A fraud is an intentional act on deceiving another person for personal gain example like cash, valuable item, bank card without the victim feeling suspicious through the whole crime. Same goes with Online Fraud, except it is using computer program with internet access to defraud a victim over the internet.
Through online fraud, the hacker is capable to obtain from victim:
- Credit Card detail
- Doing illegal transaction on the internet
- Purchasing item from the internet
- Social Networking (Facebook, Twitter, etc)
- Causing identify thief
- Misusing account to post comments, photos
- Posing links website containing viruses to get other victim.
News Regarding Online Fraud
This is a 2011 news Tell how easy is Online Fraud to be done through internet.
Hackers have many ways to defraud you, I will list a few common ways they have used.
A Browser Toolbar from Unknown Vendor
- A common interface that have many shortcuts to help users to do certain task faster or quicker access to certain action.
- Hacker have also create toolbar where they also added malicious computer program(Trojan Horse or Spyware) that can connect the victim to the hacker through the internet.
- Normally this toolbar is being repackage together with a software by fake 3rd-party software provider
- The toolbar is being installed together with the software.
- Hacker could use malicious program like spyware to save every action that victim have done on the browser into a file and forward it to the hacker.
- Worst thing could happen if the victim is accessing internet banking website, and thinking that his/her credential is protected.
- The Spyware could save the victim username and password for the internet banking account and the token number that are required to be key.
- Internet banking token change every 1 minute. Therefore, if hacker is able to get hold of the credential and token number fast enough, hacker can gain access to the victim internet banking.
An Image, Website URL or Archive File Attached to an E-mail Message
- The most common ways the to spread those viruses, is using Spamming of email to multiple users.
- Spammer uses a trick by putting the subject of the mail to something that does not look suspicious or in weird languages
- With this as a subject of the mail, the email-filter will not be able to determine whether is this mail a spam.
- The moment when victim click on the URL link to the website, or download the file from the email, the program in the file or website will be activated and install malicious program into the victim computer without him/her knowing it.
- Hacker able to use malicious program to resent the spam mail to other recipient from the victim contact list.
 |
| Source from www.howstuffworks.com |
Multimedia Codec Required to Play a Certain Video Clip
- The video clip in the web act as a bait to trick victim to install their version of media codec in order to play the video clip that are posted in the web.
- In this case, the media codec act as a cover for the malicious program.
- When installing, the interface will show that it's install media codec BUT it is installing malicious program to connect victim to the hacker through the internet.
- Hacker from the internet will be able to achieve what he want from the victim
Software Shared on Peer-to-Peer(P2P) networks (Torrent)
- Peer-to-peer file sharing is commonly known as BitTorrent.
- BitTorrent is used for distributing large amount of data file over the internet.
- In the early develop of BitTorrent, it is used to share file between 2 users through the internet over a long distance.
- But now, BitTorrent software are free, therefore it became popular for people around the World to get Free software that have been modified to be the paid version or digital media like, music, movies and pictures.
- A single copy of a software can be in hundred or thousand of torrent site, which that the chance of file being modified is very High
- But users seldom get suspicious of the file they are downloading as long that they get a copy of the software, or file they want.
- When the victim install the software or opening the media file, malicious program might be install on the victim computer without him/her knowing it.
A Free Online Virus Scanning Service
- This method is use on fake advertisement that tell people that their computer is "Potentially Unprotected" or "6 VIRUSES FOUND click here to do a deep scan"
- This is use to trick people in doing the deep scan on their computer hard disk drive with the user consent.
- Doing the deep scan is a fraud but the actual purpose is to scan victim computer for the file hacker want to find example like credit card detail, password file, etc.
- When the file is found, the scan will tell victim that "VIRUS FOUND" and telling victim that the file is recovering/remove BUT the file is being forward to the hacker over the internet.
- In the first place, there is no Virus at all, this is a online fraud.
Illegitimate(Fake) Website
 |
| A Fake Paypal Site Look so Real |
- This is using a concept of fishing, waiting for fish to get on the bait.
- This type of website is known as Phishing site
- The site is made so real for users to believe it is the original site and somehow the design of the site have been change.
- This is just PART of the online fraud
- A worst case that could happen is a hacker do an Online attack to the computer or through malicious program to do some changes to the computer, in technical term is known as DNS Poisoning.
- So when user enter the URL like www.paypal.com, it will be redirect to the Phishing site that hacker created.
How to Prevent Online Fraud?
- Do Not download Software from unknown 3rd-party site (download from trusted 3rd-party software provider like CNET)
- When installing software, if their is a option to choose whether to install extra application like toolbar, anti-virus, browser, etc. Uncheck the box and Do not install extra application.
- When receive email from unknown sender, DELETE the mail. But if the spam mail is forward by person you know, Inform that person and stop the spamming of mail.
- Do not install media codec that are provided on the website, use popular and safe media codec like VLC Player is good enough.
- Purchase original copy of the software or media file rather than taking risk downloading from torrent
- Do not TRUST advertisement on the internet.
- Use Adblock to prevent seeing any advertisement when surfing the internet.
- Using Google DNS, Below is a video to teach you how to change
References:
No comments:
Post a Comment