Computer Group Webinar Session 1 Handout (Online/Internet Fraud)

Total Page:16

File Type:pdf, Size:1020Kb

Computer Group Webinar Session 1 Handout (Online/Internet Fraud) NORTH KENT MIND – COMPUTER GROUP WEBINAR SESSION 1 HANDOUT (ONLINE/INTERNET FRAUD) In this session, we will be covering online fraud (internet fraud) and how to protect you against it. What is Online/ Internet Fraud? Internet fraud is a type of fraud or deception, which makes use of the Internet and could involve hiding of information or providing incorrect information for the purpose of tricking victims out of money, property, and inheritance. The most common online frauds include: Greeting Card Scams Whether it’s Christmas or Easter, we all get all kind of holiday greeting cards in our email inbox that seem to be coming from a friend or someone we care. Greeting card frauds are another old Internet scams, If you open such an email and click on the card, you usually end up with malicious software that is being downloaded and installed on your operating system. The malware may be an annoying program that will launch pop- ups with ads, unexpected windows all over the screen. If this happens, your computer may also start sending private data and financial information to a fraudulent server controlled by IT criminals. Greeting Card Scam Example: 1 North Kent Mind – Computer Group Webinar Session 1 Handout Phishing Email Scams Phishing is a type of online scam where criminals send an email that appears to be from a legitimate company and ask you to provide sensitive information. This is usually done by including a link that will appear to take you to the company’s website to fill in your information – but the website is a clever fake and the information you provide goes straight to the crooks behind the fraud. Phishing Email Scam Example: Online Dating (Romance) Scams Online dating apps are very popular these days and they are a great way for people to meet their future partners. A romance scam usually takes place on social dating networks, like Facebook, or by sending a simple email to the potential target, and affect thousands of victims from all over the world. 2 North Kent Mind – Computer Group Webinar Session 1 Handout Online Dating (Romance) Scam Example: Fake Antivirus Software Scams If you’ve ever seen one of those pop-ups telling you that your computer is in dire need of antivirus rescue, you’ve come across this scam. Also known as scareware, these fake antivirus ads want you to panic and pay in order to secure what you believe to be the solution to your malware problems. Some creators of fake antivirus apps manage to list their scam software in legitimate download portals. When you install them on your device, they’ll appear as though they’re performing virus scans, but they don’t actually have any antivirus capabilities. Instead, they’re adware in disguise, created solely for the purpose of showing you ads when you use them. 3 North Kent Mind – Computer Group Webinar Session 1 Handout Fake Antivirus Software Scam Example: What should you do if you have been a victim of fraud? Immediately report any lost or stolen cards or suspected fraudulent use of your card to your card company. You should also report lost or stolen cheque books or any missing cheques. Banks and companies have 24-hour emergency numbers printed on account statements. Report the offence to the relevant bank or card company, which will then be responsible for reporting the matter to the police. If the theft of your cards or cheques involved another crime – for example, if your bag was also stolen – you should make sure it is reported to the police. Remember to keep a record of all communications. For a more comprehensive list of online frauds please visit: https://www.actionfraud.police.uk/a-z-of-fraud/online-fraud): Account takeover Internet dialler scam Advance fee frauds Investment fraud and land Bank card and cheque fraud banking scams Business directory fraud Loan scams Business opportunity fraud Lottery scams Charity donation fraud Mass marketing fraud Clairvoyant or psychic scams Miracle health scams Click fraud Money muling Domain name scams Online shopping fraud 4 North Kent Mind – Computer Group Webinar Session 1 Handout Fraud recovery fraud Plastic card fraud Health scams Rental fraud Identity fraud Romance scams Internet auction fraud Work from home scams Common Terms Used Anti-virus - software used on your computer to prevent, detect, and remove malware, including computer viruses, worms, and trojan horses. Some examples of anti-virus software are McAfee, Norton, and Kapersky. Keyblogger - sometimes also called a keystroke logger or system monitor, is a type of surveillance technology used to monitor and record each keystroke typed on a specific computer's keyboard. Malware - or malicious software, is any program or file that is harmful to a computer user. Types of malware can include computer viruses, worms, Trojan horses and spyware. Scareware - malicious computer programs designed to trick a user into buying and downloading unnecessary and potentially dangerous software, such as fake antivirus protection. Trohan - a Trojan horse, or trojan, is any malware which misleads users of its true intent. The term is derived from the Ancient Greek story of the deceptive Trojan Horse that led to the fall of the city of Troy. Worms - is a malicious, self-replicating program that can spread throughout a network without human assistance. Additional Courses Available North Kent Mind is offering people the opportunity to learn basic Microsoft Office and Internet skills (over a 12 week period). Computer Club has a friendly, relaxed atmosphere where learners can study at their own pace. Held every Friday at the Dartford Adult Education Centre (Summerhill Road, Dartford DA1 2LP) 12:30 until 2:30. If you are interested please contact us on 01322 291380 or email [email protected] 5 North Kent Mind – Computer Group Webinar Session 1 Handout .
Recommended publications
  • Identity Theft Literature Review
    The author(s) shown below used Federal funds provided by the U.S. Department of Justice and prepared the following final report: Document Title: Identity Theft Literature Review Author(s): Graeme R. Newman, Megan M. McNally Document No.: 210459 Date Received: July 2005 Award Number: 2005-TO-008 This report has not been published by the U.S. Department of Justice. To provide better customer service, NCJRS has made this Federally- funded grant final report available electronically in addition to traditional paper copies. Opinions or points of view expressed are those of the author(s) and do not necessarily reflect the official position or policies of the U.S. Department of Justice. This document is a research report submitted to the U.S. Department of Justice. This report has not been published by the Department. Opinions or points of view expressed are those of the author(s) and do not necessarily reflect the official position or policies of the U.S. Department of Justice. IDENTITY THEFT LITERATURE REVIEW Prepared for presentation and discussion at the National Institute of Justice Focus Group Meeting to develop a research agenda to identify the most effective avenues of research that will impact on prevention, harm reduction and enforcement January 27-28, 2005 Graeme R. Newman School of Criminal Justice, University at Albany Megan M. McNally School of Criminal Justice, Rutgers University, Newark This project was supported by Contract #2005-TO-008 awarded by the National Institute of Justice, Office of Justice Programs, U.S. Department of Justice. Points of view in this document are those of the author and do not necessarily represent the official position or policies of the U.S.
    [Show full text]
  • The Impact of Digital Advancement in Banking Industry Marketing: the Case of Indonesia
    Proceeding Book of The 4th ICMEM 2019 and The 11th IICIES 2019, 7-9 August 2019, Bali, Indonesia ISBN: 978-623-92201-0-5 THE IMPACT OF DIGITAL ADVANCEMENT IN BANKING INDUSTRY MARKETING: THE CASE OF INDONESIA Handy Andriyas, Batara Maju Simatupang, and Kevin Bastian Sirait aFaculty of Economics, Parahyangan Catholic University bMagister Management, Post-Graduate Program, STIE Indonesia Banking School Email: [email protected] Abstract. This article investigates the impact of digital and technological advancement in the Indonesian banking industry based on the perspective of marketing. The application of technology in the marketing field enables the banks to gain a competitive advantage in introducing their product to the potential and current customers. On the other hand, these benefits are also exposing the banks' and its customer to the marketing fraud risk. To find the impact of digital and information technology (IT) utilization with the addition of marketing fraud risk, the questionnaire in this research is answered by the directors of the banks' that are classified to the Book 4 category in Indonesia. The linear regression analysis is implemented to find the relationship between the utilization of IT and marketing fraud risk to the impact of technological and digital advancement. Based on the analysis conducted in this research, it is found that the advancement of digital and technological advancement has a positive relationship with marketing fraud risk and IT utilization by the banks, and it is also found that marketing fraud risk may also increase if the banks increase their utilization on IT in regards to introducing their product to the current and potential customer.
    [Show full text]
  • Managing Your Payment Fraud Risk: Tips & Red Flags
    Treasury & Payment Solutions Information Reporting & Risk Management Managing Your Payment Fraud Risk: Tips & Red Flags No matter the type of business, the risk of fraud is always present. We are committed to providing you with support to help minimize the exposure of your BMO® bank account to fraud. This Tips & Red Flags checklist includes a number of best practices you can implement to help prevent payment fraud and protect yourself from data breaches. We strongly recommend that you review and implement the items contained in the checklist and share with other members in your organization. Need assistance? If you have any questions about the information in this checklist, please contact your BMO Representative. To report suspicious emails and websites [email protected] For BMO Online Banking for Business support 1-800-565-6444 The material in this guide provides commonly-known information about fraud trends and BMO’s observations about controls and activities. The guide is intended to provide you and your company with information and helpful tips. The guide is not exhaustive and does not constitute legal advice to you or your company. You should always seek independent legal or professional advice when implementing fraud or risk initiatives. Common fraud types and prevention tips Malware Tips & Red Flags Malware AKA malicious software 3 Download IBM Trusteer Rapport®*, a free software download Malware infiltrates your computer system and performs available on the sign in page of BMO Online Banking for Business, 1 unauthorized activities and transactions. Here are a and accessible from bmo.com. It works with existing firewall and few examples: antivirus software to provide an additional layer of security.
    [Show full text]
  • An Analysis of the Nature of Groups Engaged in Cyber Crime
    International Journal of Cyber Criminology Vol 8 Issue 1 January - June 2014 Copyright © 2014 International Journal of Cyber Criminology (IJCC) ISSN: 0974 – 2891 January – June 2014, Vol 8 (1): 1–20. This is an Open Access paper distributed under the terms of the Creative Commons Attribution-Non- Commercial-Share Alike License, which permits unrestricted non-commercial use, distribution, and reproduction in any medium, provided the original work is properly cited. This license does not permit commercial exploitation or the creation of derivative works without specific permission. Organizations and Cyber crime: An Analysis of the Nature of Groups engaged in Cyber Crime Roderic Broadhurst,1 Peter Grabosky,2 Mamoun Alazab3 & Steve Chon4 ANU Cybercrime Observatory, Australian National University, Australia Abstract This paper explores the nature of groups engaged in cyber crime. It briefly outlines the definition and scope of cyber crime, theoretical and empirical challenges in addressing what is known about cyber offenders, and the likely role of organized crime groups. The paper gives examples of known cases that illustrate individual and group behaviour, and motivations of typical offenders, including state actors. Different types of cyber crime and different forms of criminal organization are described drawing on the typology suggested by McGuire (2012). It is apparent that a wide variety of organizational structures are involved in cyber crime. Enterprise or profit-oriented activities, and especially cyber crime committed by state actors, appear to require leadership, structure, and specialisation. By contrast, protest activity tends to be less organized, with weak (if any) chain of command. Keywords: Cybercrime, Organized Crime, Crime Groups; Internet Crime; Cyber Offenders; Online Offenders, State Crime.
    [Show full text]
  • Fraud - the Facts 2020
    FRAUD - THE FACTS 2020 The definitive overview of payment industry fraud THE DEFINITIVE OVERVIEW OF PAYMENT INDUSTRY FRAUD | FRAUD THE FACTS 2020 | 1 UK Finance is the collective voice for the banking and finance industry. Representing more than 250 firms across the industry, it seeks to enhance competitiveness, support customers and facilitate innovation. The Economic Crime team within UK Finance is responsible for leading the industry’s collective fight against economic crime in the UK, including fraud, anti-money laundering (AML), sanctions, anti-bribery, corruption and cyber- enabled crime. UK Finance seeks to ensure that the UK is the safest and most transparent financial centre in the world - thus creating a hostile environment for criminals by working with members, law enforcement, government agencies and industry. We represent our members by providing an authoritative voice to influence regulatory and political change, both in the UK and internationally. We also act as advocates on behalf of members to both media and customers, articulating the industry’s achievements and building its reputation. We do this by: • Managing the industry strategic threat management process, which provides an up-to-the- minute picture of the threat landscape. • Sponsoring the Dedicated Card and Payment Crime Unit (DCPCU), a unique proactive operational police unit with a national remit, formed as a partnership between UK Finance, the City of London Police, and the Metropolitan Police. • Managing intelligence sharing through our Economic Crime Industry Intelligence Unit and the Fraud Intelligence Sharing System (FISS) which feed intelligence to police and other agencies in support of law enforcement activity. • Providing a single point of contact for companies suffering data breaches, to ensure compromised account information can be speedily, safely and securely repatriated to the banks.
    [Show full text]
  • December 2013 Feature Article: the Year of Surviving Dangerously: Highlights from We Live Security 2013
    December 2013 Feature Article: The Year of Surviving Dangerously: Highlights from We Live Security 2013 Table of Contents The Year of Surviving Dangerously: Highlights from We Live Security 2013 .............................................................3 2013: a Scammer’s Eye View ................................................................................................................................... 11 ESET Corporate News .............................................................................................................................................. 18 The Top Ten Threats ................................................................................................................................................ 18 Top Ten Threats at a Glance (graph) ....................................................................................................................... 21 About ESET .............................................................................................................................................................. 22 Additional Resources ............................................................................................................................................... 22 This month we decided to present a retrospective of all 2013, pertained to Java vulnerability CVE-2013-0422 being added to a so we develop and delve into the most prominent threats that couple of popular exploit packs, thus making it more accessible each month had. Also published an article that specifically
    [Show full text]
  • Employee Fraud Detection Under Real World Conditions
    Zurich Open Repository and Archive University of Zurich Main Library Strickhofstrasse 39 CH-8057 Zurich www.zora.uzh.ch Year: 2010 Employee fraud detection under real world conditions Luell, J Abstract: Employee fraud in financial institutions is a considerable monetary and reputational risk. Stud- ies state that this type of fraud is typically detected by a tip, in the worst case from affected customers, which is fatal in terms of reputation. Consequently, there is a high motivation to improve analytic de- tection. We analyze the problem of client advisor fraud in a major financial institution and find that it differs substantially from other types of fraud. However, internal fraud at the employee level receives little attention in research. In this thesis, we provide an overview of fraud detection research with the focus on implicit assumptions and applicability. We propose a decision framework to find adequate fraud detection approaches for real world problems based on a number of defined characteristics. By applying the decision framework to the problem setting we met at Alphafin the chosen approach is motivated. The proposed system consists of a detection component and a visualization component. A number of imple- mentations for the detection component with a focus on tempo-relational pattern matching is discussed. The visualization component, which was converted to productive software at Alphafin in the course of the collaboration, is introduced. On the basis of three case studies we demonstrate the potential of the proposed system and discuss findings and possible extensions for further refinements. Posted at the Zurich Open Repository and Archive, University of Zurich ZORA URL: https://doi.org/10.5167/uzh-44863 Dissertation Originally published at: Luell, J.
    [Show full text]
  • Technical Report RHUL–MA–2014– 2 01 September 2014
    Leveraging knowledge sharing for preventing and investigating on-line banking frauds: On-line Fraud Centre Salvatore Camillo Zammataro Technical Report RHUL–MA–2014– 2 01 September 2014 Information Security Group Royal Holloway, University of London Egham, Surrey TW20 0EX, United Kingdom www.ma.rhul.ac.uk/tech Salvatore Camillo “Toto” Zammataro Leveraging knowledge sharing for preventing and investigating on-line banking frauds: On-line Fraud Centre MSc Information Security Project Report Supervisor: Dr John Austen Submitted as part of the requirements for the award of the MSc in Information Security at Royal Holloway, University of London. 1 EXECUTIVE SUMMARY For social, technological and political reasons electronic transactions are now the most used payment method in Europe. As such, fraudsters have been focusing on On-Line transactions to gain money through Phishing and Crimeware. These kind of frauds generates losses for EU citizen of an estimated value of 250M€/year. Banks and Law Enforcement Agencies are engaged in the prevention, detection and prosecution of this crime. Some limit of actual legislation (i.e. Data Protection, International Treaties on cyber-crime, Fraud prosecution laws), low speed of communication between Banks and LEAs, and the fraudster’s speed in taking advantage of weaknesses of the system leave the space for improvement. To improve the countermeasures that Banks and LEAs have deployed, this paper suggests the adoption of an InfoSharing Service between national banking system and Law Enforcement Agencies. This service uses a “hub-and-spoke” framework, where LEA is the hub and banks are the spokes. Target of the service is to shorten the time needed to communicate from Banking Fraud Managers to LEAs, and to share the relevant information on fraudster accounts in the whole banking industry.
    [Show full text]
  • Your Journey Through This Pack
    Detect and Protect – Fraud and Cybercrime Helping our customers protect their business This document is for information purposes only. Following any guidance in this document may help reduce the risk of fraud but will not eliminate it or guarantee that the types of fraud described, or other fraud, will occur. Welcome Your journey through this pack Insight Types of Fraud Protecting your Business Support Providing you with insight into facts and Understanding the different types of How to protect your business when How NatWest can provide tips on figures on how fraud has impacted the fraud will help you keep one step ahead using our channels: improving your cyber security market - Bankline Fraud Methods include: - Bankline Direct - Social engineering We have also included links to relevant - Insider fraud websites for mobile and online - Invoice fraud customers - Payment: Card, Cheque and UK Domestic - Malware & Ransomware 2 Insight Providing you with insight into facts and figures on how fraud has impacted the market Insight How Fraud and Cybercrime affects you One quarter of UK businesses admit they’ve fallen victim to a financial scam or have experienced attempted scams since 2014. Despite this trend, 49% believe it’s unlikely to happen to their business Cybercrime costs the UK Economy £15 billion a year Cyber crime is forecast to grow from $3 trillion (globally) in 2015 to $6 trillion by 2021 The volume of attacks seeking out Internet of Things devices increased by 310% in 2016 There were 14,673 reported cases of phishing attacks
    [Show full text]
  • 7Th Annual Risk Americas Convention - 2018
    7th Annual Risk Americas Convention - 2018 Fraud, Cybercrime and Reputation Risk – What Organizations Can Do About It Dalit Stern, CPA, CFE Senior Director Enterprise Fraud Risk Management, TIAA New York - May 17, 2018 Agenda The intertwined landscape of fraud and cyber A vibrant marketplace changes the face of fraud Sophistication of social engineering techniques Customers Corporations The impact of cyber risk on fraud and reputation risks what to do about it Q&A 2 Disclaimer The views expressed in this presentation and in today’s discussion are the views of the speaker and do not necessarily reflect the views or policies of TIAA. Examples, charts and metrics are purely for illustrational purposes, and may have been modified or simplified in order to clarify a point. Neither the speaker, nor TIAA, accept responsibility for any consequence of the use of any part of the framework presented herein. 3 The Intertwined Landscape of Fraud and Cyber Assessing the risk of fraud in financial institutions: • Financial institutions continue to be subject to fraud: • In person • Remote fraud (online, interactive voice response (IVR) , paper ) • Consistent trends of money out and account maintenance fraud enabled by cyber incidents • Cyberattacks are becoming a more prominent fraud threat - designed to target: • Customer assets • Financial institution assets • Certain subsectors are more prone to cyber fraud but most see increased activity (e.g., banking, brokerage, retirement 4 insurance, investments) The Intertwined Landscape of Fraud and
    [Show full text]
  • Avoiding Cheque Fraud Scams
    In the UK more than 40% of businesses have experienced fraud in the last year with an average loss of £4,515. To help you protect yourself and your business we’ve created this guide with some key actions to take. Taking some very basic steps can make a real difference to fraudsters’ success rates. CHEQUE FRAUD The illegal use of cheques to acquire funds. CHEQUE FRAUD HOW CAN CHEQUE FRAUD AFFECT YOUR BUSINESS? Cheque fraud can happen in a few different ways. Criminals can steal cheques, create fraudulent cheques or change the name or amount on a legitimate cheque. The following are the main types of cheque fraud: Counterfeit cheques are copy cheques, printed to look exactly like your genuine cheques. A fraudster may use these to try and take money out of your accounts. Forged cheques are genuine cheques that have been stolen and used by a fraudster with a forged signature, in an attempt to take money out of your accounts. Fraudulently altered cheques are genuine cheques that you have written, but a fraudster has altered. Either the fraudster will intercept the cheque and alter it in some way before they try to pay it in e.g. by altering the beneficiary’s name and/or the amount, or they will be the genuine payee but might try to increase the amount payable to them on the cheque. Fraudulent cheques can be given to you as payment for high value goods. After you have released There are also cheque fraud the goods. the cheque is returned scams that fraudsters may use as fraudulent.
    [Show full text]
  • Copy of Incident Management Procedures & Guidance
    CONFIDENTIAL WBC.100.118.8029 Incident Management Procedures & Guidance FOR INTERNAL USE ONLY Document Owner: Group Head of Operational Risk & Insurance Date updated: December 2015 Version: 2.9 Location: Risk Document Library Incident Management Procedures & Guidance Page 1 of 62 CONFIDENTIAL WBC.100.118.8030 Document version control No. Date Version Author Description 1 - 5 11/06 V0.1 Mike Purvis Drafting to support introduction of new process at 1 Dec 06. 6 8/1/07 V0.2 Mike Purvis Drafting to reflect introduction of new processes at 31 Dec 06 7 22/1/07 V0.3 Mike Purvis Drafting to reflect new systems in February 07 8 06/02/07 V1.0 Steven Bardy Drafting to reflect Business Unit input and changes to reflect migration to new Policy Framework 9 15/02/07 V1.1 Aislinn Strang ORMF review amendments 10 07/08/07 V1.2 Maebehe Garcia Drafting to clarify issues related to credit and market risks and other amendments 11 24/04/08 V1.5 Andrew Leslie Annual Review Update for Rapid Recovery, Insurance Threshold and APS115 12 23/12/08 V1.6 Dung Thien Tran Update for the implementation of ACCORD 13 22/04/09 V1.7 Andrew Leslie Add hand written marked up edits to electronic version 14 15/05/09 V1.8 Andrew Leslie Simplified content. Integrated version to include SGB. 15 27/07/09 V2.0 Luke Tazelaar Updated from BU feedback 16 01/03/12 V2.1 Nadine Schaefer- Updated to reflect Policy updates and add additional Medappa guidance 17 02/04/12 V2.2 David Tan Updated to include operational risk related to project costs 18 24/04/12 V2.3 David Tan Updated to clarify about the treatment of near misses 19 05/06/12 V2.4 David Tan .
    [Show full text]