WIRELESS PROBLEMS CONCERNING TECHY USE AROUND THE WORLD by MIL User 13 Boystown https://padlet.com/miluser13/kv5t32lvf1hs2chz A LITERATURE REVIEW ON ICT-RELATED ISSUES en-us 2021-08-12 07:52:41 UTC 2021-08-12 08:26:51 UTC hello@padlet.com https://images5.alphacoders.com/581/581801.jpg Simply put, online safety is the act of being safe while using the internet. It's also known as internet security, e-security, or cyber security. From PCs and laptops to smartphones and tablets, it refers to any technical device that can connect to the internet. Individuals who are secure online safeguard themselves and others from online hazards and dangers that may compromise their personal information, lead to hazardous contacts, or even have an impact on their mental health and wellness. miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1673910018 WHAT IS ONLINE SAFETY?]]> 2021-08-10 08:52:50 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1673910018 WHAT DOES SECURITY MEANS? miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1673913296 Its objective is to establish rules and measures to use against attacks over the Internet. Since the internet represents an insecure platform for exchanging information and opinions. It may lead to a high risk of intrusion and fraud such as phishing.]]> 2021-08-10 08:58:07 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1673913296 WHAT IS ETHICS? miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1673914342 2021-08-10 09:00:11 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1673914342 WHAT IS ETIQUETTE? miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675125975 Everything has its rule, especially when communicating and working by the means of internet.

1. Think Before You Click/Send
-To prevent war, I must say...to avoid arguing with other people think before you send your message. Whether if it's a joke to you, it may be insulting to them. Netizens are war freaks. They will find everything that is wrong, even if there is none. Also when posting personal pictures and videos. One must always be careful. Trust no one on the Internet except your dog.
2. Don't Waste the time of others.
-Refrain from posting or sending chain messages, hoaxes, bulky emails and other useless information. Time is gold.
3.  Don't Send Messages that can be threatening or hurtful.
-Sarcasm is an art, but not all the time. Choose the person whom you'll be sarcastic with. Be careful of the language you'll use as well as the information you share or it may result into disciplinary action.

]]> 2021-08-11 06:42:04 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675125975 Russian Cybercrime miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675131889 According to Sherry, Russian crime syndicates employ some of the most technologically advanced equipment in the industry. “When it comes to expert cyberskill hacking capabilities, the Russians are at the top of the food chain,” he adds. Even before the recent discoveries of stolen internet records, the US accused Evgeniy Bogachev, a Russian citizen, with taking part in a large-scale operation to infect hundreds of thousands of computers throughout the world. Last year's big data hack at retailer Target was also connected to Eastern Europe. But why is it that Russia and its smaller neighbors are being targeted? Trained computer engineers and experienced technologists in Russia, Ukraine, and Romania may be opting for profitable underground employment over the generally low-paying I.T. professions accessible in those nations. However, in the past, the Russian government has been less than cooperative in assisting US authorities in locating wanted cybercriminals. “The key is the absence of law enforcement atmosphere, the idea that you can get away with practically anything,” says Dmitri Alperovitch, co-founder and CTO of security firm CrowdStrike, a Russian-born U.S. citizen. “They were able to develop and expand into well-organized businesses.”]]> 2021-08-11 06:48:16 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675131889 Chinese Cybercrime miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675133830 China is another traditional hotspot for hackers, but the focus has shifted away from criminal gangs and toward the Chinese government, which has been connected to economic and political espionage against the United States. 

The Justice Department said in May that five Chinese government officers had been charged with coordinating cyberattacks against six major American corporations. 

Unaffiliated Chinese hackers have also been an issue both within and outside the nation, according to Alperovitch, although their presence is surprisingly modest given the country's size.
“We may conjecture as to why,” he adds, “but the most likely answer is that persons who are recognized as being involved in this activity by the Chinese government are recruited to work for the government full time.”
]]> 2021-08-11 06:50:15 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675133830 Nigerian Cybercrime miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675136953 According to Sherry, the original home of low-tech scam emails is still a significant participant in underground cyber activity and has evolved into a destination for worldwide cybercrime syndicates. Even as more individuals connect to the Internet, authorities in Nigeria and other African nations have been sluggish to crack down on fraudsters and hackers. Sherry adds, "It's proving to be a really pleasant environment for hackers to set up shop, operate, and carry out their illicit operations." President Jonathan Goodluck's recent efforts to regulate cybercrime in Nigeria have pushed some of the activity to other nations in the area, including Ghana.]]> 2021-08-11 06:53:40 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675136953 Vietnam Cybercrime miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675138660 Southeast Asian tech businesses have a long history of collaborating with Western software firms and other tech firms, according to Sherry, implying that the region has a broad foundation of tech knowledge. 

Sherry adds, "People who are truly outstanding software engineers will be naturals when it comes to pulling off the 'white hat' and putting on the 'black hat.'" 

A hacker reportedly masterminded the theft of up to 200 million personal records in the United States and Europe, including Social Security numbers, credit card data, and bank account information, in Vietnam, where the I.T. sector has grown at a fast rate in the previous decade.
According to the Electronic Frontier Foundation, the communist regime there has also been hiring local hackers to spy on journalists, dissidents, and activists.
]]> 2021-08-11 06:55:15 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675138660 How to Combat Cybercrime (According to US Norton.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675140230
How to protect yourself against cybercrime

Anyone using the internet should exercise some basic precautions. Here are 11 tips you can use to help protect yourself against the range of cybercrimes out there.

1. Use a full-service internet security suite

For instance, Norton Security provides real-time protection against existing and emerging malware including ransomware and viruses, and helps protect your private and financial information when you go online.

2. Use strong passwords

Don’t repeat your passwords on different sites, and change your passwords regularly. Make them complex. That means using a combination of at least 10 letters, numbers, and symbols. A password management application can help you to keep your passwords locked down.

3. Keep your software updated

This is especially important with your operating systems and internet security software. Cybercriminals frequently use known exploits, or flaws, in your software to gain access to your system. Patching those exploits and flaws can make it less likely that you’ll become a cybercrime target.

4. Manage your social media settings

Keep your personal and private information locked down. Social engineering cybercriminals can often get your personal information with just a few data points, so the less you share publicly, the better. For instance, if you post your pet’s name or reveal your mother’s maiden name, you might expose the answers to two common security questions.

5. Strengthen your home network

It’s a good idea to start with a strong encryption password as well as a virtual private network. A VPN will encrypt all traffic leaving your devices until it arrives at its destination. If cybercriminals do manage to hack your communication line, they won’t intercept anything but encrypted data. It’s a good idea to use a VPN whenever you a public Wi-Fi network, whether it’s in a library, café, hotel, or airport.

6. Talk to your children about the internet

You can teach your kids about acceptable use of the internet without shutting down communication channels. Make sure they know that they can come to you if they’re experiencing any kind of online harassment, stalking, or bullying.

7. Keep up to date on major security breaches

If you do business with a merchant or have an account on a website that’s been impacted by a security breach, find out what information the hackers accessed and change your password immediately.

8. Take measures to help protect yourself against identity theft

Identity theft occurs when someone wrongfully obtains your personal data in a way that involves fraud or deception, typically for economic gain. How? You might be tricked into giving personal information over the internet, for instance, or a thief might steal your mail to access account information. That’s why it’s important to guard your personal data. A VPN — short for virtual private network — can also help to protect the data you send and receive online, especially when accessing the internet on public Wi-Fi.

9. Know that identity theft can happen anywhere

It’s smart to know how to protect your identity even when traveling. There are a lot of things you can do to help keep criminals from getting your private information on the road. These include keeping your travel plans off social media and being using a VPN when accessing the internet over your hotel’s Wi-Fi network.

10. Keep an eye on the kids

Just like you’ll want to talk to your kids about the internet, you’ll also want to help protect them against identity theft. Identity thieves often target children because their Social Security number and credit histories frequently represent a clean slate. You can help guard against identity theft by being careful when sharing your child’s personal information. It’s also smart to know what to look for that might suggest your child’s identity has been compromised.

11. Know what to do if you become a victim

If you believe that you’ve become a victim of a cybercrime, you need to alert the local police and, in some cases, the FBI and the Federal Trade Commission. This is important even if the crime seems minor. Your report may assist authorities in their investigations or may help to thwart criminals from taking advantage of other people in the future. If you think cybercriminals have stolen your identity. These are among the steps you should consider.

  • Contact the companies and banks where you know fraud occurred.
  • Place fraud alerts and get your credit reports.
  • Report identity theft to the FTC.
]]> 2021-08-11 06:57:04 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675140230 8 Ways to fight cybercrime (According to Ecarrerrs.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675141782 You don’t need a qualification in IT or cyber security to know the best ways to avoid the repercussions of cybercrime (if you want to make a career of it, that is a different story, and you can click here).
A ransomware attack occurs every 45 seconds, and ComputerWeekly reported business cybercrime is up 63%.
e-Careers lists 8 basic practices that you can use to fight cybercrime. You may think that computer security is technical and complicated, maybe for someone else in your organisation or home to do. But these are basic steps that you can implement to play your part in the war on cybercriminals.
1. Install the latest updates or enable automatic updates
Updates to anti-virus software and other means of protection will help to guard your systems and information against cybercriminals. As technology continues to evolve, so do threats against network integrity and it’s vital that your systems stay up-to-date in the war against cybercrime. Everyday software you use (the likes of Microsoft Office, Windows, Google Chrome) have security issues which are being found on a day-to-day basis; automatic updates will plug these gaps in your security.
2. Regularly back-up your files safely
Backing up your files means that the security settings on them are the most recent too, so regularly backing up means that they will not just be stored, but stored safely. IT professionals usually follow the 3-2-1 backup rule: three copies, on two different media (a USB, disc, hard drive etc), and one copy stored offsite. It is also possible to download software that automatically backs up your data for you.
3. Don’t click on phishing emails and dodgy links
As tough as it is to hear, that nice man who’s offering you 10 billion Nigerian dollars directly into your bank account is a phishing scam. Do not even open emails where you don’t recognise the sender because opening the message can lead to accessing your system and any personal details and information you have stored.
4. Don’t give out personal information unless the site is secure
If a URL has “https” (stands for HTTP secure) at the beginning, then this website is safe to use. The communication over the computer network is encrypted meaning that page authenticity on websites is protected, accounts are secure and user communications, identity and web browsing are private.
5. Install firewalls
A firewall is a simple but effective way of protecting your information. It is a network security system that monitors and controls incoming and outgoing network traffic based on security rules. Some business firewalls record over 10,000 attack attempts in one day.
6. Block suspicious accounts on social media
A troll used to be universally known as the antagonist in Three Billy Goats Gruff, but as time has worn on, and social media has grown, trolls are now people who purposefully go out of their way to make other people’s lives a misery on the internet. The troll might not just be an ill-informed, or uneducated human being, a troll may be a hacker trying to access your personal information. So, if you should encounter someone who fits this description, block at all costs.
7. Don’t store your card details on websites
Now that we’re into the swing of things, this might be a bit of a given. Any details stored are under threat, whether a website is secure or not. I know the “One Click” option on Amazon is a God-send for convenience, but keeping your details safe should be more of a priority than taking an extra 30-40 seconds to checkout.
8. Build your security consciousness
All of these techniques and steps are part of a bigger goal and plan: build your security consciousness to ensure your cyber presence is as safe as you can make it.
]]> 2021-08-11 06:58:40 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675141782 5 most important way to stop cybercrime(According to Fast Company.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675143083 BY SCOTT SHACKELFORD4 MINUTE READ

High-profile data breaches at companies like British Airways and Marriott get a lot of media coverage, but cybercriminals are increasingly going after community groups, schools, small businesses, and municipal governments. Just in the Midwest, hospitals, libraries, voter registration systems, and police departments have fallen victim to one type of digital hijacking or another. Cybercrime is not just a concern for corporate technology departments. Schools, scout troops, rotary clubs, and religious organizations need to know what to look for and how to handle it. As the academic director of a new cybersecurity clinic at Indiana University, I’ll be helping to lead students and faculty members in teaching local, county, and state government agencies, not-for-profit organizations, and small businesses how to improve their cyber hygiene. They’ll learn how to better manage digital systems, protect their intellectual property, and improve consumer privacy. Everyone should know the basics for how to protect themselves and the groups or organizations they’re part of. Here is a brief look at some of the cybersecurity best practices we’ll be teaching members of our communities to keep in mind as they go online for work, play, or volunteering.

1. KEEP EVERYTHING UP TO DATE

Many breaches, including the 2017 one at the Equifax credit bureau that exposed the financial information of almost every American adult, boil down to someone leaving out-of-date software running. Most major computer companies issue regular updates to protect against newly emerging vulnerabilities. Keep your software and operating systems updated. To make it easy, turn on automatic updates when possible. Also, be sure to install software to scan your system for viruses and malware, to catch anything that might get through. Some of that protection is free, like Avast, which Consumer Reports rates highly.

2. USE STRONG, UNIQUE PASSWORDS

Remembering passwords, especially complicated ones, isn’t fun, which is why so much work is going into finding better alternatives. For the time being, though, it’s important to use unique passwords that are different for each site and not easy-to-hack things like “123456” or “password.” Choose ones that are at least 14 characters long. Consider starting with a favorite sentence and then just using the first letter of each word. Add numbers, punctuation, or symbols for complexity if you want, but length is more important. Make sure to change any default passwords set in a factory, like those that come with your Wi-Fi router or home security devices. A password manager program can help you create and remember complex, secure passwords.

3. ENABLE MULTIFACTOR AUTHENTICATION

In many situations, websites are requiring users not only to provide a strong password but also to type in a separate code from an app, text message, or email message when logging in. It is an extra step, and it’s not perfect, but multifactor authentication makes it much harder for a hacker to break into your accounts. Whenever you have the option, enable multifactor authentication, particularly for crucial log-ins like bank and credit card accounts. You could also consider getting a physical digital key that can connect with your computer or smartphone as an even more advanced level of protection.

4. ENCRYPT AND BACK UP YOUR MOST IMPORTANT DATA

If you can, encrypt the data that’s stored on your smartphone and computer. If a hacker copies your files, all he’ll get is gibberish, rather than, for instance, your address book and financial records. This often involves installing software or changing system settings. Some manufacturers do this without users even knowing, which helps improve everyone’s security. For data that’s crucial, like medical information, or irreplaceable, like family photos, it’s important to keep copies. These backups should ideally be duplicated as well, with one stored locally on an external hard drive only periodically connected to your primary computer, and one remote, such as in a cloud storage system.

5. BE CAREFUL USING PUBLIC WI-FI

When using public Wi-Fi, anyone nearby who is connected to the same network can listen in on what your computer is sending and receiving across the internet. You can use free browsers like Tor, which was originally developed to provide secure communications for the U.S. Navy, to encrypt your traffic and camouflage what you’re doing online. You can also use a virtual private network to encrypt all your internet traffic, in addition to what goes through your browser—like Spotify music or video in the Netflix app—to make it more difficult for hackers, or even casual users, to spy on you. There is a wide range of free and paid VPN options




FAST COMPANY EVENTS
Fast Company announces details of seventh annual innovation festival“The Rebuilders” will explore opportunities to reshape business, community, and culture, post-pandemic.

IN SHORT: BE CAUTIOUS, PROACTIVE, AND INFORMED

Of course, there is much more a person or organization can do to protect private data. Search engines like DuckDuckGo don’t track users or their searches. Firewall software built into both Windows and Mac OS–or downloaded separately–can help stop viruses and worms from making their way into your systems. To protect yourself against data breaches at places where your information is stored, you should consider freezing your credit, which blocks anyone from applying for credit in your name without your personal permission. It’s free. If you have already received a notification that your data has been stolen, consider putting a free “fraud alert” on your credit reports. There are plenty of other places to learn more about cybersecurity, too, including some very good podcasts. No person, organization, or computer can ever be 100% secure. Someone with the patience, money, and skill can break into even the most protected systems. But by taking these steps, you can make it less likely that you’ll be a victim and in the process help raise the overall level of cyber hygiene in your communities, making everyone safer both online and off.

]]> 2021-08-11 07:00:07 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675143083 5 Steps in Recognizing and Combating Cybercrime (According to Thycotic.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675145084 5 Steps to Recognize and Combat Cyber Crime
 

Written by Joseph Carson


October 18th, 2016

Recognizing and combating cyber crime
This is one of the most talked about topics in the media and in the boardroom in recent years. It is a major problem and challenge for many organizations. The average dwell-time (average time before a company detects a cyber breach) is more than 200 days, highlighting this as an area where companies do not do well. This is because not all cyber breaches are destructive in nature.
Too often, companies only discover a cyber breach when they detect the “smoke”
Many companies are not proactively looking for cyber breaches and only when they detect “smoke” do they realize the company has experienced a cyber breach. Ransomware, for example, makes the critical data on systems unavailable until the victim pays a financial fee, typically bitcoins, to get the key that unlocks the data. This type of cyber attack is easily detected, like DDOS attacks (Distributed Denial of Service), as it makes part of the company’s service immediately unavailable. Ransomware threats have been on the increase and are about to pass 1 billion dollars in cyber crime.
Many cyber attacks are far less conspicuous in their destruction
Not all of the cyber threats are so apparently destructive and due to this many companies do not see smoke at all. Therefore they assume that everything is okay and nothing is at risk. However, the reality is that a hacker or cyber criminal is already on the network, waiting, watching, stealing data, and committing financial fraud; typically using the credentials and accounts of a trusted insider. This is because hackers and cyber criminals for whom the motive is financially motivated or intelligence focused, the key to their hacking activities is to remain hidden. To stay undetected, and hide any trace or footprint of their activities. These types of hacking techniques make it difficult for companies to recognize and combat cyber crime. They are difficult to detect because everything appears to be working normally.
So what can companies do recognize and combat cyber crime and improve their cyber hygiene? Here are some tips and best practices that will help you and your company recognize cyber crime and combat the threats.
#1 Education and Cyber Security Awareness
This is one of the most effective cyber security countermeasures, and an instant win.
Educate employees to avoid and prevent suspicious activity on their computers:
• Detect suspicious applications running, popups, warning messages, etc.
• Flag suspicious emails (emails with attachments, sender unknown, hyperlinks and unusual requests)
• Be vigilant when browsing websites
• Stop and think before clicking on links or ads
• Ensure websites are trustworthy before entering credentials
• Limit activities when using public insecure Wi-Fi networks or use a VPN
By educating employees on what to look for will increase the company’s ability to recognize cyber crime early and in many cases prevent cyber crime. This should also be communicated and it will not only help the company’s cyber hygiene but will help the employee keep their own personal data secure.
Training should start at the top of the organization, working down. It is recommended to appoint a cyber security ambassador within each department to assist in the detection and incident response for potential cyber security threats and risks. This helps expand the efficiency of any IT security team while ensuring that there is someone in the organization who is responsible and accountable for implementing and maintaining cyber security measures.
For more information on staying safe online, Stop.Think. Connect: Top 8 Cyber Security Best Practices You Can’t Ignore.
#2 Collect security logs and analyze for suspicious or abnormal activities
An important activity and best practice for companies is to make sure security logs are being collected and analyzed for suspicious activities. In many situations looking at security, logs will likely identify abnormal action. For example, look for credential logins or application executions that occurred during non-business hours. Not only can collecting security logs help detect cyber criminal activities, but they also become hugely important when dealing with digital forensics to determine root cause analysis and help with future prevention measures.
#3 Keep systems and applications patched and up to date
Keep systems and applications up to date and apply the latest security patches—this will keep most hackers and cyber criminals from gaining access to systems by using known exploits and vulnerabilities. This is not a full proof counter measure, but it will make a successful breach more difficult for cyber criminals.
What’s new in cyber security in 2020? The increased risks associated with employees working remotely. Protect yourself:
Download our Remote Worker Cyber Security Tools for individuals, contractors and IT professionals.
#4 Use strong passwords and keep privileged accounts protected
When choosing a password make it a strong password, unique to that account, and change it often. The average age of a social password today is years, and social media does not do a great job alerting you on how old your password is, how weak it is, and when it is a good time to change it. It is your responsibility to protect your account so, protect it wisely. If you have many accounts and passwords, use an enterprise password and privileged account vault to make it easier to manage and secure. Never use the same password multiple times.
If your company is giving employees local administrator accounts or privileged access then this seriously weakens the organization’s cyber security. This can mean the difference between a single system and user account being compromised and the entire organization’s computer systems. In all Advanced Persistent Threats, the use of privileged accounts has been the difference between a simple perimeter breach and a major data loss, malicious activity, financial fraud, or worst case scenario: ransomware. View my on-demand ransomware webinar >
Organizations should quickly ensure they continuously audit and discover privileged accounts and applications that require privileged access, remove administrator rights where they are not required and adopt two-factor authentication to mitigate user accounts from easily being compromised.

 
FREE Windows Privileged Account Discovery Tool
What will you find?
 
GET THE TOOL
#5 Do not allow users to install or execute unapproved or untrusted applications – stop malware and ransomware at the endpoint
Another major risk that organizations run—as a result of providing users with privileged access—is that the user has the ability to install and execute applications as they wish, no matter where or how they obtained the installation executable. This can pose a major risk allowing ransomware or malware to infect and propagate into the organization. It also allows the attacker to install tools enabling them to easily return whenever they wish. When a user with a privileged account is reading emails, opening documents, browsing the Internet and clicking on numerous links, or when they simply plug a USB device into the system, they can unknowingly install infectious or malicious tools. This enables an attacker to quickly gain access and begin the attack from within the perimeter, or in the worst case scenario, encrypt the system and sensitive data—then request a financial payment in return to unlock them.
Organizations must implement security controls that prevent any application or tool from being installed onto the system by using Application Whitelisting, Blacklisting, Dynamic Listing, Real-Time Privilege Elevation, and Application Reputation and Intelligence. This is one of the most effective ways to prevent being the next victim of cyber crime.
#6 Be deceptive and unpredictable
It’s crucial to be deceptive, be unpredictable. Most organizations look to automation to help assist in their cyber security defenses, but in many cases this lends itself to predictability: scans are run at the same time every week, patches take place once per month, assessments once per quarter or per year.
Companies that are predictable are vulnerable, so should establish a mindset in which systems are updated and assessed on an ad-hoc basis. Randomize your activity. This will increase your capacity to detect active cyber attacks and breaches.
These best practices and tips will help companies reduce the dwell time of cyber breaches as it makes it difficult for hackers and cyber criminals to remain hidden and increases the likeness of detecting active cyber attacks. It also raises awareness in the organization, and engages employees in becoming an important role in detecting suspicious activities.

]]> 2021-08-11 07:02:16 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675145084 Strategies to Combat Cybercrime (According to Glasscock.rice.edu) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675147462
Today, cybercrime is one of the greatest threats facing our country, and mitigating the risks of cybercrime in corporate information management is essential. Companies need to enforce strategic cyber intelligence across all levels to reduce the risks of a potential cyber threat. Marc Scarborough, Rice University’s information security officer, and Carlyn Chatfield, Rice’s manager for IT technical communication, will conduct a one-day workshop, Strategies for Reducing Cyber Risk in Corporate Information Management, where you will learn about current trends and emerging cyber threats targeting organizations big and small. Scarborough answered a few questions about cybercrime and how companies can protect themselves below.


What are the most common cybersecurity attacks a company might encounter?


Passwords account for many attacks against organizations. Attackers often use tactics such as phishing and other social engineering to obtain a set of network credentials, hoping to use those to gain access to accounts with more access, such as IT administrators or VIPs. Even in organizations that have a sound password strategy, attackers know that accounts for contractors or other third-party consultants and partners are often ignored or have exceptions for password changes and complexity requirements.


Employees with access to sensitive information also pose a risk, often in a non-malicious way. Many data leaks are accidents from people that simply make mistakes. Others are disgruntled employees or employees that still have access after being let go or who take sensitive information with them when they leave.


What can companies do to prevent cybersecurity attacks?
Internet-facing sites and services must be protected. Beginning with a secure build process, systems should undergo a basic vulnerability assessment before going live. Assessments should continue on some frequency and after any significant change. Proper change management is also a must; ensuring changes to the system are vetted and approved. In addition, critical systems should go through penetration testing at least annually.


Contractors and those in other third-party organizations should follow at least the same level of information security as the employees of the company. Cloud services should be investigated before any contracts are signed to ensure compliance and proper adherence to best practices in information security.


Good, sound policies should be developed and advertised throughout the organization with ongoing training provided to make sure the information security goals of the company are clear and well-understood. Awareness should focus on developing good habits for employees to follow both at work and at home.


What cybersecurity trends do you foresee in the future?


Obviously we see more services being offered in the cloud. Several existing services that many companies depend on now only have cloud-based offerings. Cloud services can be a compelling option for many companies, especially small to medium sized businesses. All cloud companies are not the same, however, and companies should be careful to select a provider that provides an appropriate level of security for the kind of data they store and service they provide. Companies should also ask important questions before signing a contract. For example – what happens to the data if the company goes out of business or if a contract isn't renewed? Which party is responsible if there is a breach? What security precautions are taken at the facility that houses the data?


We also see more than just the proliferation of mobile, smart devices. We also see more people blending their personal and professional lives. Sites like Facebook and LinkedIn provide rich opportunities for attackers to learn about companies and the employees that work there. Attackers know that many people use the same password for everything, and know if they compromise their LinkedIn password they probably have their corporate password. Services like Dropbox are also making their way to corporate desktops and personal devices. They allow for easy access to data but can bleed it unintentionally through sharing or unprotected devices. These services can also allow access to corporate resources after someone leaves if the client is still installed on the company system.


Join us on Friday, May 2, 2014 for this one-day workshop where you will leave with a toolkit for initiating and implementing an information security plan and employee awareness campaign that is customizable for your company.

]]> 2021-08-11 07:04:42 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675147462 Combating Cybercrime (According to InternetSafety101.org) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675149243 The more we do online, the greater the increase in cybercrimes increases not only in scale but in frequency. Cybercrime includes online fraud, identity theft, cyber stalking, cyberbullying, email scams, phishing & more. Here are a few helpful tips to help combat cybercrime:
  • Cybercriminals look for weak passwords, weak privacy settings & outdated security software
  • Phishing emails are often the way thieves access your online accounts. If an email looks suspicious, it’s best to delete it
  • Avoid free Wi-Fi networks. Sensitive info can be compromised on public W-Fi
  • Always keep your mobile devices & apps updated to protect yourself
  • Unencrypted Wi-Fi networks are open to anyone—including cyber criminals—so keep sensitive data safe by never transmitting credit card numbers or other personal information on an unencrypted network
  • Is your connected refrigerator putting your home network on risk? Any devices connected to the Internet – like smart thermostats, coffee pots, health trackers, and refrigerators – need to be updated to protect the network to which they are connected.
  • Your home’s wireless router is the primary entrance for cybercriminals to access all of your connected devices. Secure your Wi-Fi network, and your digital devices, by changing the factory set default password.
  • Keep your operating system, browser, and other critical software optimized by installing updates.
  • Cybercriminals look for weak passwords, weak privacy settings, and outdated security software. Protect yourself from cybercrime by using strong passwords and enabling multi-factor authentication. It requires an additional step after passwords, often a PIN texted to your cell.
  • Is your connected refrigerator putting your home network on risk? Any devices connected to the Internet – like smart thermostats, coffee pots, health trackers, and refrigerators – need to be updated to protect the network to which they are connected.
]]> 2021-08-11 07:06:24 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1675149243 WHATS OF CYBERCRIME (According to Laws101.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676575244 WHAT IS THE PUNISHMENT FOR CYBER CRIME?

 LEGAL ASSISTANT NOVEMBER 10, 2020 ADMINISTRATIVE LAW,  CRIMINAL LAW,  REGULATORY LAW,  RESOURCES
According to the FBI Internet Crime Report, the country loses more than $3.5 billion every year in internet crimes. The bureau’s Internet Crime Complaint Center (IC3) receives an average of 1,300 reports a day from individuals and businesses that have fallen victim to cyber crime.

Criminals are getting smarter by the day and are employing a host of highly sophisticated tactics to defraud unsuspecting victims of their hard-earned cash. Forget about those old infamous Nigerian Prince scams. Internet crime has evolved and takes on many forms, including hacking, identity theft, and computer fraud.

Federal and state governments have put laws in place that criminalize certain online activities. You need to read up on these statutes to understand what qualifies as cyber crime and the associated penalties. Here’s everything you need to know.


]]> 2021-08-12 08:03:52 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676575244 WHATS OF CYBERCRIME (According to Laws101.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676575610
PHISHING SCAM EXAMPLE

Here’s a common phishing technique hackers employ to gain access to your bank account or steal your credit card information.

You hold a checking account at JPMorgan Chase. You receive an email one morning from what appears to be the fraud department at the bank alerting you on “… unauthorized or suspicious activity on your account…”

It might even notify you of “… a large purchase made using your credit card…” and subsequently instruct you to confirm your bank account or credit card details to allow the bank to “investigate” this activity and recover your lost funds.

Phishing scams take advantage of human psychology. Such emails are designed to look identical to the format used by the organization that the criminal is purporting to represent. When you click on the link provided, it directs you to a fake website that looks identical to the real one but with a slightly different address.

So, while the real JPMorgan address is jpmorganchase.com, the fake website may have a URL like jpmorganchaze.com, or any other with a subtle variation that you might not notice right off the bat.

Once you enter your username and password, the hacker would retrieve these credentials from the back-end of the fake site and use them to log into your actual account via the real website.


]]> 2021-08-12 08:04:24 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676575610 WHATS OF CYBERCRIME (According to Laws101.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676576004
ONLINE IDENTITY THEFT

Gone are the days when your biggest concern was having your wallet stolen on the subway and criminals using your credit card or driver’s license for their sinister motives. Fraudsters can now steal your identity by gaining access to personally identifiable information (PII) through the internet. They do this in any number of ways.



1. UNSECURE WEBSITES

When shopping on online sites that don’t have the “https:” prefix on the URL, any information you enter there is accessible to unauthorized third-parties. So, when you input your name, address, date of birth, and credit card information, hackers may gain access to the site’s database and steal your information.


2. MALICIOUS SOFTWARE

Spyware and other forms of malware can get installed on your device without your knowledge. This can happen in several ways, for instance:

  • Clicking on a pop-up ad
  • Downloading software or files laced with spyware
  • Filling out a form to access downloadable content
  • Opening email attachments from unknown sources
  • Visiting sketchy websites
Spyware runs discreetly in the background without your knowledge. It records all your browsing activities and monitors all the keystrokes on your mobile device or PC. Fraudsters are, therefore, able to collect your PII and use it to commit online fraud.


3. WEAK PASSWORDS

Using a weak easy-to-guess password for your financial and social accounts leaves you vulnerable to getting hacked. This is particularly common in accounts that don’t have any active multi-factor authentication security feature.


4. DISCARDED MOBILE DEVICES AND COMPUTERS

If you discard your device without wiping all your PII data, it can be an entry point for a fraudster to steal your identity and use it to commit crimes once they get their hands on it.


5. TARGETING KIDS ONLINE

Children can innocently divulge sensitive personal information without even realizing it. Cybercriminals are increasingly targeting kids to get them to install spyware into their devices without their knowledge. They might achieve this by luring them into clicking on enticing ads or downloading an exciting game designed to capture their attention.

]]> 2021-08-12 08:05:01 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676576004 WHATS OF CYBERCRIME (According to Laws101.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676576561
CYBERSTALKING

The cyberstalking definition is broad. The crime takes many forms but generally refers to harassment and bullying that takes place via online channels.


Most cyberstalking cases often start as seemingly harmless interactions between the perpetrator and the victim. These interactions then evolve into threatening messages or negative comments on social media that become annoying and sometimes, downright scary.

Once these messages make you feel harassed, and the perpetrator doesn’t heed your demands for them to stop, then it becomes cyberstalking. It doesn’t always have to involve direct communication. You might not even be aware that you’re being cyberstalked.

If an individual monitors your online activities to gather personal information on you to perpetrate crimes like identity theft, that also constitutes cyberstalking.


ONLINE HARASSMENT LAWS

In 1990, California became the first state in the US to enact a specific stalking law. Since then, all 50 states and the District of Columbia have enacted similar laws. However, not all states have specific cyberstalking legislation, and there still isn’t a specific federal law that addresses cyberstalking in all its forms.

Because of this, prosecutors have come to rely on various state penal statutes that prohibit harassment, threats of a terrorist nature, or any actions that would be deemed as intimidating. Such laws also encompass threats convened through telephones, letters, and electronic communication technologies.

Despite this, legal scholars and critics argue that these statutes are inadequate for three main reasons.

  1. They don’t address the repetitive nature of cyberstalking
  2. The existing penal statutes don’t take into account the full range of bizarre behaviors encompassed in cyberstalking activities
  3. They recognize the activity as cyberstalking only if there’s an explicit threat issued by the perpetrator
Some of the states that currently have cyberstalking laws in place include Alabama, Arizona, Connecticut, California, Florida, Oklahoma, Texas, and Wyoming. However, some of these statutes only address the online harassment of minors. They don’t protect adult victims of cyberstalking.

There’s also the issue of online anonymity that makes it difficult for the victims to identify their stalkers. The ongoing debate is how those internet users can be traced without infringing on their constitutionally-protected civil liberties.


CYBERSTALKING EXAMPLES

Cyberstalking takes many forms. Here are some common examples:

  • False accusations – It involves a cyberstalker setting up a blog or website specifically to post false information about the victim. They may also do it in chat rooms and online forums that allow public users to create posts.
  • Flaming – It involves the stalker posting comments laced with profanity or aggression (flamebait) to incite the victim into a heated exchange with them.
  • Gathering information – In this method of cyberstalking, the perpetrator approaches the victim’s friends and family members to obtain personal information to use it against the victim later.
  • Monitoring – The stalker tracks the victim’s online activities to gather data like their passwords and other sensitive information, which they later use to harass the victim or impersonate them.
  • Obsessive text messages – In this form of cyberstalking, the perpetrator sends dozens of text messages to the victim to torment them with baseless accusations.
They may also send these messages through their social media accounts or obsessively comment on their posts to remind them (the victim) of their perpetual presence.

  • Playing the victim – The perpetrator makes false assertions that they are being harassed by the victim. They usually do this with friends, family, and co-workers to garner support.
  • Posting insults – The stalker posts derogatory, insulting, or defamatory statements about the victim. This is common in social media sites like Facebook, Instagram, and Twitter.
]]> 2021-08-12 08:05:36 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676576561 WHATS OF CYBERCRIME (According to Laws101.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676577264
DOXING

Have you ever posted something that you would otherwise be embarrassed to say in public? Maybe it was in an online forum while hiding your real identity. If this is something you frequently do, you better be careful. Someone might just dox you.

If this is the first time you’ve come across the term, you’re likely wondering – what is doxing? The term is short for “dropping dox.” It refers to an online attack in which a hacker digs up personal information and sensitive documents – hence the “dox” – to expose the real identities of individuals who post anonymously.

The goal of doxing is often to shame or embarrass the victim in the hope that the individual in question loses their job or ends up being shunned by friends and co-workers.

In a doxing attack, a hacker may publish the victim’s Social Security Number, credit card information, phone number, real name, home address, personal photos, and even their social media profiles. You might be surprised at just how easy it is for cybercriminals to dig up information on you even when you think your online identity is hidden.

This begs the question – Is it illegal to dox someone? Well, it depends. If the information about you that’s exposed is part of the public record, then no – it is not illegal. So, marriage and divorce records, traffic violations, and arrest records are all fair game.

It is, however, illegal if the information exposed isn’t part of the public record. This includes details like your credit card and bank account information or birth certificate.


DDOS ATTACK

DDOS is short for Distributed Denial-of-Service. This is a malicious cyberattack where a hacker attempts to disrupt the normal traffic of a network, service, or targeted server, by overwhelming it with a flood of requests.

As a result, the network resources get clogged up, preventing regular traffic from accessing these resources. The most common symptom of a DDOS attack is a service or site suddenly becoming unavailable, extremely slow, or exhibiting other performance-related issues.

]]> 2021-08-12 08:06:15 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676577264 PUNISHMENTS FOR CYBERCRIME (According to Laws101.com) miluser13 https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676578413

PUNISHMENT FOR HACKING

There are several federal laws in place that address hacking. Some of the notable ones include:

  • The Computer Fraud and Abuse Act (CFAA)
  • The Defend Trade Secrets Act (DTSA)
  • The Electronic Communications Privacy Act (ECPA)
  • The Stored Communications Act (SCA)
The CFAA, however, is the main federal anti-hacking statute that outlaws the unauthorized access of another individual’s or entity’s computer system. Here are some examples of CFAA violations and their respective penalties.

  • Obtaining national security information: 10 years for first-time offenders; 20 years for a second conviction
  • Trafficking in passwords: 1 year for first-time offenders; 10 years for a second conviction
  • Unauthorized access to a computer to defraud: 5 years for first-time offenders; 10 years for a second conviction
  • Unauthorized access to a computer to extort: 5 years for first-time offenders; 10 years for a second conviction
  • Unauthorized access to a computer to obtain information:10 years for first-time offenders; 20 years for a second conviction
The monetary penalty associated with a particular cyber crime depends on its severity. A misdemeanor conviction, for instance, could result in a fine of up to $1,000, while a felony conviction may have a fine that exceeds $100,000.

]]> 2021-08-12 08:07:57 UTC https://padlet.com/miluser13/kv5t32lvf1hs2chz/wish/1676578413