Introduction to Information Security

Other Common Threats

• THREAT #7: BOTNET
• THREAT #8: WORM
• THREAT #9: TROJAN HORSE
• THREAT #10: BLENDED THREAT
• THREAT #11: DENIAL-OF-SERVICE ATTACK (DOS ATTACK)

Scams

• There are four different types of scams:
• Viruses and worms
• Phishing
• SPAM
• Chain Letters

Email Safety

Viruses and worms

• What are they?
• Emails that are send with attachments that are actually viruses
• They often look like emails from someone you know

• Example:

• NEVER send your personal information via email. Social security, bank, etc. Especially to people you don’t know.

Phishing

• Phishing: a trick to get you to enter personal information such as
• Credit card information
• Banking info
• Social security number
• Passwords
• Email or physical address
• Example:
• You receive an email from a Nigerian prince who needs you to help get $50 million out of Nigeria. He must leave in secret and transfer the money to your account. He promises you $5 million after he gets to safety.
• There probably never was a Nigerian prince, and whomever sent the email will take all your money.

Password Scam Example

• “Dear Valued PayPal Customer, You are receiving this email as a part of a security check. Someone has been accessing your PayPal account and attempting to take your money. Please verify you are the owner of this account by sending us your login name and password.”
• Even if this looks exactly like a PayPal email, real companies never ask for your information over email.

Spam

• Spam is unsolicited commercial emails—unwanted ads in your inbox
• May be to phish for information or transmit a virus
• Sample subjects:
• RE: Pharmacy sale 80% off!
• Ama-zingly fresh sk!n with n0 wrinkles
• We renamed your account
• From an old friend
• Don’t Miss Out!
• Don’t even open these emails