Phishing!

Part of my job is to facilitate requests for phone software training for any of our staff.

I requested one a few days ago and received an e-mail from Bell advising me that there were missing information in my request and directed me to a link. I clicked on the link and got stuck because the site required Bell Account information.

Gut feel told me there was something wrong so I called Help Desk. Further checking by Help Desk informed me that it was a clear example of phishing! It was a fake Bell website - and if I entered our Bell account information I would have given them a chance to use that account for whatever purpose they want.

That was close! How easily could I have entered any information and that would have caused havoc in our systems.

How can you get ripped off by thieves? Let us count the ways!

1. Phall for Phishing. Most folks are aware of phishing, where criminals use spam emails or popup windows to trick people into disclosing personal information. Keep in mind the bad guys are always refining their methods!

2. Shoulder surfing. When logging onto your laptop and desktop, beware of people standing nearby, hoping to catch sight of your passwords.

3. The old-fashioned way. Fraudsters steal wallets, purses and laptops, which likely contain valuable personal information.

4. Social engineering. Thieves pose as government officials or corporate employees and call victims asking for personal information. This is usually done by convincing the victim the information is needed to complete a transaction.

5. The dumpster dive. Criminals rummage through trash, recycling,or paper shredders to find documents containing personal information.

"Trust, but verify" - Ronald Reagan

Photography. . .Kodachrome

Remember when photography was such a big thing for NSC employees? Although an expensive hobby, some NSC employees did get into it. I'm not sure if those hobbyist used Kodachrome during that time and if they can relate to this piece of news.

* * *
In June 22 2009, Kodak announced to retire KODACHROME Film, concluding its 74-year run.

This is the famous photo by well-known professional photographer Steve McCurry of a young Afghan girl. Cover of National Geographic Magazine in 1985, taken using KODACHROME Film. A true Kodachrome moment.

Sad news for those professional photographers who love Kodachrome but the world of photography moves on giving way to newer films and digital.

For Kodachrome lovers, visit this Tribute to Kodachrome.

* * *
An Invitation :

With this post I am also inviting everyone to submit photos their staycations, vacations, picnics, get togethers, and whatevers.

Maximum of 4 photos will do. It can be sceneries of the places you've been, former NSC employees you met, or just interesting photos of wherever you are..

E-mail them to me at emarene_ph(at)yahoo(dot)com -- and it will be posted (with proper acknowledgements) in this blog. (No long write ups necessary, unless you want to.)

Phishing, Smishing, Vishing

With all the hype on this April Fool virus "Conficker" - time to know the names of some social engineering tactics . (Social engineering is the act of manipulating people into performing actions or divulging confidential information).

Phishing: attempts to acquire sensitive information such as usernames, pass­words and credit card details, by masquerading as a trustworthy entity typically by e-mail or instant messaging. It often directs users to enter details on a very authentic looking website.

SMiShing (or Smashing): victims receive SMS messages (text message) along these lines: "We're confirming you've signed up for our service. You will be charged $20 monthly unless you cancel your order on this URL: www.(site).com." When visiting the URL, victims are prompted to download a program which turns out to be a computer virus.

Vishing: is a combination of voice and phishing which allows for caller ID spoofing. Very hard to trace, vishing is typically used to steal credit card numbers or other information used in identity theft.

One example of how it might work is when a victim answers a call with an automated recording warning them that their credit card has had fraudulent activity. The message then instructs the person to call a phone number immediately. When they call the number, it is answered by automated instructions to enter their credit card or bank account number on the key pad. Once the account number is entered, the visher has all the information necessary to use the card.

Don't be fooled by phishing, smishing or vishing!

• Never divulge personal or confidential information by emails, text messages or phone calls.
• Don't click on links and URL's embedded in e-mails or text messages.
• If you receive a call or e-mail directing you to act immediately call the phone number on the back of your debit /credit card, or statement.

Just a reminder.