Switch on 2-step verification and deliver a knockout solution that will double your defence against cyber criminals.
The @NCSC recommends 2-step verification (also known as 2FA) as one of the most effective ways to secure your important accounts.
Find out how to keep the fraudsters out this shopping season:
With Edinburgh preparing for thousands of visitors to descend for the world’s largest performing arts festival in August, Scotland’s leading cybercrime and fraud organisation is urging businesses to be on the defensive against fraudsters during one of the busiest seasons of the year.
Ticketing scams, although uncommon, can ruin the Fringe experience, and the Cyber and Fraud Centre – Scotland is warning businesses that might be looking to book tickets as a team day activity or treat for clients to be on the lookout for counterfeit tickets. The Centre is urging businesses to be aware of look-alike and unauthorised websites, and, with fake sponsorship ‘opportunities’ also on the rise, businesses need to do their due diligence when approached about becoming a sponsor.
The Centre is also encouraging businesses to be mindful of the legitimacy of accommodation offers during the Fringe when booking stays for staff or clients and says that unusually cheap holiday offers or ones asking for a high deposit should be treated with suspicion.
Furthermore, with Business Email Compromise (BEC) becoming a more and more common method of scamming, particularly within a business environment, the Centre is urging employees to be vigilant. BEC involves fraudsters using fake but convincingly designed emails to compromise email accounts and therefore potentially access sensitive data.
With fake invoices being an example of BEC likely to be used during the Fringe, the Cyber and Fraud Centre – Scotland is encouraging organisations to ensure that their staff have received robust cybercrime and fraud prevention training and are aware of how to identify and respond to potential security threats in the workplace.
Jude McCorry, CEO of the Cyber and Fraud Centre – Scotland, said: “It’s crucial that organisations have well-developed and tested cybersecurity systems in place all year round, but businesses might find themselves particularly vulnerable during the Fringe.
“Education and communication are foundational to being well-prepared against the threat of cybercrime and fraud. We would encourage Edinburgh’s businesses to stay aware of the cyber climate around them, implement robust security measures and ensure their staff are sufficiently trained to give themselves the best possible chance of enjoying a Fringe festival free from fraud”.
Lyndsey Jackson, Deputy Chief Executive of the Edinburgh Fringe Festival, added: “The Fringe is a wonderful celebration of creativity and community and we’d encourage everyone to jump in and take part as see as many shows as you can squeeze in.
“To keep yourself and your business fraud safe always buy directly from the venue or the Fringe Box Office, website and app and look for the STAR Logo for extra assurance and if something looks too good to be true, then it probably is.
“The Fringe is fast paced, exciting and dynamic so don’t let that trick you and your business into letting your guard down – and don’t forget we have customer service and artist support teams you can speak to if you’ve got questions – we’re here to help you find your seat at the Fringe.”
Individuals and organisations interested in learning more can follow this link to read the Cyber and Fraud Centre – Scotland’s tips and advice in full online.
A new national charity has been launched to support members of the Scottish public who find themselves victims of a cyber or fraud crime.
The Cyber and Fraud Hub was formed by Cyber and Fraud Centre – Scotland in response to a rapid increase in calls from concerned members of the public to its incident response helpline a collaboration between leading Scottish cybersecurity organisation the Cyber and Fraud Centre – Scotland, Police Scotland and the Scottish Government, which was originally set up to support businesses through a cyberattack.
Last year, calls to the Cyber and Fraud Centre incident response helpline doubled, with
60% of calls coming from concerned members of the public seeking advice following a suspected cyber or fraud crime.
Businesses will continue to be supported through the Cyber and Fraud Centre – Scotland with advice, intelligence and training, while the newly launched Cyber and Fraud Hub will offer tailored support through reporting and legal guidance, victim assistance, and recovering funds as well as improving the public’s understanding of cyber and fraud crime.
The Cyber and Fraud Hub will be the first charity in Scotland to offer this level of bespoke victim and advice support to individuals and will allow a greater number of people to access wraparound support at a time when they are most vulnerable.
The Cyber and Fraud Hub was spearheaded by a dedicated team who gave up their spare time to make the charity a reality. The team includes; Angie Lees, Declan Doyle, John Callagy, Jude McCorry, Alex Dowall and chair, Paul Atkinson.
Jude McCorry, CEO of Cyber and Fraud Centre – Scotland, said: “I recently saw a quote saying “The Fight against fraud is everyone’s problem, but no one’s priority” and we have seen this play out over the last year.
“In launching the Cyber and Fraud Hub, we have now made it our priority, but we need others, including senior figures in financial services and government, to make it their priority too.
“The Cyber and Fraud Hub will meet a vital need for support for individuals who find themselves in the daunting situation of being a victim of a cyber or fraud crime, the impact of which can be immense, mentally and financially.
“We’ve built strong relationships with our colleagues at Police Scotland and the banking sector to support our business community to be more resilient and we wanted to extend this support to the growing number of individuals who find themselves personally compromised as a result of this growing threat.
“Members of the public require a different type of support to get them through a cyberattack, where they are supported as victims of a crime as well as going through formal criminal proceedings.
“The Cyber and Fraud Hub team have the knowledge, skills and expertise to allow them to listen and provide reassurance as well as the tools to get people back on their feet.”
Assistant Chief Constable Andy Freeburn said: “I am delighted to be appointed as a Trustee of the Cyber and Fraud Hub and have seen at first hand the success of collaborative working to combat fraud and keep people safe in the digital world.
“The Hub will be an invaluable resource and complement the support available from Police Scotland. It will deliver first-class education and partnership programmes to help communities and individuals build resilience against cybercrime and fraud and offer specialised support to those who have become a victim of cybercrime.”
If you, or someone you know, has been a victim of cyber or fraud crime, you can call the Cyber and Fraud Hub on 0800 1670 623, or visit www.cyberfraudcentre.com.
From today, regulations enforcing consumer protections against hacking and cyber-attacks will take effect, mandating that internet-connected smart devices meet minimum-security standards by law.
Consumer protections against hacking and cyber-attacks will come into force today, as all internet connected smart devices will be required by law to meet minimum-security standards.
Manufacturers will be legally required to protect consumers from hackers and cyber criminals from accessing devices with internet or network connectivity – from smartphones to games consoles and connected fridges – as the UK becomes the first country in the world to introduce these laws.
Under the new regime, manufacturers will be banned from having weak, easily guessable default passwords like ‘admin’ or ‘12345’ and if there is a common password the user will be promoted to change it on start-up.
This will help prevent threats like the damaging Mirai attack in 2016 which saw 300,000 smart products compromised due to weak security features and used to attack major internet platforms and services, leaving much of the US East Coast without internet. Since then, similar attacks have occurred on UK banks including Lloyds and RBS leading to disruption to customers.
The move marks a significant step towards boosting the UK’s resilience towards cyber-crime, as recent figures show 99% of UK adults own at least one smart device and UK households own an average of nine connected devices. The new regime will also help give customers confidence in buying and using products, which will in turn help grow businesses and the economy.
An investigation conducted by Which? showed that a home filled with smart devices could be exposed to more than 12,000 hacking attacks from across the world in a single week, with a total of 2,684 attempts to guess weak default passwords on just five devices.
Minister for Cyber, Viscount Camrose said: “As every-day life becomes increasingly dependent on connected devices, the threats generated by the internet multiply and become even greater.
“From today, consumers will have greater peace of mind that their smart devices are protected from cyber criminals, as we introduce world first laws that will make sure their personal privacy, data and finances are safe.
“We are committed to making the UK the safest place in the world to be online and these new regulations mark a significant leap towards a more secure digital world.”
Data and Digital Infrastructure Minister, Julia Lopez, said: “Today marks a new era where consumers can have greater confidence that their smart devices, such as phones and broadband routers, are shielded from cyber threats, and the integrity of personal privacy, data and finances better protected.
“Our pledge to establish the UK as the global standard for online safety takes a big step forward with these regulations, moving us closer to our goal of a digitally secure future.”
OPSS Chief Executive, Graham Russell said: “The use and ownership of consumer products that can connect to the internet or a network is growing rapidly. UK consumers should be able to trust that these products are designed and built with security in mind, protecting them from the increasing cyber threats to connectable devices.
“As the UK’s product regulator, OPSS will be ensuring consumers can have that confidence by working with the industry to encourage innovation and compliance with these new laws.”
NCSC Deputy Director for Economy and Society, Sarah Lyons said: “Smart devices have become an important part of our daily lives, improving our connectivity at home and at work; however, we know this dependency also presents an opportunity for cyber criminals.
“Businesses have a major role to play in protecting the public by ensuring the smart products they manufacture, import or distribute provide ongoing protection against cyber-attacks and this landmark Act will help consumers to make informed decisions about the security of products they buy.
“I encourage all businesses and consumers to read the NCSC’s point of sale leaflet, which explains how the new Product Security and Telecommunications Infrastructure (PSTI) regulation affects them and how smart devices can be used securely.”
With 57% of households owning a smart TV, 53% owning a voice assistant and 49% owning a smart watch or fitness wristband, this new regime reinforces the government’s commitments to addressing these threats to society and the economy head on.
The laws are coming into force as part of the Product Security and Telecommunications Infrastructure (PSTI) regime, which has been designed to improve the UK’s resilience from cyber-attacks and ensure malign interference does not impact the wider UK and global economy.
The new measures will also introduce a series of improved security protections to tackle the threat of cyber-crime:
Rocio Concha, Which? Director of Policy and Advocacy, said: “Which? has been instrumental in pushing for these new laws which will give consumers using smart products vital protections against cyber criminals looking to launch hacking attacks and steal their personal information.
“The OPSS must provide industry with clear guidance and be prepared to take strong enforcement action against manufacturers if they flout the law, but we also expect smart device brands to do right by their customers from day one and ensure shoppers can easily find information on how long their devices will be supported and make informed purchases.
David Rogers, CEO of Copper Horse, said: “We started this work many years ago so that people would not have to understand lots about the security of connected product in order to be secure. Getting rid of things like default passwords that are set to ‘admin’ or ‘12345’ are fundamental basics.
“Manufacturers should not be providing anyone with products like webcams that are so weak and insecure that they are trivial to hack into and takeover. This stops now and people can have greater confidence that the internet connected products that they buy have better security measures built-in to protect them.”
The UK government has collaborated with industry leaders to introduce this raft of transformative protections, which also include manufacturers having to publish information on how to report security issues to increase the speed at which they can address these problems.
In addition, consumers and cyber security experts can play an active role in protecting themselves and society from cyber criminals by reporting any products which don’t comply to the Office for Product Safety and Standards (OPSS).
The government is beginning the legislative process for certain automotive vehicles to be exempt from the product security regulatory regime, as they will be covered by alternative legislation.
This new regime intends to increase consumer confidence in the security of the products they buy and use, delivering on one of the government’s five priorities to grow the economy.
The new laws are part of the government’s £2.6 billion National Cyber Strategy to protect and promote the UK online.
Navigating the world of online dating can be tricky and it’s important not to lose sight of the potential dangers and scams that you may encounter whilst engaging with other potential matches.
That’s why security expert Nathan Daniels from VPNOverview.com has outlined 7 steps you can take to protect yourself when dating online to ensure you don’t have a negative experience.
Turn off location tracking
Many dating apps require that you turn on location tracking. This means you have to allow these apps to view your location. Dating apps use this information to get you into contact with people who are close to you geographically.
Of course, this is a very useful feature. Nevertheless, it’s understandable you might not want to share your exact location with a dating app, or with any service for that matter.
It is strongly recommended to turn off geo-tracking once you’re no longer actively using your dating app. That way, at the very least, you prevent the app from tracking you constantly.
Request a video chat (before your first date)
Another great safe online dating tip is to filter out fake dating profiles by requesting a video call. In fact, it can be a regular call as well, although video chatting is definitely better. Most people with fake profiles will be very reluctant to have a call, especially if a video is involved.
Obviously, it’s much easier for scammers to deceive their victims through text messages and sending someone else’s pictures. If they were to agree to a call, they would most likely just be discovered as fraudsters. As such, if someone refuses to have a (video) call, you might just be dealing with a fake profile.
Of course, you might be dealing with someone who is serious about meeting up at some point. In that case, a video call or a regular call is very useful as well. It will help you to gauge the other user’s intentions and character a little bit. This could help you avoid some dangerous scenarios.
Don’t connect your dating profiles to other social media or platforms
It might be tempting, for convenience reasons, to just log in on a dating app with your Facebook account or your main Google account. However, it is strongly recommend to not do this, as it’s a potential privacy hazard. Just think about it – you’re connecting a profile that’s intended for friends and family to a platform where you’ll be contacting tons of people you don’t know. Instead try using another way to log in, that can’t be traced back to you. One method, for instance, would be to create a Google account with random information that doesn’t contain any of your personal data.
Choose pictures you don’t use elsewhere
By using a reverse image search, someone can easily use your dating profile pictures against you. They can simply use this Google tool to find other pages where the images appear. This way, they’ll easily find out your personal information, even if you didn’t include it on your dating profile.
As such, it is recommended to only use pictures on your dating profile that you’re not using anywhere else. This also means it’s a bad idea to allow Tinder or other dating apps to simply pull pictures from Facebook or other social media accounts.
Report suspicious activity and inappropriate behaviour
Many dating apps have ways to report profiles and/or inappropriate behaviour. This comes in handy when you come across a (potentially) fake profile or behaviour that makes you uncomfortable. By reporting the profile involved, you will make your own and others’ dating experiences safer.
After you report an account, the respective dating app will generally launch an investigation. If someone’s profile is found to be fake or they are found guilty of inappropriate behaviour, their account will be deleted.
Types of suspicious or inappropriate activity you might encounter on dating apps include the following:
Many dating platforms also offer the possibility of blocking a specific user. This is a great option if someone is bothering you and you don’t want to have them contact you while you’re awaiting the results of the dating app’s investigation after reporting them.
Be wary of malicious files and pages
Some catfish operate by infecting their victims’ devices with malware. Rather than asking you for money, they might attempt to infect your system with a keylogger, in the hope. of getting their hands on your financial data.
That’s why it’s recommended to not download or click on any files that a new chat partner might send you. It’s best to wait until you know them a bit better and trust the,. The same goes for visiting links they send you – both can contain dangerous malware.
Apart from always being vigilant, we recommend getting a solid antivirus solution to protect yourself from malware.
Delete your account when you’re done dating
Have you finally met your soul mater? Or have you had your fill of casual dating fun? Either way, consider another valuable safe online dating tip, and make sure to delete your online dating account once you’re done dating.
Deleting your dating profile will erase (most of) your personal information on the dating platform in question. As a result, it will be much more difficult for others to abuse your personal information.
CYBER criminals will be looking to exploit shoppers during the Black Friday and Cyber Monday sales – an expert from cyber security firm CSS Assure has warned.
With UK consumers planning to spend an estimated £5.6bn on Black Friday (24 November) and Cyber Monday (27 November) purchases this year, Charlotte Riley, director of information security at technology at CSS Assure, said bargain hunters lowering their guards during the rush to bag the best deals are at greater risk of malicious threats.
Charlotte said: “In the run-up to and during Black Friday and Cyber Monday, many outlets will run promotional offers to encourage spending. This is a potentially lucrative time of year for cyber criminals as they know shoppers are less vigilant as they rush to snap up the best deals.
“Cyber criminals will no doubt be looking to take advantage of the vast amount of transactions taking place and the financial information being shared as a result. There is also an increase in promotional email traffic, which makes it hard to differentiate the real bargains from scams – presenting a heightened risk of phishing attacks.
“With this in mind, it is important consumers take steps to protect themselves and their families during two of the biggest shopping days of the year.”
Password management
“Firstly, shoppers should think about the last time they changed their passwords, especially on important accounts. If their passwords are dated then strongly consider changing them, and, if possible, use a password management solution to ensure they are unique and appropriately complex.
“While this is a faff, it is the single greatest defence you can make to protect yourself against a cyber attack and will instantly make you much safer online. Adding an extra layer of security like two-factor authentication can prevent unauthorised access even if someone gets hold of your password.
“Currently, there are millions of emails and passwords for sale on the dark web, which have been breached by companies that have not protected people’s personal data sufficiently. Cyber criminals can buy this data for minimal amounts of money and gain access to your emails.
“They will look for social media accounts and online high street accounts and test your combination to gain access. From this, they can gather more personal data until they have enough to conduct identity theft, which could result in credit being taken out in your name or using your saved payment cards to make online purchases, for example.”
Personal data breach identification
“It is a good idea to understand whether your data has been breached so you can put in place other necessary measures to protect yourself. To do this you can use a free service provided by Have I Been Pwned. All you need to do is enter your email address and the site will tell you whether it is associated with a breach and if so, what other data has been stolen.
“If you have been breached, it is even more important that you change your password to break the chain. Next, you need to understand whether you have been entered into any spambots – as the name suggests, these are bots that send spam to you.
“While some spam is laughable, others are highly credible. If you’re rushing, there’s a higher change you will click a link in a spam email, which could execute malware or ransomware on your device.
“A blended strategy is best for rectifying and avoiding your exposure to spam – and, in turn, the chances of clicking on a malicious link.
“Start by enabling and customising your email provider’s spam filters to automatically detect and redirect suspicious emails to the spam folder. These settings – as well as your security and privacy options – should also be regularly reviewed or adjusted. Unsubscribe from unwanted newsletters or promotional emails, and make spam emails as junk within your email platform.
“Some email services offer the option to create disposable or temporary email addresses for specific purposes. This way if the address gets compromised or spammed, you can easily discard it without affecting your primary email. You should also be cautious about sharing your email address on public forums, social media, or unfamiliar websites to minimise exposure to potential spammers.
“While these may seem to be arduous tasks, they are effective and vital ways to protect yourself.”
Check your anti-virus protection
“Finally, make sure your anti-virus protection is installed, activated with a valid licence and updated. While free anti-virus software is available, in life you get what you pay for and it may not protect you sufficiently. Competition to provide the best anti-virus changes year on year between the main vendors as they achieve technology breakthroughs in response to the evolution in cyber threats.
“The best thing to do is check reputable tech websites for reviews of the best current anti-virus software. We recommend buying a one-year licence, and then when it comes to renew, assess which company has moved to the forefront of anti-malware protection. There will always be new customer deals to be had.”
An Edinburgh Napier University cyber project has been backed by new funding to explore ways of combatting phone-based impersonation and imposter scams – which cause substantial financial losses, privacy breaches and distress to people around the world.
LastingAsset, which began as a crypto asset security concept, has secured £200,000 in funding from Scottish Enterprise’s High Growth Spinout Programme and £20,000 from The Data Lab.
The LastingAsset team at ENU’s School of Computing, Engineering and the Built Environment (SCEBE) will now use the technology behind that original idea and spend the next year working with pilot customers to refine their anti-fraud product, before taking it to market.
Among other privacy features, it uses encryption technology to prevent rogue actors from impersonating an organisation’s phone number to dupe victims.
According to the UK Government’s latest fraud strategy, unsuspecting individuals and organisations lost £2.35bn through fraud in 2021, with the banking and finance industry losing £1.3bn.
Project leader Dr Zakwan Jaroucheh said: “Our research team were initially working on a custodial solution for crypto assets. While this remains a problem that needs addressing, we wanted to provide a solution to a more pressing societal challenge. This is when we pivoted to using the same underlying technologies to address the problem of impersonation phone call scams.
“In today’s modern digital world, businesses often find themselves unable to effectively protect their customers from cyber fraud, which tarnishes their reputation and their ability to use the voice calls effectively.
“The LastingAsset solution uses blockchain and homomorphic encryption technologies to effectively combat phone number spoofing, voice-based impersonation and cloning scams, without requiring the organisation to build a new security infrastructure.
“With this, any organisation that communicates with their customers by voice can assure customers that they are speaking with a genuine representative and not a scammer.”
Nanik Ramchandani of Imagine Ventures, who leads the project’s commercial team, said: “We are beginning trials with two pilot customers and opening our waiting list for additional pilots.
“It is going to be an incredibly exciting and rewarding journey over the coming months, as we translate our proof of concept and vision into a valuable offering to clients and stop scammers from defrauding fellow citizens.”
Recently named one of the top 10 universities in the UK for spin-out activity, ENU has supported the creation of many cyber spin-out businesses over the last 10 years, including Cyacomb, MemCrypt, Symphonic Software and ZoneFox. Four years ago, the university created the first identity lab in the world, the Blockpass ID Lab, which has focused on creating more trustworthy systems.
Supporting LastingAsset’s progression from research project to a spin-out business is ENU’s Professor Bill Buchanan, alongside Dr Cathy Higginson, Business Development and Relationship Manager at the University’s Research, Innovation and Enterprise department.
This latest funding received from Scottish Enterprise and The Data Lab will help the LastingAsset project team to integrate their solution with multiple early pilot customers.
Over the next eight to 12 months, they expect to work with more than 30 initial pilot customers in securing their voice communication. This process will allow the team to refine the architecture of their product; test their solution and increase its credibility. At the end of this period, they anticipate product-market fit and the ability to rapidly scale their offering.
Through Scottish Enterprise’s High-Growth Spinout Programme, LastingAsset is receiving £200,000 in funding, building upon £74,948 which was awarded in 2022.
Leah Pape, Head of High Growth Services at Scottish Enterprise, said: “Edinburgh Napier University has an enviable track record of producing companies whose products and platforms direct cutting-edge technological advancements into efforts to combat increasingly sophisticated fraudsters.
“Our grant builds on the funding and advice provided previously to LastingAsset at its earliest stages and underlines Scottish Enterprise’s commitment to supporting the development of the high-growth industries of the future.”
The Data Lab, Scotland’s innovation centre for data and AI, also recently funded £20k to help LastingAsset develop their proof of concept.
Brian Hills, CEO of The Data Lab, said: “Online scamming can have devastating impacts on unsuspecting victims’ finances and mental wellbeing, with recent advances in AI exacerbating the problem.
“Preventing people from falling victim to these crimes in the first place is key. The Data Lab were delighted to support the LastingAsset team at Edinburgh Napier University to develop their groundbreaking technology further to tackle online scamming and reduce the number of victims and financial losses.”
A recent Which? study tested the security of 13 of the UK’s most popular online banking sites between September and November 2022. The study found that Virgin Money, TSB and Nationwide were the worst at protecting their customers from online scammers.
With so many well known banking sites falling short when it comes to blocking fraudsters, cybersecurity experts at VPNOverview have compiled a list of 12 safety tips to keep your money safe from malware and phishing scams.
What are the possible dangers of online banking?
Financially motivated cybercrime, using malware and phishing, is growing at a rapid pace. In fact, by 2023, the number of internet users is set to increase by 275%, creating more targets for online banking fraudsters. Banks worldwide are doing all they can to protect their customers from banking fraud by raising awareness and utilising new technology to make online banking safer.
Malware
Cybercriminals can use malware like spyware to break into your phone or computer and potentially steal your banking details. Cybercriminals can use a keylogger to track your keystrokes and steal your banking login details as you are typing them. In the worst-case scenario, a hacker can infect your computer with a virus, allowing them to gain total control of your computer and possibly transfer your money straight into their account.
Phishing
Phishing is where a cybercriminal attempts to obtain someone’s sensitive information by pretending to be a party this person trusts, such as a bank. This imposter would contact the victim via email or phone to trick them into surrendering login information. The scammer will often produce a plausible reason why they are asking for this sensitive information. It is essential to stay vigilant and remember: it is highly unlikely that your bank will ask you for login details, PIN codes or confidential information.
12 online banking safety tips
1. Be wary of transfers: Only transfer money to parties you trust. Money transfers cannot usually be reversed without the explicit permission of the receiving party.
2. Use a unique password and login details: Make sure your banking login details are different from your other online portals or services; it is much safer to have a different password for your bank if a hacker gains access to your device. The most secure password you can create will be at least ten characters long, containing a minimum of one uppercase letter, one lowercase letter, one number, and one symbol. It would be best if you considered changing your password to a new unique password every six months.
3. Keep login details safe: Do not give your online banking login details to anyone. If you receive a phone call or an email asking for you to enter your banking login details, sensitive information or PIN codes, this could be a phishing scam.
4. Use fingerprint and face ID: Make use of the newest technology when it comes to signing into your online banking apps. Using a fingerprint or Face ID login is much safer than the traditional username and password. Another security measure to consider is using two-factor authentication, essentially providing two methods of logging in to ensure that the right person is logging in.
5. Update apps: Ensure your device’s operating system is up-to-date. The same goes for your online banking app if you use one. The best practice is to configure your settings to update all updates automatically.
6. Never click on suspicious hyperlinks: If you receive an email or a text from a number or address you don’t recognise that contains a hyperlink, don’t click on it. Do not download any files they may contain.
7. Be wary of suspicious emails: Cybercriminals may send you a convincing-looking email with your bank’s logo and a professional-looking layout. If this email asks for sensitive information, including your password, login details or PIN code, delete this email.
8. Check HTTPS connection: Always ensure the website you visit has a secure HTTPS connection before you log in to your online banking account. Many browsers, such as Google Chrome, Mozilla Firefox and Internet Explorer, show whether your connection to a certain website is secure. Some of these browsers may display a padlock symbol inside the address bar indicating the safety of a website’s connection. If not, you can check the URL:
If the URL you visit contains “https://”, this is secure as the ‘s’ stands for secure. If you see “http://” the connection isn’t secure. You may have to click on the URL in the search bar to see the “https://” appear. If the connection isn’t secure, do not share any personal details with that page.
9. Install antivirus software: Install antivirus software on your device to protect yourself from malware and viruses. The best antivirus programs will offer a built-in firewall, essentially a network security device that provides a barrier between a trusted network and an untrusted network.
10. Be wary of phishing: If you suspect you have come across a potential phishing email or call that claims to have been sent by your bank, contact your bank immediately to notify them. If they do not know about this request, you were likely almost a victim of a phishing scam.
11. Check your banking app frequently: Frequently check your online bank for peculiar activities and alert your bank of any transactions that you don’t recognise.
12. Trust your gut: Ultimately, if something doesn’t feel quite right as you’re transferring a payment or entering sensitive details, trust your gut and don’t continue.
A spokesperson from VPNOverview commented: “Although banks around the world are working hard to make online banking as safe as possible, it is still a good idea to take some safety measures yourself when managing your finances.
“By taking charge of your own online safety, you can prove to your bank that you are not negligent and are more likely to be reimbursed by your bank if something bad happens. By following these tips to protect yourself while online banking, managing, paying and receiving money will become a lot safer.”
On Valentine’s Day, words like “Valentine,” “chocolate,” and “date” are the perfect camouflage to entice potential victims into clicking on a malicious link, downloading malware, or saying “Yes” to a date with a shady online character. Cybersecurity experts at VPNOverview warn of potential Valentine’s Day scams and how to prevent them.
Types of Valentine’s Day scams
Seasonally themed online scams are not uncommon. Black Friday, Cyber Monday, and Christmas are notorious for ramping up cyber criminals’ efforts to lure people with money to spend or romantics with a soft heart into their online traps. Valentine’s Day especially makes people more susceptible than usual.
Cyber-related Valentine scams range from:
Romance scams
Valentine’s Day can be exciting, but it can also lead to heartbreak, embarrassment, and financial loss. The Guardian recently revealed Victim Support data indicating a 38% increase in romance fraud victims needing support. Criminals will search dating sites, apps, chat rooms, and other social media networking sites attempting to build relationships to get your personal information or your money.
Once the scammer has established trust with their target, they quickly unveil a “money problem.” Common scam angles – and giveaways – are a sick relative, a medical emergency, a stolen wallet, passport or visa, or a last-minute plane ticket price hike, asking the victim to cough up the money to cover replacement or the unexpected expense.
Unfortunately, most victims of romance scams or catphishing are hesitant to report being taken advantage of due to embarrassment, shame, or humiliation. Nonetheless, it is essential to report online scams to the platform you are using and file a complaint with the relevant authorities in your country of residence.
Valentine’s Day malware
In the lead-up to Valentine’s Day, cybersecurity company Kaspersky analysed malware using the names of over 20 popular dating apps. The keyword “dating” alone revealed 1,963 unique malicious files disguised as legitimate applications. Two-thirds were masked as Tinder, and one-third of the files were linked to Badoo.
“The danger these malicious files present varies from file to file, ranging from Trojans that can download other malware to ones that send expensive SMS messages to adware, making it likely that every ping a user gets is some sort of annoying ad notification rather than a message from a potential date,” Kaspersky explains.
For example, one of the applications that looks like Tinder is, in fact, a banking Trojan that attempts to gain all rights necessary to steal money from the user. Another application declares itself as “Settings” right after installation. Next, it shows a fake error message and disappears, but there is a high likelihood that it will return with unwanted ads a few days later.
How to avoid these scams
Criminals follow money and soft hearts. Fortunately, there are various steps users can take to avoid falling victim to Valentine’s Day online threats and scams:
Ahead of National Computer Security Day tomorrow (November 30th), Business Gateway has announced a new webinar with Scottish Business Resilience Centre (SBRC), to empower business owners to be cyber-aware and take control of their online security.
Taking place virtually on Wednesday, 30th November at 1pm, the webinar will be hosted by Sarah Johnson, Director at Scottish growth marketing company, IndigoLeap. She will be joined by SBRC experts Mike Smith, Cyber Incident Response & Threat Intelligence Manager and Kristie Steele, Cyber Community Lead.
The hour-long session will offer insights on the security landscape in Scotland, outlining how to recognise potential threats and what to do to ensure businesses are secure. The panel will explore the most common threats currently online, the impact of being victim to an attack and top tips for monitoring digital channels.
He approached Business Gateway in spring 2022 for help with search engine optimisation (SEO), after identifying a drop in website traffic and enquiries. He received 1:1 support from an expert consultant via Business Gateway’s Digital Boost programme, where it was discovered that the Celsius website had been hacked.
Although there was no breach in data, the website, which had previously hosted approximately 40 pages, now had over 10,000 pages on the website URL, meaning Google deemed it untrustworthy reducing its visibility to potential customers.
In addition to the webinar, Business Gateway also offers cyber resilience toolkits and an online tutorial which provides the basics to cyber security, building business resilience, and signposts tips on how to avoid data breaches.
Mike Smith, Cyber Incident Response & Threat Intelligence Manager, SBRC, said: “For many small businesses across Scotland, protecting their business from cyber-attacks may not be a priority due to expertise or resource.
“However, being cyber aware is crucial for all businesses, and it is important that steps are taken to safeguard all types of data against loss.”
Hugh Lightbody, Chief Officer at Business Gateway, added: “We recognise now more than ever that businesses are stretched, focusing on operations as they continue to bounce back post-pandemic and amid the cost of living crisis.
“We hope that this webinar provides a valuable platform to understand how cyber-attacks can occur, and why it is so important for businesses to protect their business in the current climate.”
Michael Cairns, Director at Celsius Plumbing, said: “After operating without a website for a number of years, we spent the last two years building our digital channels and could not understand why we were experiencing issues.
“We had worked with Business Gateway in the past, so it was our first port of call. Our DigitalBoost consultant, John Taylor, went above and beyond for us in identifying our issue and in helping us rectify it.
“We had placed a lot of trust in our web developers, but John helped us access our website and helped us understand the importance of Google Search Console, which we now know is vitally important to our online presence as it identifies vulnerabilities to our website.
“We are still slowly recovering our online presence; it has been a very long process and I would urge any business owner to familiarise themselves with online security to reduce their chances of becoming victims themselves.”
Business Gateway also works closely with Police Scotland’s Cybercrime Harm Prevention team, ensuring its service and advice reflect expert insights.
The following tips and strategies have been identified by Gordy Macdonald, Cybercrime Protection, Incident Support and Training Officer at Police Scotland, as a checklist for Scottish businesses this National Computer Security Day.
Five practical tips to avoid a cyber attack:
To find out more on how Business Gateway can help your business, visit:
Or to book your place on the upcoming webinar ‘How to stay secure online’ visit:
