| ||||||||
| ||||||||
The Bad News: Identity theft is escalating at a torrid pace. It has become one of the country’s top problems. The bad guys are finding more ways to steal YOUR identity.
The Good News: You can take control of the situation, become both reactive and proactive guarding yourself against identity theft.
Identity Theft Is Spreading Faster Than The Worst Case Of The Flu!
First, let’s understand just how bad identity theft has become in this country:
· The Federal Trade Commission says that there is an underground market for credit card numbers, social security numbers and ID documents – organized gangs or web mobs use and sell these documents for as little as $10 each. Some of these groups contain thousands of members. The amount of goods and services purchased with fraudulently obtained personal identity exceeded 52-billion dollars in 2004.
· US Department of Justice states identity theft is affecting millions of households in the U.S. each year. The cost is estimated to be six-point-four billion per year. According to the FTC, an estimated 10 million adults become victims of identity theft each year.
· The Department of Justice goes on to say that the most common misuse of identity was through credit cards, accounting for 50 percent of all identity theft. Next in line were banking and other types of accounts at 25 percent, personal information was 15 percent, and a combination of several types of identity theft was at 12 percent. The average loss for each identity theft was $1,290.00. Two-thirds of those surveyed said the theft cost them money despite credit card coverage.
· A recent State of the Net survey by Consumer Reports which covered more than 2000 households with Internet Access projects that American consumers lost more than eight-billion dollars over the last two years to viruses, spyware and various scams. The report also shows consumers face a one-in-three chance of becoming a “cyber victim” about the same as last year. It goes on to say that consumers lost $630 million over the past two years to e-mail scams.
· The average person today suffers through two or more “incidents” with their computer each year - the computer slows to a crawl, crashes altogether, viruses or spyware take over systems and more. It’s getting worse as computers become more complex and as we do more with them.
So, Who Is At Risk For Identity Theft?
According to the Department of Justice there are three groups that are most at risk for identity theft: young adults 18 to 24, adults who earn $75,000 per year or more and households in urban and suburban area. Interesting to note that about five percent of adults who earn $75,000 or more a year are hit with identity theft.
The continued growth of online fraud and identity theft are putting an enormous strain on the existing infrastructure for the Internet as well as our social structure. For example, the banking community has been complacent about security upgrades required by the Federal Financial Institutions Examination Council. They report that every bank in the country has not complied with their guidelines set for now. In an article titled, “U.S. Banks Complacent Toward Identity Theft Solution,” by PR Web, the single largest national security threat is a terrorist attack on our banking system. An attack aimed simultaneously at millions of user names and passwords within banks would shut down our banking system. This would instantly shut down banks worldwide. Credit/debit cards, checks, calls to the bank, would not work for at least a matter of days causing tremendous hardship and a ripple effect from no gas to “I simply have to take this baby food.”
Consider for a moment some of the potential social effects from this identity theft problem. What if citizens developed a lack of confidence in our credit card and monetary system causing economic upheaval similar to what we saw in the “Great Depression?” I know this sounds radical, but what if you couldn’t trust your identity to anyone anymore? What if you feared that your money, your identity was going to be stolen? It’s not unthinkable that you would store your money under your mattress at home or in a safe in the closet rather than possibly losing it to identity theft. If millions of people lost faith in our monetary system and the ability to keep their identity safe and then took all of their money home where they believe it would be safe, what would happen then?
We generally can’t control what happens outside of our personal environment, what happens at a bank, corporation or the government seems so far out of reach. There are, however, steps that we can take that will give us a better chance of protecting our personal information. The first step is identifying the threats and then taking steps to protect ourselves.
Below, I have identified nine identity theft threats and nine steps to protect our identity in today’s society.
Nine Threats To Your Identity
Here are nine of the most popular ways for thieves to steal your identity. Some of these are personally preventable and others are out of our control:
1. Stolen Company Data. Your personal information is stored on computers at stores where you shop, at your insurance company, your accountant, and more. It almost seems like a common occurrence where a company is hacked into and their customer’s information is stolen. This happens so often now that the crimes are rarely reported and don’t make the front page anymore.
2. Social Engineering. Identity Thieves are very clever. They will invent any way possible to fool you into giving your identity out. It’s called social engineering because the thief uses common social situations to get the information they want. Like a seemingly innocent phone call supposedly from your credit card company asking for your personal information.
3. Dumpster Diving. Identity thieves get a lot of their victims’ information out of garbage cans and recycle bins from old credit card statements and other personal documents thrown out carelessly.
4. Mail Theft. Your mail can contain valuable information: bills, banking information, credit cards, investments and more. Personal mail can often be stolen right from a mailbox.
5. Financial Account Hijacking. Once a thief has your personal information they can take over your personal accounts. You might not know about their activity for months.
6. Credit Card Magnetic Strip Theft. These clever crooks have tools to steal information off the magnetic strips on your credit card.
7. Discarded Computers. Your old computer really can tell stories. Even though you erased your hard drive crooks have tools to reclaim your personal information and use it against you.
8. Spyware and Viruses on Computers. You may not be familiar with the term ‘malware.’ It’s a term that covers all of the hacker tools that can cause harm on your computer. These tools include spyware, keylogger tools, Trojan horses and more.
9. E-mail and Internet Scams. Cyber thieves are getting more and more creative using scams like Phishing, Pharming and fancy come-ons to entice you to give them your personal information.
There Are Four Ways You Can Approach Protecting Your Identity...
One way is to do nothing and hope that identity thieves don’t harm you.
Second, you can be reactive. Reactive simply means that you are responding to all the material that comes your way. You are checking your credit card and bank statements to make sure nothing peculiar is on them. And if you do find something strange you contact your bank or credit card company immediately. Reactive also means that you are checking your credit report when you apply for credit or a loan.
Third, you can be proactive. A proactive approach is a more aggressive way of protecting yourself against the bad guys. You are constantly looking ahead and evaluating before giving out valuable information.
And fourth, combine reactive and proactive approaches. This is the best way to ensure you identity protection.
Nine Critical Steps To Proactively Protecting Your Identity...
Here are your ‘Nine Proactive Steps To Identity Protection:”
1. Begin to operate on an “I have to know everything” approach when you give out your personal information. Only give out your personal information to people you know and trust.
2. Protect your Social Security Number, credit card and other financial information. Do not give this information out over the phone unless you initiated the call or as we stated above are talking to a trusted individual from a trusted company.
3. Cancel all of your unused accounts including banking, credit card, licenses and permits.
4. At least once a year, if not more often, update and check your credit report and Social Security Earnings and Benefits Statement to make sure everything appears as it should.
5. Protect your mail. Make sure you have a secure locked mailbox to receive all of your mail. Always mail your payments and checks from a secure Post Office Box or from the Post Office. And, if you have a Post Office Box at the Post Office never discard your mail in a garbage can. Always bring your entire mail home.
6. Always crosscut shred all bank statements, credit card applications or information and important documents before discarding to recycle or the garbage. It is best to stir up the shredded documents to make it even harder for identity thieves to steal your information.
7. Purchase identity theft insurance. This will cover any losses incurred while recovering your lost identity once a crook has stolen it.
8. Invest in professional grade protection for your computer. The best protection available today comes from Managed Internet Security Service providers. The best security services include best-of-breed corporate grade security software for your computer, as well as unlimited service and support from trained security pros. Make sure it is the same kind of service that is used by major corporations around the world. Frankly, the over-the-counter and free security software programs available don’t keep up with today’s professional cyber thief. If those popular programs worked, why do we see the cyber-crime problem growing at a progressively faster pace?
A managed professional Internet security program should have the following technologies installed: A bi-directional or dual Firewall that prevents information from coming in or going out of your computer without your permission, anti-virus protection that is updated daily, and malware protection that is updated daily. Malware consists of spyware, adware, Trojan horses, keyloggers and more. It constantly changes so you will need a technology that keeps up with the professional hackers who want your identity. Your best bet is to find a professional security service that affordably manages all this for you.
9. Beware of e-mail scams like Phishing and Pharming. Phishing is an e-mail that looks like it came from a bank or business claiming you need to take care of a problem or your account will be closed down. It takes you to a page to fill out your personal information. Meanwhile, Pharming is redirecting your computer from a legitimate to a fake web site. For example, you may think that you are going to your banking site, but instead are redirected to a site that looks like your banks web site, but is hosted by an identity thief.
Identity theft continues to grow at a torrid pace. Millions of people in the United States will lose their identity to thieves in the coming year. Many of them will suffer for years trying to clean up the mess that was left behind.
The bad news is we can’t control all of the identity threats we face each day. The good news is there are reactive and proactive steps we can take to protect ourselves against personal tragedy.
By: Warren Franklin
Article Directory: http://www.articledashboard.com
Warren is engaged in the cause of educating and protecting people who use the Internet about the threats they face and the inadequacy of the solutions they trust, and over a two-year period has become an expert on PC Security and a passionate advocate of Internet safety. Find out more his campaign for personal and Internet security go to his web site at www.completeinternetprotection.com
Posted at 03:09 PM in Internet Security | Permalink | Comments (0) | TrackBack (1)
If you're a write-in candidate without major political party recognition, there's nothing quite like mysterious malicious software radiating from your Web site to earn you a little extra publicity.
That's what happened this week to Ted and Fran Gianoutsos, a husband-wife team running for governor and lieutenant governor, respectively, in Alaska's race.
Late last week, the candidates' Webmaster logged in to do some updates on the site, only to find that his "firewall went crazy." The problem? A 2-year-old Visual Basic script worm--known variously as Gaggle.D, I-Worm.Gedza and Gedza.A--apparently had wriggled its way into each page of the Gianoutsos' minimalist campaign site at http://www.tedandfran.com/who.htm.
"It's fairly innocuous other than the fact it...tries to change your home page to an Avril Lavigne picture that is sitting out there on a server somewhere," Webmaster David Molletti said in a telephone interview Thursday. "So it's a nuisance thing, but it was plugged in there."
Molletti said he proceeded to clean up each page and directory on the server and to change passwords last weekend. But by Monday, the worm had returned with a vengeance--and attracted the attention of at least one Web security forum, whose members promptly posted screenshots of dialog boxes from security programs that detected the low-level threat.
"My uncle got a political flyer the other day, and when he visited their website, AVG caught some form of malware," the thread, dated Oct 21., began.
Ted Gianoutsos even started getting calls from Alaska Division of Elections representatives, who said they had received complaints from people claiming the candidates were trying to spread a virus.
That's just nonsense, Molletti said. The Gianoutsos' low-budget site runs on a "virtual private server" with no detailed logs of who accesses it, but the managers of that space told Molletti that the only way to embed the worm is by gaining access to the Gianoutsos' account and underlying files.
Ted Gianoutsos readily admits to having no Internet access at home, and he said in a telephone interview that he wasn't even aware of the troubles until he started getting calls from site visitors.
Gianoutsos said the unidentified "hacker" responsible for the worm was likely targeting him and his wife of 44 years for their against-the-grain political views. They're running on a platform that supports opening the Arctic National Wildlife Refuge for oil and gas drilling, and lowering health care costs for Alaskans, particularly military veterans.
"All of a sudden, this has created a huge amount of controversy in different places," Gianoutsos said.
Gianoutsos' theory could be right on, conceded Molletti, who has been doing Web site management for about eight years and currently oversees 40 sites. "This is the first time I've been breached like that, and it was just curious it would happen on the one site that has information that would make other people angry--people in power, I should say," he said.
As of Wednesday evening, the site had been scrubbed of the worm again, every administrator-level password had been set and reset, and Molletti said he believed he had "at least put a monkey wrench in the works."
Ted Gianoutsos, who received calls this week about the glitches from as far away as Seattle, Arizona, Cleveland and Chicago, said he couldn't help enjoying the extra attention a little bit. "If it were only true that it was an actual virus," he said. "Can you imagine the publicity?"
By Anne Broache, CNET News.com
Published on ZDNet News: October 26, 2006, 4:48 PM PT
Posted at 09:34 PM in Internet Security | Permalink | Comments (0) | TrackBack (0)
Security experts have found a weakness in Internet Explorer 7 that could help crooks mask phishing scams, the type of attack Microsoft designed the browser to thwart.
IE 7, released last week, allows a Web site to display a pop-up that can contain a spoofed Web address, security monitoring company Secunia said Wednesday. An attacker could exploit this weakness to trick people into believing they are on a trusted Web site when in fact they are viewing a malicious page, Secunia said in an alert.
"This makes it possible to only display a part of the address bar, which may trick users into performing certain unintended actions," Secunia said. The company has created a demonstration that shows a Microsoft Web address in the pop up window, but displays content from Secunia.
The problem lies in the way Web addresses are displayed in the IE 7 address bar, a Microsoft representative said in an e-mailed statement. An attacker could exploit the issue by tricking a user to click on a specially formatted link, the representative said.
The pop-up will block the left part of the Web address, Microsoft said. "Clicking in the browser window or in the address bar and scrolling within it will display the full URL, however," the company said. In case of the Secunia example, the true Secunia URL is revealed.
An attack won't work if a Web site is known to be part of a phishing scam, Microsoft said. The IE 7 phishing shield will identify such sites and warn the user, it said. Microsoft is not aware of any attacks that actually use the reported vulnerability, the company said.
IE 7 is the first major update to Microsoft's ubiquitous Web browser in five years. Security was the No. 1 investment for the update, Microsoft has said. The phishing protection has been a major focus for Microsoft, shielding against malicious Web sites designed to trick users into handing over their personal information.
The spoofing issue, rated "less critical" by Secunia, appears to be the first genuine, publicly disclosed flaw in the new Microsoft browser. An earlier problem, disclosed a day after the IE 7 release, lies in Outlook Express, not IE 7, Microsoft has said.
Microsoft will continue to look into the problem and may provide a browser patch to fix it, the company said. In addition, Microsoft chided the anonymous discloser of the flaw. The software maker prefers that security issues be disclosed privately so it can repair them before they get publicly known.
By Joris Evers, CNET News.com
Published on ZDNet News: October 25, 2006, 4:45 PM PT
Posted at 06:27 PM in Internet Security | Permalink | Comments (0) | TrackBack (0)
