#makeITsafePH: HACKING in time of Social Media

I must admit, among the first things I do when I wake in the morning is to get hold of my mobile phone and go online. I check my messages on Messenger, browse my Facebook timeline for happenings, monitor what’s trending on Twitter and on my FB pages, update my IG stories and check out my blog.

Throughout the day, in between work, errands, blogging events, etc – the same cycle continues. At night, it’s an online recap of the day in all these social media channels. And most of the time, I “lull” myself to sleep watching “anything & everything” on YouTube.

Social media has definitely taken me over – and maybe you too!

Social media are websites and applications that enable users to create and share content or to participate in social networking. They are internet-based and offer users easy electronic communication of personal information and other content, such as videos and photos.

In the Philippines, according to Hootsuite and WeAreSocial's “Digital in 2018” social media and digital trends report, there are 67 million Filipinos using the Internet and around the same number are also active on social media. 

On a global scale, it is estimated that 2.62 billion people around the world will be using these social networks this year, up from just around 1 million less than 10 years ago.

The most popular social media platforms – Facebook, YouTube, Twitter, Instagram, have billions of users, and the number keeps getting bigger every year. And they have gone beyond their initial purpose of sharing, entertainment, and communication. 

Their widespread usage of social media has amplified the already rampant problems plaguing the internet and it includes one of the most dreaded – HACKING!

Why people hack Social Media?

You may wonder like the many times I did - “Why would a hacker want to break into my Facebook or Twitter account when there is nothing of any real value there?” 

The seemingly harmless posts placed on social media like vacation photos, latest purchases and restaurant reviews can be a goldmine when they end up in the wrong hands.

Cyber crooks are more and more interested in getting hold of this information as we get increasingly comfortable with sharing every aspect of our lives with each other - online. 

And hacking into social networks requires very little technical skill. It's much more of a psychological game - using information on personal profiles to win a complete stranger's trust.

How hackers attack on social media

There are many ways social media can be hacked and here are the most common methods. 

Phishing is still the most popular hacking method. In a simple phishing attacks, hackers create a fake log in page which exactly looks like the real, let’s say Facebook page. 

Once the victim log in through the fake page, the victim’s "Email Address" and "Password" is stored in to a text file which the hacker can then download and use to his own. 

Keylogging is the easiest way to hack a password. It is sometimes so dangerous that even a person with good knowledge of computers can fall for it.

A Keylogger is a small program which, once is installed on victim's computer, will record everything victim types on his/her computer then sent back to the hacker.  

Stealer's. Do you use stored passwords in logging in? Quite convenient it is but can sometimes be extremely dangerous.

Stealer's are software specially designed to capture the saved passwords stored in the victims Internet browser and sent back to the hacker. 

Mobile Phone Hacking. Billions of users access social media through their mobile phones. In this case the hacker can gain access to the victim’s mobile phone, through inserted phone apps, then gaining access to all social media account.  

DNS Spoofing. If both the victim and attacker are on the same network, an attacker can use a DNS spoofing attack and change the original Facebook page to his own fake page and hence can get access to victims Facebook account.

What can these hackers do with your account?

• Get your Personal Information—social media accounts can lead to shopping accounts or even have banking information.
• Gain access to corporate networks— hackers could compromise enterprise networks if your social media is linked to your work email
• Steal identity— one account can be used to register on another site
• Blackmail user— hackers can use sensitive information to harass the victim

How Do I Know If My Account Has Been Hacked?

Not everyone gets a direct message from their email or social media site stating that their account has been compromised. Therefore, you may not immediately know that anything is wrong with your account, especially if the attacker only makes small changes or sends periodic messages. Some common signs that you’ve been the victim of a social media hack are:

• If there are updates on your account that you didn’t post yourself
• If anyone tells you that they’ve received messages from your account that you didn’t send (occasionally check your sent messages)
• New games or apps associated with your account (these can include purchases)
• If you get a notification stating that you’ve made changes to your account
• Any other actions on your account such as friending, following/unfollowing, blocking, etc.

makeITsafePH with Globe: Hack Me Not

Because they are such convenient platforms, and being linked to an increasing number of applications on phones and other devices, it becomes even more necessary to secure them.

As a major purveyor of digital lifestyle for the Filipinos, Globe Telecom came out with the #makeITsafePH campaign to educate consumers about cyber security and cyber wellness. The campaign teaches the public proper online etiquette so that they can avoid becoming a victim or would not become a source of such deplorable behavior!

And it starts with us!

Always log out of your social media accounts after use especially on public. Forgotten social media accounts may be compromised without being noticed. Hackers can leverage these and access other accounts linked to it, like your email.  

Practice good password hygiene. Use strong passwords, with upper case letters and numbers. Use different passwords for your social media accounts, and also make sure each password is complex and unusual. Enabling 2-Factor-Authentication maybe be inconvenient, but can prevent unauthorized parties from accessing your accounts.

Post smartly: Don’t post everything about your life. Never post information that could be used against you. This includes your mother’s maiden name, your address or other personal information. Even if you think only your friends can see it, it’s better to be safe than sorry.

For company/brand accounts, limit access to only the necessary people—the fewer people with access, the better. This makes it easier to control the posts and avoid any deliberate sabotage.

Separate what is personal and what is professional—you don’t want to accidentally post something personal on a corporate account.

What to Do If Your Account Was Hacked

from SAFERVPN 

If you've discover that you've been hacked, there are a few steps you should take, immediately:

• Check Your Computer for Malware: Most hackers collect passwords using malware. Run a full virus scan on your computer to remove harmful files and programs. 
• Reset Your Password: If you use the compromised password on any other site, change it there as well. This should be 10 characters long and use capital letters, lower case letters, numbers and symbols.
• Enable 2-Step Verification (2SV): 2-Step Verification adds an extra layer of security to your account. By requiring a special code sent to your phone when your account settings are changed, you can make sure you’re always aware if someone is trying to get into your account.
• Revoke Permissions from Third-Party Apps: Go through your authorized third-party apps and remove any that you don’t need. Many of us carelessly click “authorize” without realizing how much information you’re letting them access. 
• Check That Your System Is up to Date: In fact, set your computer to automatically update automatically so that you get protection from new attacks as soon as possible.
• Notify Friends and Family: Let your friends and family know you’ve been hacked, especially in case they received any money requests. This is especially true if the hack was the result of malware or malicious links.
• Check Your Email Settings: Check your mail settings as hackers can change your settings to forward a copy of your emails. You should also review your signature to make sure they haven’t left any hidden codes or traces. 
• Report Any Spam or Scams: Be sure to report the breach so that the site can stop the attack from spreading.
• Contact Support: If you’re unable to access your account you’ll need to contact support to regain control.

Hacking has always been a big problem on the Internet. While cyber-security has beefed to counter all these, hackers find new ways of getting the job done. And it’s been race ever since to see who’s ahead. 

And during this time of social media, where you and I have the power to influence or be influenced , it is always best to think before we click.

Let’s make Internet safer and more enjoyable.

Let’s #makeITsafePH!

References
https://www.safervpn.com/blog/social-media-hack/
https://www.pandasecurity.com/mediacenter/social-media/people-hack-social-media-accounts/