Information is your best prevention against cybercrime. This page is intended to help you better understand the types of threats consumers face today when conducting business online, provide tips to help prevent you from becoming a target and resources for victims.
Most electronic fraud falls into one of three categories:
PHISHING: Fraudulent e-mails, appearing to be from a trusted source such as your bank or credit card carrier, direct you to Web sites. Once there, you are asked to verify personal information such as name, account and credit card numbers, passwords and the like. These sites are often designed to look exactly like the site they are imitating. The information you provide is used to hijack your accounts and your identity. E-mails that warn you, with little or not notice, that your account will be shut down unless you reconfirm certain information, are very likely to be phishing. A newer tactic is to "confirm" personal credentials they supposedly have in their file, displaying false information. You call to correct the erroneous data and unwittingly provide them with the tools they need to steal your identity. Use a phone number or Web site address you know to be legitimate to check the source.
PHARMING: Or "domain spoofing" is an attack in which a user can be redirected from a legitimate site to a fraudulent site and then fooled into entering sensitive data such as a password or credit card number. The fraudulent site often looks like the legitimate site e.g. your bank). It is different from phishing in that the attacker does not have to rely on having the user click a link in an e-mail to deceive the user. Even if the user correctly enters a Web address into a browser's address bar, the attacker can still redirect the user to a malicious Web site.
MALWARE: Software designed to infiltrate or damage a computer system without the owner's knowledge or consent. It is a blend of the words "malicious" and "software." It includes computer viruses, worms, trojan horses, spyware, adware and other malicious and unwanted software.
PHISHING FOR TROUBLE
Despite efforts to curb phishing attacks, more aggressive tactics and black market tool kits have led to an increase in the crime according to a report by U.K. security firm MessageLabs. Their September 2007 report reveals that one in every 87.2 e-mails is a phishing attack, up from one in 93.3 in January 2007. The company finds phishing e-mails comprise 56 percent of all malware threats reported, such as viruses and Trojans.
One factor contributing to the rise is the availability of phishing kits that make sophisticated attacks simple to carry out by even the most non-technical criminals. The technique allows each compromised computer within a botnet to host multiple phishing sites at the same time. These sites are then replicated across the entire botnet, making them harder to shut down. Read more...
Are you inundated with constant pop up ads? Is your computer performing sluggish? Has your home page changed seemingly by itself? Your computer could be under the control of spyware.
Spyware, and its counterpart adware, are computer programs that install themselves without your knowledge. While most offenders are advertising ploys that are merely annoying, others can suck up valuable computer resources or track your keystrokes and send your personal info back to their creator to steal your identity. Read more...
FOOLING KEYLOGGERS
Keeping abreast of current events just might be the greatest benefit seen from the advent of global communications. Even if you live on a faraway tropical island, you're connected to the rest of the world through the Internet. And also prey to the same scams, threats and trickery you tried to escape when you chose to leave the "real" world.
Informed readers already know that the greatest online identity theft risk comes through keyloggers. This type of software was developed to help companies monitor employee computer usage to assure they were using it for business purposes. But it didn't take long for crooks to see its potential. By installing the software without the user's knowledge, they could capture login names and passwords to a text file they could email back to themselves. Read more...
The Federal Trade Commission (FTC) offers valuable advice and resources for victims of identity theft as well as prevention tools on their Web site.
Before investing, check out the validity of that offer. Quatloos.com is a public educational website maintained by Financial and Tax Fraud Education Associates, Inc. Visit their Cyber-Museum of Scams and Frauds.
The Internet Fraud Complaint Center (IFCC) is a partnership between the Federal Bureau of Investigation (FBI) and the National White Collar Crime Center (NW3C). Their mission is to address fraud committed over the Internet. Visit their Web site to file a complaint.
We've all gotten the sick e-mail hoax about the missing little girl or little boy. And no matter who claims differently, neither AOL nor Microsoft, nor anyone else for that matter, can track how many people you forward an e-mail message to and reward you. Before you send that message to everyone on your address list, research its validity. Feed keywords into your favorite search engine and check out the results. Or visit one of the several Web sites dedicated to stopping hoaxes and scams. Two that have stood the test of time are snopes.com and urbanlegends.about.com.
The CERTŪ Coordination Center (CERT/CC) is a center of Internet security expertise. This renown federally funded research and development center is operated by Carnegie Mellon University. They offer a complete list of antivirus software vendors on their Web site.
Microsoft usually issues a patch for vulnerabilities BEFORE threats surface. Preventive measures are your best defense. Keep your operating system protected. If you do not have automatic updates enabled, you can download them from Microsoft's Web site.