Social Implications: Email and Internet (Grade 10 NSC Matric Computer Application Technology): Revision Notes
Social Implications: Email and Internet Safety
Introduction to cybercrime
In today's digital world, cybercrime has become a serious threat that affects individuals, businesses, and governments worldwide. Understanding these threats is the first step in protecting yourself online.
Real-World Case: The 2015 Banking Cyberattack
In 2015, computer security firm Kaspersky Inc. discovered a major cyberattack where Russian hackers targeted banks around the globe. They used a phishing attack to infect computers on the bank's internal network with a virus. Once they gained access to a bank employee's computer, they used it to access the security cameras inside the bank's offices, demonstrating just how sophisticated these attacks can be.
The following sections will help you recognise common email and internet threats and learn how to defend against them.
Common email and internet threats
Cybercriminals use various methods to attack computer systems and steal personal information. Here are the most common threats you should be aware of, along with their descriptions and how to protect yourself from them.
Virus
A computer virus is any programme that infects a user's computer and acts in a way that will harm users without their knowledge. Users typically don't install viruses intentionally - instead, viruses spread automatically without users knowing about them. These malicious programmes can damage your files, slow down your computer, or steal your personal information.
Protection methods:
- Keep your antivirus software updated regularly
- Avoid installing or running programmes you don't know or trust
- Never download executable email attachments from unknown sources
- Always scan flash drives and external storage devices before using them
Trojans
A Trojan horse is another type of virus that pretends to be a useful piece of software. However, once you install it, the Trojan infects your computer and can damage it in many ways.
One of the most dangerous types of Trojans is called a keylogger, which records every key you press on the computer and sends the information to a hacker. This allows hackers to easily discover your usernames and passwords for various accounts.
Protection methods:
- Never open emails or download attachments from unknown sources
- Delete suspicious messages immediately
- Install and maintain updated antivirus software
- Be cautious when downloading software from the internet
Worms
A worm is a type of virus that can travel from one computer to another without any human interaction. Worms create copies of themselves and can send thousands of duplicates to computers on the same network. This allows worms to spread rapidly across networks, making them very difficult to remove once they've infected a system.
Protection methods:
- Avoid clicking on links in emails from unknown sources
- Don't download attachments from emails or instant messages from unfamiliar senders
- Install antivirus software with a software firewall to block potential network threats
- Keep your operating system and software updated
Hoax
Hoax warnings are used by people as "scare alerts" to trick others. These warnings are typically shared by users who genuinely believe they're helping others by spreading the warning. The most common virus hoax is the "email hoax," where an email falsely notifies recipients about a new destructive virus and encourages them to forwards the email to everyone in their address book.
This results in thousands of unnecessary emails that can overload email systems, even though no actual virus exists.
Protection methods:
- Don't open emails or download attachments from unknown sources
- Delete suspicious messages to prevent the problem from spreading
- Install antivirus software that will scan every file you download
- Verify information with reliable sources before sharing warnings
Phishing and email spoofing
Phishing and email spoofing attacks attempt to obtain sensitive information such as usernames, passwords, and banking details by sending emails that appear to come from official sources. These emails will either directly request sensitive information or redirect users to fake websites that look official, where criminals can steal the information you enter.
Critical Rule: No legitimate company will ever ask for sensitive information like usernames, passwords, or banking details via email or phone. If you receive such a request, it's always a scam.
Protection methods:
- Never send sensitive information like usernames and passwords via email
- Always verify that email addresses and domain names are correct
- Be suspicious of any email that looks too good to be true
Pharming
Similar to phishing, pharming attacks create official-looking websites that request sensitive information. A common pharming attack allows users to "change" their passwords, but instead of changing passwords, the user's username and password are recorded, and their account gets taken over by cybercriminals.
Protection methods:
- Never follow links to change your password unless you specifically requested a password change
- Always verify the domain name and web address of websites requesting sensitive information
- Type website addresses directly into your browser rather than clicking links
Ransomware
Ransomware is a particularly malicious virus that locks all of a user's files using strong encryption, making it physically impossible to unlock these files on your own. The only way to regain access to your files is by paying the virus creator a specific amount of money, usually within 72 hours.
This type of attack can be devastating for individuals and businesses alike. Research shows that even paying the ransom doesn't guarantee you'll get your files back, and it encourages criminals to continue their attacks.
Protection methods:
- Ransomware is essentially a virus, so the same protective advice applies
- Keep regular backups of important files
- Research online to find out what happened to other users who either paid or didn't pay the ransom
- Consider whether your files are worth the amount being demanded
Computer crimes
Although information and communication technologies (ICTs) are incredibly useful, various computer crimes can occur if you're not careful enough with your digital security. Computer crimes, also referred to as "cyber crimes" or "e-crimes," fall into several main categories that can seriously impact your personal and financial wellbeing.
Information theft
Information represents one of the most valuable resources available to people looking to exploit or harm others. Cybercriminals commit fraudulent acts by accessing personal information through hacking into someone's computer files. We call these criminals cybercriminals.
Cybercriminals can access several types of valuable information:
Personal information: This includes details like your identity number, which can be used to steal your identity. Cybercriminals can use personal information to open store accounts and apply for loans using your details without your knowledge.
Financial information: Banking details give cybercriminals access to your bank accounts, allowing them to steal money and make unauthorised online purchases.
Social media information: If cybercriminals access your social media accounts, they can exploit your friends and family by impersonating you. They might send messages asking for money or containing viruses that allow them to target more people.
Interests and preferences: Information about your likes and interests can be valuable because it can be sold to companies. These companies then use this information to create targeted advertisements and special offers aimed specifically at you.
Protection strategies:
- Avoid sharing sensitive information unnecessarily
- Use strong, secure passwords to protect your information
- Be selective about which websites you share information with
- If you use your email address for multiple websites, expect to receive spam emails
Data theft
Data theft can refer to two different types of crimes, each requiring different protective approaches.
Unauthorised network access: The first type occurs when a third party gains access to your internet connection without your knowledge. To protect yourself against this form of data theft:
- Protect your network using a username and password
- Keep your username and password secret - don't share them with people you don't trust
- If you suspect someone has gained access to your network, change your username and password immediately
Hotlinking: The second type of data theft is called hotlinking. This happens when someone takes a file or video from their website and links it to your website. This becomes problematic because each time a user clicks on the link to download the file or view the video, your internet bandwidth gets used instead of theirs.
Identity theft
Identity theft occurs when someone else pretends to be you. This crime is very similar to information theft, but here the criminal illegally obtains information about you and then uses details such as your full name, date of birth, passwords, email address, and bank card information to gain access to your bank account or smartphone.
Cybercriminals can use stolen identity information to steal money from you or even sell your personal information to other criminals, creating ongoing security risks that can affect you for years.
Safe internet and email use
To avoid most cybersecurity problems, computer experts recommend following these essential safety rules:
Use secure passwords: Create strong passwords using three or four randomly selected words combined with numbers and symbols. For example, "CorrectHorse2Battery&Staple" is easy to remember but difficult to hack. Avoid using obvious personal information in your passwords.
Pay careful attention to websites and links: Always verify where links are taking you before clicking them. Make sure the web address matches the website you expected to visit. Be particularly cautious with shortened URLs that hide the actual destination.
Don't share sensitive information unnecessarily: While sharing information is part of using the internet, be selective about which websites receive your personal details. If you use your email address for every website you visit, don't be surprised when you start receiving lots of spam emails.
Don't open suspicious emails: You can identify suspicious emails by several characteristics: they come from unknown or suspicious email addresses, they seem too good to be true, they request sensitive information, they contain executable attachments, or they have poor spelling and grammar.
Don't download suspicious programmes or attachments: Never download attachments if you don't know the sender. Even if you know the sender but weren't expecting an attachment, don't open it immediately - your friend may have been hacked and could be unknowingly sending viruses.
Keep antivirus applications updated: Your antivirus software serves as your last line of defence against viruses. By keeping it updated, you ensure it can detect and protect against the latest security threats.
Keep other software updated: Software weaknesses or vulnerabilities can be exploited by hackers to gain access to your computer. Programmers regularly release updates specifically to fix these security vulnerabilities.
Use two-factor authentication when possible: Two-factor authentication prevents anyone from logging into your accounts using just your username and password. Instead, it requires a second factor (usually a physical device like your phone) to access your account. This means your account can only be compromised by someone who has access to both your password and your physical device.
Two-factor authentication is one of the most effective security measures you can implement. Even if hackers obtain your password, they still cannot access your accounts without your physical device.
Key Points to Remember:
- Cybercrime is real and widespread - criminals use sophisticated methods like phishing, ransomware, and identity theft to target individuals and organisations worldwide
- Multiple threats exist - familiarise yourself with the seven main types: viruses, Trojans, worms, hoaxes, phishing, pharming, and ransomware, each requiring specific protective measures
- Information is valuable - your personal, financial, and social media information can be exploited by cybercriminals for financial gain or to harm others in your network
- Prevention is key - use strong passwords, keep software updated, avoid suspicious emails and websites, and enable two-factor authentication whenever possible
- Stay vigilant - always verify the legitimacy of emails and websites before sharing sensitive information, and remember that no legitimate company will ask for passwords or banking details via email