Archive for December, 2006

Viruses

Wednesday, December 20th, 2006

If you explore the Internet, send or receive e-mails, or save files and programs to your computer, you run the risk of contracting a virus. And today, viruses do more than just destroy files and cripple computers. They gather confidential information and share it with criminals, and let uninvited guests commandeer your computer from remote locations. Protecting your system is vital if you value your computer, credit and privacy.

Viruses, worms and Trojan horses

Viruses come in three common strains: virus, worm and Trojan horse. A virus spreads through human interaction, often as an e-mail attachment. A worm, on the other hand, spreads independently by sending itself (in your or another’s name) to e-mail addresses found on your computer. The Trojan horse (also known as a “backdoor virus”) is typically downloaded by an unwitting computer user. Once the Trojan is installed, it searches for private information—including files, passwords, logins and credit card numbers—and ships it out a “back door” to a shadowy recipient.

Keeping Viruses at Bay

There’s no single solution to thwarting viruses. Rather, the solution lies in a matrix of protection. Because viruses are continuously updated to breach the day’s best security systems, nothing can guarantee absolute safety. That said, the following steps—used together—can help you stay virus-free.

Insist that your Internet service provider (ISP) offers spam and virus filtering of all e-mails. Good ISPs stay abreast of the latest trends, employing sophisticated content filtering to help prevent e-mail-borne viruses and worms from reaching your computer.

Don’t open an e-mail attachment unless you know what it is. When in doubt, call the sender to verify the attached file.

Update your computer operating system with the latest version. Viruses often exploit security holes in computer operating systems. The older your operating system, the greater your vulnerability.

Install and run antiviral software on your computer. These programs scan your system and quarantine potentially harmful files. Many of these programs automatically update via the Internet to protect users from the latest viruses. Leading products include Norton AntiVirus Corporate Edition (for business), Trend Micro PC-cillin, and AVG Anti Virus.

Install a firewall. Firewalls block viruses and prevent unauthorized access to your computer via the Internet. Firewalls are available as software (for protecting individual computers) and hardware (for standing guard in front of a network of computers). Some ISPs offer DSL routers with built-in firewalls, eliminating the need for purchasing additional software. If you subscribe to DSL, check with your ISP to see if your router doubles as a firewall.

Avoid “back alley” websites. Sites that feature “questionable” material are notorious for hosting viruses. If the site isn’t maintained by a reputable company or individual, go elsewhere.

Beware of “free” downloads. As with “back alley” sites, if a free download doesn’t come from a reputable company or individual, don’t click through and download it.

If you have further questions, or if you think your computer is infected with a virus, don’t hesitate to call your ISP. If your provider can’t help, it should happily point you toward a knowledgeable technician who can.

Gone Phishing: Online scams get tricky and technical

Wednesday, December 20th, 2006

We all know that providing personal information over the internet is unwise. We take precautions when shopping online, covet our privacy when visiting chat rooms and enlist services to avoid hacking. But internet scammers have a new method to lure unsuspecting victims when “casting about” for private financial information—they go “phishing.”

Phishing is a high-tech scam that uses spam to deceive consumers into disclosing their credit card numbers, bank account information, Social Security numbers, passwords, and other sensitive personal information. Internet “phishermen” enlist this information via emails that may already arrive regularly in your mailbox.
The emails are specially formatted to deceive you into thinking that a legitimate company—possibly one that you conduct business with—is requesting necessary personal information. In truth, these emails are designed to help you unwittingly send information to identity thieves.

Don’t Take the Bait:
There are several ways to recognize a phishing email.
First, be aware of common phishing scams. Many come from scammers imitating Ebay, PayPal and government agencies.  One example is Regulations.gov, a legitimate agency operated by the United States Environmental Protection Agency. The FTC and other federal agencies use the regulations.gov portal to receive comments from the public regarding proposed rules and regulations. Scammers often use emails resembling regulations.gov because the public generally views governmental agencies as large and legitimate.

Second, know what to look for. There are a few specific elements that should draw a red flag, such as a link within the email that doesn’t lead to its original site.  Once you click on a link, always check the address bar of your browser to be sure you are on the company’s original web site. Another indicator might be when a “return” email address doesn’t match the displayed email address when you are preparing to send your information, This means your return email is being rerouted to an unscrupulous mailbox.  You might also receive several copies of the same email, common practice for phishing scammers who don’t often check their target lists for repeat email addresses. Emails that seem unusually insistent or threatening should also be a warning. Scammers know that Intimidation can be a successful method for soliciting information.

But the simplest way to alleviate phishing scams is to avoid sending personal and financial information altogether. Any request for information via email should be questioned. If you get an unexpected email from a company or government agency asking for your personal information, contact the company or agency cited in the email using a telephone number you know to be genuine. You might also cross-check the company of origin by starting a new Internet session and typing in the Web address to be sure it leads to a legitimate company.

Hook, Line and Sinker:
If you have already given your credit card or banking information in response to a suspicious email, notify your Credit Card Company or bank immediately so they can monitor your accounts. If you provided your Social Security number, contact one of the three national consumer reporting agencies to request fraud alert. Finally, visit the FTC’s Identity Theft Web site (www.consumer.gov/idtheft) to file a complaint and learn more about how to minimize your risk identity theft.

INTERNET SHOPPING SAFETY

Wednesday, December 20th, 2006

Most Internet shopping experiences are good. But some turn sour. Typically, these bad experiences involve a disagreement over price, product or delivery time—and sometimes they’re outright scams with little chance of resolution. The good news is that bad experiences aren’t random. They happen, predictably, to unvigilant shoppers. Common sense prevails. By exercising good judgment, the guidelines below will help you shop online with safety and confidence.

 

Shop at reputable online retailers

Would you mail a $500 check to an unfamiliar business? I thought not. Likewise, you probably shouldn’t give your credit card number to an Internet retailer you’ve never heard of. Reputable retailers are just that—reputable. They’re typically not in the business of bilking people. What’s more, they often invest in the latest Internet security systems to maintain customer privacy.

Some reputable retailers, like Amazon.com, sell through the Internet exclusively. Others, like Powell’s Books, sell though stores and the Internet. In fact, many of the “brick and mortar” retailers that you’ll find downtown or at the mall have online counterparts. By shopping online at reputable retailers, you can save the drive, skip the lines and have your goods delivered to your doorstep.

 

Research before you buy

Make an informed purchase. If you’re buying a digital camera, for instance, refer to the manufacture’s Web site to make sure the online retailer uses the same product name and model number. Read the fine print to ensure you’re not unwittingly buying a factory second, or a product that’s watered-down or refurbished.

Beware of hidden or exorbitant charges
Compare prices on the Internet before you buy. If one vendor’s price looks too good to be true, it just might be. Before you submit an order, make sure you’ve verified the TOTAL price, including shipping. (Unscrupulous retailers have been known to swindle customers through inflated shipping charges.)

Read return policies

Some retailers tout hassle-free return policies. Others won’t authorize a return for something that’s been opened, even if the item isn’t exactly what you want. Still others will gladly accept a return—for an extortionate restocking fee. The lesson: Understand the retailer’s return policy before you buy.

 

Confirm stock and delivery

Before you commit to an order, make sure the vendor has the product in stock. Then find out how long it will take to fill the order and ship it to your doorstep. An upstanding retailer won’t charge you until it begins filling the order.

 

Pay by credit card

Never pay for an online transaction with cash or check. Use a credit card. Credit cards create a firewall between your finances and a vendor. Under the Fair Credit Billing Act, a consumer can dispute and withhold payment while a credit card company investigates possible errors or fraudulence. PayPal (often used for eBay purchases) offers additional consumer protection by acting as a firewall between your credit card and a vendor.

 

Shop on “secure” Web sites

Secure Web sites prevent third parties from accessing your name and financial information. When you go to “check out,” note how the Web site address changes from “http:” to “https:” The “s” indicates you’re working on a secure online form. Similarly, a lock icon will appear in the bottom right of your browser. You should avoid entering personal information on non-secure pages. Though secure pages aren’t failsafe, using them in conjunction with the advice above will help you stay out of trouble. Note: E-mail is not a secure means of conveying financial information.

Print and keep receipts
Most online purchases create a confirmation page detailing items, prices and delivery information. Print it out and save it. In addition, online purchases usually generate a confirmation e-mail. Save this as well.

Read the privacy policy
Before you divulge your e-mail address or personal information, look for a privacy policy that clearly states that your information will not be shared or sold to a third party.