A Cyber Security Expert's Insight into the #1 Online Threat Right Now

[simonb]

The internet has transformed how we connect, shop, and manage daily tasks, but it also comes with risks. Online scams are on the rise, with everything from phishing emails and fake websites to clever social engineering tactics being used to trick people. Cybercriminals are getting smarter, making it more important than ever to stay alert. In this Cyber Security Awareness Month we want to give you some insights and tips.

Currently, scams are a trillion-dollar business. And according to a new survey, 34% of people experienced a cyber scam in 2023 while a shocking 85% reported receiving a digital scam attempt. To help you protect yourself from this growing threat, we sat down with Laura Kankaala, a renowned cyber security expert and Head of Threat Intelligence at F-Secure.

What does the current ‘scamscape’ – the scam landscape – look like?

“In 2024, we face a contradiction. Our technology and security measures have improved significantly. But because our lives are so deeply integrated with the digital world, the impact of scams is more severe than ever.

When someone falls victim to a cyber attack today, it's almost always due to some form of manipulation. Scammers use scare tactics, false promises, and emotional manipulation, among other tricks to get what they want. They also try to get our attention by directly contacting us, getting us to click on a fake ad, or positioning their scam site at the top of Google results. Honestly, just about every deceitful tactic you can think of is part of their arsenal.

We've already seen how AI can be used for malicious purposes, like creating fake voices and images. In 2024, we'll witness in real-time how AI and other tools enhance the sophistication and effectiveness of scams. Unfortunately, this means scams are likely to become the primary method of cyber attacks targeting consumers.”

What kind of scams are people most likely to face online?

“I hate to say it, but it depends on what kind of activities they are engaging in online. For sure, there are "generic" scams that are spammed, for example, to our emails or as text messages. But today, the threat landscape is very broad and fragmented. Phishing, malware, fake ads, fake websites, and fake profiles are merely a means to an end leveraged by scammers.

Do you use social media? Buy things online? Are you using online dating apps? Playing games online? All these online experiences have scammers benefiting from them – contacting us, luring us to malicious websites, and tricking us into sharing our personal data or sending money.

No matter what you're doing online, there's a scammer out there looking to exploit that activity.”

What are scammers after?

“Although we can't physically see or touch it, our data is extremely valuable to scammers. Credentials for social media accounts, streaming services and payment platforms are frequently traded on illegal marketplaces and through instant messaging apps.

However, it doesn't end there – credit card details, social security numbers, utility bills, home addresses, email addresses, and phone numbers are also at risk. For the right price, almost any piece of personal data can be sold on the dark web to scammers who are eager to exploit our most sensitive information for their gain.

Then, of course, there is our money. And many scammers simply want to trick us into giving this up, whether that’s by getting us to pay for something that never arrives, granting access to our bank accounts, or another malicious method.”

What should everyone understand about scams and how to protect themselves from them?

“Everyone should know how easy scams are to carry out, thanks to modern technology and the widespread availability of the internet. In fact, in many parts of the world, you're more likely to be scammed online than in the real world.

Generative AI only throws fuel on the fire by making it possible to generate text in multiple languages as well as realistic audio, video, and images. This technology helps scammers deceive us into believing things that aren’t real, making their schemes more convincing and harder to detect.”

Essential tips for avoiding scams

• Don’t open links: Instead go to the official site directly through your browser.
• Check the URL: Scam web addresses often include small mistakes that give them away.
• Protect your devices: Scammers may trick you into installing malware – block it with antivirus.
• Protect your online accounts: Use strong and unique passwords across all online services and two-factor authentication where available.
• Don’t send money to strangers: If you haven’t met them, don’t send them money regardless of who they claim to be.

What are the red flags of modern scams?

“Scammers are master manipulators, and they use all manner of techniques and tactics to get what they want from us, no matter how immoral. Whether they’re pretending to be our dead relatives or convincing us that they’re ‘the one’– it’s amazing how far they’ll go simply for the sake of money. 

Generally, scammers have an end game, and they want you to do something: to click on a link, to download a file, or provide them with sensitive information. So always consider these signs ‘red flags’, especially if you’re not familiar with the person sending requesting them. For example, it could be considered a red flag if you receive a link to a website out of the blue.

Often, scammers will go to great lengths to build our trust, and only after a lengthy conversation will they ask you to send them money or cryptocurrency. At this stage, the person lured into the scam might be too deep into it to see the warning signs. Or, especially in more sensitive circumstances such as romance or investment scams, the victim may feel too much shame to admit they’ve been tricked. Therefore, it's important for family members and friends to keep a lookout on their loved ones – they might be neck deep in a love or an investment scam and be struggling to find a way out.”  

What tips can you give for identifying and avoiding scams?

1. “Check the website URL (i.e. the web address). Is it what you're expecting it to be? For example, if you know your bank's URL is yourbank.com, it should be exactly that and nothing else. Scammers obtain fake domains which might look similar, but upon closer inspection are not what they should be.
2. Remember that anyone can pretend to be anything online. Plus, the measures we trust to prove authenticity can easily be faked. For example, it's easy to purchase reviews for products or apps, buy likes or subscriptions to make social media accounts look more trustworthy, and so on. So, take these measures with a grain of salt.
3. It's not easy to spot fake things online, but try to trust your gut. If something puts you off, put it on hold. Ask for a second opinion from a friend. Get more information: try to figure out if the person you're talking to is real and if someone has had a negative experience with a product or a site online.

Ultimately, it's up to us to reclaim our power and protect ourselves against scams by combining education, best practices, vigilance, expertise, and technology. As we are deeply connected to the devices that enable our online experiences, it's crucial we're taking the necessary steps to safeguard them.”

TalkTalk SuperSafe

To keep you protected and your devices safe use TalkTalk SuperSafe. It includes:

• Protection against viruses, ransomware, malicious websites and phishing scams
• A password manager for safe login on all devices 
• Parental controls to keep your children safe 

With TalkTalk SuperSafe you can protect up to 10 devices keeping all of the family’s smartphones, tablets and computers safe. Go to My Account and add SuperSafe to your account. SuperSafe online security is just £6 per month.

Once you’ve selected SuperSafe in My Account, you will receive an email to install the app onto your devices.