10 Computer Threats You Didn’t Know About<\/p>\n
COME ONNNnnnnn\u00a0\u00a0 !!!!!….. \u00a0\u00a0 Take a little bit of time to read this my friends….you know it could potentially save you a lot of heart ache and cash down the road…infact in today’s world of cyberstalking it could just save your life.<\/p>\n
Intro<\/p>\n
Strong anti-virus software and firewalls do a great job of protecting our computer systems. But even when virus definitions<\/p>\n
are fully updated and firewalls properly configured, there are still insidious threats that can worm their ways in, stealing<\/p>\n
your data or hijacking your PC and leaving you none the wiser.<\/p>\n
The security and IT specialists upon whom we all rely can only do so much. At the end of the day, if the average user isn’t<\/p>\n
vigilant , the strongest security precautions in the world won’t stop some of the more dangerous digital intruders, with<\/p>\n
potentially disastrous consequences.<\/p>\n
To keep you on your toes (or shivering in your boots), here are 10 schemes and scams that might have slipped under your<\/p>\n
radar.<\/p>\n
*****Keeping all this in mind,you know the dangers that many of us can and do face daily I really suggest that you read this<\/p>\n
article…..Just recently a very good Friendburst friend of mine told me about a stalker that was going not only after<\/p>\n
him,but also his children and it really bothered me….but then I thought why should it…?
\nWe all know the people are out there my friend’s….they are constantly waiting and watching and essentially waiting to<\/p>\n
pounce on any unsuspecting people on the internet who are going about their business in a lawful way…and basically just<\/p>\n
enjoying themselves…..
\nYes my friends the Jerks are indeed out there and waiting for that one little mistake……but there are ways that you can<\/p>\n
minimize the damage that they seek to inflict upon you and your loved ones.<\/p>\n
Arm yourselves with Knowledge my friends.
\nTake the little time required to learn of the risks that we all face out there in our cyber space world before you just go out<\/p>\n
and stumble around unaware in the dark……
\nDon’t assume all will be well without arming yourself with the facts….look at it like the internet is one big<\/p>\n
community….lololol well one really,really big comunity….<\/p>\n
Are we feeling secure yet ????????<\/p>\n
So please recognize that all people on the internet are not always your friends….infact many,many,many people in cyber space seek<\/p>\n
to do you and your family ill harm my friends.<\/p>\n
Prepare yourself as you would going out into any circumstance where you will come into contact with people you do not<\/p>\n
know,because that is exactly what you are doing when you go on the internet………and not just sometimes…..EVERYTIME.<\/p>\n
Do\u00a0 not simply role the dice with your internet security my friends…..weather a stalker,or any number of differing illegal actions by those who are waiting even right now to take advantage of you and your loved ones…can and will if allowed
\nruin your life…….Believe it my friends……..<\/p>\n
The following article discusses some little know internet facts that you may want to look further into to protect you and your family and friends.There is also a couple of small video’s at the end of this blog for you consideration.<\/p>\n
***Fake Tech-Support Calls***<\/p>\n
You might get an unsolicited phone call from a tech-support representative claiming to be from Microsoft or another big-name<\/p>\n
IT corporation. But the caller won’t be who he claims to be. After warning you that “suspicious activity” has been detected<\/p>\n
on your computer, he’ll offer to help \u2014 once you give him the personal information he requires to get his job done.<\/p>\n
That job isn’t fixing your computer. In fact, he’s really just after your personal information.<\/p>\n
If you receive a call like this, hang up, call the company the bogus technician claimed to be from, and report the incident<\/p>\n
to a legitimate representative. If there really is a problem, they’ll be able to tell you; if not, you just thwarted a data<\/p>\n
thief.<\/p>\n
***DNS Redirection***<\/p>\n
Internet service providers (ISPs) such as Time Warner Cable and Optimum Online claim they’re trying to help with DNS<\/p>\n
redirection, but the reality seems to come down to money. Domain Name System (DNS) redirection overrides your browser’s<\/p>\n
normal behavior when you can’t reach a webpage. Instead of displaying the normal 404 “File Not Found” error, the ISP sends<\/p>\n
you to a page of the ISP’s choosing \u2014 usually a page full of paid advertising and links.<\/p>\n
Innocent though that practice may be, computer viruses can do the same thing, redirecting your browser to a hostile page the<\/p>\n
first time you misspell a domain. With ISPs, you can opt out of their DNS redirection (you’ll find links below all the ads);<\/p>\n
with viruses, stay on your toes. Make sure you know what your browser’s default 404 page looks like, and take action if you<\/p>\n
see anything different.<\/p>\n
***Open DNS Resolvers***<\/p>\n
Another danger lies in the way some DNS servers are configured. An “open resolver” can offer information it isn’t authorized<\/p>\n
to provide. Not only are open resolvers exploited in distributed denial-of-service (DDoS) attacks , but an attacker can<\/p>\n
“poison” the DNS cache, providing false information and incorrect resolutions that must be detected to be corrected.<\/p>\n
If your browser trips over a case of cache poisoning, the agents in charge of a hostile server can glean detailed information<\/p>\n
about your system \u2014 especially if you’re in the middle of an important transaction. How can typical users solve this dilemma?<\/p>\n
The chilling answer: They can’t. It’s up to Internet service providers to address the problem.<\/p>\n
***Fraudulent SSL Certificates***<\/p>\n
A Secure Sockets Layer (SSL) certificate reassures your browser that the site you’ve connected to is what it says it is. If<\/p>\n
you’re looking at “HTTPS” instead of plain old “HTTP,” you know there’s security involved, such as when you log in to your<\/p>\n
bank account or pay your phone bill. The most trusted SSL certificates are issued by designated Certification Authorities<\/p>\n
worldwide.<\/p>\n
But what happens if that trust between browser and website is exploited? Acquiring or creating fake SSL certificates is<\/p>\n
unlawful, but happens often enough that we need to be aware of it. On multiple occasions in 2011, the discovery of false<\/p>\n
certificates suggested an attempt to spy on Iranian citizens as they used Gmail and Google Docs. According to the website of<\/p>\n
computer security firm F-Secure, “It’s likely the government of Iran is using these techniques to monitor local dissidents.”<\/p>\n
***Session Hijacking***<\/p>\n
If you spend afternoons using your laptop in a caf\u00e9 with an open Wi-Fi network, you might not be the only person logged into<\/p>\n
your Facebook or eBay account. Firesheep , an add-on for Mozilla’s Firefox browser, lets its users sneak a peek at other<\/p>\n
people’s browser activity if they’re all on the same wireless network.<\/p>\n
While the illicit observers can’t get a glimpse of secured pages, many sites secure only their login pages; once you’re<\/p>\n
logged in, your presence is maintained purely through cookies, packets of data that your browser stores to keep track of your<\/p>\n
browsing needs. But Firesheep lets its users copy your cookies, and after that happens the site you’re logged into can’t tell<\/p>\n
the difference between you and them.<\/p>\n
Though it can be used for darker purposes, Firesheep should serve more as a warning to websites with private user accounts:<\/p>\n
They need to take security seriously. Guarding the main gate isn’t the limit of their responsibilities; attackers don’t need<\/p>\n
to storm the castle when a guest leaves the door open.<\/p>\n
***Man-in-the-Middle Attacks***<\/p>\n
While you’re still sipping your latte on that unsecured network, even your encrypted messages may not be all that safe. A<\/p>\n
Man-in-the-Middle (MTM) attack occurs when an attacker intercepts communications and proceeds to “relay” messages back and<\/p>\n
forth between the lawful parties.<\/p>\n
While the messaging parties believe their two-way conversation is private, and might even use a private encryption key, every<\/p>\n
message is re-routed through the attacker, who can alter the content before sending it on to the intended recipient. The<\/p>\n
encryption key itself can be swapped out for one the attacker controls, and the original parties remain unaware of the<\/p>\n
eavesdropper the entire time.<\/p>\n
***SQL Injection***<\/p>\n
Databases using structured query language (SQL) rely on specially formatted queries to locate and return requested data.<\/p>\n
Human or automated attackers can send requests that exploit the database’s internal codes to alter the query as it’s<\/p>\n
processed. This year alone, SQL injection was the culprit behind a number of notorious security breaches, such as hacker<\/p>\n
group LulzSec’s alleged theft of data from the Sony Pictures server.<\/p>\n
Once again, the solution to this problem isn’t in the user’s hands.<\/p>\n
“Well-designed software avoids the problem by weeding out any queries that don’t meet strict standards,” said Beth Paley, a<\/p>\n
software training consultant and co-founder of Acrotrex Medical Business Systems in northern New Jersey.<\/p>\n
Paley advises those who create and maintain database apps to “use whitelisting, not blacklisting,” letting only specific data<\/p>\n
through instead of keeping only specific data out. That way previously unseen SQL injections won’t get through.<\/p>\n
***Disguised Filenames***<\/p>\n
Modern operating systems accommodate speakers of languages such as Arabic and Hebrew by featuring codes which can reverse the<\/p>\n
direction of type to display such languages correctly: written right-to-left instead of left-to-right.<\/p>\n
Unfortunately, these “RTL” and “LTR” commands are special Unicode characters that can be included in any text, including<\/p>\n
filenames and extensions. Exploiting this fact, a malware purveyor can disguise “.exe” files as other files with different<\/p>\n
extensions. Your operating system will display the “disguised” name, though it still treats the file as an executable \u2014<\/p>\n
launching it will run the program and infect your computer. Practice caution with any and all files from unknown sources.<\/p>\n
***Banking Trojans***<\/p>\n
A Trojan is malicious software that disguises itself as innocent program, counting on you to download or install it into your<\/p>\n
system so it can secretly accomplish its malicious tasks. The infamous ZeuS Trojan and its rival SpyEye take advantage of<\/p>\n
security holes in your Internet browser to “piggyback” on your session when you log in to your bank’s website.<\/p>\n
These monsters are in the Ivy League of computer malware; they avoid fraud detection using caution, calculating inconspicuous<\/p>\n
amounts of money to transfer out of your account based on your balance and transaction history.<\/p>\n
While financial institutions continue to increase the layers of security involved in large transactions, such as requiring<\/p>\n
confirmation through “out-of-band” communications \u2014 such as your mobile device \u2014 digital crooks have lost no time adapting to<\/p>\n
the changes, with banking Trojans able to change the mobile number tied to your account and intercept that confirmation<\/p>\n
request. If you’re a tempting target, fear is an understandable response. It’s just another part of a digital arms race that<\/p>\n
shows no signs of slowing down.<\/p>\n
***Facebook Everywhere***<\/p>\n
It’s hard to find an individual who or a corporation that isn’t on Facebook. The social networking site has become an ever-<\/p>\n
present hub for everything online. For some less savvy users, Facebook is the Internet.<\/p>\n
With developments like Facebook Connect and Open Graph , Facebook is virtually opening its doors to any third party that<\/p>\n
wants in on the action. You may have already noticed that Facebook displays ads targeting your specific demographic<\/p>\n
information, based on the personal information you’ve posted and activities you’ve participated in.<\/p>\n
What you might not have noticed is that other sites have started targeting your Facebook demographics as well. Any time you<\/p>\n
browse the Web without first logging out of Facebook, other sites can get access to any profile information you’ve marked as<\/p>\n
fit for public consumption.<\/p>\n
Don’t want every site on the Internet to see you coming a mile away? Just remember to log out of Facebook every time.<\/p>\n
17 January 2012 | 08:57 AM ET |
\nGeoph Essex,
\nSecurityNewsDaily Contributor<\/p>\n
ANDDDDDDDDDDDDDD……<\/p>\n