CYBER SECURITY INFORMER - news and tips to help you stay safe online and protect your networkClicking that Link Won't Bring Michael Jackson Back to LifeEmail phishing scams are still a very popular way for cyber criminals to scoop up a lot of private data without much effort. Their tactics play on the modern human condition of wanting to click on interesting-sounding links (without knowing where they might lead). Since almost everyone checks email at work, these scams aren't just threats to private individuals, but also the companies where employees work. With the death of Michael Jackson, a new malware spam threat has emerged. Celebrity-related events and other big news items typically set off a new round of opportunistic cyber-crime. The Better Business Bureau of the Lower Mainland has had an eye on this trend. “Scammers read newspapers, watch TV and surf the Internet and they know that by using a hook from the day’s top headlines, that they’ll be able to catch lots of fish,” said Lynda Pasacreta, BBB President and CEO. For instance, before the death of the King of Pop, the threat of swine flu and a potential pandemic meant "scammers had a very large pond to go phishing in," Pasacreta notes. Security industry professionals suggest that more than 250 Web sites with the term “swine flu” were registered within the first few days of the outbreak. "They predict scams artists are preparing to use such Web sites in a variety of different online scams." BBB suggests avoiding opening e-mail from an unknown source or clicking on any links in the body of the e-mail. Don't open attachments. "Instead, simply delete it." Just in case a phishing scam does manage to deceive one of your employees into clicking a link, ensure your anti-virus, applications and operating system are all updated to ensure maximum possible protection from malware. One other way to mitigate risk is to reduce the amount of time employees spend online, if it's not necessary for their job. “Business owners often know that they should build security for online transactions and strengthen their networks, but the reality is that we may be too casual with our staff and their browsing habits,” Pasacreta says. “We encourage businesses to learn how you can train your staff to reduce online risks.” In the next issue of Cyber Security Informer, we’ll be continuing to profile organizations that are helping make the world a more secure place. If your organization is doing its part to build a more secure future by protecting partners, customers, website visitors and application users from cyber crime, contact us today at info@pcis.com Webinar on July 8: Fundamentals of Web Application FirewallsIn this Case for Security webinar, we will explain what a WAF is, common types, and how to determine whether or not a WAF solution is effective for your enterprise. How to Register Who Should Register: Business owners and executives concerned with data security compliance and business continuity. As an additional benefit of signing up for this Case for Security webinar, you will also receive a complimentary subscription to our weekly newsletter, Cyber Security Informer More event information for Fundamentals of Web Application Firewalls Webinar |
June 30, 2009Check out Cyber Security Informer Back Issues Cyber Security Informer is distributed by: Pacific Coast Information Systems Ltd. (IT Consulting) Boonbox, a division of PCIS (Security Packaged Services) Toll-free 1.877.744.7558 In this issue:* Clicking that Link Won't Bring Michael Jackson Back to Life * Webinar on July 8: Fundamentals of Web Application Firewalls * Hacker Bait * Ask A Security Expert Cyber Security Informer provides security news and tips to help organizations protect their business and their customers. Give us your feedback about Cyber Security InformerResources Links:
|
Hacker BaitThe latest Hacker Bait list contains highly trafficked websites that have been found to have vulnerabilities that hackers and cyber criminals could exploit. This is not a complete list of all vulnerable sites on the Internet, but only represents websites where vulnerabilities were found within the past 90 days. These are only the latest additions to an ever-growing club of sites found to be insecure according to various public sources and online tools used in the web security industry. If you would like more information on our data and why these sites are listed here, please contact PCIS Hacker Bait Sites With Vulnerabilities Discovered in Past 90 Days
|
Ask A Security Expert"What does the Michael Jackson spam look like?" The late King of Pop isn't even in the ground yet, but as mentioned in our lead article, unscrupulous spammers are already using his famous name to entice people to click on bad links. Already, the spam messages are coming in many forms. One of the first spams on the scene (apparently written without the benefit of an MS Word grammar check) says: Vital information after the death of Michael Jackson's I really need some one trusted and secretive to speak with with informations I have in my possession before its too late Kindly reply me and I will immediately respond back, Its for just secret between both of us. This email could contain malware that could infect your computer. Even without any malware attached, by clicking on any links in the email, the spammer may be alerted to send further messages with malware attached. For employees accustomed to clicking on shortened URLs, be aware that your friends' accounts could be compromised and you won't know what the shortened URL leads to until you click it. How many of us need to get more information about Michael Jackson? It's not worth the risk. If you would like more information about how to stay safe online, contact us. |
||
Boonbox and Pacific Coast Information Systems Ltd.Boonbox is a division of Pacific Coast Information Systems Ltd., specializing in products for web security, network security, password management and data backup. PCIS is a Vancouver-based company which provides strategic consulting, application development, technology solutions and managed services to companies and government organizations throughout North America. |
|||
|
HOW TO SUBSCRIBE/UNSUBSCRIBE SUBSCRIBE: To subscribe to Cyber Security Informer, send a blank email message with subject line "SUBSCRIBE" to informer@pcis.com UNSUBSCRIBE: If you do not wish to receive future issues of Cyber Security Informer, send a blank email with subject line "UNSUBSCRIBE" to:informer@pcis.com and we will promptly remove you from our distribution list. WE WANT YOUR FEEDBACK Our purpose for providing this free service is to keep our clients and business contacts informed of technology developments. This information can help them resolve common problems and achieve their full potential by strengthening their business processes and infrastructure. Your input is important to us and we welcome your ideas for new features and how we can continue to improve our service to you. Send your comments and suggestions to informer@pcis.com or contact us directly at 604.844.7558 |
|||