If you post in MySpace and other and other social networking sites—BEWARE–you could get scammed. I have a family member who spends hours on these sites and recently learned first hand that con artists are employing a new set of “techno-tricks” to get you to hand over your personal information.
The particular incident I am sharing with you occurred on MySpace, but I have since learned that scammers don’t discriminate, and you can be targeted on a number of social networking sites. My relative used the MySpace site to connect with friends and promote her business, so when a design group contacted her, she didn’t hesitate to click on the profile. When she did, a login page popped up that looked exactly like MySpace, but the address on the address bar didn’t read “MySpace.com.” The login page asked several questions that required providing personal information.
According to the National Cyber Security Alliance (NCSA), this tactic is called: “spear phishing.” This is how the NCSA defines it: “Spear phishing is when scammers hone their tactics and they use personal information that you have posted on these social networking sites to try to steal different financial information from users.” For example, according to the NCSA, if your profile says you like a certain band, spear phishers might send you links, instant messages, and bulletins for that band. But when you click the link it will load malicious codes onto your program and use vulnerabilities that exist on your computer to again install these different programs that collect all your financial information. What’s more, other links lead to fake login pages used to steal your user name and password– so scammers can steal your identity, and attack your friends. The NCSA says it is the newest form of phishing and social networking sites are major targets.
But, you don’t have to be a “spear-phishers” next victim. Here are ways you can protect yourself:
· Never email any account information.
· If you’re asked to login a second time, make sure the URL is correct, and make sure you are familiar with it.
· Never download an attachment or click on a link from someone you don’t know.
· Make sure your browser, operating system, virus, spyware, and firewall programs are up to date.