Friday, February 14, 2014

Protect your ID theft


Understanding the link between Social Media, ID Theft and Your Credit

I. Chances are, not everyone on your social media site is someone you would haphazardly hand your credit card to. Yet, many people are treating social media sites like a trusted best friend or even an ATM when they share photos, travel plans, birthdays and addresses publicly with the world. Because of the lasting damage that identity theft can have on credit scores and long-term financial health, it’s important to break the link between social media, ID Theft and your credit.

See more in this short movie:
http://www.youtube.com/watch?feature=player_embedded&v=2lfT2aF0vTU

II. According to the Bureau of Justice Statistics, identity theft is broken down into three segments:
- Unauthorized use or attempted use of existing credit cards
- Unauthorized use or attempted use of other existing accounts, such as checking accounts
- Misuse of personal information to obtain new accounts or loans, or to commit other crimes.

III. Consumers most at risk of identity theft are those who don’t regularly check their bank accounts and credit scores, which are most often children and the elderly. According to a 2012 report from Carnegie Mellon CyLab, children are targeted 35 times for identity theft more than adults, and 15 percent of the victims are under the age of five. Kids that have grown up in the social media environment are not afraid of what they share. They also don’t apply for credit and don’t have as much activity around their bank accounts so it takes longer to see if their identity has been compromised.

However, 12 million Americans fell victim to identity theft last year and they certainly weren’t all children and elderly. In fact, every three seconds, someone in the United States becomes a victim of identity fraud, according to Javelin Strategy & Research 2013 Identity Fraud Report. This means over 5% of all U.S. adults were affected by identity theft in 2012.

Think you’re not at risk? Go to http://protectyourprofile.org/ for a realistic look into what criminals could obtain from your Facebook account. It recently won a 2013 Marcom Gold Award for the realism of the experience.

IV. Social Media’s Role:

Information in social media can let criminals piece together enough of a story to steal identities without being caught. “Hackers can take family names, addresses, phone numbers and use that data to try and figure out passwords. These people can sell your information to other criminals in their network and it’s worth a lot on the black market,” says David Anderson, directory of product at Protect Your Bubble.com.

For example, a Facebook user can be duped into giving up personal information through fake posts asking for likes, votes, or clicks. These messages look legit because they appear to be sent by a friend. The user many not think twice about entering contact details like a phone number to participate in a contest, special or poll. Once they enter this personal information, they become susceptible to identity theft as criminals start to share data that may ultimately result in capturing payment credentials like credit or debit card numbers.

In fact, just this December hackers swooped in to capture login information from over 2 million Twitter, Facebook, LinkedIn and Google accounts. Facebook accounted for over half of the compromised accounts and left victims vulnerable and uncertain about just how much information the hackers consumed.

V. How to Break the Link:

On social media, consumers must personally self-manage information and stay on top of security settings to keep their credit secure. According to the National Cyber Security Alliance, no individual, business, or government entity is solely responsible for securing the Internet.

Everyone has a role in securing their part of cyberspace because individual actions have a collective impact on making the Internet more secure. What role can you play? Here are five simple steps you can take to unlink your social media account from your credit and from the risk of identity theft.

1. Take the time to review credit card statements each month for fraudulent charges.
2. Remember when you share information on social media, it’s not in a bank vault.
3. Choose a secure password that doesn’t include your birthday or pet name. Make passwords at least 8 characters long, combining uppercase and lower case letters, numbers and symbols.
4. Alternate passwords for different accounts. Using the same password on Facebook as your online banking is a huge risk.
5. Never send money based on a Facebook post or message. If you get a request from a friend that seems out of character, be aware that their account may have been hacked and ask them directly rather than assuming it is a legitimate request.

Don’t let thieves ruin your credit or financial stability. Learn more about keeping your identity and finances safe at http://us.protectyourbubble.com/id-theft. Please take steps to protect yourself and share this information with others to help fight against identity theft.

Phishing attacks affect 20% of Indians


Microsoft has released the results of the third annual Microsoft Computing Safer Index (MCSI) that reveals impact of poor online safety precautions being taken.

The company surveyed over 10,000 consumers in 20 countries including India. Out of these 10,000 consumers, 20 percent of Indians had claimed that they had been victims of online phishing attacks and in a worrying statistic, 12 percent Indians said that they had suffered an identity theft at an average cost of Rs 7,500.

Surprisingly, only 34% of respondents around the world said they limit what strangers see on social networks and the amount of personal information online, while 38% said they adjust their social network privacy settings, the survey revealed. It also noted that only 35% of users use a PIN (personal identification number) or password to lock their mobile devices.

According to the MCSI survey, the annual worldwide impact of phishing and various other forms of identity thefts could be as high as $5 billion. The cost of repairing online reputation is far higher at around $6 billion or an estimated average of $632 per loss. “Internet users can prevent intrusions and thefts by using a unique four-digit PIN for mobile devices and strong passwords for online accounts,” Microsoft India National Technology Officer Prakash Kumar said. He advised that users should perform sensitive transactions over secured networks, which includes paying bills, banking or shopping.

Finally, the software giant also issued tips and guidance on the Internet Safety Day, like using a unique four-digit PIN for mobile devices and strong passwords for online accounts; performing sensitive transactions over secured networks like paying bills, banking or shopping, rather than sharing personal account information over “borrowed” or public wifi connections among others.

India ranked fourth among countries targeted by phishing attacks as per an EMC Report last year.

Thursday, February 13, 2014

Flappy Bird fakes are hatching Android malware

Security firms have found Flappy Bird-like applications running malware in a host of third-party Android app marketplaces.

Flappy Bird's take down by its creator has given malware creators a new outlet to exploit unsuspecting users.
According to security firm Sophos, it has discovered several applications claiming to be Flappy Bird in third-party Android app marketplaces. The trouble, however, is that the games in some cases contain malware and in others force users to send a text message to a given number, effectively giving the malware creators all they need to potentially exploit users.

Another security firm, Trend Micro, also chimed in on the issue, saying that it has discovered "a bunch of fake Android Flappy Bird apps spreading online." Every one of those it has discovered so far are "apps that send messages to premium numbers, thus causing unwanted changes to victims' phone billing statements."

Flappy Bird has become a hot-button issue in the mobile world after the game soared to popularity and was subsequently taken down by its creator, Dong Nguyen. That was the opening malware creators needed, the security firms say, to take advantage of users who didn't have a chance to try out the game and want to see what all the hype is about.

Both Trend Micro and Sophos said that users shouldn't attempt to download anything calling itself Flappy Bird, since the original version is "dead." They also warned users to "be wary of apps from alternative markets."