|
Useful Security Information and Tips
|
|
ACSRF uses various security measures to ensure, as far as possible, that your account and personal information are protected. The specific measures are not disclosed for security purposes.
You as a member can also play a big part in protecting your own information.
The following tips are provided to help you to protect yourself and to keep your computer safe.
- Protecting your computer
- Protecting yourself
- Protecting your family
- Protecting your identity
- Types of Fraud and Internet Security Threats
Protecting your computer
- Keep your operating system up-to-date: regular operating system updates are the first line of defense in keeping your computer as secure as possible. Routine system maintenance, updates and patches helps to prevent data loss, viruses and other potential risks.
- Use firewall software on your computer: anyone with an internet connection should have a firewall running on their computer.
- Use security software and keep it up-to date: always make sure you have the latest security software on your computer (this must be updated regularly). We recommend you do not use ACSRF’s Members Online until you are sure your security software protection is up to date.
- Use legitimate and up-to-date anti-virus software – ensure the anti-vrus software covers your operating system, internet, email, and files/documents, and ensure that it is updated regularly.
- Do not leave your computer connected (online) when not in use - When leaving your computer, you should disconnect it from the internet connection. This decreases the chance that someone will be able to access your computer.
Protecting yourself
- Secure website verification – a website requiring you to log in should contain the symbol of a padlock in the browser status bar.
- Delete SPAM without reading it (don't use the 'preview' pane). Don't open e-mails from a source you don't trust. Install anti-spam software or check whether your Internet Service Provider offers a spam filtering service.
- Phishing filter: help protect yourself and your family from online scams – the latest browsers offer a built-in that scans the web addresses and web pages you visit for characteristics associated with known online web fraud or phishing scams, and warns you if sites you visit are suspicious.
- Always select "Log Off" from the ACSRF Members Online menu when you want to leave the site.
- Try to avoid using shared computers - (e.g. at an Internet cafe) as you will not know what protection (if any) or devious devices are installed.
- Never change security or personal details in public places - such as your password in libraries, Internet cafes etc.
- Do not leave your computer unattended or idle for long periods of time – when leaving your computer unattended, you need to either log off or lock your computer.
- Do not choose a password that is easily identified with you - for example, a password that contains your date of birth, telephone number, pet name etc.
- Do not write your password down - even if it is disguised.
Protecting your family
- Create different user accounts on your PC – create limited users. As a parent you can give yourself an Administrator account with full control over the computer, and give your children limited user accounts with restricted controls.
- Block inappropriate content - get an internet content filter (there are some available for free). Internet content filters can help you manage your family's online environment to provide a safe and enjoyable online experience. Visit http://www.netalert.gov.au.
Protecting your identity
- Never provide your personal or security details, e.g. user name and/or password, in response to any email. ACSRF will not ask you for this information in an email.
- Do not disclose your account details or personal information over the telephone, email or mail unless you initiated the request yourself.
- Keep personal documents at home in a safe place and away from others (if you are in a shared living arrangement).
- Ensure that your home letterbox is secure and only accessible by you, so that identity thieves cannot steal your mail from you before you collect it.
- Check that you are continuously receiving your mail and statements, as thieves may sometimes complete a form to divert your mail to another location.
- Don’t leave anything in your car that could be of use to identity thieves eg. bills, registration papers, licenses and other identifying information.
- Before putting documents with personal information in the rubbish, make sure you destroy them sufficiently to prevent others from reading your contact/identity details.
- Do not use the same password for other services (eg video account, email account, mobile phone).
- Never disclose your password to anyone including family or friends. Do not write it down or store it on your computer.
- Make sure no-one watches you enter your password over the internet.
Types of Fraud and Internet Security Threats
Fraudsters use a number of techniques to trick unsuspecting victims. Listed are the most common types of Fraud and Internet Security Threats
Phishing
Phishing (pronounced fishing) is the fraudulent process of attempting to acquire sensitive information such as usernames and passwords by masquerading as a trustworthy entity. This method continues to be favoured by online thieves. Common types of Phishing are Hoax emails and Hoax phone calls and SMS’s. You can minimise your chances of being a victim of Phishing scams by:
- Treating all emails requesting personal log on information such as username and password with extreme caution. Authentic ACSRF emails will not request personal details or log on information.
- Immediately delete emails of unknown origins, no matter how innocent or provocative the subject headings sound.
- Changing your password on a regular basis.
- Keep your anti-virus and firewalls up-to-date and perform regular scans of your computer.
Always exercise caution when viewing emails claiming to be from a financial organization, particularly if they ask you to respond by email. ACSRF would never ask you for your account information or login details by email.
Hoax phone calls
Fraudsters don't only strike online. There's been an increase in hoax phone calls with callers asking questions about personal details.
Malicious software (Malware)
Malware is malicious software inserted into a computer system for the purpose of causing harm, such as stealing personal and financial information.
Spyware
Spyware gathers information about a user and relays it to another party over the Internet.
Adware
This is a type of spyware, and it can be as simple as marketers and advertisers using it to track your web-surfing preferences; or as bad as fraudsters using it to monitor keystrokes, scan files and emails and gather confidential data such as passwords.
In many cases, users unknowingly install spyware when they download freeware or shareware from websites. In other instances, spyware programs are automatically installed when a user views emails or visits a certain web page.
There are products available that can help you detect, monitor and remove spyware from your computer. Many computer security software suites now come standard with a spyware detection and removal feature.
You can minimise your chances of unintentionally downloading spyware onto your computer by:
- Being wary of banners, ads and pop-ups while surfing the Internet. Do not click on them no matter how enticing they may appear.
- Reviewing terms and conditions when you install free programs or subscribe to services from the Internet.
- Using an up-to-date anti-spyware program to regularly scan your computer.
Trojans
A Trojan is a destructive program that poses as a harmless application. Trojans
do not replicate themselves and do not need a host program to attach to.
Computer users often accept Trojans onto their computers, believing that the program
is harmless or even helpful. Some Trojans will claim to rid the computer of viruses
or other harmful applications, but instead introduce viruses and leave it vulnerable
to attacks by hackers and intruders.
Some Trojan viruses contain software that can capture a user's keystrokes. You can
be affected by clicking on a link in an email or just by surfing the web.
You can minimise your chances of unintentionally downloading Trojans by:
- Not opening emails or accepting attachments from unknown sources.
- Installing software from trusted sources only.
- Not clicking on links contained within emails of unknown sources.
- Regularly scanning your computer for Trojans and other malicious programs with up-to-date anti-virus software.
- Using a firewall to filter traffic to and from your computer while connected to the Internet.
- Downloading and installing security patches for your operating system as soon as it is available.
Fake job advertisements
Also known as mule recruiting, this is a rapidly growing scam. Fraudsters advertise on the Internet, in chat rooms or by email, enticing individuals to become money transfer agents.
Unsuspecting victims assist fraudsters by moving money for them (money laundering). Remember: if an offer sounds too good to be true, it usually is.
Scams
Scams come in many forms – mail, email, phone, online and door-to-door. They're designed to trick you into giving away your money, passwords and/or personal details.
Some of the common scams include:
- Banking and online scams
- Identity theft
- Job and employment
- Investment scams
- Lottery and competition scams
- Chain letters
- …and many more.
