Nevertheless, during ESET’s investigation, ESET researchers managed to identify and understand these tactics and kept track of Gamaredon’s activities. The group has been methodically deploying its malicious tools against its targets since well before the 2022 invasion began. To compromise new victims, Gamaredon conducts spearphishing campaigns and then uses its custom malware to weaponize Word documents and USB drives accessible to the initial victim, expecting them to be shared with further potential victims. During 2023, Gamaredon notably improved its cyberespionage capabilities, and developed several new tools in PowerShell, with a focus on stealing valuable data – from email clients, instant messaging applications such as Signal and Telegram, and web applications running inside internet browsers.    However, PteroBleed, an infostealer ESET discovered in August 2023, also focuses on stealing data related to a Ukrainian military system – and from the webmail service used by a Ukrainian governmental institution. “Gamaredon, unlike most APT groups, does not try to be stealthy and remain hidden as long as possible by using novel techniques while conducting cyberespionage operations, but rather, the operators are reckless and do not mind being discovered by defenders during their activities. Even though they do not care so much about being noisy, they still put in a lot of effort to avoid being blocked by security products and try very hard to maintain access to compromised systems,” explains ESET researcher Zoltán Rusnák, who investigated Gamaredon. “Typically, Gamaredon attempts to preserve its access by deploying multiple simple downloaders or backdoors simultaneously. The lack of sophistication of Gamaredon tools is compensated by frequent updates and the use of regularly changing obfuscation,” adds Rusnák. “Despite the relative simplicity of its tools, Gamaredon’s aggressive approach and persistence make it a significant threat. Given the ongoing war in the region, we expect Gamaredon to continue in its focus on Ukraine,” he concludes. For a more detailed analysis and technical breakdown of Gamaredon’s tools and activities, check out the latest ESET Research white paper “Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023” on WeLiveSecurity.com. Make sure to follow ESET Research on Twitter (today known as X) for the latest news from ESET Research.

Seven-day moving average of unique machines attacked in Ukraine

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Expanding Innovation: Maximizing Business Offerings With REST-API Integration

In today’s fast-paced tech environment, integrating new solutions swiftly and efficiently can make all the difference in maintaining your competitive advantage. REST-API integration is one such solution that has the potential to accelerate innovation and optimize efficiency by bridging the gap between existing systems and new platforms. At our Platform 2024 event in Las Vegas, Scale Computing’s VP of International Sales, Scott Mann led the “Expanding Innovation: Maximizing Business Offerings With REST-API Integration” panel, showcasing how REST-APIs can transform the way companies manage and deploy a variety of solutions.

REST-APIs provide a standardized way to allow software applications to communicate with one another. They are particularly powerful because they enable different services to work together seamlessly, regardless of the underlying technology. This interconnectivity has become increasingly critical in today’s heterogeneous IT environments, where businesses often need to integrate multiple third-party applications, platforms, and systems.

In addition to Scott, the panel also featured Andy Brauer, CTO at EnchaCloud, a leading cloud service provider based in Pretoria, South Africa as well as Ian Smith, Technical and Alliances Director for EMEA at Scale Computing who also introduced UPONSCALE a self-service cloud platform developed by 365IT, a leading IT solutions provider in France.

Ian explains how the UPONSCALE platform was built on top of the SC//Platform to underpin their own MSP offering and how they leverage REST-APIs to provide users with greater control and flexibility over their virtual environments, helping them to tailor their environments to meet the specific needs of their customers, including:

  • Multi-Tenancy: Users can manage multiple tenants in isolated environments, ensuring data security and customized configurations for each client.
  • Self-Service Portal:The platform allows customers to create and manage their own VMs, set up networks, and even control backup and disaster recovery processes.
  • Built-In Container Management: Utilizing REST-APIs, the platform also integrates container orchestration, allowing businesses to deploy and seamlessly manage Docker containers.

Andy from EnchaCloud also shared insights into “Nav Engine,” a cloud marketplace platform that was designed to meet the needs of SMEs seeking a reliable and customizable cloud solution. Nav Engine was also built atop the SC//Platform and utilizes REST-APIs to deliver a user-friendly, self-service experience.

Andy goes on to detail how automated provisioning via REST-APIs has enabled users of the Nav Engine platform to quickly spin up new products, deploy new VMs, or configure a complex network in a more streamlined and efficient manner. As he noted during the discussion, “everything that we’ve done, we’ve done via APIs and we’ve abstracted the layers of administration and the end user portal so that it makes everything easy to use and fully secured.”

Andy further explains how using REST-APIs in the SC//Platform have enabled Nav Engine to offer a range of new services including white-label options so their customers could customize their cloud services under their own brand as well as the ability to extend their platform to new geographies.

But perhaps the most salient takeaway from both Ian and Andy’s presentations was the importance of listening to customer needs and continuously innovating to meet those demands. By using REST-APIs in conjunction with the SC//Platform, both UPONSCALE and Nav Engine have been able to quickly adapt to changing market conditions so they could deliver more robust, flexible, and user-friendly solutions.

You can watch the entire video on our YouTube channel. 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

Need help? Our team is just a message away