Powered By Blogger

Saturday, March 19, 2011

Facebook; the New Frontier to Security Threats

The phishing emails that attempt to get your credit card or bank sign-in data are just a storm in a cup of tea. When internet crooks want to know how to get into your bank account, they post a message on Facebook. These messages appear so innocuous,innocent and so appropriate in the Facebook setting that you are likely to not only get conned, but pass on the scam to others.Indeed Facebook has become the new minefield for fraudsters. In just this past few years social networks have soared to among the most dangerous in terms of security threat.The social network are rivaling with   porn and software-sharing sites, which you probably know to avoid.

How does it happen?
It starts with the fact that we are inundated with requests to set up passwords to get into our work computers, our online bank accounts, Facebook and every other web-based subscription. So what do we do? We use the same password. Internet crooks understand that most users use the same password for everything.If they can get your user credentials for your Facebook account, there's a good chance that they have the password for your bank account.If you are smart enough to have separate passwords for Facebook and your financial accounts, crooks get at you through a variety phishing attempts that you might think are Facebook games and widgets. But look closely and you'll realize that they deliver answers to all of your bank's security questions -- and possibly clues to your passwords, right into the hands of the crooks.Think it couldn't happen to you? Let's see if you recognize any of these recent Facebook messages that jeopardize your security. All of these came from my Facebook friends in just the past few weeks:

We're stuck!

It started out as an email scam, but now the "We're stuck in [Europe/Asia/Canada] and need money" scam has moved to instant messages on Facebook, where it can be more effective. Most people have learned not to react to the email, but instant messages help crooks by forcing you to react emotionally...They're right there. They need help, now.Facebook has launched a security system to combat account hijacking that allows crooks to send messages and posts through your account. You can get updates on what they're doing at Facebook's security page, where they've also got a nice little security quiz that's definitely worth taking.

LOL. Look at the video I found of you!

This is the most dangerous of all the spam messages and it comes in a variety of forms. It's actually a bid to surreptitiously install malware on your computer. This malware can track your computer keystrokes and record your sign-in and password information with all of your online accounts.How does it work? When you click on the link, it says that you need to upgrade your video player to see the clip. If you hit the "upgrade" button, it opens your computer to the crooks, who ship in their software. You may be completely unaware of it until you start seeing strange charges hit your credit cards or bank account. Up-to-date security software should stop the download. If you don't have that, watch out.Better yet, if you really think some friend is sending you a video clip, double-check with the friend to be sure before you click on the link. When  you see this just know that your  Facebook account had been hijacked and anyone who clicks through is likely to have their account hijacked too. That's how this virus spreads virally.

Who knows you best?
The message reads:
Can you do this? My middle name __________, my age ___, my favorite soda _______, my birthday ___/___/___, whose the love of my life ______, my best friend _____, my favorite color ______, my eye color _______, my hair color ______ my favorite food ________ and my mom's name __________. Put this as your status and see who knows you best.
How many of these are the same facts your bank asks to verify your identity? Put this as your status and everybody -- including all the people who want to hijack your bank account and credit cards -- will know you well enough to make a viable attempt.

Your friend [Name here] just answered a question about you!

Was it possible that an old friend answered a question about me that I needed to "unlock?" Absolutely. But when you click on the link, the next screen should give you pause: 21 Questions is requesting permission to ... (a) access your name, profile picture, gender, networks, user ID, friends and any other information shared with everyone ... (b) send you email ... (c) post to your wall ... and ... (d) access your data any time ... regardless of whether or not you're using their application.
Can you take that access back -- ever? It sure doesn't look like it. There's no reference to how you can stop them from future access to your data in their "terms and conditions." Worse, it appears that to "unlock" the answer in your friend's post, you need to answer a bunch of questions about your other friends and violate their privacy too. I didn't give 21 Questions access to my information, but the roughly 850 people who joined "People Who Hate 21 Questions on Facebook" apparently have and can give you insight into just how pernicious this program can be.

So just be careful when you use Facebook and other social networks.They may seem harmless but they pose a great danger.That why you find very embarrassing messages sent to your friends purportedly by you.

Source:
Some of the work have been adapted from Kathy Kristof

No comments:

Post a Comment