Help & Support

Welcome to MYSecurityCenter official Blog

Please feel free to comment on our posts and articles.


Posts Tagged ‘antivirus’

Hacking (Part 2) – Look after your smartphone

Thursday, February 2nd, 2012
 

The two most common types of phone hacking are voicemail hacking and data hacking. Data hacking has increased due to the growing use of smartphones, where hackers can access emails, bank accounts etc. Here we give you some advice to prevent both types.

 

Change the default voicemail pin code

 

Most mobile phone networks offer a generic remote access telephone number that you can call from a landline telephone to hear your own mobile’s voicemail. For security you need to enter a pin code before being able to listen to your voicemails, but the default code is often the same across all phones – often 1234 or 0000. It is therefore important that you change your voicemail pin code, mostly by calling voicemail from your phone and selecting the “voicemail security” setting.

 

Install security software

 

By installing an efficient antivirus app on your phone you will increase the general security level on your phone which will make it harder for hackers to access it. We have a special offer on MYMobileProtection, an application that protects your mobile against viruses, theft or accidental loss, credit card and identity theft, unwanted calls and SMS spam messages. It also provides privacy control to keep SMS and other services secret. Do you have an Android handset (Google Nexus, Samsung Galaxy)? Try our MYAndroidProtection suite

 

Be careful using public Wi-Fi

 

Be careful when checking emails, logging into mobile banking sites and accessing private information when your phone is connected to public wi-fi such as those in coffee shops – as these are often unsecure. An unsecure network will allow other users to access your device and potentially steal information or even insert malware allowing them to control your smartphone.

 

Turn off auto-complete

 

Some phones save usernames and passwords automatically to help you log-in faster next time, but this makes life easier for hackers. Check your phone’s “Settings” menu to see if it is automatically storing information.

 

Set a phone password

 

If your phone’s lost or stolen, a password could stop a data hacker in their tracks. Most handsets allow you to set both a user password and a power-on password. For safety, always set both of these when you get a new handset. Passwords using a combination of letters (upper and lowercase), numbers and symbols are most effective.

 

Turn off Bluetooth

 

Hackers could use the wireless connection provided by Bluetooth to gain remote access to your phone and alter settings, steal files or even insert software able to take control of your phone. Always leave Bluetooth disabled when you are not actually utilising the feature. For headset use you can usually make your Bluetooth connection private (not discoverable) to limit abuse.

 

Delete your browsing history

 

Deleting your mobile phone’s internet browser history, cookies and cache will make it more difficult for hackers to access your data. Many people do not realise just how much personal information can be gleaned from looking through the sites you have visited.

 

Remember that your smartphone is expensive

 

Many people, especially those used to owning and using modern smartphones, forget how much these devices are worth. Mobile devices are the most stolen personal property in the world!
Don’t leave your phone where a passer-by can simply grab it. Avoid leaving your phone in plain site within your car. Don’t let strangers “just make a quick call” from your phone.
If the worst does happen you should be able to claim on your insurance BUT this will not return to you your snaphots and music, your files and notes or protect your account passwords and logins. By installing MYMobile TheftProtection you know that you can control your phone even if it gets stolen and protect your information against theft or misuse.

 

The third and final part of this article will be posted tomorrow

 

Hacking (Part 1) – Guard your email account

Wednesday, February 1st, 2012
 

How to PREVENT your email account from being hacked

 

How do you know that your email was hacked?
-You can’t log into your email account.
-Your sent folder contains messages that you never sent.
-Your email contacts inform you that they have been receiving spam messages from your
    account.

 

What can you do if your email has been hacked?
-Change your password
-Check all your other accounts: email, social networks, blogs, etc.
    Especially if you use the same password for all your accounts
-Delete all accounts that you don’t use
    If hackers get into email accounts that you don’t use anymore, it takes longer time     before you discover it – and the hacker will have more time to do damage.
-Send an apology to all your email contacts.

 

How can you prevent hackers from getting into your email account?
-Don’t choose a typical password
    Many people use easy-to-guess passwords such as their own names with their     birthdates at the end. It is better to combine upper case and lower case letters along     with numbers and symbols.
-Change your password at regular intervals.
-Change your password every one to three months.
-Give only your email address to websites that you trust

 

Look out for PART TWO tomorrow …..

 

Tips & Trucs: Smartphones

Monday, January 30th, 2012
 

Vermijd malware op je smartphone!

 

• Informeer jezelf vooraleer je iets downloadt

 

Vooraleer een applicatie te installeren, kan je best eerst uitzoeken of ze veilig is. Bekijk de commentaren op Android Market en andere sites die apps aanbieden. Zijn de reacties positief? Wanneer er helemaal geen commentaren over te vinden zijn, en de applicatie is niet splinternieuw, kan je beter uitkijken. Lees opinies na op pagina’s zoals PCWorld, ComputerWorld, AppBrain, AppCircus etc. Je kan ook altijd nagaan wie de uitgevers van de applicatie zijn. Wanneer er zelfs geen verwijzing is naar hun website, kan je er beter met de handen afblijven.

 

• Controleer de toelating tot het verzamelen van persoonlijke gegevenst

 

Controleer altijd tot welke persoonlijke gegevens de applicatie toegang krijgt vooraleer door te gaan met het downloaden. Sommige apps hebben namelijk helemaal geen nood aan je contactenlijst of andere persoonlijke gegevens, terwijl ze er wel kunnen om vragen. Wanneer een applicatie om te veel onnodige informatie vraagt, denk dan twee keer na voor je verdergaat met de installatie ervan.

 

• Gebruik nooit de functie van automatisch inloggen

 

Stel nooit een applicatie die toegang heeft tot je bankrekening in om automatisch in te loggen. Stel je telefoon zo in, dat hij geblokkeerd wordt na een bepaalde interval. Dat zal het voor anderen moeilijker maken om toegang te krijgen tot persoonlijke gegevens.

 

• Installeer een anti-virusprogramma op je telefoon

 

Dankzij een anti-virusapplicatie kan je je telfoon scannen op gevaren en reken je af met malware en virussen tijdens het installeren van andere apps. De meeste van die beveiligingsprogramma’s hebben trouwens een functie om de telefoon bij verlies of diefstal op te sporen en vanop afstand te blokkeren, en zelfs al je gegevens erop te beschermen. Net zoals onze anti-virusapplicatie MYAndroidProtection en MYMobileProtection.

 

• Kijk ook uit voor scams op je smartphone

 

Net zoals op je PC, kan je smartphone het doelwit worden van scams. Dubieuze webpagina’s proberen internetgebruikers erin te luizen en hen van hun persoonlijke gegevens te ontdoen. Let vooral ook op voor het downloaden van malware bij het bezoeken van dergelijke sites.

 

• Wees behoed voor valse QR-codes

 

Kijk goed naar de link die tevoorschijn komt bij het scannen van de QR-barcode via de camera op je smartphone. Wanneer de link enorm veel cijfers en symbolen bevat en niet overeenkomt met de advertentie of tekst die je scant, kan je hem beter niet aanklikken.

 

The biggest mobile security threats in 2012

Friday, January 20th, 2012

Malware on smartphones, especially on Android phones exploded in 2011. But is this a trend that continues this year? Yes, assess security experts Kevin Freij and Janus R. Nielsen, co-founders of the security company www.mymobilesecurity.com. They look back on trends and threats in 2011 and give their take on the challenges the security industry and private smartphone users will face in 2012.

Malware
2011 was the year when malware on Android phones rose with lightning speed. According to a report by the network producer Juniper the increase was on 472 percent alone between July and November. Especially fake apps, mainly pirated versions of well known apps developed by criminals, have been the main sinner. The fake apps are primarily being downloaded from Android Market or from the Asian and especially Chinese app stores. And many of them have been an expensive acquaintance, because they install viruses on the phone and can drain the user’s account by sending SMS messages to expensive toll numbers. “We have seen an explosive increase compared to 2010 in terms of new apps entering the market and with these come more malware. Hackers have figured out how to find very clever ways to smartphone users mobile accounts, both prepaid and postpaid accounts. This trend will continue because it is a very lucrative market for fraudsters” says Kevin Freij, CEO of MYMobileSecurity, that makes security applications for smartphones. As for malware on iPhones, viruses are not the biggest issue for Apple-users. “The problem is rather the unstable iPhone OS. “iPhone has some problems when updating their systems regularly. When the updates are done we have seen serious security holes appear. There have been various examples on that, I remember one from this summer when one of the biggest newspapers in Denmark hacked up the current Danish Deputy Prime Minister Margrethe Vestager´s iPhone getting access to both her voicemail and emails.”

Fake emails (phishing)
According to a study by the security company Trusteer in January last year, smartphone users are three times more likely to fall for the fake phishing emails than computer users. The fraudsters behind phishing emails try to “fish” passwords and financial data out of the users by pretending to be credible and well-known companies or individuals. People can be more easily fooled on their smartphone because they are constantly “on” and because they answer their emails as soon as they come in. Also the small screen size of the phone makes it difficult to spot a bad link or logo. “The increase in phishing emails and also in fake SMS (smishing) will continue in 2012”, co-founder of MYMobileSecurity Janus R. Nielsen believes. He points out the fact that mobile banking is becoming more and more common. “It is getting still more important, especially for Android users, to have security software installed that can warn against the approximately 500 million links classified as hazardous. “This way you can at least avoid visiting the already known infected sites. The challenge for the mobile security industry will be to develop a technology similar to what exists on computers and which can recognize patterns and thus warn against suspicious but not yet registered hazardous sites. This technology is not yet available for smartphones, but it will be all though this will probably rather happen in 2013 than 2012 “, he says.

Stolen or lost phones
An employee forgetting his phone in a restaurant or somehow letting it fall into the wrong hands, will actually be amongst the biggest security risks for companies next year. Corporate data leakage can potentially end up being a very costly affair. “The attack risk is much bigger on mobile devices than on laptops and there are fewer security controls”, Kevin Freij says. “Apart from the same things you can do on a laptop, you also have other features on a smartphone like location information, camera, voice dialing and SMS channels that are potential ways into the phone. It is still a challenge for the mobile industry to find ways to deal with these new risks and threats”.

Spyware such as CarrierIQ
After the recent discovery of the existence of the program Carrier IQ on most smartphones, the discussion about whether surveillance is acceptable or not has been intense. “There is no doubt that the mobile security industry is still not defined. None of the mobile anti-virus firms in the market discovered CarrierIQ. Security firms simply do not look after those type of activities – yet, “says Kevin Freij. “We know that a combined approach of different functions working together is the best way to achieve the highest level of security on a mobile today. If you add antivirus, theft protection, backup, network monitoring, safe surfing, app security management and more, you will reach a higher security level than just having an antivirus. However, that does not solve the CarrierIQ issue right now, but the security industry works continuously towards developing new technologies, and hopefully we will be able to track that kind of programs in the future”, he says.

QR bar codes and viruses
In 2011 we saw the first mobile QR barcode – the codes that is scanned by the camera on the phone – spreading viruses. It was a Trojan virus that sent text messages to an expensive toll number. Janus R. Nielsen believes that 2012 we bring more examples of fake QR codes, but the threat will not be overwhelming. “There are certainly more of these examples to come – the more users of QR codes, the more hackers. But as long as you have a security program installed that warns against unsafe links and URL´s, this should be a manageable problem.”

Mobile banking and transactions
Bank apps had a breakthrough among the private smartphone users in 2011. “We see a huge demand for mobile banking applications that provide full access to the user’s bank accounts. Most of the apps are very safe, but if you use mobile banking, it is wise also to have some kind of security software installed.” Kevin Freij says. He estimates that the biggest risk with mobile banking can be found in cases where banks send a code via SMS to the mobile phone so that the user can enter the code to confirm that it is the right person logged in. “The code can be easily intercepted if a spyware program is installed on the mobile. And if that is the case, the user is usually unaware of it unless the security software has spotted it. Another good tip is to check your account statements regularly so you are sure that no unpleasant surprises appear”, he says.

For more information contact:

Stine Mynster, PR Manager
stine@mymobilesecurity.com
Mobile: 0034 699403895

Tips & Tricks for your Smartphone

Friday, January 20th, 2012

Avoid malware on your smartphone!

• Do some research before downloading
Before you install an app, do some research on it. Check the reviews on Android Market and the other app stores. Are they positive? If there are no reviews and the app is not brand new, you should get suspicious. Also check to see what acknowledged websites such as PCWorld, ComputerWorld, AppBrain, AppCircus etc. say about it. You can also check who the developers behind the app are. If they do not even have a website, you should probably stay away.

• Check the permission on personal data collect
A good idea is to always check what kind of data your app has access to before you download it. For instance, there is no need for a bar code scanner-app to have permission to look through your contacts or localize you via GPS. If an app is asking for too much unnecessary information you should reconsider the download.

• Don’t use automatic logins
Don’t set an app that has access to your bank account to log in automatically. Set your phone to lock after it has been on for a certain period of time. That will make it more difficult for others to access your data.

• Make sure your phone has an antivirus scanner installed
With antivirus applications you can scan your phone and avoid installing files with known malware and viruses. Most programs allow you to track and lock your phone down remotely if you lose it, and to back up your personal data. All features that our antivirus apps MYAndroidProtection and MYMobileProtection have.

• Watch also out for scams on your phone
Just as it happens on your PC, your phone is also a target for scammers. Fake websites try to trick people into entering personal data and some sites also make you download malware on your phone just by entering it.

• Be aware of fake QR-codes
Look carefully at the link that pops up when you scan a QR-barcode with the camera on your smartphone. If it contains many numbers and symbols and it does not match the ad or text that you scanned, stay away from it.

Scammers in 2011 steeds vindingrijker via phishing e-mails

Friday, January 20th, 2012
 

Laat je niet beetnemen door scammers. Hier volgt het verhaal van één van onze klanten die een phishing e-mail ontving van een man, die zogezegd interesse had in natuurlijke therapie voor een groep van 10.

 

Je hebt waarschijnlijk al gehoord van het gevaar van phishing e-mails, waarmee bedriegers je persoonlijke gegevens proberen te ontfutselen. Deze e-mails lijken te komen van een betrouwbare instantie zoals een creditcardmaatschappij of bank, maar in werkelijkheid zijn ze afkomstig van oplichters. In 2011 steeg de trend van phishing en werd het fenomeen één van de grootste bedreigingen op het internet.

 

Therapeute Rumana Zahn, klant bij MYSecurityCenter, schreef ons een e-mail, waarin ze vertelde over haar eigen ervaring met deze criminele praktijken. Ze kreeg een e-mail van iemand die interesse had in twee weken behandeling, yogales en opvolging voor een groep van 10 personen.

 

Rumana Zahn nam de aanvraag eerst au sérieux, maar gelukkig dacht ze twee keer na en werd op tijd wantrouwig. De oplichters stelden voor, haar het volledige bedrag inclusief het honorarium van hun tolk uit te betalen, wat betekende dat zij het bedrag voor de tolk rechtstreeks aan hem zou uitbetalen. De oplichters hadden het plan, het volledige bedrag van 7.000 euro over het net met een gestolen kredietkaart te betalen. Van dat bedrag zou Rumana dan 2.000 euro zelf houden voor de twee weken behandeling, en de resterende 5.000 euro zou ze dan via een bankoverschrijving overmaken naar de vertaler, die natuurlijk bij de groep van oplichters hoorde. Op die manier zou ze betrokken zijn in het handelen van gestolen geld, wat natuurlijk illegaal is. Ze werd herhaaldelijk gevraagd of ze een betaling via kredietkaart aanvaardde, maar aangezien dit voor haar geen mogelijkheid was, stelde ze zelf voor de betaling via een bankoverschrijving te ontvangen. Rumana werd pas erg wantrouwig toen ze een tweede e-mail kreeg waarin de scammers nogmaals de noodzaak van een betaling via kredietkaart benadrukten.

 

“Ik vond de hele zaak echt verdacht na de tweede e-mail, hoewel ik aanvankelijk dacht, dat het om een serieus verzoek ging, vooral omdat de e-mail naar mij persoonlijk was gericht. Daarmee wilden de oplichters mijn vertrouwen winnen. Zeer intelligent van hen moet ik toch toegeven” zegt Rumana Zahn. Na haar verzoek het geld via een bankoverschrijving over te maken, kreeg ze nooit een antwoord.

 

“Sindsdien krijg ik zo een tweetal keer per jaar een dergelijke aanvraag, heel gelijkend, altijd getiteld ‘Groepslessen, gelieve in te boeken’. Een collega kreeg twee jaar geleden dezelfde e-mail”.

 

Rumana Zahn is één van de velen, die ooit te maken kregen met het gevaar van phishing. In onze rubriek “Tips en trucs” kom je te weten hoe op een dergelijke valse e-mail te reageren.

 

We willen Rumana Zahn hartelijk bedanken voor haar getuigenis. We hebben ter informatie de eerste originele e-mail van de scammers bijgevoegd.

 
 

Van: johnsonwilliams400 [mailto:johnsonwilliams400@gmail.com]
Verzonden: Woensdag 02 November 2011 15:21
Aan: j.williams2000@rocketmail.com
Onderwerp: Aanvraag

 

Beste,

 

Ik wil graag twee weken boeken in jullie kliniek voor gezondsheids check ups en yogabehandeling, 1 of 2 uren iedere dag van maandag tot vrijdag (‘s morgens of ‘s avonds) voor een groep van 10 personen. We komen aan op 29 november 2011 voor een volledige maand vakantie, waarvan we twee weken willen uittrekken om onze lichamelijke conditie te verbeteren en ook omwille van het leuke aspect van de natuurlijke therapiebehandelingen. Onze voorkeur gaat uit naar natuurgeneeskundige behandeling of eenderwelke natuurlijke therapie die u ons kan aanbieden.

 

Laat u me weten of jullie kliniek deze behandeling in groep aanbiedt en contacteer me best terug met verdere praktische vereisten. Kan u mij ook bevestigen of de checkups in groep kunnen of beter individueel.

 

Wachtend op uw antwoord

 

John Williams

 

Tips & Trucs: phishing e-mails

Friday, January 20th, 2012
 

Hoe afrekenen met phishing e-mails?

 

• Reageer nooit op e-mails of pop-ups die je uitnodigen, persoonlijke informatie of bankgegevens in te vullen.

 

• Wanneer je onzeker bent over de betrouwbaarheid van de e-mail, ga dan eerst de contactgegevens na van de afzender. Open je internet browser en typ het webadres van het bedrijf op Google in, om meer informatie over het bedrijf te vergaren. Klik geen links aan in de e-mail, de link zou best wel eens fake en/of schadelijk kunnen zijn.

 

• Kijk na of de naam van de website waarnaar in de e-mail verwezen wordt, volledig correct is en dus niet in 1 of meerdere letters verschilt van de echte naam, want dat kan wijzen op een phishing e-mail. Bijvoorbeeld Microsofts of Mircosoft, in plaats van de correcte naam Microsoft.

 

• Zorg er altijd voor, dat je anti-virus, anti-spyware en firewall up to date zijn. Anti-virussoftware waarschuwt je bij het openen of downloaden van gevaarlijke bestanden. Een degelijke firewall beschermt je identiteit op het net en blokkeert alle communicatie afkomstig van ongeauthoriseerde bronnen.

 

• Wanneer de e-mail vol spelfouten zit, of wanneer de tekst helemaal geen samenhang heeft of raar in elkaar zit, best meteen wissen!

 

• Controleer of het e-mailadres van de afzender overeenkomt met het bedrijf binnenin de e-mail.

 

• Geef geen persoonlijke informatie of bankgegevens vrij via e-mail. Gewoonlijk zal geen enkele serieuze firma je vragen om wachtwoorden of kredietkaartgegevens door te sturen.

 

• Kijk iedere week uw bankrekening en bankafschriften na, dat geeft je voldoende tijd om te reageren op verdachte uitgaven die je niet meteen kan plaatsen. Contacteer in dat geval onmiddellijk je bank.

 

• Rapporteer spam en phishing e-mails aan de organisatie Internet Fraud Complaint Center via www.ifcbi.gov. Zij werken wereldwijd samen met de authoriteiten om alle dubieuze websites op te doeken en internetcriminelen op te sporen. Je kan ook contact opnemen met de organisatie Anti-Phishing Working Group (een e-commerce-community) via reportphishing@antiphishing.org.

 

The 2011 scammer-trend: Phishing emails

Friday, January 20th, 2012

Don´t be fooled by scammers. Hear what happened to one of our customers when she received a phishing email from a man requesting counseling and a health check-up.

You have probably heard about the so called phishing emails, were scammers try to “fish” money out of innocent people´s accounts approaching them via more or less trustworthy looking emails. In 2011 this trend increased significantly making it one of the most common security threats for PC users.

One of MYSecurityCenter´s customers, practitioner Rumana Zahn wrote us an email telling about her experience with scammers pretending to be interested in two weeks of yoga retreat, checkups and counseling for a group of ten people.

Rumana Zahn took the request seriously to begin with, she almost followed through, but luckily she got suspicious. The scammers asked her if they could pay her for full fee including their interpreter´s fee which meant that she should pay their interpreter directly. The trick consisted in the fact that the fraudsters would pay over the net with a stolen credit card. Out of the 7,000 euros they would transfer, she could keep her fee of 2,000 and the rest she would transfer by bank to their translator, which of course was part of the scammer team. That way she would participate in laundering stolen money, which is illegal. She was repeatedly asked whether she accepted credit card payment, but since she had no possibility of accepting this form of payment, she asked the fraudsters to make a bank transfer. She began to get suspicious when she received a second email in which he repeated his questions about credit card payment.

“I began to suspect the whole thing being a hoax, although I actually thought that the approach initially sounded serious. I guess it would have meant me having to be liable. Very clever indeed”, Rumana Zahn says. She asked them to pay by bank transfer or PayPal but she never received an answer.

“Since then I get an email like this twice a year – it’s very similar – a group coming, please arrange. Another friend of mine got the same email two years ago”.

Rumana Zahn is just one of many people who have been attacked by scammers sending out fake emails. Read this newsletter´s Tips and Tricks on what to keep in mind when a phishing email hits you in 2012.

Thanks to Rumana Zahn for telling us her story.
See one of the original phishing emails below.

From: johnsonwilliams400 [mailto:johnsonwilliams400@gmail.com]
Sent: Wed 02 November 2011 15:21
To: j.williams2000@rocketmail.com
Subject: Inquiry

Greetings,

I want to book for 2 weeks checkups and counseling, 1 or 2 hours each
day Monday to Friday (morning or evening hours) for a group of 10. We
will be coming for a one month vacation/holiday from 29th Nov 2011 and
in line with our plans we will require 2 weeks Natural Therapy to help
maintain healthy body due to the nature of our job and also to make
our stay fun. The checkups and counseling should basically be on
Naturopathic consultations or any other Natural Therapy you can offer.

Please let me know if your clinic can handle this for us and get back
to me with requirements to enable me contact you with more
clarifications. Also confirm if you can arrange a one on one checkups
and counseling for us or if its better in group.

Awaits your email.

John Williams

Tips and Tricks

Friday, January 20th, 2012
 

Avoid falling for phishing-emails!

 

• Do not reply on emails or pop-ups asking for personal or financial information.

 

• If you are not sure about the reliance of the email, check up on the contact information. Open a new internet browser session and type in the company´s web address yourself. Don´t click on any links in the email and don’t copy and paste the link from the message, it could be a fake link.

 

• Check that the name in the website from the email is not changed slightly. For instance spelling Microsoft as Microsofts or Mircosoft.

 

• Make sure your antivirus, antispyware and firewall are updated. Antivirus software scans incoming communications for troublesome files and warns you before you download harmful files. A firewall helps make you invisible on the Internet and blocks all communications from unauthorized sources.

 

• If the email contains errors, spelling mistakes or if the text simply does not sound good, stay away!

 

• Check that the sender of the email is the same as the company stated to be behind the email.

 

• Don’t email personal or financial information. Email is not a secure communication method. Normally proper companies as your bank would never ask you to email them your passwords or credit card number.

 

• Review your bank account or credit card statements every week. That gives you time to react on any unauthorized payment or transactions. If you see something suspicious, contact your bank immediately.

 

• Report spam and phishing-emails to FBI via Internet Fraud Complaint Center on www.ifcbi.gov. They collaborate with the authorities worldwide about closing down the phishing-websites and identifying the scammers behind. You can also report it to Anti-Phishing Working Group (an e-commerce-community) on reportphishing@antiphishing.org.