Office of Consumer Protection shares tips to stay safe online
Each of us needs to do our part to protect our personal data and make sure that our online lives are kept safe and secure. That’s what Cybersecurity Awareness Month – observed in October – is all about! As a Cybersecurity Awareness Month Champion, the Howard County Office of Consumer Protection (OCP) provides online safety education on topics to protect you, your children and your business from digital forms of crime. Keep reading to heighten your awareness of cyber threats and what you can do to stay safe online.
|
|
Safeguard internet-connected appliances and devices
Is your stove spying on you? If you have doorbell cams, voice assistants, smart appliances or other Wi-Fi connected equipment, the answer is...maybe. What data is collected, where it is sent, and how Internet of Things (IoT) connections risk hacking of your router is little discussed. Consumer Reports and Scambusters shed light on these issues and provide an in-depth analysis of global concerns, as well as tips to protect your privacy. The White House and Federal Communication Commission (FCC) have proposed a new Cyber Trust Mark certification and labeling program to help Americans choose smart devices that are safer and less vulnerable to cyberattacks. Put cybersecurity first and secure all internet-connected devices before using them.
|
|
Secure devices and IoT equipment
Did you know the average person has 100 passwords online? Default passwords are NOT secure. Passphrases are a better way to secure your accounts. When it comes to passphrases, long and complex is best! Make sure they are long (12+ characters); unique (never reuse passwords); and complex (a combination of upper and lower case letters, spaces, numbers and special characters).
A Password Manager can create and store strong, unique passwords for each of your accounts. Using multi-factor authentication protects you and your money 99.9% of the time. The OCP urges all consumers to turn on this easy 2-step function which asks for password and either a pin, biometrics (face ID or fingerprint) or other prompt. Lastly, remember that any device connected to the internet is vulnerable to risks. The best defense is to keep device security software, web browser and operating systems up to date. Use automatic software updates so you don't have to worry about manually checking for updates. Embrace the convenience and let your devices take care of themselves.
|
|
Beware of phishing and smishing
Phishing (phony+fishing) emails pretend to be from legitimate sources and ask you to click on links, open attachments, or otherwise interact with criminals online. Smishing (sms+fishing) is a similar scam, but uses texts and chat apps. The OCP warns that phishing and smishing are the most efficient and cost-effective way to steal money and personal information. Criminals disguise scams in emails, texts and chat messages which look and sound like the real thing. However, there are tools you can use to verify email addresses, hyperlinks and language if you are unsure if the email is legitimate. Forward texts to 7726 or just use the report feature if your carrier provides one.
AI voice cloning and vishing
Vishing (voice + phishing) is a fancy way of saying phone scam. Phone scammers use articifial intelligence (AI) to clone voices or writing style and steal billions each year. The OCP suggests that you create family security questions or codewords, like a favorite game night activity or vacation spot, to weed out AI Imposters. If the scammer can’t answer the security question, then your loved one will know their grandchild is not in jail or kidnapped!
|
|
Prevent e-signature scams to protect transactions
Ninety-five percent of businesses and organizations say they use, or plan to use, e-sign software. E-signatures are widely used in business, and it is increasingly common for consumers to use them to sign mortgage agreements, tax forms, medical forms, and other types of legal documents. While it's often easier to complete a contract electronically, the OCP warns that scammers find ways to steal sign-on credentials and other confidential information to perpetrate fraud. Current common e-signing scams include phishing attempts/fake notifications; imposters using forged documents; or outright account takeover. Learn how to spot and avoid e-signature scams.
|
|
Don't let virtual learning lead to virtual insecurity
While the pandemic is behind us, virtual learning is not. Whether students choose to attend hybrid or fully virtual school (lower or higher education), work with a tutor online, or use online learning platforms, the ABC's of online learning follow our kids from pre-K through higher education. Start teaching cybersecurity awareness early to protect your children from cyberhacking, and cyberbullying. The U.S. Department of Education’s Office of Elementary & Secondary Education also provides additional resources for cyber-education safety.
|
|
Avoid clipboard hijacking and address poisoning
If you hold cryptocurrency, you should know these terms to keep your investment safe. This scam exploits the fact that addresses used in crypto transactions consist of a long, unique chain of letters and numbers - something that's easy to get wrong if you manually type. Scammers who hack into your PC can divert your investments when you log in. Clipboard hijacking occurs when malware on your PC lets scammers alter text and other information you've copied and then paste the doctored info without you noticing. This enables them to change the complex address so that currency you send to your intended target ends up in the crook's digital wallet instead. However, there are ways to protect yourself from this scam.
|
|
Have a consumer question or need assistance?
|
|
To request this publication in an alternative format, contact the Howard County Office of Consumer Protection at 410-313-6420 (voice/relay) or email [email protected]. Follow us on social media @hococommunity.
|
|
|
|
|
|
|
