ILLAWARRA BRANCH HOME | SSAA AFFILIATED CLUBS | SSAA.ORG BASE | SSAA-NSW-BRANCHES | CHARITY SUPPORT LINKS | OZTION AUCTION SITE | VIRUS ALERT | FAQ ON SCAM |
COMPUTER VIRUS ALERT WARNINGS!
Info regarding SCAM and SPAM A FREE Service!!!
|
How big is the virus problem? The most common Types are! Viruses - A virus is a small piece of software that piggybacks on real programs. For example, a virus might attach itself to a program such as a spreadsheet program. Each time the spreadsheet program runs, the virus runs, too, and it has the chance to reproduce (by attaching to other programs) or wreak havoc. A computer virus must piggyback on top of some other program or document in order to get executed. Once it is running, it is then able to infect other programs or documents. Obviously, the analogy between computer and biological viruses stretches things a bit, but there are enough similarities that the name sticks. E-mail viruses - An e-mail virus moves around in e-mail messages, and usually replicates itself by automatically mailing itself to dozens of people in the victim's e-mail address book. Worms - A worm is a small piece of software that uses computer networks and security holes to replicate itself. A copy of the worm scans the network for another machine that has a specific security hole. It copies itself to the new machine using the security hole, and then starts replicating from there, as well. Worms use up computer time and network bandwidth when they are replicating, and they often have some sort of evil intent. Trojan horses - A Trojan horse is simply a computer program. The program claims to do one thing (it may claim to be a game) but instead does damage when you run it (it may erase your hard disk). Trojan horses have no way to replicate automatically.
Trend Micro has a free
online virus scanner HouseCall at: http://housecall.trendmicro.com/
WARNING: About MySpace, FaceBook, Twitter and other similar sites.
The following is a new threat doing the rounds and should be of particular concern to the "blind faith fans" of MySpace, FaceBook etc. Amidst confirmed reports that malicious hackers are starting to use fake Flash Player Updates and downloads as social engineering lures for malware, Adobe has issued a call-to-arms for users to validate installers before downloading software updates. The company’s notice comes on the heels of malware attacks on Facebook, MySpace and Twitter that attempt to trick Windows users into installing a Flash Player update that turns out to be a malicious executable. Some golden advice from Adobe First off, do not download Flash Player from a site other than adobe.com – . This goes for any piece of software (Adobe Reader, Windows Media Player, QuickTime, etc.) – if you get a notice to update, it’s not a bad idea to go directly to the site of the software vendor and download the update directly from the source. If the download is from an unfamiliar URL or an IP address, you should be suspicious. In most cases, if we have recently worked on your home computer, then it should be updated. Corporate clients workstations and servers are always updated, each time we work on the machine, regardless of the reason why the computer is being serviced. Second, all Adobe software for Windows is signed with a digital certificate that is validated by Windows when you install our software. The Publisher will always be ‘Adobe Systems, Incorporated’, and you can verify this when you double-click the installer, or by right-clicking on the installer, selecting ‘Properties’, and going to the ‘Digital Signatures’ tab. The most recent version of Flash Player version is 9.0.124.0. Be Aware! What are things I should be aware of to prevent security threats? Even though anti-virus software, a firewall and adware removers will go a great way to keeping you protected on the internet, there are still some other things we think you should keep in mind. Keep your operating system up-to-date. |
What damage can phishing cause?
If
thieves gain access any of your login or credit card details, they can act as
you – they can transfer money out of your bank account, use your profile and
stored payment information to shop online, use your frequent flyer profile to
book flights for other people and even connect to the internet using your
BigPond account – the potential damage is almost endless.
Not only can they use your details to act on behalf of you, they’ll usually
have access to view and edit further details about you in your profiles, like
your address, phone numbers, date of birth and more.
Like credit card thieves, phishing culprits are hard to track because they
could be anywhere in the world. Most secure purchases will record the IP
address of the originating computer in an effort to scare thieves, but there
are ways of masking or manipulating the address to appear like the computer is
somewhere else.
What can I do to stay
protected?
There are a number of precautions you can take to help
prevent becoming a phishing victim. 1)Be careful - don't follow suspicious
links from senders or sites you don't know or trust.
Calling off annoying
Telemarketers:
Direct marketing by
telephone is terribly annoying but not illegal under South Australian laws.
However, the Australian Direct Marketing Association (ADMA) offers a Do Not
Contact service. The
Do Not Mail and Do Not Call services are available to consumers that would like
to register a residential address or telephone number where
you can request your name and contact details be removed from the marketing
lists used by ADMA members. The service is free to residential consumers. To
request removal of your contacts details you will need to complete and submit
the online form at www.adma.com.au or http://www.adma.com.au/asp/index.asp?pgid=1999
and email your details to info@adma.com.au
What is Spyware? (BEWARE)
Spyware: More dangerous than ever more prevalent than before
Spyware is computer software that is secretly installed on a computer to
take information, bandwidth and processing capacity for someone else’s
benefit, without the knowledge or consent of the user. It can also be software
that changes settings and interferes with the performance of a user’s
computer.
If you have ever downloaded something - anything - from the Internet,
it is likely that your hard drive is housing something you would never request:
spyware. Be warned, check the user terms and
conditions.
Steganography
Now there is Steganography, a method for secretly delivering information by hiding
it in something else. In the past, messages were carved into wood and covered with wax or tattoos were written on people’s shaved heads
– their hair regrown to mask the message.
Today, less painful but more cryptic methods could be used to hide information in publicly available web site images. The image is visibly
indiscernible even to a trained eye. The only hope is to enlist science to see past the pixels, but is this possible?
Criminal and terror groups can now use this same this encryption to scramble their communications... making things extremely difficult
for law enforcement agencies. And now, a new technology has emerged that might just be giving terrorists
the upper hand.
In the spying game, it's called the 'dead drop'. A covert message is secretly left at a pre-arranged location.
An undercover operative, who knows the location, is then able to retrieve the 'drop' and access the message.
Let's hope there is a law to stop this, or at least an effective antidote to
detect steganography before it can be used illegally
Basic
security for your system.
1: Mind your passwords. 2:
Use encrypted connections. 3: Hide! Cloaking your
computer's Internet presence via a firewall is the first line of defence. 4: Don't trust anybody!
5: If you're
managing a server, limit what other users can do on the system. 6:
Keep your system up to date.7: Disconnect from the
Internet when you're not actually using it. 8: Don't
continue using a computer that you know has been compromised by
hackers.9: Use every security mechanism you can, not just
one or a few.
Creation
of passwords:
Mix upper and lower case since passwords are almost always case sensitive (ex. jollyroger and joLLyroGer would be treated as two
different passwords with the second being more secure). Use
special characters such as !@%& in addition to alphabetic and numeric characters. One good way to create a secure password
that can be remembered is to think of a phrase and convert it into
an acronym. Example: "Give me liberty or give me death"
would become GMLOGMD. Using mixed case and throwing in numbers or
special characters makes this less likely to be guessed. One of
the simplest (and free!) methods is to go to the Gibson Research
website and use its "Shields Up" tool
http://grc.com/default.htm to test your computer for open TCP/IP
ports. Ports are used to connect processes on one computer to
those of another or to access a remote computer's resources. When
asked whether current statutes adequately address computer crime,
"In a word, no." Partly this stems from the wide range
of abuses that can occur and that are sometimes difficult to
translate into the criminal code.
DREADED SCAM and SPAM emails (CURRENT SCAMS)
Hoaxes & Chain LettersSPOOFED EMAIL DANGER
Tip: Watch out for spoofed mail. "Spoofing" refers to duplicating a legitimate e-mail, such as a company's newsletter. These spoofed mails may be used to trick you into downloading a virus or sending personal information, such as a credit card number. When in doubt, contact the company you think sent the e-mail.
Email spoofing may occur in different forms, but all have a similar result: a
user receives email that appears to have originated from one source when it
actually was sent from another source. Email spoofing is often an attempt to
trick the user into making a damaging statement or releasing sensitive
information (such as passwords).
It is easy to spoof email because SMTP (Simple Mail Transfer Protocol)
lacks authentication. If you provide email services to your user community, your users are
vulnerable to spoofed or forged email. If a site has configured the mail server to allow
connections to the SMTP port, anyone can connect to the SMTP port of a site
and (in accordance with that protocol) issue commands that will send email
that appears to be from the address of the individual's choice; this can be
a valid email address or a fictitious address that is correctly formatted.
In addition to connecting to the SMTP port of a site, a user can send
spoofed email via other protocols (for instance, by modifying their web
browser interface).
Spoofed emails may arrive with an attachment
containing a virus, often as a retaliatory attempt by disgruntled vandals who
have been caught out.
To report an incident copy the whole header and message and forward it to
abuse@ your ISP.com
The header of the email message often contains a complete history of the
"hops" the message has taken to reach its destination. Information in
the headers (such as the "Received:" and "Message-ID"
information), in conjunction with your mail delivery logs, should help you to
determine how the email reached your system. To find site contact information, please refer to http://www.cert.org/tech_tips/finding_site_contacts.html
You may also want to contact the postmaster at sites that may be involved.
Send email to postmaster@[host.]site.domain (for example, postmaster@cert.org)
PayPal Identity Theft Scam
A new type of PayPal scam has been making the rounds. If you're a PayPal user,
you may receive an email titled "URGENT: PayPal System
Problems."
The email then goes on to say that, because of computer glitches, all users
should log in to the PayPal URL given in
the email and re-enter their information.
But the PayPal login URL given is *not* ==> https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run
which is the real direct PayPal login URL. It's a URL starting with http://www.paypalsys.com
-- a bogus site where the scammer steals your PayPal identity, and
possibly your money.
Remember that URLs starting with http:// are not secure. Only URLs starting with
https:// are. If you receive an email and are unsure whether it is from PayPal,
come directly to the PayPal site at www.paypal.com.
Don't click on any link in an email that seems suspicious to you. These security
measures will help ensure that you are
logging into PayPal. The only site you should ever type your username and
password into is at www.paypal.com.
Combat Spam and Fraud, Many of our loyal friends and charity supporters have recently asked us to help eradicate the ever increasing problems arising from unwanted emails. Although it is not possible to be totally free of those pests, you can do something for instance to minimise the impact of massive porn spam, affiliate marketing spams, scams, virus attacks, hoax mail, chain mail and pyramid selling, etc. There is a saying: "Spam is Scam"! You will always lose when you are caught up in a scam, yet it is so easy to take the bait. Scams prey on people's desire to increase their wealth, their need for health, safety, sex or beauty. Beware of those emails that tell you that you have subscribed. You know very well that you did not ...if it's spam - delete it! And make sure you delete it from your inbox and from your deleted items folder (if you have the feature, also block the sender) .
The Network Abuse Clearinghouse is intended to help the Internet community to report and control network abuse and abusive users. Since the best place to report abusive activity varies from one system to another, we're trying to keep a master database of reporting addresses for users throughout the net to use. The database is provided in four forms:
For e-mail users: You can use http://www.abuse.net/ to help forward your complaints to system managers who can act on them. Please read the description of how to register for and then use the mail forwarding service.
REPLYING TO SPAMMERS
Should you reply to spam and follow the unsubscribe
instructions (if there are any)?
For the last few years it was evident that clicking the
unsubscribe link at the bottom of a spam mail simply lets the
spammer know that your email address is active. As a result,
they send you even more spam. The
results from asking to be removed from their mailing lists is that two-thirds of
requests were simply routed to addresses that had either never existed or were
no longer in use. Often, that's because the address has already been closed by
the service provider following complaints from other users directly.
If you want to do more than that, forward a copy and header of the scam letter to scams@naspa.com.au
For scams explained ...go to http://www.scamwatch.gov.au
Try these simple questions for quick and precise answers.
NIGERIAN SCAMS
Whether or not the worts offender have been caught and procecuted,
there is
still
a constant flood of scam
mail coming from Africa, with Nigeria, Lagos and Togo being the
most prevalent -offering a fantastic amount of money in return for being
allowed to put their millions into your account. The money is
non-existent! If you fall for the lure, your own money will be fleeced from
your account. It is a nothing but a nasty fraud. There
are large numbers of variants of this scam now. The common features are
"loads of money", Nigeria, and a fax number. They all want some
money-up-front and that is the way the scam artists make their money. I
have seen well over 250 variants of these now ---don't be fooled, this is
a scam!
The scam is old, but certainly not dead, it is constantly revived by
scam merchants who steal addresses from guest books. It is a 'con'
job to get to your money. No matter what they promise,
their aim is always to rip you off in every way they can. (We even
closed and removed our guest book to protect those who have signed in)
More information about the Nigerian scam, also known as
419 (four-one-nine), can be found on the 419 Coalition site http://home.rica.net/alphae/419coal/ This
site provides a source of comprehensive information on Nigerian 419 operations.
Solution:
Don't fall
for the lure of riches!!! It does not exist!
Instead report those con-merchants to:
The Internet Fraud Information Centre. http://Fraud.org
and help stamp out the criminals. You may also report SCAM & SPAM
to "National Australian
Security Providers Association" scams@naspa.com.au
Please send only scam letters that are original. Known scams under different
criminal's names are not original. Scams from new organizations (new
fake bank, agency, authority, new theme, or new pathetic story,) are originals.
WARNING: Sending
abusive letters to the criminals makes you a target for retribution. Criminals
are likely to use your name to start new scams, send you virus mail, or may even
fill your inbox with thousands of repeat letters, -- just delete the E-mail!
Please Do Not Refer criminals to our Web Site - it
only causes retaliatory trouble.
Old
fraud, new tricks! (An emerging new strain of the Nigerian Scam)
Queensland Fair Trading Minister
Merri Rose said consumers were being targeted by numerous international and
Australian based scams operated by unscrupulous people whose sole objective
was conning people out of their hard-earned cash. The crimes are traditional
confidence scams perpetrated over the internet via trusted auction sites and
unsuspecting sellers.
A RECURRING LOTTERY SCAM!
Think You've Won
Foreign Lottery?
It's A Scam, a revised foreign lottery scam. These emails are a hybrid
form of the 419, a scam developed in Nigeria to prey on the financially
vulnerable in Africa and greedy people in rich countries. Several people
have told consumer officials they have been scanned out of substantial amounts
of money after being told that they have won a foreign lottery.
In order to claim the prize, you're told to pay a fee that goes toward the
taxes, bank costs and processing fees. Consumer protection officials warn
that if you get an email saying you won a foreign lottery then you are being
targeted to be defrauded. If you receive such an Email REPORT THE SENDER
Complaints Regarding Port Scans, Hacking Attempts, or Illegal Activity.
There are certain guidelines and 'acceptable use' policies in place with
ISP's to which all members are bound. Anytime a member fails to follow
these provisions and guidelines, their account will be dealt with as defined in
the policy guidelines. An example from easynet of Belgium can be accessed with
this URL. http://www.easynet.be/library/documents/easynet-aup-uk.pdf
FOR More DETAILED INFORMATION and
Sample letters ON SCAM and
SPAM -VISIT OUR FAQ PAGE
Click
here for Frequently Asked Questions
Also, the SA Government has a website where you can get information on lots of variations, associated Nigerian scams, and others. http://www.ocba.sa.gov.au/
GOOD ADVICE When tempted to sign up with websites
that request personal and credit card details, be careful! There
have been multiple reports coming out of the US, of fraud with
credit cards. If you give your credit card details because they
want to confirm your identity, think twice! Your card number
alone is sufficient to steal from your account. The latest pitfall
is the free trial method, where your credit card details, your
name, home address and email is requested. Once the trial period
has expired and you did not cancel in writing, you may find your
that account has be robbed, and that on a monthly basis.
The Good advice is: A) Don't deal with any one that has not a valid
return address. If you reply and your e-mail comes back undeliverable, you can
safely assume the return address is spoofed, the sender has something to hide,
it's a scam or a malicious attempt to get to you or your system.
B) Don't give your credit card details to
anyone unless you are absolutely certain that it is safe to do
so.
TO update your security settings on your Windows programs go to: http://www.microsoft.com/security/bulletins/200412_windows.mspx
All of the above alerts are supplied with compliments of the Australian Charity Channel. Please, do yourself and your friends a favour by passing this whole page on to them.
Recommendation:
ILLAWARRA BRANCH HOME | SSAA AFFILIATED CLUBS | SSAA.ORG BASE | SSAA-NSW-BRANCHES | CHARITY SUPPORT LINKS | OZTION AUCTION SITE | VIRUS ALERT | FAQ ON SCAM |
Ozcharity Channel since 05.June.2001
(this page will be updated regularly)