top of page
Security practices & tools:
Let’s give your digital life what it needs to be secured.
Security Tips for common users:
1. Desktop Security:
Why do you need to secure your Desktop?
A personal computer used without proper security measure could lead to exploiting the system for illegal activities using the resources of such insecured computers. These exploiters could be Virus, Trojans, Keyloggers and sometimes real hackers. This may result in data theft, data loss, personal information disclosure, stealing of credentials like passwords etc. So, protect and secure your Personal Computer before it is compromised.
-
Always install Licensed Software so that you have regular updates of your Operating system and Applications. In case of open source software, make sure to update frequently.
-
Read the “Terms and Conditions” / “License Agreement” provided by vendor/software before installation.
-
Properly shutdown and switch off your personal computer after the use along with your external devices like Monitor, Modem, Speakers etc.
2. Data Security:
-
Enable Auto-updates of your Operating System and update it regularly.
-
Download Anti-Virus Software from a Trusted Website and Install. Make sure it automatically gets updated with latest virus signatures.
-
Download Anti-Spyware Software from a Trusted Website and Install. Make sure it automatically updates with latest definitions.
-
Use “Encryption” to secure your valuable Information. Note: For encryption password is required, always remember the password used while encrypting it, else data would not be available thereafter.
-
Strong password should be used for “Admin” Account on computer and for other important applications like E-mail client, Financial Applications (accounting etc).
-
Backup : Periodically backup your computer data on CD / DVD or USB drive etc.. in case it may get corrupted due to Hard Disk failures or when reinstalling/format ting the system. Browser Security: q Always update your Web Browser with latest patches.
-
Use privacy or security settings which are inbuilt in the browser.
-
Also use content filtering software. q Always have Safe Search “ON” in Search Engine. q Always use Anti-Spyware Software to scan the emails for Spam.
-
Always scan the e-Mail attachments with latest updated Anti-Virus and Anti-Spy ware before opening.
-
Always remember to empty the Spam folder.
-
Startup programs should be monitored / controlled for optimal system performance.
-
Recovery Disk: Always keep recovery disk supplied by Manufacturer / Vendor of the Computer System to recover the Operating System in the event of boot failures due to system changes such as uncerificated Drivers/unknown Software publisher.
3. Phishing Attacks:
How does phishing work?
Phishing starts with a fraudulent email or other communication that is designed to lure a victim. The message is made to look as though it comes from a trusted sender. If it fools the victim, he or she is coaxed into providing confidential information, often on a scam website. Sometimes malware is also downloaded onto the target’s computer.
Phishing is typically carried out by e-mail spoofing or instant messaging and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Phishing is an example of social engineering techniques used to deceive users.
How does a phishing e-mail message look like? In detail...​
How to detect Phishing Scams?
1. Name of sender can trick you!
Email addresses and domain names can be easily spoofed. It is, therefore, crucial that you check the domain name for spelling alterations on suspicious emails. Even if they appear to have come from a trusted sender, always double check.
2. Check for typos..
Attackers are often less concerned about being grammatically correct. Which means that typos and spelling errors are often evident in messages. Such errors in an email could be a good indication that the message is not genuine.
3. Don’t share sensitive information hastily.
Any email that asks for sensitive information about you or your company is suspicious. For instance, no bank will ever ask for personal information over an email. Directly call your bank to ascertain if an email is genuine or not.
4. Don’t fall for URGENCY!
Phishing attacks use scare tactics such as urgency and authority to trick victims into taking immediate action. Emails that ask to share personal information or to make cash transactions are… ‘phishy’.
5. Hover but don’t click.
Hover over URLs. If the alt text does not match the display text, or if it seems strange, DO NOT click on it.
6. Attachments can be dangerous!
Hover over attachments to check for an actual link, before you click on it or download it. But, if you are still unsure of the sender, do not click on the link.
7. Fake Rewards.
If it sounds too good to be true, chances are it is! Phishing attacks use fake rewards to tempt victims to take action. You wouldn’t win a lottery if you never participated.
8. Keep your devices up to date.
Devices, and the applications on them, are more susceptible to attacks when systems are not updated.
9. Regularly check your accounts.
Check your accounts regularly to ensure that no changes have been made without your knowledge. Staying on top of your accounts, and knowing what data is held in each, will make spotting a phishing attack easier.
10. When in doubt, call out.
If you suspect that the security of your work device or data has been compromised, inform your cyber security team or government helplines immediately.
4. Digital Payments security:
To know more about security tips and practices, please feel free to register below:
Reference : " Cyber Swachhta Kendra " (Botnet Cleaning and Malware Analysis Centre, India)
bottom of page