fact sheet: ID Theft and Security issues
> Keep your ID safe
> Phishing
> Simple steps to protect yourself and your computer
> Security software: Anti-virus | Anti-Spyware | Spam Blockers | Password Protection | Security Suites
«« Keep your ID safe
In early March, police raided homes in suburban Sydney, seizing fake passports, credit cards and driver licences in Australia's largest identity fraud operation.
The Sydney raid found machines for making fake credit cards, computer equipment, graphics software for altering images (such as pictures of people's faces), passport photos, cheque books and forged tax returns and mortgage documents. Police say the number of suspects in the case may run into the hundreds, even thousands. ID theft is big business. It is in the nature of electronic information that it can easily be stored replicated, transmitted and altered. Today the ID fraudster has a much bigger bag of tricks.
Hackers can break into websites and servers and steal credit card numbers and other personal information. Often they don't even need to hack - they simply pose as real people or real companies, a process known as "social engineering", and request the information through regular channels.
In a recent celebrated case, US data collection agency ChoicePoint sold personal information on 145,000 people to a Nigerian con-man pretending to operate a string of retail outlets.
These and other incidents have led to calls for greater restrictions on the use and sale of personal information, which is an enormous business.
Australian consumers have in recent months been subject to an epidemic of phishing, a technique whereby consumers are sent an email, purportedly from a bank or other financial institution, asking them to verify their electronic banking login details.
Once supplied, the phishers use the information themselves or sell it to others. Some fraudsters have even set up entire fake websites to take credit card transactions. The Sydney Opera House was hit by such a scam last year.
The Australian Centre for Policing Research identifies ID theft as one of the fastest-growing crimes in this country.
(Next, March 05)
«« Phishing
Phishers use email and websites to try to gain your private information, including bank account and credit card numbers, PINs and site passwords.
The emails are set up to look like authentic emails from a bank. The wording typically says there is a problem with your account and you need to log in to verify your details are correct, or variations on this theme.
If you click on the link, you are taken to a website that looks authentic. If you complete the log in, handing over your account number and password, within minutes the phisher can be accessing your account illegally.
Phishers fake email addresses, email content and websites, often using the same graphics and wording found on legitimate sites.
Remember, your bank WILL NEVER contact you by email to request personal details or require verification by email. Delete these emails immediately.
«« Simple steps to protect yourself and your computer
To combat viruses, worms etc
- Switch to a non-Microsoft email program. Many mass mailing worms are written specifically to exploit vulnerabilities in Outlook Express and Microsoft Outlook. Free alternative email programs include Thunderbird (download from www.mozilla.org/products/thunderbird/) and Eudora (download from www.eudora.com).
- Beware attachments! Never open an email attachment from someone you don't know. Don't open attachments from people you do know, unless you're expecting it. Don't open attachments directly from within your email: save them to your desktop and open them from there.
- Turn the reading pane off. Sometimes your system can get infected by merely displaying code in this window.
- Run a full anti virus scan weekly at a minimum.
To keep adware and spyware off your system
- Pay for software instead of opting for free, advertising supported version
- Avoid surfing on the fringe. Porn sites, crackz and warez (pirated software), file swapping and other 'on the edge' sites are havens for unscrupulous people
- Use a non-Microsoft browser. Internet Explorer has proven to be hideously susceptible to attack and infestation. Use an alternative browser such as Firefox. (download from www.mozilla.org/products/firefox/) See Fact Sheet on Firefox.
- Never click OK on a pop-up window or dialog box when you're browsing without reading it properly. Use the close box to close such windows.
- Use safe emailing practices.
To avoid phishing scams
- Never click on links in email you receive from an unknown source or from a known source seeking sensitive information. Instead, type the address directly into your browser.
- If you have any doubt whatsoever about an email apparently from your bank or other institution, either go directly to the bank's website, or get on the phone and speak to someone at the bank.
- Be sceptical of any email that asks you to update your log-in details or other sensitive information.
- Never click any link in spam emails.
To manage spam
- Never open spam email
- Never buy anything advertised in spam, even if it seems like a really good deal.
- Never divulge more information on website forms than is absolutely necessary.
- Always read a site's privacy policy before you sign up or purchase goods.
To keep others from prying
- Set up multiple logons for your family PC and use a password for each logon.
- Always use strong passwords. See Web Passwords Made Easy for advice.
(Netguide, March 05)
«« Anti-virus software
«« Anti-spyware software
«« Spam blockers
«« Password Protection
«« Security Suites
^back to top
|
