What the POP-UP! Close it Safely!

Gmail, MSN-Hotmail (Windows Live), and Yahoo, to name several free email providers, have been in the news lately since a list of email addresses and their associated passwords were posted on the Internet!  Since the revelation the posted information has been removed and each company has forced password resets for the email accounts that were affected.  This means the user will be required to change their password the next time they access the email account.  [Note; if a password reset is required and you use POP3 email such as Microsoft Outlook or Express be sure to update the password for the email accounts here also.]

So how did this happen in this case?

The official word is that phishing and mimic websites are the hackers tool.  Here’s how it works:

1. An official looking email is sent to the user or the user visits a “hacked” website.
2. The user clicks on the link in the fake “official” looking email or the faked “official” looking pop-up box.
3. The user enters their Username and Password and Whoala!, you’ve been PHISHED!
4. Or, worse you’ve authorized the download of Malware / Spyware to your computer.

How to protect yourself?

1. Educate; locate the security tips for your email type. [Here are some quick links, Left-Click on the image: ,  , ]
2. Install a reliable Anti-Malware Software and Firewall [a list of free resources for home use is available via a free registration HERE.  Need help on how to install and use computer security software consider the BOOK or EBOOK]
3. Secure the Internet Browser and consider using an alternative Browser such as;

• Mozilla Firefox An established Internet Browser DOWNLOAD LINK
• a more recent entry DOWNLOAD LINK [winning awards for hacker proofing]

A now common trick for Phishers, especially, in trying to download Malware or Spyware is a faked POP-UP window.  If a suspicious window appears DO NOT click on it but close it by pressing and holding the “Ctrl” key followed by the “W” key.  This key combination will close the active Window.   If you end up in a fireball of windows, keep using this combination until all the Pop-Up Windows plus the Internet Browser are closed.  If internet style Pop-Ups occur even with the Internet Browser Closed it is likely there is Malware on the computer and it needs to be scanned and cleaned.

In the follow-on article we will address using certain Internet Browser Settings for Mozilla Firefox and Google Chrome to improve Internet Surfing security.

Stealing Bank Loggin Information and Creating False Bank Statements!

Malware that uses computer vulnerabilities to steal website login data and screen captures is not new but cybercrooks are introducing a new wiggle.  Once they obtain this information from poorly protected computers not only do they withdraw money, they provide falsified Financial Statements to the victim so they are unaware of the crime until they visit an ATM or BANK.  Read the full story HERE , check for BROWSER Hijacks HERE, and check your protection status HERE.

Path to a Speedy Computer, Introduction

[ATTENTION: Excellent Series of Articles to learn how to avoid getting HACKED, but only consider removing Anti-Virus Software if you are the sole person responsible for the computer and its contents.]

After reading the book and Block the Hacker Series on Ezines you will know that the Limited User Account for XP is one of the strongest security measures you can implement for the computer.  And if you are a Windows Vista user you have this security automatically built in via the User Access Control feature.  This new series of blogs is going to explore and explain the possibility of running your computer without active Anti-Malware (Anti-Virus) security software on the computer!  The reason to consider this opportunity is regaining the speed and performance you expect from your computer.  To do this successfully requires understanding how Malware (Computer Viruses) is able to infect the computer, the computer practices to keep this from happening and some great tools to verify that you are not infected.  Making this leap requires building confidence in the security changes that will be discussed and seeing that week after week that the security software is no longer detecting Malware & Viruses.  This new posting category will be found under the title Brave of Heart.

The important parts to be covered will be;

• Making sure the proper security changes are implemented.
• Monitoring with the installed Anti-Malware Software that new infections are not occurring.
• Adjusting security until new infections no longer occur.
• Taking the leap and uninstalling the Anti-Malware (Anti-Virus) Software and seeing an immediate improvement in your computers speed!
  [A 3rd Party Firewall is not to be removed since this is necessary to protect from a direct Internet Attack.]
• Learning to use 3 key Microsoft Utilities and an on-line scan utility to double-check for Malware.
  [These Utilities allow you to do a quick check prior to accessing a sensitive web-site such as on-line banking.]
• Looking at installing a 2nd Hard-Drive and creating a backup image as a sure way to recover the computer.
  [Although not absolutely necessary doing this will bring an explosion of joy into your heart when the Hard-Drive does fail.]

These following topics will be covered in greater detail to protect against the ways that Malware can attempt accessing the computer:

1. Installed by the Computer User; if you download a program, install from a CD or other memory device a piece of infected software can end up compromising the computer.  We will look at verifying the safety of the source for the Program, determining its trust level and using a free on-line scan tool to do a security check before installation.
2. Via Emails; emails are a common way for viruses to spread.  The number one way recommended for increasing protection from this source is moving to using on-line web mail.  Even if using something like Microsoft Outlook more than likely you already have access to web mail.  Web mail protects you since the Web Mail Server will pre-scan all your email for Malware, most spam is immediately detected and no attached files are downloaded to your computer until you authorize it.  In a POP3 scenario an email application downloads emails to the computer where you can view them even while not connected to the internet.  The danger is even the action of viewing or opening these emails, since they are resident on the computer, gives Malware an opportunity to infect the computer.  This is not the case for web mail since it resides on the Web Mail Server and not your computer.  And if you use Web Mail and your hard-drive crashes all your email is safe!
3. Via Web Sites; visiting malicious websites is a common way for infections to occur.  It is important to use secure Internet browsers, adjust the browser settings to defeat drive-by infections, and use web-site warning services.  Different Internet browsers will be discussed.
4. P2P Sharing Programs; P2P sharing programs have a high security risk.  Sending and receiving files directly from other computers is an opportunity for disaster especially in a public shared environment.  In this scenario it is not recommended to remove Anti-Malware Software.   However, most Anti-Malware Software can turn off different features and you could leave the P2P scanning feature enabled and disable the other features of the Anti-Malware program.  Be aware that if a brand new virus is sent the security signature file will not catch it, the security software heuristics is the the only means to detect it and the best one has only a 70% detection rate.
5. Instant Messaging; this feature follows the same recommendation as Emails.  On-line instant messaging such as Google or Yahoo do not give direct access to the computer.  Here again, but keeping the transfer of information via the web computers and not directly to your computer means their security software is scanning and keeping you safe.  The web-server does the heavy lifting so your computer can run fast!
6. Direct Port Access;  The final way that Malware can gain access to the computer is a via direct attack from the Internet from another computer.  For this reason never disable the Firewall.  The performance impact of a 3rd Party Firewall is minimal compared to the resource drain of Anti-Malware software.  This is why once the Anti-Malware software is removed while leaving the 3rd Party Firewall software operational you will immediately notice a much improved performance of the computer.

Following this series will be worth the effort even if you never make the leap since you’ll gain a greater understanding of how to keep the computer secure.  Please share this with friends, family and associates.  In the next blog the Limited User Access feature of Window Based Computers will be discussed.