Posts Tagged ‘identity theft’

Be socially responsible with your Social Identity

by Guy Ralfe on September 2, 2009

hacker

The social media call today is to get online and participate. Over the last year a day hasn’t gone by without someone mentioning a new contact through a social network site or some new statistic about the presence and reach of social media networks, but more often of late we are hearing more news of misfortune surrounding social media.

This is not unexpected as this is a common characteristic of social groups. It has gone on for centuries and is to some degree the cause of wars and organized crime – where there’s a large group that appears to have something relative to another it produces an opportunity to exploit. In social media this has manifested itself in Identity Theft and Brand Damage (topic of next post)

Identity theft seems to be rampant today and rather intimidating. An article in the Daily Mail quotes a large UK insurance company Legal & General as warning that insurance premiums may rise if household members utilize social media sites.

This is on the back of the claim that criminals are preying within these network sites for opportunities such as burglaries, personal account details and identity theft. What appears to be an innocent use of your ability to broadcast everything from your thoughts through twitter, photos on Flickr and everything about yourself on facebook, MySpace, LinkedIn or such sites, can potentially provide key information to criminals to utilize against you.

What this means is that we have to be conscious about how we configure our accounts on these sites and responsible with what information is shared through which channels.

Here is some edited advice published by Robert Siciliano on bloggernews

  • Before you post anything online, think about what a criminal could do with that data.
  • Don’t post specific details about yourself such as address, date of birth, kids’ names, pets’ names, phone numbers, or any account numbers or financial information of any kind. This information can often be used to retrieve passwords and help get fraudulent access to personal accounts.
  • Do not tell the world you are going on vacation! This is an open invitation to any would be burglar. Remember posting pictures of your vacation while on vacation is much the same as writing that you are on holiday.
  • If you’re a “partier” and like to imbibe, informing the world that you just smoked a joint is not only one of the worst things you could do for your career, it also makes all your friends guilty by association.
  • Before posting pictures or videos, consider what a criminal or potential employer might see. Could they be used against you in any way?
  • If you let your kids use social media, you must monitor every aspect of their Internet activities. Pick up McAfee’s Family Protection software and take control of your childrens’ Internet use.
  • Take advantage of privacy settings and lock down your profile, so that only those who you approve can view everything.
  • Get a credit freeze. This is an absolutely necessary tool to secure your credit. In most cases, it prevents new accounts from being opened in your name. This makes your Social Security number useless to a potential identity thief.
  • Invest in identity theft protection and prevention services such as Intelius. Not all forms of identity theft protection can be prevented, but identity theft protection services can dramatically reduce your risk.

Remember that it is not only criminals that are potentially scouting you out! Today it does not take a lot of effort to perform searches on individuals. Posting something that may be illegal or unsavory can just as easily be picked up by a prospective future employer, client or worse used against you in court!

Social media is built on trusting relationships. It is this trust that is manipulated to exploit your situation and information. As aptly demonstrated in Himanshu Jhamb’s article Social Media: A Dangerous Opportunity, this does not need to be intimidating and there are many things we can do to protect ourselves. We just need to be aware how these tools can be utilized and act responsibly to protect ourselves from criminals or others carrying hidden agendas.

Don’t be intimidated, enjoy your social media experience!

My Computer Got Infected By The Swine Flu. What?

by Robert Driscoll on August 6, 2009

SpamIn April and May of this year, while the CDC and other federal agencies were working hard to prevent the spread of a swine flu outbreak, another outbreak was occurring that did not catch the headlines: Swine Flu Spam.

With Swine Flu at the forefront of everyone’s mind, spammers got busy. When the possible Swine Flu outbreak was being reported in April of this year by the media, Cisco stated that Swine Flu related spam accounted for 4 percent of the worldwide total at its peak. Symantec reported on their blog one scam that spammers unleashed where they had a viral PDF document of Swine Influenza FAQs. When users clicked on the PDF document, it unleashed a malicious InfoStealer code onto the victim’s computer.

Well just when we thought our computers were safe from getting infected by the Swine Flu, Sophos Labs reported on July 22nd on their blog that with the Swine Flu pandemic ongoing, spammers are continuing to play off of peoples fear. This time they sent an email titled, “Novel H1N1 Flu Situations Update,” which had an attached Word document that when opened had the following image in it:

swine-flu

This image is identical to the one found on the CDC website. Unbeknownst to the users who clicked on the Word document, a Trojan was unleashed on their computer that not only stole all of their passwords (encrypted ones as well), but it also tracked all of their key strokes. All of this information was sent back to a malicious website where most likely the stolen information would be sold in one of several underground markets. Spam continues to be a major problem not only for individuals but corporations as well. Symantec reported that as of April of this year, “unsolicited email made up 90.4% of messages on corporate networks.” While companies have become “smarter” in not allowing certain attachments to pass through to their networks, spammers have started attaching URLs in their messages enticing people to click on them which then redirects them to a website that carries the malware. This type of spam generally tends to not get stopped by firewall or anti-virus or anti-spam software.

So how do you defend yourself against malicious emails?  To lower your risk of malware infections, you need to:

  • Download software only from sites you know and trust.
  • Set your browser security high enough to detect unauthorized downloads.
  • Use anti-virus and anti-spyware software, as well as a firewall, and set them to update automatically.
  • Don’t click on links inside pop-up windows.
  • Don’t click on links in spam that claim to offer anti-spyware software; you may unintentionally be installing spyware.

Clues that malware may be on your computer include:

  • A sudden increase in pop-up ads.
  • A sudden or repeated change in your computers Internet home page.
  • New and unexpected toolbars or icons on the system tray at the bottom of your computer screen.
  • Slowed computer performance.
  • Random error messages.

While it is important for both individuals and corporations to have the necessary security measures in place to protect them from these spam messages by incorporating firewalls, antivirus software, email filters, etc…, the best way to reduce these threats is to simply educate yourself, and if you work for a corporation, educate your peers to not open or click on anything that looks suspicious. Sound stupid? Well, so does your computer getting the Swine Flu.