Latest on Technology, Systems, and Security

Archive for October, 2009

The number of computer users being trapped by dodgy security software is increasing, according to a recent study by security firm Symantec. Usually this fake software is advertised using banner adverts telling users that their system is infected with a virus or needs a security scan. But once the user clicks on the advert they are taken to the scammers’ website, where they will be pressured into buying the software on offer.

Once installed, the fake anti-viruses typically install other viruses and malware which is then used to steal confidential information such as bank and credit card details. Another facet of this is that the software will also try to suppress any other security software currently installed on the system, opening the floodgates for more malware to find it’s way onto the system.

The problem with this scam is that even if the user manages to safeguard their data, they have still lost out by paying for the software in the first place. This software does nothing of any use, and the money will end up with criminal gangs who make millions a year from the scheme. Fake review sites are also helping the criminals by giving a falsely positive view of the software they are trying to hawk to their unwitting victims.

Symantec is warning that up to 40 million people may have fallen foul of this scam in the last 12 months alone, a sign that things are not improving at all. The company is warning users to be ever more vigilant and to only trust known brands when buying anti-viruses and other similar applications. However, with more and more novice computer users going online all the time, and for longer periods, the chances of them being caught out are increasing too.

As you’ve probably seen in the news over the last week or so, tens of thousands of e-mail accounts have been compromised and had their log-in details posted online. Furthermore, the problem was not down to security weaknesses in Google Mail, Hotmail/Live Mail or Yahoo Mail. The problem was users giving out their information to anyone who asked.

You’re a web user. You do your shopping and banking online, always involving your confidential financial information. Perhaps you even pay the utility bills and taxes through online services. Chances are there is an awful lot of your information circulating on the internet.

So, if someone e-mailed you, claiming to be your bank, and asked for your bank account or credit card details, would you hand them over? Picture it this way – if the same person came up to you on the street and said that they were a representative of your bank, would you give the information to them, then and there? Probably not, if you had any sense!

While people may be more savvy about this threat, they seem not to be so sharp when it comes to ‘less important’ matters such as e-mail or social networking accounts. It seems tens of thousands of people have been more than happy to provide their usernames and passwords to anyone who asks, or to put those details into questionable forms on the web. When their data gets accessed, stolen or tampered with, they all of a sudden blame the services rather than themselves. This wouldn’t be so bad if every service didn’t say something like “Never give your information to anyone, ever – we will never ask for it” when you signed up!

What you have here is a deadly combination – stupid users and high tech con artists. Users are stupid in the way that they are wary in certain areas of the internet, but not in others – while they wouldn’t give a stranger their credit card details, they will give them their e-mail account details (which more often than not contains enough confidential information to sign up for a new credit card in your name!). Meanwhile, con artists are using ever more high tech methods to get people’s information – and succeeding.

Remember this golden rule: trust no-one. If someone is asking you about your information, chances are they aren’t supposed to have access to it. So, lesson to be learned? Don’t be a stupid user – get smart.

 
Monday, October 5th, 2009

Researchers in the University of Tokyo have come up with a new paint to stop electromagnetic waves on frequencies utilised by wireless networks, in order to help secure wireless networks in sensitive locations.

The paint contains aluminium-iron oxide particles which absorb the signals, meaning no transmissions should find their way in, or out, of a room painted with the substance. At the moment the team is targeting a cost of around £10/kg.

However, this is just another specialisation or improvement on existing electromagnetic shielding paints which have been available for a long time. In the past, these have been designed to combat a variety of signal wavelengths, from radio transmissions to TV and even mobile phones.

Wireless LAN technology currently works in the 100GHz range, which is much higher than the ranges currently catered for with shielding paint. Possible uses in the future could include movie theatres to stop people’s phones going off during a showing, businesses who share sensitive information over wireless networks and medical facilities.

Although it is certainly expensive to redecorate, it could help bolster security in certain businesses, but it has been stressed by security experts that nothing will ever replace or remove the need for adequate encryption and other security protocols. Home users are advised to secure their home networks, especially as more and more users switch to wireless networking technology and store more sensitive information than ever on their home computers.

 
Thursday, October 1st, 2009

The US government has continued with its cyber-security initiative this year, with the main focus being what they term “cyber hygiene”. They want people to think more about the information they divulge over the internet and to be more wary of messages they receive via e-mail and social networking.

With the numbers of phishing attacks rising, organisers are keen to convince users that they should be suspicious of all messages from banks and other organisations, to ensure their personal data is not compromised. Of course, all banks and financial institutions already tell their customers to never divulge account information and that their staff will never ask for it, but it seems some people are still falling for some of the oldest online scams.

419 attacks, involving using someone’s identity to ask friends and acquaintances for money, are also on the rise. These attacks usually take place over social networks like Twitter and Facebook, but can also happen over instant messaging networks.

Security experts are also warning people to be ever-cautious of the information they divulge in the public domain, seeing as determined criminals can gather enough personal information over a wide spread of mediums to build up a convincing fake message with which to scam friends and relatives.

Let’s hope this initiative works out well and gives people enough information about how to avoid being scammed over the internet.