THREAT

DEFENSE

Viruses/Trojans/Spyware

 
          General Advice:-

Remember that whatever protection systems you have in place that your computers, mobiles and your information are NEVER completely safe. So be circumspect whenever using any system connected to the internet or an external source.

• Keep antivirus, antispy software up-to-date to decrease your overall risk
• Do not click on suspicious links.
• Avoid high-risk sites with illegal or questionable content
• Do not download free software from un-trusted sites.
• Avoid illegal file sharing
• Never open unexpected e-mail attachments.
• Install Protection Software (See Child Protection)

Data & Identity Protection

• Everyone is out to get your data.  Even legitimate companies keep your data and passwords.
• NEVER use REAL data when you signup for any account (unless you legally have to eg banking)
• Some companies and ISP’s keep and CAN SEE your passwords!
• These companies can get hacked or just lose you data to others who will misuse it.

• Don’t use the SAME password for everything
• Do not give ANYONE a password that is used for banking or to sign into accounts that can be used to create transactions.
• If the login is ‘non important’ and contains none of your details or data you can use a simple easy to remember password
• Sign up for most accounts can be done using pseudonyms for names and details – do not give your correct name, address, tel, mobile or date of birth unless you are forced to.

Phishing

• Hackers send fake e-mail or IM messages with a link to a counterfeit Web site designed to fool users into submitting personal, financial, or password information

• Never provide passwords, PINs, or other sensitive information via e-mail or IM.
• Be suspicious of "urgent" requests asking you to provide account information or login to your account via an included web link.

Trojan Horse

• Trojan Horses (or Trojans) are malicious programs that masquerade as (or sometimes hide inside of) benign ones such as a music file or game. They are frequently programmed to gather and transmit information to an attacker.

• Use anti-virus and anti-spyware software, available free from me
• Keep virus and spyware definitions update in your anti-virus and anti-spyware applications.
• Do not download free software from untrusted sites.
• Avoid illegal file sharing.

Viruses

• Computer viruses cause mischief or damage to a computer system. Viruses can replicate themselves and spread by attaching themselves to (infecting) other files. The term "virus" is commonly used as a catchall term that include Trojans and worms.

• Use anti-virus software to scan your computer and new files.
• See "Trojan Horses" above for additional strategies.

Web Drive-by

• Hackers bobby-trap Web pages with self-installing malware (viruses, Trojans, Worms etc) that infects your computer

• Install the free Child Protection Software

Worms

• A computer worm is similar to a computer virus but is able to to self-propagate by exploiting the computer's file transmission capabilities; it does not need to infect or attach itself to other files to spread.

• See Trojan Horse and Virus above.

Spam & Spam Lists

• Unsolicited or "junk," e-mail, often of a commercial nature, typically offering a "deal," or questionable service in the Subject line.

• Use a secondary account for signup pages, shopping etc. (eg a free Google mail acct)
• Never open unsolicited e-mail.
• Never open unsolicited attachments.
• Never respond to spam, even to unsubscribe
• Never open chain e-mail, especially those claiming to contain virus fixes or patches, especially those with attachments

Spim

• Spam sent via an instant messenger (IM) system

• Do not click suspicious or unexpected links in IM messages.
• Do not open attachments. If a link or attachment appears to come from a friend, IM the friend back to verify that he/she sent the links.
• Run the latest patches or updates for your IM to close security holes.

Spoofed E-mail or Web site

• A forged e-mail message or counterfeit Web site that appears to come from a trusted source. They are used to trick the message recipient or the web site visitor into clicking malicious links or supplying confidential information under false pretenses.

• Never open unexpected e-mail attachments.
• Never supply confidential information via e-mail.
• Be familiar with Web sites with which you do business and how those companies usually communicate with you.

Rootkit

• A program intended to conceal the presence and operation of malicious activity on your computer.

• Install rootkit scanning software, available free from me. Set it to scan for rootkits

Session Hijacking

• The act of taking control of a user's Web session after the user has logged into his or her online account.

• Don't leave account Web pages open if you're not using them.
• Use the log off link to terminate a session (don't just click the "X"), and then close the Window.
• Clear the browser Cache and History to prevent others from returning to your account pages