Thursday 16 May 2013

Secure Online #1 - Dodgy Emails & Unsecure Passwords

Internet Cons
There is a degree of paranoia about Internet security and the risks faced when using it. I say that it is the same as all other areas of life, many cons which run on the Internet are the same ones that are traditionally carried out by post, 'phone and on your doorstep.
The phone call which says "you have a problem with your PC" is just the same as the uninvited visitor on your doorstep telling you that you have a roof tile loose and your house is in danger. It preys upon your fear and your self perceived lack of knowledge and skills.

Stealing card details happens in restaurants, shops and garages yet you still go to those and use your card. If you take a little care and keep you eyes open, the Internet is just as safe as the high street (or just as risky).

I hope to follow this with further posts on Internet Security. In this post I'll talk about Malicious emails and Bad Password practices.

Dodgy Emails
If you are very lucky then you won't be receiving any malicious emails but most people do get some.
Popular tricks are to make it look like something that may matter or be of interest to you. Suggestions of failed parcel deliveries, statements that your banking, shopping or social media account has been compromised, opportunities to buy shares, messages that you have money owed to you, a video of a recent news event.
If you open the email you will often find a link made to look as if it goes to a legitimate website. When you click on the link it may take you to a login screen or request you to confirm personal details. The site is fake and you are giving them your access or card details with which they can then steal your money and possibly identity.

Banks and Insurance companies will NEVER say "follow this link"; they will instruct you to login to you account by the method you normally use.

Surprisingly, it is frequently easy to spot false emails just from the presence of bad spelling, grammar, logo placement & poor quality of graphics. Most come from sources where English is not a first language.
You can often hover your mouse pointer over the link and see what it really goes to. The text may read "santander.com" but hovering may show something like "gatherer.ru/", a totally different website.
If in any doubt, contact the bank or company concerned directly, NOT using any contact details given in the message which may also be fake.

Do Not Reply!
Under no circumstances reply to malicious emails. Some people reply saying, "don't contact me again", or threatening legal action. All that this does is confirm that your email address is actively being read which simply increases it's value to the crooks. It will likely be sold on and you'll get even more junk.


Bad Password Behaviour
Having worked in IT for many years, it frightens me how often I can find passwords.
Names of Wife, children or pets;
Favourite football team;
If the user is on holiday, the Country or Resort they've gone to;
Common passwords include: 'pass', 'password', '1234', '12345678', '00000000', '123abc', '1a2b3c4d5e6f', 'iloveyou', 'querty', 'asdfghjk', 'zyxw';
Often passwords can be found on a post-it or equivalent on the edge of a monitor, on the wall behind the PC, under the keyboard, at the front of the top draw or on the back page of a notepad or diary on the desk.
If any of the above are true for you then you really should take more care. I'll discuss good behaviour in a future post.