Archive for July, 2010

Top tips for avoiding drive-by cyber attacks

As promised, we have compiled some top tips on how to avoid ‘drive-by’ attacks.

- Ensure you install the latest security updates for your browser. There’s no point taking a risk – make sure you have the newest version to protect you as much as possible

- Become familiar with what the security software on your machine does should it hit a virus – the messages it displays. Drive-by attacks can be very sophisticated and can even appear to be your security software kicking in to protect you

- Be wary of any program that launches during a web visit. Ask yourself where it has come from and verify its origin. If you are concerned, then search against the file name. Often with drive-bys, the file name will have been automatically generated – meaning you’ll need to check on the URL of the source site

- This is also true if you aren’t sure of the origin of a link you have been sent. Quite simply, don’t risk clicking on it. Just because it has come from a friend doesn’t make it safe – they may not be aware that they have passed it on to you

The key things to remember are that you always know exactly what it is that you are requesting, agreeing to or the authenticity of the site you are visiting.

Tags: , ,

Cyber Threats: Drive-by attacks in the press

In our second post of the week on drive-by attacks, the team at Internet Explorer HQ wanted to showcase some examples that have hit the headlines.

Most recently our colleagues at Microsoft issued an advisory on a new drive-by attack that exploits vulnerability in Windows Shell. Microsoft is currently working to develop a security update for Windows to address this vulnerability.

Another example of a drive-by attack is affecting JavaWS and according to an article by Search Target, when a visitor on a lyric website attempted to view lyrics by music stars including Miley Cyrus an attack code scans the victim’s machine in an attempt to find and exploit the error.

Tune in this Friday for our final post of the week when we offer our top tips to avoid leaving your machine vulnerable to a drive-by attack.

Tags: , ,

Cyber Threats: Drive-by attacks

There are a variety of drive-by attack examples but the two most common ways people fall victim to an attack are when the user indirectly authorises a download without understanding the consequence, for example they believe they are downloading an ActiveX update when they are in fact downloading a virus. This can happen when visiting an unofficial website usually via a spam email. If a user is ever concerned by a link they have been sent they should never click on it, our advice is to use a search engine and type in the website name – not the entire link.

The second is through download of spyware, a computer virus or any kind of malware that happens without knowledge of the user. This can happen by checking out a website or email or by clicking on a deceptive popup window. Again the team at Internet Explorer would advise you don’t open any emails or links you are unfamiliar with. If you ever doubt the authenticity of a website link then please go to it via a search engine such as www.bing.com

Tags: , , , ,

Cyber Threats: Phishing Top Tips

In our final post of the week the Internet Explorer team have compiled a list of top tips to help you against the threat of phishing scams.

1.  Make sure you have the latest Internet Explorer installed on your machine with SmartScreen filters turned on http://www.microsoft.com/uk/windows/internet-explorer/browse-with-confidence.aspx?WT.mc_id=Search&WT.srch=1

2.  Recognise a phishing email. Emails sent to you may look authentic but simply techniques such as ‘typo-squatting’ usually give websites away. For example rather than “www.microsoft.com” it might be typed “www.micosoft.com”, “www.mircosoft.com” or “www.verify-microsoft.com”. For more information visit http://www.microsoft.com/protect/fraud/phishing/symptoms.aspx

3.  Be suspicious of any email with urgent requests for personal financial information

4.  Avoid filling out forms in email messages that ask for personal financial information. You should only communicate information such as credit card numbers or account information via a secure website or the telephone

5.  Install up-to-date antivirus and antispyware software. Some phishing e-mail contains malicious or unwanted software that can track your activities or simply slow your computer. Try new antivirus and comprehensive computer health services like Windows Live OneCare. To help prevent spyware or other unwanted software, download Windows Defender

6.  Check website addresses! When reading your emails, hover your cursor over the links in the email, whilst the cursor is over the link, look at the status bar at bottom of the screen which will show the correct URL for the link.        

7.  Always ensure that you’re using a secure website when submitting credit card or other sensitive information via your Web browser

8.  Don’t use the same username and password details for multiple accounts – once the data snatcher has access to one account, it will be easy for them to access all the others.

Tags: , , , ,

Cyber Threats: Phishing in the press

In our second post of the week we wanted to showcase some of the recent phishing scams that have been covered in the press.

The most recent phishing scam was on social network site Facebook, where people were invited to watch a video that billed itself as revealing the ‘horrors’ of Coca-Cola. The video in fact linked to a site where people were asked to submit their personal details

 

Another phishing scam that has been grabbing the headlines and our attention at Internet Explorer HQ is the fake PDF Reader.

The main aim of the scam is to get the users credit card details by offering them the chance to apply for a non-existent update and free gift.

 

 

This Friday we will be offering our top tips on avoiding the perils of phishing scams.

Tags: , , , , , , , ,

Cyber Threats: Phishing

Last week we spoke about the malware virus and this week, continuing our series discussing cyber threats, we’re talking about phishing. Not to be confused with the world of fishing rods, phishing is usually carried out across email or instant messenger where people are directed to a fake website and asked to enter their personal details.


The malicious software often tricks users into going to familiar websites such as banking and auctions sites that are in fact fake. One way you can protect yourself against phishing is by installing Internet Explorer 8 and making sure your SmartScreen filter is turned on

In our Wednesday post we will showcase some examples of phishing in the press and round up our week with some helpful tips on how to protect your PC against this virus.

Tags: , , ,

Cyber threats: Protecting yourself against malware

This week the team at Internet Explorer HQ have been discussing the computer virus malware. We’ve given a description of the virus and highlighted some of the various examples of it. In our final post of the week we’d like to offer some top tips on avoiding malware.

1. Install Internet Explorer 8! An obvious one but since its launch in March 2009 IE8 has stopped over 560 million attempts to download malware

2. Make sure Internet Explorer’s SmartScreen Filter is turned-on

3. Keep your computer’s software up-to-date. Turn on automatic updating with Microsoft Update. Your operating system and your software programs must be updated regularly.

4. Always use antivirus and antispyware software from trusted sources and keep the software up-to-date. If you use Windows 7, Windows Vista, or Windows XP, you can download Microsoft Security Essentials, which offers award-winning, free, anti-virus protection for your home PC .

5. If you use Windows 7, Windows Vista, or Windows Server 2008, make sure User Account Control (UAC) is active so that it always notifies you of changes to your computer. Carefully review each message that you receive from UAC before you allow changes to your computer.

6. Don’t click links on suspicious websites or in email messages. Type addresses directly into your browser or use bookmarks. Find out more about how to identify suspicious links here

7. Don’t trust sender information in IMs, email messages, or messages on social networking websites. More tips on safety and social networking here

8. Be careful what you download from the Internet. Files that end in extensions .EXE or .SCR often hide malware. However, even files with familiar extensions such as .PDF can be dangerous.

9. Before you install something, consider the risks and benefits of installing it, and be aware of the fine print. For example, make sure the license agreement does not conceal a warning that you are about to install software with unwanted behaviour.

10. Only download programs and updates from reputable sources. If you use Windows or Microsoft Office, always go to Microsoft Update. For other software, always use the legitimate websites of the company or person who produces the software.

Go to http://www.microsoft.com/protect/ to get more tips on how to stay safe online

Tags: , , , , , ,

Cyber threats: The effects of malware

This week we’re looking at some examples of Malware attacks. The virus is one of the most widespread computer viruses and worryingly June saw a surge in attacks. A recent article in IT Pro also highlighted two new pieces of malware targeting UK bank customers.

This new malware virus works by creating a fake bank login page and then takes your details once you’ve entered them and then uses those credentials to perform an “authorised” monetary transfer.

Internet Explorer 8 continues to be the best defence against malware. As we said in our previous post, since its creation IE8 has stopped in excess of 560 million attempted downloads. If you haven’t already, click here to download the latest version of Internet Explorer. If you’re worried about the malware virus make sure you log on this Friday when we will be sharing our advice on how best to protect your PC against it.

Tags: , , , , , , ,

Cyber threats

Over the coming weeks we’re going to be dissecting some of the most common cyber threats out there and offering advice on how best to protect your PC against them. This week we’re going to talk about the most common threat to your PC: Malware. Since its launch in March 2009 Internet Explorer 8 has stopped over 560 million attempts to download malware.

So exactly what is Malware I hear you ask? Short for malicious software, it is a software designed to infiltrate a computer system without the owner’s knowledge or permission. The expression is a general term used by computer professionals to mean a variety of forms of hostile or annoying software or program code.

Software is considered to be malware based on the perceived intent of the creator rather than any particular features. Malware includes computer viruses, worms, trojan horses, spyware, dishonest adware, crimeware, most rootkits, and other malicious and unwanted software.

But how does Internet Explorer 8 block malware? By using its SmartScreen technology IE8 focuses on identifying and blocking sites on the web that are distributing malicious software.  SmartScreen can block new threats from existing malicious sites, even if those threats are not yet blocked by traditional anti-virus or anti-malware signatures

In our posts this week we will be highlighting the effects of malware and how you can protect your PC against it.

Tags: , , , , ,

The best of Bing

Here, at Internet Explorer HQ, we’re always looking at new ways to improve your Internet experience. Today we’d like to show some of the great add-ons we’ve developed with our friends over at Bing to give you a better Internet experience.

The Bing Bar
The Bing Bar integrates a set of tools into your browser that do nearly all the work for you: alert you to breaking news, fill out forms automatically and help you stay safe online with the integration of Safety Center. http://www.discoverbing.com/toolbar/

 

Find on Bing Twitter
If like us you have a Twitter account then this add-on will be of great use. When searching the web you may want to see what is trending on Twitter or if anyone is discussing your subject. Simply highlight the text, right click and select Find on Bing Twitter and the add-on will do the rest . http://www.ieaddons.com/gb/details/searchhelpers/Find_on_Bing_Twitter/  

 

Bing Translator
Is your French not what it once was? If like us you often get your Spanish and Italian mixed up then the Bing Translator is the add-on for you. The free online language translation service for text and web pages can easily translate any text on any page. Simply highlight the text you want translated, right click and select Bing Translator. http://www.ieaddons.com/gb/details/5458/Bing_Translator/

Tags: , , , , ,