Other Cyber Security Threats
How can we avoid threats coming from social engineering, short links, QR codes or SMS scams?
Table of Contents
Social Engineering
Social engineering is the use of deception to manipulate individuals into divulging confidential or personal information that may be used for fraudulent purposes
Example: Fraud calls from Bank, Police, other govt. entities, etc.
Tips
-
Ask for proof of identity - find out who you are talking to and what they know about you
-
Never disclose your personal information - username, password, credit card or any other payment details, etc.
-
Trust your Instinct – It is designed to make you feel awkward
-
Do your due diligence, and ask yourself why you would do that
Shortened links
By using URL shortener (Bit.ly, Tiny URL, etc.) we can reduce our links of 300 characters to the 15 characters. It is extremely common and helpful, but... Abused by criminals to hide malicious websites, so before clicking the link make sure that you received link from a valid source or use link expander
QR Code
Anyone can create a QR code by using several free online tools. This makes QR codes easy for businesses to use but it is also easy for scammers to take advantage of them.
QR code scams take advantage of the fact that the human eye cannot “read” a QR code — so we need to trust that the code is taking us to the right URL or doing what it is supposed to do.
What Happens If You Scan a Fake QR Code?
-
You could be taken to a “phishing website.”
-
Your device could be infected by malware
-
The QR code could send an email from your account.
Latest QR Code Scams
-
QR code scams on parking meters and other contactless payments
-
Fake QR codes sent in phishing emails (failed payments, credential phishing, etc.)
-
Tampered QR codes in restaurants
-
Fake QR codes sent through the mail (surveys, sweepstakes, etc.)
-
QR codes at COVID-19 testing centers
-
QR codes sent over social media (hacked accounts)
-
Cryptocurrency QR code scams
-
Fake QR code scanner apps that download malware
-
QR codes on unexpected package deliveries
-
Protect Yourself from Fake QR Codes
Look for signs of tampering
Scammers will often replace legitimate QR codes with their own fraudulent ones. Check to see if the code is on a sticker above another one, or if there are signs it has been tampered with.
Preview the URL before following the QR code
Your phone will tell you the destination to which a QR code is trying to send you. Check the URL to see if it seems safe (or ask a member of the staff if you are in a restaurant). If the URL is shortened and unreadable, you should be extra cautious.
SMS Scam
Check before you act
-
Name
-
Sender Details
-
Expected Text
-
Received a text regarding a package before
-
Recognized domain
Going Further
Please check our other Security related articles: Email Security, Password Best Practices & Cyber Security Best Practices.
A Digital University Session related to Security is also available as a recording: Security Best Practices.