Your digital footprints are more than a privacy risk – they could help hackers infiltrate computer networks

By Ravi Sen, Associate Professor of Information and Operations Management, Texas A&M University College Station (US)

PTI, Apr 9, 2022, 10:51 AM IST

When you use the internet, you leave behind a trail of data, a set of digital footprints. These include your social media activities, web browsing behavior, health information, travel patterns, location maps, information about your mobile device use, photos, audio and video. This data is collected, collated, stored and analysed by various organisations, from the big social media companies to app makers to data brokers. As you might imagine, your digital footprints put your privacy at risk, but they also affect cybersecurity.

As a cybersecurity researcher, I track the threat posed by digital footprints on cybersecurity. Hackers are able to use personal information gathered online to suss out answers to security challenge questions like “in what city did you meet your spouse?” or to hone phishing attacks by posing as a colleague or work associate. When phishing attacks are successful, they give the attackers access to networks and systems the victims are authorized to use.

Following footprints to better bait Phishing attacks have doubled from early 2020. The success of phishing attacks depends on how authentic the contents of messages appear to the recipient. All phishing attacks require certain information about the targeted people, and this information can be obtained from their digital footprints.

Hackers can use freely available open source intelligence gathering tools to discover the digital footprints of their targets. An attacker can mine a target’s digital footprints, which can include audio and video, to extract information such as contacts, relationships, profession, career, likes, dislikes, interests, hobbies, travel and frequented locations.

They can then use this information to craft phishing messages that appear more like legitimate messages coming from a trusted source. The attacker can deliver these personalized messages, spear phishing emails, to the victim or compose as the victim and target the victim’s colleagues, friends and family. Spear phishing attacks can fool even those who are trained to recognize phishing attacks.

One of the most successful forms of phishing attacks has been business email compromise attacks. In these attacks, the attackers pose as people with legitimate business relationships – colleagues, vendors and customers – to initiate fraudulent financial transactions.

A good example is the attack targeting the firm Ubiquity Networks Inc. in 2015. The attacker sent emails, which looked like they were coming from top executives to employees. The email requested the employees to make wire transfers, resulting in fraudulent transfers of USD 46.7 million.

Access to the computer of a victim of a phishing attack can give the attacker access to networks and systems of the victim’s employer and clients. For instance, one of the employees at retailer Target’s HVAC vendor fell victim to phishing attack. The attackers used his workstation to gain access to Target’s internal network, and then to their payment network. The attackers used the opportunity to infect point-of-sale systems used by Target and steal data on 70 million credit cards.

A big problem and what to do about it Computer security company Trend Micro found that 91 per cent of attacks in which the attackers gained undetected access to networks and used that access over time started with phishing messages. Verizon’s Data Breach Investigations Report found that 25 per cent of all data breach incidents involved phishing.

Given the significant role played by phishing in cyberattacks, I believe it’s important for organizations to educate their employees and members about managing their digital footprints. This training should cover how to find the extent of your digital footprints, how to browse securely and how to use social media responsibly.

 

Udayavani is now on Telegram. Click here to join our channel and stay updated with the latest news.

Top News

Bommai dials UP CM, enquires about Karnataka pilgrims mishap

After Ram temple in Ayodhya, Kashi, Mathura appear to be waking up: Adityanath

Choose special place in your city, town or village to celebrate Yoga Day: PM to people

‘Cost of War’: Daughter recalls using toy phone to ‘talk’ to her army officer father killed in action

‘Crossed the red line’: Dhankhar takes on Abhishek for criticising judiciary

Ramesh, Sugar crowned National Champions at Indian Open of Surfing

Nepal Army helicopter lands at possible site of plane crash after tracking pilot’s mobile phone


Related Articles More

AI-driven app to help diagnose skin diseases launched by AIIMS, Nurithm Labs

IISc team develops enhanced data encryption, security device

New cyber security rule to make doing business in India tougher, say global tech bodies

Mars rover mission suspended because of Ukraine war – here’s what we’re hoping for next

Zinc air batteries are viable and cost-effective solution to store renewable energy, says International Zinc Association chief

MUST WATCH

Showdown between car and lorry

NEWS BULLETIN 28-05-2022

Sanjeeva Maradi Statement about Pampa Sarovara

Kunigal PSI Slaped to Kunigal Grama panchayath member

This country is ruined by Nehru : Basangouda Patil Yatnal


Latest Additions

Done with making the film but not Major Sandeep Unnikrishnan’s spirit: Adivi Sesh

Bommai dials UP CM, enquires about Karnataka pilgrims mishap

Only success of demonetization was ‘torpedoing’ of the economy: Rahul attacks Centre

After Ram temple in Ayodhya, Kashi, Mathura appear to be waking up: Adityanath

Choose special place in your city, town or village to celebrate Yoga Day: PM to people

Thanks for visiting Udayavani

You seem to have an Ad Blocker on.
To continue reading, please turn it off or whitelist Udayavani.