Phishing Without A Net
Thursday, January 15, 2009
A new method of phishing may be your next battle. Researchers report that scammers can now phish you--pretend to be your bank--while you're logged into your bank's legitimate web site.
Until now, phishing was done by emails that try to trick you into clicking links to phony sites. This new variant is sophisticated and almost invisible, because it doesn't come through email but on the web, and only after you have successfully logged into your bank's actual site. Then malicious code takes over and sends a realistic-looking popup window asking for your credentials. The complexity of this attack makes it difficult to avoid, and switching from Internet Explorer to another browser like Firefox won't help.
This attack isn't widespread (yet), but you can expect more near-invisible scams like this in the future. Be sure to keep your computer updated, and don't forget to subscribe to Tech Tips for the latest computer news.
Posted byTriona Guidry at 4:33 AM 0 comments
Labels: alerts, beginners, Internet, phishing, scams
The Real-Life Impact Of Zombied Computers
Monday, December 29, 2008
If you're still wondering why securing your computer matters, you might be interested in this recent article. Hacking is not limited to Russia and as the article notes, cyber attacks are increasingly being used to achieve political as well as financial gain.
Your computer may well be part of the "cyber-criminal ecosystem," if it is has become a zombie controlled by rogue software. Protecting our computers now affects others in real-life ways.
Don't forget our four legs of the computer security chair, and be sure to sign up for the email version of Triona's Tech Tips for the latest computer bulletins. And have a happy and safe New Year!
Not long ago, the simple, anonymous thrill of exposing chinks in American software was enough of a payoff for a Russian hacker. Today it's cash. And almost all the targets are in the United States and Europe, where Russia's notorious hackers pilfer online bank accounts, swipe social security numbers, steal credit card data and peek at e-mail log-ins and passwords as part of what some estimate to be a $100 billion-a-year global cyber-crime business.
...
Yevgeny Kaspersky, chief executive of Moscow-based Kaspersky Lab, one of the world's leading computer security firms, says Russian hacking flourishes as "a cyber-criminal ecosystem" of spammers, identity thieves and "botnets," vast networks of infected computers controlled remotely and used to spread spam, denial-of-service attacks or other malicious programs. A denial-of-service attack floods a Web site with inquiries, forcing its shutdown.
Posted byTriona Guidry at 6:41 AM 0 comments
Labels: antivirus, Internet, keyloggers, mac, phishing, spyware, windows
Beware Hijacked Headlines In Email News Alerts
Wednesday, November 5, 2008
Attackers are using real headlines in an attempt to fool email users into clicking links to virus-delivering web sites.
Using data-mining techniques, attackers insert real breaking-news headlines into spam email messages designed to get you to "click through" and unwittingly infect your computer. These spam emails may mimic the look of Google Alerts or other news services, or may simply contain a real headline plus a link to a malicious site. Once you click, your computer may be infected with a virus or Trojan horse.
One way to see if a link is legitimate is to mouse over, but NOT click, the link, then look in the status bar of your email program or web browser to see where that link goes. For example, if the alert pretends to be from Google but it goes to somewhere other than google.com, it may be fake.
Your best bet is to avoid clicking on any emailed news link, and instead going to the news site manually by typing the address, then clicking the link to the article.
With elections there is plenty of breaking news, so be sure to watch out for this scam.
Posted byTriona Guidry at 6:06 AM 0 comments
Labels: alerts, consumers, Internet, phishing, security
Revenge Of The Computer Zombies!
Wednesday, October 15, 2008
We've talked before about computer zombies, compromised computers that do everything from sending spam to unleashing viruses. Many unsuspecting users have these monsters on their desks and don't even know it.
Why infect computers? Because it's profitable. Zombie computers are organized into botnets, electronic armies whose computing power is sold to for-profit spammers and identity thieves. In the past three months alone, the Shadowserver Foundation estimates the size of botnets has quadrupled. That's enough to give any computer user the shivers.
As a computer user, the most important thing you can do is be aware if your computer's behavior deviates from the norm. Decreased performance and increased errors can be signs of zombie infection. Be sure to use a reliable security software suite, but don't assume it will automatically keep you safe. Sometimes security software fails to load at startup, or forgets to update itself. You should verify that you are current on your subscription and receiving several updates a week. You can find recommendations in this Tech Tips article, and in the sidebar on the Tech Tips blog.
Remember, never click on links in email messages, as they may lead to phony web sites (phishing). And be sure to install those updates your computer requests. Too many of us click "later" and never get around to it. But you should also be warned, if you are surfing the Web, that phony pop-ups will try to make you believe they are bona fide update requests. Never trust an update request from a web pop-up, only those that appear to you from software you know you have installed.
In November we'll wonder about Planned Computer Obsolescence. If you have any computer questions, click Comments below this article, and be sure to sign up for the email version of Tech Tips for bonus tips and product reviews.
Posted byTriona Guidry at 12:48 PM 0 comments
Labels: antivirus, beginners, Internet, mac, phishing, security, spyware, web, windows
How To Protect From Cybercrime
Friday, August 15, 2008
If the cybercrime situation is so dire, what can an average person do about it? I present the four-legged chair of computer security. Without all four legs, your computer's defenses could collapse.
- Antivirus software
You know this; what you may not know is that antivirus alone does not catch every threat. - Anti-spyware software
Spyware is software you don't want, similar to viruses but using different tactics. Adware, malware, keyloggers, Trojan horses, they all fit into the category of spyware. - Firewall
Just like a fire door in a hospital, a firewall keeps out Internet nasties that try to sneak under the radar of antivirus and anti-spyware software. - Regular updates ("patches")
Every program has bugs, and these bugs can be used by viruses to manipulate your computer. Harden your security defenses by keeping your software up-to-date.
If you have a company-owned computer, talk to your IT department about the protections that are installed. Find out if your corporate network prevents laptops from logging on unless the laptop has updated security. You can also explore one-time password systems, or biometric options like the fingerprint scanners now built in to most laptops.
Do you have questions about protecting yourself from cybercrime? Ask them here (click Comments below any article), and be sure to sign up for the email version of Tech Tips for bonus tips and product reviews.
Posted byTriona Guidry at 8:49 AM 0 comments
Labels: alerts, antivirus, beginners, computer help, consumers, firewalls, Internet, keyloggers, mac, norton, passwords, phishing, security, small business, spyware, web, windows, zonealarm
Is Your Computer A Zombie?
Saturday, July 26, 2008
[This article is reprinted from the February 2007 issue of Triona's Tech Tips. I continue to see many zombied computers on my daily rounds, so be sure to keep your antivirus and other protections updated. See the sidebar (below right) for Windows and Mac security options.]
It seems a strange time of year to think about monsters, but there could be a zombie lurking right in front of you. Your computer is a prime target in the botnet wars, waged by criminals making money at your expense.
Zombies are compromised computers, organized into so-called botnets and offered to the highest bidder. Advertising, spam, spyware–most of it comes from zombied computers, their owners blissfully unaware. Security experts estimate there are up to 3.5 million zombies active worldwide, and at least 250,000 are added daily. Fifty percent of the targets are home computers, and new attack variants are up 536% from last year (according to Ciphertrust). The statistics alone are scary.
If that weren't enough, it's hard to tell the good guys from the bad. I almost flipped the first time I saw one of those commercials on TV, offering to "stop computer viruses". It was from a company that has been known to distribute spyware! How is the average consumer supposed to know whom to trust? It's hard enough for an IT pro like me to keep up.
So let me tell you how you can protect yourself and your computers from this nightmare. The best defense is prevention. Once your computer is infected, the only sure way to disinfect it is to reinstall from scratch. The standard safety rules apply: use a firewall, and keep your protection software up-to-date. As I've mentioned, you should avoid opening attachments from people you don't know, or that you're not expecting. You'll want to curb your enthusiasm for e-cards and those cute PowerPoint presentations that make the rounds on any given holiday.
Know who makes the software and services you use. Symantec and McAfee may have their quirks, but they're not going to install spyware on your computer. (Or if they do, a la the Sony BMG fiasco a while back, people are sure to find out!) Just because a company has a slick website or a special offer, does not make its product reliable. You should know that there are some nefarious companies out there masquerading as their legitimate counterparts, down to copying the same logos and color scheme. They sometimes use Web addresses that are misspelled versions of the true address. This happens with banks, too, and it's called phishing, a term you've probably heard. Such ploys can be very convincing. When in doubt, you are always wise to type your destination manually, instead of clicking a link.
Please be careful when using public network connections, such as WiFi hotspots or Internet-cafe computers. Your data could easily be captured in transit. I would particularly avoid using a credit card number on any public system. There are programs called keyloggers that record every key you type, and they're waiting for such juicy morsels. Your own computer could be infected with a keylogger, too, if you wind up with one of the nastier spyware versions out there.
How do you know if you're faced with a zombie? The most common symptoms are slow performance, and tons of pop-up ads. If this sounds familiar, it's time to update your software and run some scans. Zombies can be notoriously difficult to destroy, so you may need to call upon a professional exterminator like yours truly to be fully rid of them.
Posted byTriona Guidry at 7:11 AM 0 comments
Labels: antivirus, beginners, keyloggers, phishing, security, spyware, windows, wireless networks