Please login or register.

Login with username, password and session length
 

News:

Have a good day.


Author Topic: Infocomm Security  (Read 353841 times)

0 Members and 45 Guests are viewing this topic.

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #45 on: April 05, 2015, 04:07:12 PM »


Download pdf here: http://goo.gl/NzWdTP

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #46 on: May 24, 2015, 09:21:02 AM »
Man faces 800-plus computer misuse charges; guessed passwords to SingPass accounts
Published on May 23, 2015 8:40 AM
By Elena Chong Court Correspondent

A man was charged yesterday with more than 800 offences under the Computer Misuse Act.

James Sim Guan Liang, 39, faces 293 charges of unlawfully disclosing SingPass passwords to a person with the pseudonym "Lemon" for the purpose of helping "Lemon" and other unknown persons to make a false statement to get a Singapore visa.

Sim, an administrative assistant then, guessed the passwords of the 293 account holders by entering their SingPass and identity card numbers in the login fields.

The alleged offences took place at a flat in Toa Payoh from March to May 2011.

Between January and May the same year, he allegedly committed 575 counts of unauthorised access into the homepages of Central Provident Fund Board members, and a Media Development Authority server.

Sim's lawyer G. Gopalan asked for time to make representations.

Deputy Public Prosecutor Jeremy Lua told District Judge Eddy Tham that the prosecution was finalising further charges under the Immigration Act and National Registration Act.

Responding to media queries if this was a "hacking" case, the Attorney-General's Chambers said that no hacking of the SingPass infrastructure was detected.

"In fact, the methodology was very simple. The accused guessed the passwords of the accounts in question. This was possible because all the accounts used passwords based on the NRIC of the account holder."

A pre-trial conference is scheduled for June 26.

The maximum penalty for disclosing a password to gain access to a program or data held in any computer is a $10,000 fine and three years in jail on each charge.

If convicted of unauthorised access, Sim could be fined up to $5,000, jailed for up to two years, or both.

Source: http://www.straitstimes.com/news/singapore/courts-crime/story/man-faces-more-800-computer-misuse-charges-20150523



Man jailed for cracking passwords of SingPass account holders and selling details to China-based syndicate
Mar 25, 2016 6:00am
By RONALD LOH

If you do not make the effort to think of a good password, you are inviting trouble from hackers, cyber security experts here warned.

This is especially crucial if the password is for your SingPass account, which can reveal sensitive information such as your Central Provident Fund (CPF) account, your address and how much you earn.

Yesterday, a former administrative assistant was jailed five years and two months for cracking the passwords of 293 SingPass account holders and selling the details to a China-based syndicate to produce sham Singapore visa applications.

This happened after James Sim Guan Liang, 39, realised that some people used their NRIC number as their SingPass password.

Mr David Freer, vice-president of Intel Security's Asia Pacific Consumer business, said cyberattacks happen daily and it may be inevitable that your account is targeted.

To protect yourself, ensure that you use a strong password - one that has at least eight characters and contains numbers, symbols and upper and lowercase letters for best effect - and different ones for your various online accounts, he said.

"The first line of defence for keeping your online data safe is your password. You should always use a complex and hard-to-guess password," he said.

Mr Freer added that passwords should be changed every three to six months.

In January, password management firm SplashData analysed more than 20 million passwords that were leaked globally over the last year and published the worst ones.

The list was topped by "123456", "password" and "qwerty" - the first six letters on the top row of a regular keyboard.

New entries on the list, now in its fifth year, include pop culture references like "star wars", "solo", and "princess", following the release of the latest Star Wars movie.

Mr Chooi Ker Ming, Fortinet Singapore's network security consultant, said hackers look for passwords that give the highest returns-on-investment.

"Instead of investing in a costly high-powered server for brute force password cracking, they usually do a scan with a general server and take out the easiest targets.

"The low-hanging fruits - accounts with the easiest-to-break passwords such as '1234567' or 'password' - are compromised first," he said.

This becomes especially dangerous if that account is your SingPass account, considered "very valuable" to hackers, said Mr Freer.

BLACK MARKET

"Through an illegally gotten password, cybercriminals are able to find out a person's address, how much he earns, how much money he has in his CPF account, who he is married to and more.

"Such information enables them to carry out more serious crimes, or sell the information within the black market," he said.

Mr Chooi also advised Internet users to use e-services that have a second layer of security such as two-factor authentication (2FA), a process involving a one-time password (OTP) that is randomly generated and delivered via SMS or through a token.

From July 5, SingPass users will require an OTP to transact with the CPF Board, Inland Revenue Authority of Singapore, Ministry of Manpower and Accounting and Corporate Regulatory Authority.

Said Mr Chooi: "With 2FA, you don't have to worry about password changes, since the OTP generated is valid for a particular transaction only."

The low-hanging fruits - accounts with the easiest-to-break passwords such as '1234567' or 'password' - are compromised first.

About the case

Former administrative assistant James Sim Guan Liang, 39, was sentenced to five years and two months' jail yesterday for cracking SingPass accounts and selling them to a China-based syndicate.

He faced 886 charges, mostly under the Computer Misuse Act, and pleaded guilty to 73 of them in January. The rest were taken into consideration.

Court papers said he spent thousands of hours on his computer to crack the passwords of 293 SingPass accounts.

All his victims had used their NRIC number as their password.

The Chinese syndicate he sold the credentials to used the information to apply for sham visas for foreigners to enter Singapore. Some of them later committed crimes here.

Yesterday, District Judge Low Wee Ping said in sentencing that the number of charges were staggering and he could not regard Sim as a first-time offender even though this was his first brush with the law.

Noting that Sim had unlawfully accessed the computer systems of the Media Development Authority (MDA) and the Central Provident Fund Board (CPF) 577 times to harvest information, the judge said: "It is no different from breaking into a home 577 times."

Source: http://www.tnp.sg/news/singapore-news/man-jailed-selling-singpass-account-details-syndicate
« Last Edit: March 25, 2016, 11:29:04 PM by Admin (Rx) »

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #47 on: June 02, 2015, 11:22:59 AM »
Hola VPN service accused of selling users' bandwidth for botnets
By Mark Langshaw, Sunday, May 31 2015, 13:05 BST

VPN service Hola, which can unblock region-locked websites and streaming channels, has been accused of selling its subscribers' internet bandwidth, creating a backdoor that can be used by hackers to carry out cyber attacks.

The allegations were made by 8chan founder Fredrick Brennan, who claims to have tracked a denial of service attack on his website back to a Hola user.

Hola, especially popular as a browser plug-in for Chrome and Firefox users, maintains that it has always given users two options of service: a premium, paid-for tier which acts like a standard VPN, and a hugely popular free version, which sees traffic routed between users.

But Brennan further claims that the culprit later posted on 8chan to brag about how he used Hola's premium VPN service, Luminati, to launch the DDoS attack.

"When a user installs Hola, he becomes a VPN endpoint, and other users of the Hola network may exit through his internet connection and take on his IP," Brennan told TorrentFreak. "This is what makes it free: Hola does not pay for the bandwidth that its VPN uses at all, and there is no user opt-out for this.

"Hola has gotten greedy. They recently [in late 2014] realised that they basically have a nine million IP strong botnet on their hands, and they began selling access to this botnet."

In theory, this means that users who sign up for a Hola account are at risk of having their bandwidth and IP address exploited by Luminati subscribers while their computer is idle.

Hola has more than 46 million users, many of whom rely on its browser plugins to access content that is not available in their country, such as full BBC iPlayer abroad and region-exclusive versions of Netflix.

The Israel-based company has refused to take responsibility for the 8chan cyber attack, but vowed to release the perpetrator's details if Brennan obtains the necessary court order.

"If 8chan was harmed, then a reasonable course of action would be to obtain a court order for information and we can release the contact information of this user so that they can further pursue the damages with him," said the firm in a statement.

Source: http://www.digitalspy.co.uk/tech/news/a650163/hola-vpn-service-accused-of-selling-users-bandwidth-for-botnets.html#~pepW9GPB9QXVWI

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #48 on: July 23, 2015, 07:14:27 PM »


Mazda website hacked, 'no evidence yet' of compromised customer data
23 Jul 2015, Irene Tham
Technology Correspondent

SINGAPORE - A Turkish-based hacker group going by the name of "Ayyildiz Tim" has hacked local car dealer Eurokars Group's Mazda website, but the car dealer has defended the security of its customer data collected via the website.

The defaced www.mazda.com.sg website, spotted as early as 9am Thursday morning, carried the hacker group's logo and the message: "Injustice, Oppression and War with all our might...Freedom for All Muslims."

The defaced page was taken down at around 10.30am, replaced by the "Service Temporarily Unavailable" message. But by around 11.15am, the website was up again.

When contacted, a Mazda spokesman confirmed that the site was attacked, but said the car dealer was still investigating the incident. A police report has been made.

The Straits Times understands that the website was down for "a couple of hours".

The Mazda website allows car owners to make service appointments by entering personal details such as name and NRIC, car and contact numbers. It is not known if customer details were compromised. But Mazda's spokesman said: "There is no evidence at present to suggest that customer data have been compromised."

In August last year, the same group reportedly hacked into Israel's Iron Dome air defence system, which can intercept and and destroy short-range rockets, artillery shells and mortars.

Source: http://www.straitstimes.com/tech/mazda-website-hacked-no-evidence-yet-of-compromised-customer-data

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #49 on: September 02, 2015, 09:34:09 AM »
KeyRaider: iOS Malware Steals Over 225,000 Apple Accounts to Create Free App Utopia
posted by: Claud Xiao on August 30, 2015 6:00 PM

Executive Summary

Recently, WeipTech was analyzing suspicious Apple iOS tweaks reported by users and found over 225,000 valid Apple accounts with passwords stored on a server.

In cooperation with WeipTech, we have identified 92 samples of a new iOS malware family in the wild. We have analyzed the samples to determine the author
« Last Edit: September 02, 2015, 09:55:17 AM by Admin (Rx) »

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #50 on: December 01, 2015, 05:58:43 PM »
50 smartphone users in Singapore hit by malware targeting mobile banking customers
The malware disguised itself as an operating system update or an update for messaging app WhatsApp to trick customers into entering their credit card information, says the Association of Banks in Singapore.
By Loke Kok Fai 01 Dec 2015



SINGAPORE: About 50 smartphone users here have been hit by malware targeting mobile banking customers in the last three months, the Association of Banks in Singapore (ABS) said on Tuesday (Dec 1).

The average amounts lost by the victims, who are customers of major retail banks here, were around

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #51 on: January 19, 2016, 11:12:15 PM »
Tinba, a 20KB trojan that scares banks in Singapore and Indonesia
January 19, 2016  By Pierluigi Paganini

A new variant of the infamous Tinba banking trojan has emerged in the wild and is targeting financial institutions in the Asia Pacific region.

Even small threats can scare the giants, this is the case of Tinba, a small malware that continues to create serious problems for financial institutions. Tinba is a popular financial trojan, the fifth version is now circulating in the wild targeting banks in the Asia Pacific region.

Tinba is a size 20KB bank trojan first seen in the wild in the mid-2012, in July 2014, security experts at Danish CSIS Security Group discovered that the source code of the Tinba banking trojan was published on an underground forum.

The source code for Tinba banking trojan, aka Tinybanker, has been leaked in the cybercrime ecosystem, the malware is recognized as the smallest banking malicious code in the wild and it is available on an underground forum.

The release of source code in the underground represents a significant milestone in the story of a malware, starting from this event many cyber criminal gangs and authors of malware propose their customized versions or offer the personalization of the code according the requirements provided by others criminal gangs.

In many cases groups of criminals start to provide all the necessary support to conduct cyber attacks based on a specific malware, this model of sale is commonly identified as malware-as-a-service.

Now experts from the security firm F5 have detected the fifth strain of the malware, they dubbed it Tinbapore since it mainly infected machine in Asia.

Nearly 30 percent of the infected machines are located Singapore, 20 percent in Indonesia, only five percent are in Australia.



The new variant Tinbapore has been improved to be more resilient to takeover of law enforcement as explained in a report published by F5.


Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #52 on: March 23, 2016, 03:45:06 PM »
What happens when you leak stolen bank data to the Dark Web?
Your details have been stolen -- now what happens next? Bitglass finds out in a new experiment.
By Charlie Osborne for Zero Day | February 17, 2016 -- 13:10 GMT (05:10 PST) | Topic: Security

One leaked credential is all it can take for a swarm of cyberattackers to grab and exploit such data on the Dark Web in a matter of days, researchers have found.

The Dark Web is a fraction of space in the Deep Web, an area of the Internet which is hidden by today's search engines. This area is most commonly associated with the illegal trade of items including drugs and weaponry, it also hosts forums in which cyberattackers leak data and sell information stolen in data breaches.

On Wednesday, cloud security firm Bitglass unveiled the results of the company's second "Where's Your Data" experiment, a yearly exploration of the state of the Dark Web -- and where stolen data goes.

Under the name "Project Cumulus," the security team created an online persona for an imaginary employee of a fictitious bank, and then pretended the employee's Google Drive credentials had been stolen via a phishing campaign.

These dummy credentials were then leaked into the Dark Web, complete with a fake Google Drive account containing fake bank data, credit card numbers and work products.

However, the team also embedded these files with Bitglass watermarks -- which brands files with invisible watermarks that "ping" the firm with geolocation data such as IP and country -- which allowed the team to track when a file was opened or a login attempt and download took place.

In last years' report, Bitglass discovered that within a few days of a data leak, stolen documents were able to rapidly spread across the Dark Web. After crafting an excel worksheet comprising of 1,568 fake employee credentials, the company were able to track the spread of the file across over 20 countries and multiple continents.

In this year's experiment, the researchers noticed an "immediate spike in activity" once the dummy files were leaked. In total, the team tracked over 1,400 visits to the fake credentials, in addition to the fictitious bank portal.

Out of the visits that were trackable, one in ten people attempted to log in to Google services using credentials from the fake file. In total, 94 percent of those who accessed the Google Drive account then uncovered the fake bank details contained within and chose to try their luck by visiting the bank portal.

Within the first 24 hours, there were, at least, five attempted bank portal logins.

In addition, 12 percent of visitors who accessed Google Drive attempted to download files with sensitive content, and several were able to crack the encryption placed on files after download.

The latest study revealed that those wandering the Dark Web who downloaded the tracked files came from over 30 countries across six continents. Those who decided to visit the fake bank Web portal -- without the anonymity of Tor -- mainly came from Russia (36 percent), as well as the US (16 percent), China (3.5 percent) and lastly Japan (2 percent).

The researchers note that in the first experiment, few cyberattackers bothered to cover their tracks using methods such as the Tor network. However, governments worldwide are now taking note of digital attacks -- considering the rise of high-profile data breaches and hacktivism -- and so are attempting to catch up and crack down on cybercriminals.

There is now an uptick in people using the deeper recesses of the Internet in tandem with surveillance-thwarting software such as Tor, VPNs and Tails -- with 68 percent of all visitors to this experiment's fake files coming from Tor -- and so the research team acknowledge this makes exact geolocation statistics difficult to establish.

Still, when a data breach occurs, it is not a one-time event. Information which is leaked online never truly vanishes, and not only this, but such data can spread to almost every country in the world in a short amount of time.

Nat Kausik, CEO of Bitglass commented:
    "Our second data-tracking experiment reveals the dangers of reusing passwords and shows just how quickly phished credentials can spread, exposing sensitive corporate and personal data.
    Organizations need a comprehensive solution that provides a more secure means of authenticating users and enables IT to quickly identify breaches and control access to sensitive data."

Source: http://www.zdnet.com/article/what-happens-when-you-leak-stolen-bank-data-onto-the-dark-web/

Report PDF: http://pages.bitglass.com/Where_is_Your_Data_Report_2016-PDF.html


Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #53 on: March 23, 2016, 04:57:56 PM »
What is the Dark Web?



1. https://en.wikipedia.org/wiki/Dark_web

2. The Dark Web | The Other Side Of The Internet | Documentary; 6mins


3. The Dark Web (full documentary); 9mins


4. Exploring The Deep Web Documentary; 30mins

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #54 on: April 28, 2016, 11:50:07 AM »

Source: https://www.google.com/recaptcha

What is reCAPTCHA?

reCAPTCHA is a free service that protects your website from spam and abuse. reCAPTCHA uses an advanced risk analysis engine and adaptive CAPTCHAs to keep automated software from engaging in abusive activities on your site. It does this while letting your valid users pass through with ease.

reCAPTCHA offers more than just spam protection. Every time our CAPTCHAs are solved, that human effort helps digitize text, annotate images, and build machine learning datasets. This in turn helps preserve books, improve maps, and solve hard AI problems.

Introducing the no CAPTCHA reCAPTCHA Video:

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #55 on: April 28, 2016, 02:48:15 PM »
Singtel opens cyber-security institute: Directors, senior management can get training to boost readiness in Web security
Apr 27, 2016, 5:00 am SGT
Grace Chng, Senior Correspondent


Dr Yaacob speaking at the opening of Singtel's Cyber Security Institute yesterday. Singapore must keep up its vigilance in cyber security in view of its Smart Nation initiative, he said, but it is not enough to train the troops - those in command must also be aware of the challenges faced in a digital economy. (PHOTO: MATTHIAS HO FOR THE STRAITS TIMES)

Company directors and senior management can now attend training to boost their readiness in the increasingly crucial area of Internet security with the opening of the Cyber Security Institute (CSI).

Set up by Singtel, the CSI will also conduct mock Internet war games for cyber-security professionals to hone their defensive skills.

Mr Bill Chang, Singtel's chief executive officer for group enterprise, said that in the firm's discussions with companies in Singapore, it found that more than 85 per cent do not have cyber-response plans.

Even if they did, the plans were only on paper, he noted, adding that they did not hold drills to ensure the plans were realistic.

In a media briefing, Mr Chang said cyber attacks are no longer just a technical issue.

Firms lose their reputation, their share prices drop and they can face legal suits from customers, he said.

"A survey of nearly 1,000 Singaporeans here in February showed that 66 per cent felt companies were not doing enough to prevent data breaches. Forty-four per cent trust companies less today to keep their personal information secure."
Citing the example of American retailer Target, he said it lost its CEO and had to settle in a US$10 million (S$13.5 million) class action suit after a 2013 data breach in which it lost the personal details of more than 100 million consumers.

"It is important for boards and senior management to understand this," he stressed.

The CSI provides a holistic training regimen for firms. "After the training, our industry partners will help them scope out their cyber-security strategies and draw up crisis management plans," he said.

The CSI was opened by Minister- in-charge of Cyber Security Yaacob Ibrahim yesterday.

In his speech at the opening, he said Singapore must keep up its vigilance in cyber security in view of its Smart Nation initiative.

But it is not enough to train the troops, he said. Those in command must also be aware of the challenges we face in a digital economy. "Only then can they make good decisions on how best to protect our critical information infrastructure."

After the opening, he was shown a mock attack on a network. He urged Singtel to conduct a cyber-security briefing for the Cabinet.

Located in Tampines, the 10,000 sq ft CSI allows different teams to act as attackers and defenders. It can simulate intrusions such as a DDoS (distributed denial of service) attack, which is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources.

Singtel is partnering industry partners such as FireEye, Symantec and Palo Alto Networks to provide the courseware and expertise for the training.

The CSI also contains a huge library of malware, which can be used in the mock cyber games.

Singtel's CSI comes at a time when Singaporeans are worried about how their personal information is collected and protected.

A survey of nearly 1,000 Singaporeans here in February showed that 66 per cent felt companies were not doing enough to prevent data breaches. Forty-four per cent trust companies less today to keep their personal information secure. The survey was conducted by crisis communications team Brunswick.

Frost and Sullivan senior cyber- security adviser Anthony Lim said cyber security is not a question of if or when an attack will happen. "It is how the attack will be managed. The CSI is providing the right training for organisations."

Singtel said the CSI is the largest facility of its kind in Asia. It is the result of a 2014 collaboration with the Economic Development Board for an advance cyber-security centre.

Singtel group CEO Chua Sock Koong said at the opening that the telco has also jointly set up an advanced security operations centre with FireEye. Last year, it acquired Trustwave, which provides managed security services. With the Trustwave acquisition and expansion of its cyber-security strategy, Singtel now has 1,800 cyber-security professionals in 26 countries.

The CSI looks set to lead to more managed security services for Singtel. It did not release any figures, but that business has expanded faster than the industry's growth rate of 10 per cent a year.

Source: http://www.straitstimes.com/business/singtel-opens-cyber-security-institute

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #56 on: May 12, 2016, 11:40:36 PM »
What the hack? More than 88,000 .sg accounts stolen by hacker

More than 88,000 accounts with .sg domain names stolen by Russian hacker, says US cyber security firm.

Last week, US-based cyber security firm Hold Security recovered 272.3 million stolen accounts from a fraudster.

Out of those, 88,000 accounts originated from Singapore, Hold Security's founder and chief information security officer Alex Holden told The New Paper in an e-mail.

"There are over 88,000 records with the .sg domain name in the e-mail addresses," he said.

Of those, 61,000 belonged to yahoo.com.sg, 8,000 were from singnet.com.sg and 3,600 were from .edu.sg - about 1,100 from ntu.edu.sg and 1,400 from nus.edu.sg

Mr Holden added that the credentials do not always belong to the e-mail providers.

"Many services require you to use your e-mail address as a user ID, hence a breach in such service may produce a record of e-mail/password similar to (your) e-mail credentials," he said.

For example, online shopping websites usually get users to register using their e-mail account as their user ID.

Hold Security's recovery stemmed from its researchers spotting a young Russian hacker bragging in an online forum about the millions of stolen accounts he had collected.

The hacker claimed he could give away a total of 1.17 billion stolen credentials, including duplicate accounts.

A majority of the stolen accounts appeared to be from Russia, but there were also sizeable numbers of German and Chinese accounts.

The stolen accounts included tens of millions of accounts from all three major e-mail providers: Gmail, Microsoft and Yahoo.

Reuters reported that this was one of the biggest stashes of stolen credentials to be uncovered since cyber attacks hit major US banks and retailers two years ago.

To check if you have an account that was uncovered as part of any data breach, visit haveibeenpwned.com. The website also has a list of websites with databases that have been compromised.

HOW DOES THIS AFFECT ME?

According to Mr Holden, information that is obtained by a hacker may or may not be used for malicious activity, depending on what was breached.

He said: "Most accounts never get fully compromised. However, if you lose your bank details, the chances are rather high that this information would be abused."

For example, online shopping websites usually contain a user's financial information, among other sensitive details like address and birthdate.

The information could be abused if it falls into the wrong hands.

WHAT SHOULD I DO?

If you think that your e-mail account has been compromised, the first thing you should do is change the password to something difficult to guess, Mr Ryan Flores, senior manager of cyber security firm Trend Micro told TNP.

He added that if the password has been changed, use the "Forgot Password" option to set up a new one, since the account is always linked to another e-mail account or mobile number that allows for verification.

Once you regain access to your account, check to see if any information has been stolen. If necessary, report the loss of personal data to the Personal Data Protection Commission (PDPC) by calling 6377-3131 or e-mailing info@pdpc.gov.sg

Singapore's Cyber Security Agency (CSA) also encourages users to sign up at the CSA's SingCERT webpage for alerts and advisories on the latest cyber security news in Singapore.

Users can also get cyber security tips from its Go Safe Online webpage or Facebook page.

Protect yourself

STRONG PASSWORDS

According to SplashData's annual Worst Passwords List, "123456" and "password" remained the two most common passwords last year.

Singapore's Cyber Security Agency (CSA) advised: "Change passwords regularly and avoid using the same password for different services and applications. Where available, multi-factor authentication (for example two-factor authentication) should be enabled."

A two-factor authentication process is when two components are used to log in.

UPDATES & SCANS

Read through every message box when downloading new software. An attacker could name a malware after the software you are downloading.

Schedule monthly scans with an antivirus software.

Update your operating system regularly as this may include essential security updates.

According to CSA, users should not click on links in suspicious e-mails.

PROTECT YOUR DATA

"Users should not sign up for a service if it requests for information that may seem irrelevant to the purchase or application of the service," the CSA told The New Paper.

Do not publicise personal information on social media.

Make sure the website you are visiting is secure. A website that begins with "https" instead of "http" is secured using a Secure Sockets Layer certificate.

Turn on cookie notifications on your web browser to be notified when a cookie requests access, and accept only if you can trust the site.

Avoid suspicious posts, offers, messages and advertisements on social media.

Source: http://digital.asiaone.com/digital/news/what-hack-more-88000-sg-accounts-stolen-hacker

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #57 on: May 20, 2016, 10:33:35 AM »
98.6% of TorrentLocker Victims Refuse to Pay Bitcoin Ransom
Nermin Hajdarbegovic | Published on December 17, 2014 at 13:49 BST

98.55% of victims targeted by TorrentLocker do not pay the virus' bitcoin ransom, according to a new report.

TorrentLocker (aka Win32 or Filecoder.DI) is a strain of bitcoin ransomware that works by encrypting users' files. Victims are requested to pay up to 4 BTC to decrypt their documents, though this figure can vary.

The report, authored by Marc-Etienne M L

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #58 on: July 20, 2016, 08:29:19 PM »
National Cybercrime Action Plan to step up fight against online crime: Shanmugam
By Kimberly Spykerman, News 5 Updated 20 Jul 2016 18:50

SINGAPORE: Singapore will do more in the battle against online crime through a National Cybercrime Action Plan, Home Affairs Minister and Law Minister K Shanmugam announced on Wednesday (Jul 20).

Speaking at a conference, Mr Shanmugam pointed out that the plan signifies a fundamental relook at the way cybercrime is tackled, and recognised the sea change cybercrime will bring about in society.

"Cybercrime is seen, and rightly identified, as a growing threat. It doesn't recognise national boundaries. They hide behind, they are in the shadows, and they strike. And the scale and the speed with which they can strike is such that it can cause tremendous damage," he said.

Cybercrimes around the world have been increasing, he added.

Singapore will do its part through its action plan that is underpinned by four key principles

Offline Admin

  • Administrator
  • Full-time Member
  • *****
  • Posts: 1,953
  • May all beings be well and happy.
Re: Infocomm Security
« Reply #59 on: August 07, 2016, 10:46:43 PM »


How to avoid Pokemon Go malware
By Lewis Leong | July 2016

Pok