so when was the last time you were
connected to the Internet
hours minutes seconds ago how well do
you understand the risks related to
being online and when was the last time
you double-check your security settings
so today we’re going to take a look at
the new security reality and we’re gonna
start by looking at your online lives
then we’re gonna continue by looking at
cybercrime and we’re going to figure out
how we can protect one from the other
keep in mind this is not a discussion on
privacy so we’re not going to look at
how companies use the data that you give
to them instead we’re going to look at
how secure and how you can secure your
data from cyber criminals and your
ex-girlfriends ex-boyfriends so let’s
get started
once upon a time it was very easy to
protect every bit of information we
collected because we knew where it was
so we had an address book we had a
mailbox
we had a calendar we had a bank
statement drawer we also had a phone
that was tied to wire to a wall so we
knew where that was as well but as
technology evolved we started using the
high tech equivalent of that so we
started becoming more attached to it
that’s word a few years and you see that
every device that we have got a lot
shinier and a lot more powerful
additionally the internet got a lot of
faster and the applications and websites
that we were using became very smart
very addictive and very easy to use so
it’s only normal that we will start
using those as the main way to
communicate to exchange information to
store information to work to play and
study something else changed at the same
time so have you ever seen this or this
it’s a common sight at airports cafes
libraries all these people are connected
checking their email Facebook Twitter
Instagram they’re exchanging homework
via Dropbox you name it what is the one
thing that all these people have in
common it’s so obvious that it’s
sometimes easy to forget let me ask you
in a different way how does it Instagram
know that it’s you sitting at a cafe
trying to connect and upload photos so
the answer is simple
every single person in these photos is
connected to their online account using
a username and password I’ll accept this
guy he’s offline so what’s going on
think of your online accounts as a safe
it’s somewhere in the cloud you can’t
see it you don’t really know where it is
and that safe opens with the key that
key is the only thing that the safe
understands and respects so it doesn’t
care who you are the safe doesn’t know
who you are when it gets the right key
it opens so the person who has access to
the key to your online safe is the
person who can open that safe let’s move
to cybercrime for a second so cybercrime
is big business there’s a lot of threats
there’s a lot of targets and the
motivations can vary but all that can
wreak havoc and cost a lot so 3 trillion
dollars is the estimated annual cost in
growth and productivity that is lost
because of cybercrime if you feel that
you hear about cyber attacks every day
you’re right
cyber breaches happen every single day
too many companies and many companies
don’t realize that it’s happened until a
few months after the fact do you want to
see some live attacks so thousands of
machines every second are trying to
attack other machines they’re looking
for vulnerabilities to take advantage of
there is an interesting fact about all
this we heard about the three trillion
dollars we heard about the number of
attacks that are happening and how
frequently they happen so there’s a
statistic that I find very exciting and
interesting to consider so 81% of
attacks that happen are either because
of stolen weak or lost passwords so the
attackers don’t use expensive methods to
breach accounts because they don’t have
to why would you drill a hole through a
safe if you could just borrow the key
so this is the point where you start
asking yourselves well I’m not a CEO I
don’t have a company I have nothing to
hide I have nothing to lose why do I
care about this well this is the point
where you should care because the
attacks that are being used against
corporate credentials are exactly the
same attacks that are being used against
your credentials
it’s called phishing phishing is a
technique used to steal usernames
passwords and other sensitive
information
there are other variants so we have
spearfishing we have whaling we have
fishing but we’ll just use one term for
today so all the attackers need to do is
make you do one of three things click on
the wrong link open the wrong attachment
or visit the wrong site there is a lot
of phishing attacks every day 135
million emails are sent every single day
that are phishing attacks additionally
we have many more that are being sent
through social media and others through
messaging applications let’s look at
some real examples and when I say real I
mean really real these are actual emails
that I received in the past few weeks
and I thought I would use them as
examples I’m probably gonna make a few
friends angry because I’m checking my
spam folder before I respond to them but
I hope they’ll forgive me one day so
looking at this message it’s trying to
take advantage of your sense of urgency
of of your fear that you may get locked
out of your account it has a very bad
writing and it’s in its message so if
you read it carefully you’re not going
to see what you normally see from
outlook.com
and if you hover your mouse over the
link that it’s asking you to click
you’ll see a site that’s definitely not
outlook calm so you shouldn’t click on
that link you know one in 20 of these
phishing emails get opened and you may
wonder why you may think it’s it’s
obviously a false message why should I
open it why would somebody open it well
it happens because we’re in a hurry and
we’re not paying attention so
interesting statistics again 25% of
phishing emails are open in the first 10
minutes that they’re sent
49% of those emails are opened in the
first hour and almost half 42% of all
phishing emails that are sent are open
from a mobile device so again we’re in a
hurry and we’re not paying attention
let’s look at this so if you pay
attention to that address there’s a typo
in there now you see there’s an
attachment hopefully you haven’t clicked
on it so far and the message you’ll see
it’s trying to direct you so that you
can open that attachment so hovering
over those links doesn’t do anything
those actually are broken links and it’s
trying to frustrate you to move to the
attachment it actually gives you the
instructions to do so again so hopefully
at this point you would know not to
click on the attachment this email is
getting trickier because this one is
from an actual friend and directed to me
so it has her name a few times also has
my name trying to make me comfortable
with this message enough so that I would
click on the wrong link this is the bad
website that you should not go to and
trying to make me feel more comfortable
when I’m receiving this it says that
it’s been checked for viruses I can tell
you it was not so I’d call that fake
news so what happened with my friend a
few days later she sent out a message
she realized what happened and she sent
a message to all her friends saying that
you shouldn’t open that message has
anybody ever had to send that message
out don’t be shy I see you you must be
over there so you don’t want to be in
that situation where you have to send an
apology and asking people not to click
the last one we’re gonna see is an SMS
message so same technique used via email
it’s asking you to urgently deal with
your account it doesn’t explain which
account so you may get confused and
click that’s the bad website and that’s
where it takes you so at this point
you’re asking what can go wrong I
clicked on the wrong link so what well a
lot is happening underneath the surface
that you won’t see the average user will
not notice what happened they may see
that their browser crashed the email
application crashed they won’t think
more about it they’ll just
the computer and move on with their
lives but when you open that attachment
or when you click on that link there’s a
chance that some malicious software
could get installed
it’s called malware so when that malware
gets installed on your computer or your
phone the attacker has succeeded the
reason they’ve succeeded is because they
wanted that software on your machine
they could do a few things with it one
of them would be install a keystroke
logger so everything you type from then
on will be recorded usernames passwords
credit card numbers another thing that
could happen ransomware so ransomware is
is a piece of software that encrypts
your sensitive files against you so the
files are encrypted until you pay ransom
to get access to them again you don’t
want to do that next thing is Bitcoin
mining software so they may install
Bitcoin mining software the one that
you’ve heard in the news but they’re
using it on your machine and somebody
else is making money off of it and
finally you may become a zombie machine
a zombie machine you saw the attacks
earlier you saw those thousands of
machines trying to look for other
vulnerabilities and other machines so
zombie machines essentially are
launching pads for attackers instead of
there is I’m using their own machines
they’re using you for the attack and
there is another thing that’s bad about
the situation
so you’re becoming part of the problem
so when your device is infected it
starts sending messages to your friends
and your contacts and potentially
infecting them so the picture looks
pretty red and pretty bleak but we can
talk about what to do so there is hope
that’s the first thing you should know
and we’ll start with common sense so
situational awareness and when you’re
looking at your surroundings and making
sure you understand what’s going on we
should apply the same thinking
situational awareness online you don’t
want to be in red mode you don’t want to
be panicked everybody’s after me
everybody’s trying to get me and you
don’t want to be in green mode
la-la-land I don’t care I don’t know I
don’t understand you want to be in
yellow mode you’re relaxed
but on the other hand you’re also
cautious and suspicious for example you
don’t want to click on link if you don’t
know where it’s going if your bank is
asking you to urgently log in don’t open
that email just go directly to your bank
account and if you go there then there’s
a message for you waiting if it’s
legitimate but the other thing is you
shouldn’t open attachments unless you
know whom they’re from and why they sent
it to you the next best thing you can do
after common-sense is enable two-factor
authentication so two-factor
authentication requires a username and
password as usual but also something
that only the user would have on them
for example a phone so when somebody
tries to log in from anywhere in the
world a request will come to your phone
saying do you is this you trying to
connect from a new device and do you
approve this request so if you say yes
then there can be a login if you say no
you can it will be declined and you’ll
also notify that somebody’s trying to
get in 90% of Gmail users have not yet
enabled two-factor authentication if
you’re one of those 90% trying to move
away from that it’s free it’s cheap and
it’s gonna make a big difference so the
other thing you could do the there are
sites that don’t allow two factor
authentication yet so there is a
situation where you just have to have a
username and password in this case you
want to make sure you’re not reusing
your bank account or your email
passwords with other simpler sites such
as a newsletter website another thing
you want to consider is a password
manager and finally don’t use your pet’s
name everybody who has Instagram knows
your pet’s name everybody who’s on
Facebook probably knows your Facebook
your birthday and because it’s written
next update your devices if there is a
fix for the malware the malicious
software that’s trying to install itself
on your computer you want to have that
update so update your phone update your
tablet your computer update your
antivirus and you’ll be more secure the
question about Wi-Fi was probably on
your minds and you’ve probably asked
yourselves several times when your
a Wi-Fi network at a cafe so don’t join
a Wi-Fi network just because it’s free
if you don’t need to do much on your
computer just just you know use your
data plan from your phone tether from
your phone other things you can consider
a virtual private network so VPN service
is an extra layer of protection when
you’re connecting to not necessarily
secure networks the final thing you
should do and this could also be seen as
common sense but we need to remind you
to make sure that it’s something you
keep in mind as a special item would be
Plan B backup so make sure that you
identify what your sensitive information
is and you make an offline copy of it so
if everything else goes wrong if you
lose your phone if you lose your
computer somebody breaks into your
online accountant and wreaks havoc in
there at least you have a backup well
this is a lot of information and and we
can’t say that there is anything as
absolute security so all these create a
very high barrier to the most basic
attacks and you should be in a much
better shape than you were before doing
these by protecting your online accounts
you also take responsibility for
protecting your friends and your
connections which is a great thing
for them and for you now if you found
all of this overwhelming remember that
passwords are like underwear change them
often don’t share them with anybody and keep them private thank you
connected to the Internet
hours minutes seconds ago how well do
you understand the risks related to
being online and when was the last time
you double-check your security settings
so today we’re going to take a look at
the new security reality and we’re gonna
start by looking at your online lives
then we’re gonna continue by looking at
cybercrime and we’re going to figure out
how we can protect one from the other
keep in mind this is not a discussion on
privacy so we’re not going to look at
how companies use the data that you give
to them instead we’re going to look at
how secure and how you can secure your
data from cyber criminals and your
ex-girlfriends ex-boyfriends so let’s
get started
once upon a time it was very easy to
protect every bit of information we
collected because we knew where it was
so we had an address book we had a
mailbox
we had a calendar we had a bank
statement drawer we also had a phone
that was tied to wire to a wall so we
knew where that was as well but as
technology evolved we started using the
high tech equivalent of that so we
started becoming more attached to it
that’s word a few years and you see that
every device that we have got a lot
shinier and a lot more powerful
additionally the internet got a lot of
faster and the applications and websites
that we were using became very smart
very addictive and very easy to use so
it’s only normal that we will start
using those as the main way to
communicate to exchange information to
store information to work to play and
study something else changed at the same
time so have you ever seen this or this
it’s a common sight at airports cafes
libraries all these people are connected
checking their email Facebook Twitter
Instagram they’re exchanging homework
via Dropbox you name it what is the one
thing that all these people have in
common it’s so obvious that it’s
sometimes easy to forget let me ask you
in a different way how does it Instagram
know that it’s you sitting at a cafe
trying to connect and upload photos so
the answer is simple
every single person in these photos is
connected to their online account using
a username and password I’ll accept this
guy he’s offline so what’s going on
think of your online accounts as a safe
it’s somewhere in the cloud you can’t
see it you don’t really know where it is
and that safe opens with the key that
key is the only thing that the safe
understands and respects so it doesn’t
care who you are the safe doesn’t know
who you are when it gets the right key
it opens so the person who has access to
the key to your online safe is the
person who can open that safe let’s move
to cybercrime for a second so cybercrime
is big business there’s a lot of threats
there’s a lot of targets and the
motivations can vary but all that can
wreak havoc and cost a lot so 3 trillion
dollars is the estimated annual cost in
growth and productivity that is lost
because of cybercrime if you feel that
you hear about cyber attacks every day
you’re right
cyber breaches happen every single day
too many companies and many companies
don’t realize that it’s happened until a
few months after the fact do you want to
see some live attacks so thousands of
machines every second are trying to
attack other machines they’re looking
for vulnerabilities to take advantage of
there is an interesting fact about all
this we heard about the three trillion
dollars we heard about the number of
attacks that are happening and how
frequently they happen so there’s a
statistic that I find very exciting and
interesting to consider so 81% of
attacks that happen are either because
of stolen weak or lost passwords so the
attackers don’t use expensive methods to
breach accounts because they don’t have
to why would you drill a hole through a
safe if you could just borrow the key
so this is the point where you start
asking yourselves well I’m not a CEO I
don’t have a company I have nothing to
hide I have nothing to lose why do I
care about this well this is the point
where you should care because the
attacks that are being used against
corporate credentials are exactly the
same attacks that are being used against
your credentials
it’s called phishing phishing is a
technique used to steal usernames
passwords and other sensitive
information
there are other variants so we have
spearfishing we have whaling we have
fishing but we’ll just use one term for
today so all the attackers need to do is
make you do one of three things click on
the wrong link open the wrong attachment
or visit the wrong site there is a lot
of phishing attacks every day 135
million emails are sent every single day
that are phishing attacks additionally
we have many more that are being sent
through social media and others through
messaging applications let’s look at
some real examples and when I say real I
mean really real these are actual emails
that I received in the past few weeks
and I thought I would use them as
examples I’m probably gonna make a few
friends angry because I’m checking my
spam folder before I respond to them but
I hope they’ll forgive me one day so
looking at this message it’s trying to
take advantage of your sense of urgency
of of your fear that you may get locked
out of your account it has a very bad
writing and it’s in its message so if
you read it carefully you’re not going
to see what you normally see from
outlook.com
and if you hover your mouse over the
link that it’s asking you to click
you’ll see a site that’s definitely not
outlook calm so you shouldn’t click on
that link you know one in 20 of these
phishing emails get opened and you may
wonder why you may think it’s it’s
obviously a false message why should I
open it why would somebody open it well
it happens because we’re in a hurry and
we’re not paying attention so
interesting statistics again 25% of
phishing emails are open in the first 10
minutes that they’re sent
49% of those emails are opened in the
first hour and almost half 42% of all
phishing emails that are sent are open
from a mobile device so again we’re in a
hurry and we’re not paying attention
let’s look at this so if you pay
attention to that address there’s a typo
in there now you see there’s an
attachment hopefully you haven’t clicked
on it so far and the message you’ll see
it’s trying to direct you so that you
can open that attachment so hovering
over those links doesn’t do anything
those actually are broken links and it’s
trying to frustrate you to move to the
attachment it actually gives you the
instructions to do so again so hopefully
at this point you would know not to
click on the attachment this email is
getting trickier because this one is
from an actual friend and directed to me
so it has her name a few times also has
my name trying to make me comfortable
with this message enough so that I would
click on the wrong link this is the bad
website that you should not go to and
trying to make me feel more comfortable
when I’m receiving this it says that
it’s been checked for viruses I can tell
you it was not so I’d call that fake
news so what happened with my friend a
few days later she sent out a message
she realized what happened and she sent
a message to all her friends saying that
you shouldn’t open that message has
anybody ever had to send that message
out don’t be shy I see you you must be
over there so you don’t want to be in
that situation where you have to send an
apology and asking people not to click
the last one we’re gonna see is an SMS
message so same technique used via email
it’s asking you to urgently deal with
your account it doesn’t explain which
account so you may get confused and
click that’s the bad website and that’s
where it takes you so at this point
you’re asking what can go wrong I
clicked on the wrong link so what well a
lot is happening underneath the surface
that you won’t see the average user will
not notice what happened they may see
that their browser crashed the email
application crashed they won’t think
more about it they’ll just
the computer and move on with their
lives but when you open that attachment
or when you click on that link there’s a
chance that some malicious software
could get installed
it’s called malware so when that malware
gets installed on your computer or your
phone the attacker has succeeded the
reason they’ve succeeded is because they
wanted that software on your machine
they could do a few things with it one
of them would be install a keystroke
logger so everything you type from then
on will be recorded usernames passwords
credit card numbers another thing that
could happen ransomware so ransomware is
is a piece of software that encrypts
your sensitive files against you so the
files are encrypted until you pay ransom
to get access to them again you don’t
want to do that next thing is Bitcoin
mining software so they may install
Bitcoin mining software the one that
you’ve heard in the news but they’re
using it on your machine and somebody
else is making money off of it and
finally you may become a zombie machine
a zombie machine you saw the attacks
earlier you saw those thousands of
machines trying to look for other
vulnerabilities and other machines so
zombie machines essentially are
launching pads for attackers instead of
there is I’m using their own machines
they’re using you for the attack and
there is another thing that’s bad about
the situation
so you’re becoming part of the problem
so when your device is infected it
starts sending messages to your friends
and your contacts and potentially
infecting them so the picture looks
pretty red and pretty bleak but we can
talk about what to do so there is hope
that’s the first thing you should know
and we’ll start with common sense so
situational awareness and when you’re
looking at your surroundings and making
sure you understand what’s going on we
should apply the same thinking
situational awareness online you don’t
want to be in red mode you don’t want to
be panicked everybody’s after me
everybody’s trying to get me and you
don’t want to be in green mode
la-la-land I don’t care I don’t know I
don’t understand you want to be in
yellow mode you’re relaxed
but on the other hand you’re also
cautious and suspicious for example you
don’t want to click on link if you don’t
know where it’s going if your bank is
asking you to urgently log in don’t open
that email just go directly to your bank
account and if you go there then there’s
a message for you waiting if it’s
legitimate but the other thing is you
shouldn’t open attachments unless you
know whom they’re from and why they sent
it to you the next best thing you can do
after common-sense is enable two-factor
authentication so two-factor
authentication requires a username and
password as usual but also something
that only the user would have on them
for example a phone so when somebody
tries to log in from anywhere in the
world a request will come to your phone
saying do you is this you trying to
connect from a new device and do you
approve this request so if you say yes
then there can be a login if you say no
you can it will be declined and you’ll
also notify that somebody’s trying to
get in 90% of Gmail users have not yet
enabled two-factor authentication if
you’re one of those 90% trying to move
away from that it’s free it’s cheap and
it’s gonna make a big difference so the
other thing you could do the there are
sites that don’t allow two factor
authentication yet so there is a
situation where you just have to have a
username and password in this case you
want to make sure you’re not reusing
your bank account or your email
passwords with other simpler sites such
as a newsletter website another thing
you want to consider is a password
manager and finally don’t use your pet’s
name everybody who has Instagram knows
your pet’s name everybody who’s on
Facebook probably knows your Facebook
your birthday and because it’s written
next update your devices if there is a
fix for the malware the malicious
software that’s trying to install itself
on your computer you want to have that
update so update your phone update your
tablet your computer update your
antivirus and you’ll be more secure the
question about Wi-Fi was probably on
your minds and you’ve probably asked
yourselves several times when your
a Wi-Fi network at a cafe so don’t join
a Wi-Fi network just because it’s free
if you don’t need to do much on your
computer just just you know use your
data plan from your phone tether from
your phone other things you can consider
a virtual private network so VPN service
is an extra layer of protection when
you’re connecting to not necessarily
secure networks the final thing you
should do and this could also be seen as
common sense but we need to remind you
to make sure that it’s something you
keep in mind as a special item would be
Plan B backup so make sure that you
identify what your sensitive information
is and you make an offline copy of it so
if everything else goes wrong if you
lose your phone if you lose your
computer somebody breaks into your
online accountant and wreaks havoc in
there at least you have a backup well
this is a lot of information and and we
can’t say that there is anything as
absolute security so all these create a
very high barrier to the most basic
attacks and you should be in a much
better shape than you were before doing
these by protecting your online accounts
you also take responsibility for
protecting your friends and your
connections which is a great thing
for them and for you now if you found
all of this overwhelming remember that
passwords are like underwear change them
often don’t share them with anybody and keep them private thank you
Please follow and like us: