Thursday, July 30, 2009

Tips to Reduce Spam in Your Email

Spam is a common, and often frustrating, side effect to having an email account. Although you will probably not be able to eliminate it, there are ways to reduce it.
What is spam?
Spam is the electronic version of "junk mail." The term spam refers to unsolicited, often unwanted, email messages. Spam does not necessarily contain viruses—valid messages from legitimate sources could fall into this category.
How can you reduce the amount of spam?
There are some steps you can take to significantly reduce the amount of spam you receive:
*Don't give your email address out arbitrarily - Email addresses have become so common that a space for them is often included on any form that asks for your address—even comment cards at restaurants. It seems harmless, so many people write them in the space provided without realizing what could happen to that information. For example, companies often enter the addresses into a database so that they can keep track of their customers and the customers' preferences. Sometimes these lists are sold to or shared with other companies, and suddenly you are receiving email that you didn't request.
* Check privacy policies - Before submitting your email address online, look for a privacy policy. Most reputable sites will have a link to their privacy policy from any form where you're asked to submit personal data. You should read this policy before submitting your email address or any other personal information so that you know what the owners of the site plan to do with the information (see Protecting Your Privacy for more information).
* Be aware of options selected by default - When you sign up for some online accounts or services, there may be a section that provides you with the option to receive email about other products and services. Sometimes there are options selected by default, so if you do not deselect them, you could begin to receive email from lists those lists as well.
* Use filters - Many email programs offer filtering capabilities that allow you to block certain addresses or to only allow email from addresses on your contact list. Some ISPs offer spam "tagging" or filtering services, but legitimate messages misclassified as spam might be dropped before reaching your inbox. However, many ISPs that offer filtering services also provide options for tagging suspected spam messages so the end user can more easily identify them. This can be useful in conjunction with filtering capabilities provided by many email programs.
* Report messages as spam - Most email clients offer an option to report a message as spam or junk. If your has that option, take advantage of it. Reporting messages as spam or junk helps to train the mail filter so that the messages aren't delivered to your inbox. However, check your junk or spam folders occasionally to look for legitimate messages that were incorrectly classified as spam.
* Don't follow links in spam messages - Some spam relies on generators that try variations of email addresses at certain domains. If you click a link within an email message or reply to a certain address, you are just confirming that your email address is valid. Unwanted messages that offer an "unsubscribe" option are particularly tempting, but this is often just a method for collecting valid addresses that are then sent other spam.
* Disable the automatic downloading of graphics in HTML mail - Many spammers send HTML mail with a linked graphic file that is then used to track who opens the mail message—when your mail client downloads the graphic from their web server, they know you've opened the message. Disabling HTML mail entirely and viewing messages in plain text also prevents this problem.
* Consider opening an additional email account - Many domains offer free email accounts. If you frequently submit your email address (for online shopping, signing up for services, or including it on something like a comment card), you may want to have a secondary email account to protect your primary email account from any spam that could be generated. You could also use this secondary account when posting to public mailing lists, social networking sites, blogs, and web forums. If the account start to fill up with spam, you can get rid of it and open a different one.
* Use privacy settings on social networking sites - Social networking sites typically allow you to choose who has access to see your email address. Consider hiding your email account or changing the settings so that only a small group of people that you trust are able to see your address. Also, when you use applications on these sites, you may be granting permission for them to access your personal information. Be cautious about which applications you choose to use.
* Don't spam other people - Be a responsible and considerate user. Some people consider email forwards a type of spam, so be selective with the messages you redistribute. Don't forward every message to everyone in your address book, and if someone asks that you not forward messages to them, respect their request.
http//www.us-cert.gov/cas/tips/ST04-007.html

Monday, July 27, 2009

UAE signs deal to curb cyber threats

Dubai : The UAE has boosted its defenses against cyber threats with the signing of an agreement of between the UAE Telecommunications Regulatory Authority (TRA) and the International Multilateral Partnership Against Cyber Threats (IMPACT) Alliance today. TRA signed the partnership and cooperation with the global alliance on behalf of the UAE Computer Emergency Response Team (aeCERT), which was accredited by the Ministerial Council for Services as the National CERT of the UAE.
The agreement was signed by Mohamed Nasser Al Ghanim, TRA Director General, and Dr. Mohd Noor Amin, IMPACT Alliance Chairman. During the signing ceremony at the Godolphin Ballroom 1 at the Emirates Towers in Dubai, Al Ghanim said: “The TRA is pleased to sign this agreement with IMPACT Alliance on behalf of the aeCERT in its continuous efforts to develop the capabilities of cyberspace security in the UAE and to enhance the aeCERT faculties in this area; especially that IMPACT Alliance is the official physical home for Global Cyber-security Agenda (GCA) of the International Telecommunication Union (ITU).”
IMPACT Alliance is an international organisation based Malaysia that encompasses one of the most advanced and informed Global Response Center (GRC) worldwide. It has partnerships and alliances with multinational corporations and public entities that it coordinates with in exchanging information to provide this network of communications with the fastest alerts on cyber threats, including viruses and attacks.
“IMPACT Alliance has also an Escape Collaborative System, where security experts and professionals from around the world log into it together to form a virtual team of highly accredited experts to solve cyber threat incidents. It also has highly accredited training facilities for its partners and affiliates to join free of charge,” added Al Ghanim. “Hence, by signing this agreement, the UAE, through the aeCERT, has become the first country in the region to be one of IMPACT Alliance’s affiliates and partners, to exchange information and benefit from all the experiences of this global organization to serve the safety of the UAE cyberspace.
“Yet, with the training facilities, even the UAE national ICT human capital will be also allowed to benefit from this partnership. In the final analysis, this agreement represents the core of the TRA strategy, including the strengthening of the UAE ICT sector and the development of the UAE national human capital, especially in the ICT field,” concluded Al Ghanim.

Cyber Crime Cases hit a new high in Japan in 2008

While in 2008 there were further reductions in the overall crime rate, the year saw a 15% increase in Cyber-Crime.
The police across Japan uncovered 6,321 cases of Internet-related or cyber crime in 2008, up 15.5% from the previous year and the highest number since comparable data became available in 2000, a National Police Agency survey showed Thursday. The figure represented a threefold jump from 2,081 cases recorded in 2004.There were 112 cases of threats made over the Internet during the reporting year, up 53 from the preceding year, the NPA said. Among such cases was that of a woman referred to prosecutors in connection with posts she made on a comedian’s blog. The comedian was forced to close his blog due to a flood of abusive messages from other Net users. Libel cases involving the Net came to 61, down 18. In 2008, the police were asked by the general public to look into a record 11,516 potential libel cases, up 29.8% from the previous year.

Four Cyber Crime Cases reported in Bangalore

BANGALORE: Four cyber crime cases registered in Cyber Crime Police station of CID (Criminal Investigation Department). A loss of about Rs 4 lakhs through phishing and hacking cases were reported.
The hackers have drawn an amount of Rs 2.20 lakh from Srinath Imarati, an administrative officer with a private firm, Bearing Point, to four other accounts by making 10 transactions. His account was with ICICI bank of CMH road branch.
He received a `phishing’ e-mail in the name accountsupdate@icici.com which asked for passwords and other details. He believed the mail and gave details through e-mail. On 22nd he noticed his account was debited of Rs 2,20,500. After consulting the bank officials, he lodged a complaint with CID’s Cyber police.
In another incident, Girish C Rath has lost Rs 49,000 from his Axis bank account. He got to know that some miscreants did a unauthorised transfer of money to their accounts by hacking his e-banking password.
In yet another case, Subrahmanya, a senior consultant with WIPRO has registered a complaint with Cyber Crime Police about hacking of his HDFC account and transferred Rs 28,000 to other account.
Express News Service
In another case, Prasanna Kumar, an engineer of ITPL has lost his Rs 58,000 when he was in South Korea on official duty. The money was transferred by hacking the e-mail ID to one MS Aimsing Shankhil’s account.
The hacker had changed the e-mail ID prasana_rpk@yahoo.co.in to rippychuppy@ gmail.com and has also changed the mobile number from the account details.

Friday, July 24, 2009

Netizens dub Pak law ‘cyber terror’

ISLAMABAD: Pakistan’s cyber buffs are fretting over a new move by the government to crack down on indecent emails and SMS text messages under which they can be jailed for up to 14 years.


Fatima Bhutto, niece of slain ex-PM Benazir Bhutto, was the first to air apprehensions about the laws against cyber terrorism which threaten death to satirists, spammers and activists alike.


Pakistan’s so-called democratic government has introduced a bill before parliament, the prevention of electronic crimes ordinance that aims to censor our already frightened media and censured citizenry.


According to the bill, anyone found guilty of “cyber terrorism”, an undefined crime is liable to face the death penalty, she wrote in the Guardian.


The Cyber Crime Act has become a cause for much consternation among cyber-buffs. Ahsan, who blogs at fiverupees.blogspot.com, wrote that “the act is draconian in the extreme and its effect on civil liberties will be vast.”


A senior official said overseas Pakistanis can be deported to Pakistan if they violate the cyber crimes law.


(http://timesofindia.indiatimes.com/articleshow/msid-4787204,prtpage-1.cms)

IIT engineer is online sex stalker

WASHINGTON: In perhaps the first such case involving an Indian in the US, police in Pennsylvania have arrested an Indian engineer, an IIT graduate, on charges of using the internet for soliciting sex with a minor girl. According to Pennsylvania attorney general Tom Corbett, Nityanand Gopalika (30), in the US on a work visa, allegedly used a chat room to approach what he believed was a 13-year-old girl from Pittsburgh, who turned out to be an undercover agent from the Child Predator Unit.

Gopalika, who is from Purnia, Bihar, and a resident of State College, Pennsylvania, was arrested on July 1 when he arrived at a predetermined meeting location. He was arrested, arraigned and sent to the Butler County Jail after he failed to cough up $15,000 cash bail. His preliminary hearing is coming up on Friday, July 24.

According to the criminal complaint filed by the Child Predator Unit, Gopalika, an alumnus of IIT Kanpur and DPS Bokaro, had a series of chats over several days, questioning the girl about her sexual experiences and describing the sex acts he wished to engage in with her.

Gopalika has also been charged with sending the girl two web cam videos that showed him nude or masturbating in front of his computer.

Cops seized two laptop computers from his vehicle, along with a digital camera, a cell phone allegedly containing a partially completed text message to the "child'', condoms and directions to the meeting location.

The techie is charged with one count of attempted unlawful contact with a minor (related to involuntary deviate sexual intercourse), a first-degree felony which is punishable by up to 20 years in prison and a $25,000 fine.

Additionally, Gopalika is charged with two counts of unlawful contact with a minor (related to obscene performances), along with one count of criminal use of a computer, all third-degree felonies — each punishable by up to seven years in prison and $15,000 fines.

Nityanand Gopalika's family in Purnia, when contacted, declined to either confirm or deny the information. His brother Shravan claimed he did not know of any arrest and that he had not spoken to Nityanand for two months. He, however, added: ``Please do something to help him''.

Negotiations have been going on for Gopalika's marriage. Gopal, another brother, told TOI on Thursday that the family was unaware of Gopalika's arrest. When informed about it, he refused to comment and, instead, said he would call back.

(http://timesofindia.indiatimes.com/NEWS/World/Indians-Abroad/IIT-engineer-is-online-sex-stalker/articleshow/4810690.cms)

Cyber crooks get biz savvy

Cyber criminals are aping executives when it comes to sales, marketing and risk management in the world of online treachery, according to a report released by networking giant Cisco.


“The novel thing is that they have taken the Harvard Business School, General Electric board room business training and applied it to their old techniques”, said Cisco chief security researcher Patrick Peterson. The US technology firm summarized current threats and said hackers are increasingly operating like successful businesses. Peterson cited how cyber hackers capitalized on interest in the death of pop icon Michael Jackson in June.


Disasters, celebrity doings and other major news is routine fodder for bogus emails and websites booby-trapped with computer viruses, but in the case of Jackson’s death, crooks cranked out fake news stories to dupe readers. “They had their criminal copy editors working on copy for the story as fast as it happened” Peterson said. “They brought the Jackson story to market in a way that rivals media outlets. They have an advantage; they don’t have to do any reporting.”


Billions of spam messages with links to trick websites or videos promising scintillating Jackson images and information were fired off in the days after his June 25 death, according to Cisco.

“Sales leads” that followed online links were turned into “customers” whose computers were stealthily infected with nefarious codes for stealing data, usurping control of machines or other evil deeds.


Cyber criminals are embracing a nefarious version of a “cloud computing” trend of offering computer applications online as services. Commanders of infected computers rent out illegally assembled networks to fellow criminals for sending spam or launching attacks. Peterson also told of an “anti-anti-virus” operation called Virtest that charges monthly fees to keep hackers informed about which security firms can detect their malicious programs.


(http://timesofindia.indiatimes.com/articleshow/msid-4778136,prtpage-1.cms )

US government lacks tech talent for cyber defense: study

Bureaucracy and a shortage of employees with technology prowess have left the US government without the talent it needs to defend against cyber attacks, a study warned on Wednesday.

“The results of this research are troubling and, in many ways, familiar,” said the authors of the report, which is intended to check the status of the federal cybersecurity workforce.

“The overriding finding of our analysis is that our federal government will be unable to combat these threats without a more coordinated, sustained effort to increase cybersecurity expertise in the federal workforce.”

The “pipeline of potential new talent” are inadequate, while complicated processes and rules hamper efforts to recruit and retain federal workers with needed technology skills for cybersecurity, according to the study, titled “Cyber IN-Security.”

It also found that there are conflicting views inside government regarding what technology talents are sought in new hires.

The study surveyed 18 federal agencies and experts both inside and outside government, said the Partnership for Public Service, a non-profit group based in Washington that authored the study with consulting firm Booz Allen Hamilton.

“Numerous factors hamper government’s ability to build a top-notch cybersecurity workforce, making it difficult to fill critical talent gaps,” the study concluded.

US leaders, it suggested, need to vastly improve the way government hires, manages, and cultivates employees with technology talent.

Congress and the White House should also promote and support students learning math and science skills to bolster the future pool of cyber security workers, the study concluded.

(http://www.hindustantimes.com/StoryPage/StoryPage.aspx?id=929f9fd3-a5ca-4492-a417-a8295ea06ede)