The internet is one of the most powerful resources available, but it can also be one of the most dangerous. To help members of the Case Western Reserve University community protect themselves online and reduce chances of being targeted by online attacks, the Office of Information Security offers several tips.
Read on to learn more.
1. Be aware of common online threats.
These threats include:
- Piracy/suspicious sites: Because these sites often operate outside the law, they may rely on questionable sources of money to stay online. This can lead to unsafe ads, harmful content or even scams.
- Hidden/redirected links: Some sites hide where their links really go to make it look trustworthy. Clicking on a suspicious link could download harmful files or even run bad code on your device
- “Clickfix”: This cyberattack technique finds resources that give commands to enter into your command line to “fix” issues, but they execute malicious programming onto your computer.
- Hidden identities: In a world where you don’t need to show your face to communicate it’s always been easy to impersonate someone else to gain your trust, and with the advent of AI and advanced face tracking it’s possible to even look the part.
- Stalking: Depending on your online presence, it’s possible for scammers to learn private information, like your routine, where you live and what you might make your password, and they could defraud or extort you based on that information.
2. Know the difference between safe and unsafe link suffixes.
Safe links, which feature strict requirements for maintaining its suffixes, generally include “.gov,” “.mil” and “.edu”. There are also common and often legitimate links that should still be proceeded with caution, such as “.com”, “.org,” “.net,” “.us,” “.uk,” “.io” and “.ai.”
Suspicious links to avoid (unless sure of the site’s contents) include those noted as “.ru,” “.br” and “.vu.”
3. Practice safe browsing habits.
Habits that you can follow to help protect personal information and avoid potential online threats, include:
- Use privacy tools: Consider using a private browsing window and a virtual private network (VPN).
- Watch for suspicious ads: Be wary of websites with intrusive, suspicious looking or explicit ads, as these may indicate that a site is not trustworthy.
- Review privacy policies: While a privacy policy may be challenging to read, take a moment to see how the website collects and uses your information.
- Check the fine print: When entering your information, look for fine print and checkboxes that may be able to opt you out of marketing and data sharing
- Avoid deceptive ads: Some ads disguise themselves as a computer alert or a download button. If you’re downloading something, double check that the “Download” button isn’t actually an ad.
- Download files with caution: Even if a file looks to be safe, be careful when downloading files from websites. Malware can be hidden inside common file types, including Word and Excel documents.
4. Protect your privacy on social media.
Social media can be a great way to connect with others and stay in touch. However, scammers can use these platforms to deceive people, and careless sharing can affect your privacy and online reputation. Follow these tips to help protect yourself:
- Limit messages: Only allow messages from people you know or trust.
- Verify identities: Don’t assume someone is trustworthy just because of the profile or posts.
- Review privacy settings: Consider making your accounts private and deleting accounts you no longer use.
- Think before you post: Make sure your photos, videos and messages do not share personal, sensitive or embarrassing information that scammers or employers could see.
- Be mindful of personal information: Pay attention to privacy policies and requests for personal information. Ask yourself: “Do I really need to share this information to use this website or service?”.
If you believe any of your CWRU accounts may have been compromised, contact the CWRU Help Desk at 216.368.4357 or email help@case.edu. For general or non-urgent information security questions, email askinfosec@case.edu.
