Security - CIOInsight
Home arrow Security arrow Cyber Crime Trends: Our Seven Deadly Weaknesses

Security Slideshow:
Cyber Crime Trends: Our Seven Deadly Weaknesses

By Jennifer Lawinski on 2011-02-01


Successful cyber crime often depends on the kindness of others – those good souls who believe that the Facebook message , LinkedIn request or Tweet they received is from someone they actually know and therefore trust. As a CIO, it's imperative that you know your employees’ weak spots, particularly when it comes to cyber crime perpetrated via social networking platforms. In its 2010 Annual Security Report, Cisco reveals the seven deadly human weaknesses that make your employees vulnerable to malicious attack. Chances are, your technology users are inherently good people, so their suspicions aren’t likely to be aroused when cyber criminals strike through social media venues populated with friends and acquaintances. This is especially the case when messages involve someone asking for help. “Compassion and urgency are common social engineering hooks for criminals," says Christopher Burgess, senior security advisor to Cisco. "The individual seeking information will attempt to trigger the target’s basic human need to be helpful. The individual will also infuse a sense of urgency in their quest for information or specific action, with the expectation that you won’t have sufficient time to verify their credentials.” Here we take a look at the seven human traits cyber criminals most frequently seek to exploit, and what you can do about them.

LATEST STORIES

BLOGS
 
  • of
Sex AppealScammers will lure unsuspecting victims by masquerading as an attractive man or woman on a social network.

What you can do:Tell employees to assume that flirtatious advances are anything but well intentioned.

GreedFree iPads? Thousands of dollars from a Nigerian wire transfer? If something sounds too good to be true, it usually is.

What you can do:Teach your employees not to fall for scams promising a quick buck, no matter how tempting or legitimate they may sound.

VanitySometimes scammers appeal to one's desire to be part of the in-crowd – telling the victim they are a contest winner or otherwise part of a “select group.”

What you can do:Tell your employees that, while they’re special to you, they’re not winning contests they didn’t enter.

Trust Scammers may pretend to represent a high-profile brand. One recent spammer sent out fake iTunes receipts. Others may pretend to be friends of friends, exploiting employees’ trust in their social networks.

What you can do:Tell your employees to be wary of any solicitation that plays on their trust.

SlothCyber criminals count on laziness, i.e. that your employee will click on a link when an email says it's from a well-known bank without checking it out first. The bad guys will likewise exploit contacts on Facebook or LinkedIn, duping users into clicking on things their contacts wouldn’t likely send.

What you can do:Encourage employees to have a healthy skepticism and think twice before clicking on links, even when they appear to be messages from otherwise trusted sources.

CompassionOne 2009 Facebook scam involved fake status updates asking for money to help a stranded friend. Other scams ask for money for nonexistent nonprofits when disaster strikes.

What you can do:Alert your employees to these kinds of scams, and advise them on where to find information about legitimate charities if they're feeling altruistic.

UrgencyScams that ask employees to “act now” or say that “time is running out” play on the desire to be helpful. Demanding fast action prevents a victim from taking time to consider whether a request is reasonable or credible.

What you can do:Advise employees to double-check any requests for information with colleagues and resist pressure to respond to anything “right away.”

  • More slideshows

FEATURED SPONSORED VIDEOS

FEATURED SPONSORED ARTICLES

Erasable E-Paper Saves Trees, Cuts Costs

Why Smart Companies Should Adopt the Lessons of Gaming

Interest in Mobile WiFi Hotspots Fuels New Solutions

A Closer Look at Public Cloud Security

View More Articles

  Brought to You By
Click Here



 

Advertisement

Sponsored Links
  • Try Windows Azure free for 90 days

  • Introducing the world's first family of systems with integrated expertise

  • FREE Securing Smartphones & Tablets for Dummies Book from Sophos
  • 77% of the Fortune 500 Manage Content Securely with Box.
  • Leverage your virtual computing environment with Dell.
  • Build an IT Infrastructure That Delivers the Future
  • 5 New Technologies That Will Change Enterprise ITAdvertisement
  • eWEEK Quick LInks

     
    Close this advertisement