CYBER SECURITY INFORMER - news and tips to help you stay safe online and protect your network


Clicking that Link Won't Bring Michael Jackson Back to Life

Email phishing scams are still a very popular way for cyber criminals to scoop up a lot of private data without much effort. Their tactics play on the modern human condition of wanting to click on interesting-sounding links (without knowing where they might lead). Since almost everyone checks email at work, these scams aren't just threats to private individuals, but also the companies where employees work.

With the death of Michael Jackson, a new malware spam threat has emerged. Celebrity-related events and other big news items typically set off a new round of opportunistic cyber-crime. The Better Business Bureau of the Lower Mainland has had an eye on this trend.

“Scammers read newspapers, watch TV and surf the Internet and they know that by using a hook from the day’s top headlines, that they’ll be able to catch lots of fish,” said Lynda Pasacreta, BBB President and CEO.

For instance, before the death of the King of Pop, the threat of swine flu and a potential pandemic meant "scammers had a very large pond to go phishing in," Pasacreta notes. Security industry professionals suggest that more than 250 Web sites with the term “swine flu” were registered within the first few days of the outbreak. "They predict scams artists are preparing to use such Web sites in a variety of different online scams."

BBB suggests avoiding opening e-mail from an unknown source or clicking on any links in the body of the e-mail. Don't open attachments. "Instead, simply delete it."

Just in case a phishing scam does manage to deceive one of your employees into clicking a link, ensure your anti-virus, applications and operating system are all updated to ensure maximum possible protection from malware.

One other way to mitigate risk is to reduce the amount of time employees spend online, if it's not necessary for their job. “Business owners often know that they should build security for online transactions and strengthen their networks, but the reality is that we may be too casual with our staff and their browsing habits,” Pasacreta says. “We encourage businesses to learn how you can train your staff to reduce online risks.”

In the next issue of Cyber Security Informer, we’ll be continuing to profile organizations that are helping make the world a more secure place. If your organization is doing its part to build a more secure future by protecting partners, customers, website visitors and application users from cyber crime, contact us today at info@pcis.com

Webinar on July 8: Fundamentals of Web Application Firewalls

In this Case for Security webinar, we will explain what a WAF is, common types, and how to determine whether or not a WAF solution is effective for your enterprise.

How to Register
1. Go to http://boonbox.webex.com/meet/boonbox
2. Click "Show All Meetings".
3. Click the "Register" link on the right in the Status column for "Case for Security Webinar: Fundamentals of Web Application Firewalls" and fill in the short registration form. You will be sent your registration confirmation information and instructions on how to participate.

Who Should Register: Business owners and executives concerned with data security compliance and business continuity.

Webinar Outline:
* Review of web application security fundamentals and the need for security products and services
* Web application firewalls explained
* Types of WAFs and critical differences
* Understanding the capabilities and limitations of web application firewalls
* Establishing a WAF use-case for your organization
* How a WAF deployment should work
* Other considerations regarding WAF use

As an additional benefit of signing up for this Case for Security webinar, you will also receive a complimentary subscription to our weekly newsletter, Cyber Security Informer

More event information for Fundamentals of Web Application Firewalls Webinar

June 30, 2009

Check out Cyber Security Informer Back Issues

Cyber Security Informer is distributed by:

Pacific Coast Information Systems Ltd. (IT Consulting)

Boonbox, a division of PCIS (Security Packaged Services)


Contact PCIS

Toll-free 1.877.744.7558


In this issue:

* Clicking that Link Won't Bring Michael Jackson Back to Life

* Webinar on July 8: Fundamentals of Web Application Firewalls

* Hacker Bait 

* Ask A Security Expert

Cyber Security Informer provides security news and tips to help organizations protect their business and their customers. 


Give us your feedback about Cyber Security Informer

Name
*
Company
*
Phone
*
Email
*
Feedback
Please tell us how you found out about PCIS


"Submit Feedback"

Resources Links:

 

Hacker Bait

The latest Hacker Bait list contains highly trafficked websites that have been found to have vulnerabilities that hackers and cyber criminals could exploit. 

This is not a complete list of all vulnerable sites on the Internet, but only represents websites where vulnerabilities were found within the past 90 days. These are only the latest additions to an ever-growing club of sites found to be insecure according to various public sources and online tools used in the web security industry.

If you would like more information on our data and why these sites are listed here, please contact PCIS

Hacker Bait Sites With Vulnerabilities Discovered in Past 90 Days

americangeriatrics.org

americanphotojournalist.com

architecture.org

auditblog.net

bestpaidprogram.com

betterlifeimmigration.ca

clublongisland.com

designenterprise.com

earth-history.com

education-guide.net

freelancewebsitepromotion.com

freewaywebhost.com

gimmethelyrics.com

hair-style-info.com

handwritingwizard.com

huntingreport.com

labseeker.com

lemonterrace.com

nationalunderwriter.com

starwarsgalaxiesonline.com


Ask A Security Expert

"What does the Michael Jackson spam look like?"

The late King of Pop isn't even in the ground yet, but as mentioned in our lead article, unscrupulous spammers are already using his famous name to entice people to click on bad links.

Already, the spam messages are coming in many forms. One of the first spams on the scene (apparently written without the benefit of an MS Word grammar check) says:

Vital information after the death of Michael Jackson's I really need some one trusted and secretive to speak with with informations I have in my possession before its too late Kindly reply me and I will immediately respond back, Its for just secret between both of us.

This email could contain malware that could infect your computer. Even without any malware attached, by clicking on any links in the email, the spammer may be alerted to send further messages with malware attached.

For employees accustomed to clicking on shortened URLs, be aware that your friends' accounts could be compromised and you won't know what the shortened URL leads to until you click it. How many of us need to get more information about Michael Jackson? It's not worth the risk.

If you would like more information about how to stay safe online, contact us.

Boonbox and Pacific Coast Information Systems Ltd.

Boonbox is a division of Pacific Coast Information Systems Ltd., specializing in products for web security, network security, password management and data backup.

PCIS is a Vancouver-based company which provides strategic consulting, application development, technology solutions and managed services to companies and government organizations throughout North America.

HOW TO SUBSCRIBE/UNSUBSCRIBE

SUBSCRIBE: To subscribe to Cyber Security Informer, send a blank email message with subject line "SUBSCRIBE" to informer@pcis.com

UNSUBSCRIBE: If you do not wish to receive future issues of Cyber Security Informer, send a blank email with subject line "UNSUBSCRIBE" to:informer@pcis.com and we will promptly remove you from our distribution list.

WE WANT YOUR FEEDBACK

Our purpose for providing this free service is to keep our clients and business contacts informed of technology developments. This information can help them resolve common problems and achieve their full potential by strengthening their business processes and infrastructure. Your input is important to us and we welcome your ideas for new features and how we can continue to improve our service to you. Send your comments and suggestions to informer@pcis.com or contact us directly at 604.844.7558