>> ASIAONE / DIGITAL / FEATURES / STORY
Jasmine Osada
Tue, Oct 07, 2008
AsiaOne
Staying safe online

Reading an update on a friend's love life on Facebook, shopping for new clothes from a web store and replying to emails are among the many things we do each time we go online.

While the Internet may have lots to offer, we should not take for granted that the online world has its dangers as well. The threat of cyber crimes such as credit card fraud, spam and identity theft is very real and unweary Net users are the most likely to fall victim.

AsiaOne spoke to Mr Eric Chong, Regional Marketing Director of Trend Micro (APAC) Pte Ltd in an email interview on the cyber crimes Singaporeans face and how to better protect yourself against such threats:

1. What are the recent trends on Internet security threats and how does this affect everyday users?

We witnessed a dramatic increase in Web threat activity during the first half of 2008. Web threats peaked in March to 50 million from approximately 15 million globally in December 2007.

According to Trend Micro's Internet security threat figures for the first half of 2008, the last six months saw an upswing in Web threats, but a steady decrease in adware and spyware that are generated by outdated technical methods and can no longer compete with high-level security solutions. Cyber criminals are not only leveraging new technologies to propagate cybercrime, but are also reinventing forms of social engineering to cleverly ensnare consumers as more sophisticated tricks evolve.

Cyber criminals will continue to target newly discovered vulnerabilities in "third-party" software applications, such as QuickTime, RealPlayer and even Adobe Flash. As we use such programs in daily situations, we must be mindful to not download suspicious files and constantly update these software to protect ourselves.

2. What are the most common online crimes and issues that Singaporeans fall prey to?

The top three online security issues faced by Singaporeans are identity theft, credit card fraud and spam. Recent reports in the media show that identity theft is a worrying trend. For instance, there was an identity theft case earlier this year when a man discovered that a stranger had opened several bank accounts in his name without his knowledge - only realising the fact when he was denied a study loan.

While credit cards offer us the convenience of shopping online, we are facing increasing threats from unsecure online transactions. Singaporeans fall prey to cyber criminals who use banks and popular e-Commerce web sites to "phish" for unsuspecting consumers who simply click on web sites that look authentic but actually feed key credit card login details directly to cyber crooks.

On top of worrying about cyber criminals, many of us are drowning in spam, or unsolicited communication, everyday. In fact, Singapore is the 22nd largest spam relaying country in the world and at least 4 to 5 seconds of precious time is wasted per spam email, according to recent reports in the media.

3. Are there particular types of websites or services (eg. online shopping, email scams, social networking sites) that see a particularly large number of Singaporean victims?

Singaporeans are now increasingly shopping online instead of limiting themselves to shopping malls. Approximately eight in ten Singaporeans shop online this year, with a 40 per cent increase in the number of online shoppers over the past two years. This means that more of us are exposed to risks as we increasingly use our credit cards online.

In August 2008, one of the world's biggest cyber heist saw the identities of eight million consumers being stolen over the past 12 months, according to published reports. Users who booked a room into anyone of the 1,300 Best Western hotels were affected. This concerns Singaporeans especially as travel-related products and tickets are their top most purchases done online. In fact, travel business volume from Internet sales has risen from five per cent in 2003 to about 20 per cent in Singapore now, according to the National Association of Travel Agents (NATAS)

4. Lots of Singaporeans are using social networking services such as Facebook and Friendster. What are the potential internet security threats that everyday users should be aware of?

While social engineering tactics such as the Nigerian phishing scam and the Spanish prisoner scam have been around for decades, cybercriminals continue to refresh and modernize this standard form of trickery based on whatever the trend appears to be. For example, the tools and technologies used to create the interactive nature of popular social networking sites have become a land mine for cybercrime. In March, we discovered that over 400 phishing kits designed to generate phishing sites were targeting top Web 2.0 sites (i.e. social networking, video sharing and VoIP sites), free email service providers, banks and popular e-Commerce Web sites.

Social networking is increasingly popular with 907,000 unique visitors to Friendster and 533,000 Facebook users from Singapore in May 2008 with more signing up everyday, according to comScore. While these websites allow us to keep in touch with our friends and family easily, users are exposed to risks such as unwanted contact, aggressive commercialism and covert web threats.

Despite their popularity, these sites are usually built upon Web 2.0 technologies and are prime targets for cybercriminals and malware authors who exploit their interactive nature to launch malicious attacks. According to our recent Threat Report & Forecast, Web 2.0 threats spiked to over 1.5 million a month in January 2008 from just over 1.0 million globally in December 2007.

Throughout the last 6-12 months, our threat research analysts have discovered various forms of malware activities within many social networking sites. For example, a popular site was compromised in late 2007 by banner ads that install malicious files and programs onto a victim's computer. Other sites were also found to be embedded with codes that redirect users to malicious sites -- all in an effort to steal identity and private data. In addition, social networking sites can often be a haven for adware and spyware.

An increasing number of consumers are vulnerable to identity theft as more users choose to display personal information on their profile pages. It is easy to determine other personal details with something as simple as a birth date as many organisations, including some banks, still use the date of birth as one of the "screening questions" when you call for assistance. Hackers can obtain personal data from these alternative avenues that will enable them to masquerade as someone else with their particulars.

Users can also face real-life threats through these social networking sites through unwanted contact. Behaviours such as online grooming (technique used by a sexual predator to convince an underage person to have relations with them offline) and cyber-bullying (online harassment of classmates or peers) are some examples of unwanted online contact that parents and care-givers should understand and help young people recognise and act on if they ever experience it. Additionally, users may be persuaded to meet their virtual friends in the real world - which could put them in danger.

While online social networks have revolutionised the way people communicate with each other and are ideal tools to keep in touch with friends and family all over the world, we need to be mindful of the threats and take adequate measures to protect our PCs and families from these threats.

5. How should they better protect themselves against these threats?

Here are some guidelines to follow when using social networking sites, chat rooms or forums.

- Set profiles on social networking sites to private

Only those whom you invite to join your network should be able to see details about you and the people in your network. Even so, it is still wise to think twice before posting anything that is not intended for others to see or know because it can be passed along by friends

-Be cautious and wise about what you post

Think before sharing thoughts, photos, videos that are very personal or less than positive about you, knowing they could also be used against you

- Keep your security software up-to-date

As many people use these popular social networking sites, cyber criminals have been known to use stealthy tactics in order to infect the computers

- Read between the "lines"

It may be fun to meet new people online for friendship or romance. However, be aware that while some people are genuine, others appear nice because they are trying to get you to meet them in real life. Flattering or supportive messages may be more about manipulation than friendship or romance.

- Avoid in-person meetings

The only way someone can potentially harm you is if you're face-to-face. To be 100% safe, don't meet them in person. If you really have to get together with someone you "met" online, don't go alone. Have the meeting in a public place and bring some friends along.

6. Is using a public wireless network such as Wireless@SG safe? What are the steps that one can take to prevent cyber criminals from misusing these networks?

It is easy for everyone to be connected on-the-go as there are many public wireless networks offering Internet access across Singapore. While surfing outside your home or office, you may be lured by an "Evil Twin", also known as a rogue Wi-Fi access point that seems legitimate but is actually set up by a nearby hacker. Once you get tricked into connecting to their portal, the hacker will steal your password by "phishing" or snooping on the communication link.

It is hard for users to detect "Evil Twins" as they have deceptively legitimate access point names. This makes it important for users who frequently surf in public spaces to install Internet security solutions. There are software available in the market that helps users check the Internet access point they are connecting to. In fact, Trend Micro Internet Security PRO's Wireless Hotspot Verification ensures that the hot spot is legitimate by checking its digital signature - a smart choice for busy professionals on the go.

7. Lastly, can you give us some tips on how to better protect ourselves, our online identities and our computers from internet security threats?

On top of following the guidelines that protect consumers who frequent social networks, users who would like to surf the smart way should use the latest Internet security software available on the market. It is important to pick the right software that come with features that suit your needs.

For light users who mainly use email communication, a simple anti-virus software would help scann messages to ensure that no malicious applications get downloaded onto the computer.

Users who enjoy surfing the net and are worried that their young children will be exposed to harm online would appreciate Internet security software that offers firewall protection to prevent attacks on your PC. A parental control feature would help parents have peace of mind as their young ones are blocked from accessing inappropriate websites.

Those who frequently bank and shop online would require added security to safeguard their online transactions and credit card details. A sophisticated product that validates wireless hotspots and has keystroke encryption to deter cyber criminals would be ideal for these users.

Run a manual scan with your Internet security software at least once a week to ensure there are no infections. Users can download a free website reputation service and visit each of their favourite, bookmarked sites to see if they are safe from digital security threats. Free services, such as TrendProtect, will continuously provide you with information indicating if a site is free from malicious software that may get installed on your computer without your knowledge.

Ultimately, Singaporeans should exercise caution while surfing online as the Internet

 

 
STORY INDEX
 
  Curing the inbox twitch
   
 
  Staying safe online
   
 
  I don't know who my Facebook friends are
   
 
  Nokia takes on Apple in music, touch-screen phones
   
 
  Don't let your laptop get hot under the collar
   
 
  A wise decision?
   
 
  Where to get your IT fix in KL
   
 
  A modern-day Flickr fairy tale
   
 
  Rise of security cameras in recent years
   
 
  Coming up: Smart CCTV?
   
We welcome contributions, comments and tips.
a1admin@sph.com.sg
   

Search: