Wednesday, March 12, 2008

Browse the web safely

Here are some tips that I found in some websites about knowing how some kind of threats are attacking while browsing the web...

Malware

Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a portmanteau of the words "malicious" and "software". The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

Tips:
* Only open email or IM attachments that come from a trusted source and that are expected
* Have email attachments scanned by internet security prior to opening
* Delete all unwanted messages without opening
* Do not click on Web links sent by someone you do not know
* If a person on your Buddy list is sending strange messages, files, or web site links, terminate your IM session
* Scan all files with an Internet Security solution before transferring them to your system
* Only transfer files from a well known source
* Keep security patches up to date

Spyware
Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent.
It can be downloaded from Web sites, email messages, instant messages, and from direct file-sharing connections. Additionally, a user may unknowingly receive spyware by accepting an End User License Agreement from a software program.
Spyware frequently attempts to remain unnoticed, either by actively hiding or by simply not making its presence on a system known to the user.

Tips:
* Allow only authorized programs to connect to the Web with internet security such as Norton Internet Security
* Do not accept or open suspicious error dialogs from within the browser
* Spyware may come as part of a "free deal" offer - Do not accept free deals


Phishing
In computing, phishing is an attempt to criminally and fraudulently acquire sensitive information, such as usernames, passwords and credit card details, by masquerading as a trustworthy entity in an electronic communication. eBay, PayPal and online banks are common targets. Phishing is typically carried out by email or instant messaging, and often directs users to enter details at a website, although phone contact has also been used.

Phishing is essentially an online con game and phishers are nothing more than tech-savvy con artists and identify thieves. They use SPAM, malicious Web sites, email messages and instant messages to trick people into divulging sensitive information, such as bank and credit card accounts. Phishing attacks re-direct victims to a bogus Web site where malicious code is downloaded and used to collect sensitive information.

Tips:
* When visiting a website, type the address directly into the browser rather than following a link
* Only provide personal information on sites that have "https" in the web address or have a lock icon at bottom of the browser
* Do not provide personal information to any unsolicited requests for information
* Confirm authenticity of a Web site



No comments: