{"id":1418,"date":"2020-04-25T09:15:23","date_gmt":"2020-04-25T08:15:23","guid":{"rendered":"https:\/\/www.conferencecall.co.uk\/blog\/?p=1418"},"modified":"2021-06-15T10:50:06","modified_gmt":"2021-06-15T09:50:06","slug":"1-6-adults-fall-victim-cyber-crime","status":"publish","type":"post","link":"https:\/\/www.conferencecall.co.uk\/blog\/1-6-adults-fall-victim-cyber-crime\/","title":{"rendered":"1-in-6 adults fall victim to cyber crime"},"content":{"rendered":"

Have you been a victim of cyber crime? If not, the chances are you will know someone who has – one-in-six adults have fallen foul of online fraudsters, according to a study from Experian, the global information services company.<\/p>\n

Smartphones but not smart users<\/h2>\n

The Experian study of polled 2,000 UK adults and found that the vast majority (93%) have security or antivirus software installed on their desktops and laptops, it also revealed that three-in-five (60%) of smartphone users and almost half (48%) of tablet users admitted to having no malware protection on their devices.<\/p>\n

That’s a lot of people leaving themselves vulnerable to cyber attacks<\/a>.<\/p>\n

More worrying still is that almost half of smartphone users use their devices for internet banking, while one-in-three use them for online shopping – meaning the fraudsters can help themselves to a lot of sensitive information.<\/p>\n

Desktops and laptops still most vulnerable<\/h2>\n

Despite the high number of mobile users operating with little or no malware protection, desktop and laptop computers are still the most vulnerable devices with over three-quarters (83%) of users having been victims of cyber crime.<\/p>\n

This compares with just over a fifth (21%) of smartphone users and just one-in-six (17%) of tablet users who have suffered similar attacks.<\/p>\n

We could soon see this number rise though as fraudsters tap into the opportunities presented to them by tablet users –  accessing the internet among adults has almost doubled from 16% in 2012 to 30% in 2013, while almost over half (59%) of people access the internet through a smartphone, a 6% rise since 2012.<\/p>\n

It might not just be your own security you’re compromising, but those of your friends, family or business associates as over a quarter (27%) have transferred money to another person using a banking app.<\/p>\n

So why aren’t people taking these online security threats seriously?<\/p>\n

Automatic protection?<\/h2>\n

The problem isn’t that people aren’t concerned about the threat of cyber crime – two-fifths (41%) of device owners feel vulnerable to attack – it’s more that they assume their phone is automatically provided with protection.<\/p>\n

Just over one-in-ten (12%) say they’ve not taken preventative measures on their device because they assumed they were automatically protected by their mobile service provider.<\/p>\n

A further 8% thought they were protected by the company they’ve transacted with, another 8% aren’t getting protected as they think it’s too expensive, while just under a third (29%) didn’t have any anti-virus software installed as they weren’t aware they needed it.<\/p>\n

So what types of cyber attack are out there?<\/p>\n

Types of cyber attack<\/h2>\n\n\n\n\n\n\n\n
Tactic<\/strong><\/td>\nDescription<\/strong><\/td>\nVictims<\/strong><\/td>\n<\/tr>\n
Phishing attacks<\/strong><\/td>\nFraudsters create bogus websites, apps and emails that look like they come from legitimate companies in order to dupe victims into providing their genuine login, passwords and other credentials. These details are then used to steal money from the victim\u2019s account.Phishing attacks occur where the legitimate user has malware on their device and are redirected to a \u201cfake\u201d login screen rather than the actual one.<\/td>\nConsumers & businesses<\/strong><\/td>\n<\/tr>\n
Session hijacking attack<\/strong><\/td>\nThe fraudster secretly lies in wait for a victim to start a session and then takes over control of the session to make an unauthorized transaction. Malware is typically the source or culprit enabling fraudulent access; but whereas phishing attacks redirect users to a fake login site, session hijackers wait for the legitimate user to log into the official site. Following authentication the attacker is able to change the customer\u2019s contact information associated with the account or to submit fraudulent transactions behind the scenes, as part of the same authenticated session.This attack is less common than phishing attacks because it requires direct session intervention by the fraudster \u2013 he\/she must initiate a fraudulent transaction while the legitimate user is logged into the session.<\/td>\nConsumers & businesses<\/strong><\/td>\n<\/tr>\n
Session Replay attack<\/strong><\/td>\nFraudsters use malware to capture complete session details including the login credentials and passwords which they later \u201creplay\u201d to trick companies into allowing unauthorized account access and diversion of funds, goods and services.A fraudster monitors legitimate accountholder transaction activity and captures the Javascript payload and HTTP headers from the transaction. The attacker then manipulates certain elements of the data (for example, changing the beneficiary information and modifying the transaction amount on a wire transfer) and resubmits the event with an identical Javascript payload.<\/td>\nConsumers & businesses<\/strong><\/td>\n<\/tr>\n
Man-in-the-browser attack<\/strong><\/td>\nThe fraudster is transacting simultaneously to the legitimate user. This requires significant coordination and preparation by the attacker because his\/her manipulation of transaction details would need to be in-stream and prior to the legitimate user clicking the Submit button. As the legitimate user is preparing transaction details, the attacker is changing account, amount, and other transaction details \u2013 so the customer believes that he\/she is submitting one transaction, while the attacker is manipulating all of the transaction details behind the scenes.<\/td>\nConsumers & businesses<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

If you’re concerned about the threat posed by cyber criminals, what can you do to minimize the threat?<\/p>\n

No phishing<\/h2>\n

Phishing is a type of online fraud in which cyber criminals send emails or instant messages pretending to be from a reputable company or person, in an attempt to access sensitive information, such as login credentials or account details.<\/p>\n

One in every 3,722 emails in the UK is a phishing attempt, according to Symantec<\/a>, owner of Norton Antivirus, and around half of cyberattacks in the UK involve phishing<\/a>. That\u2019s roughly 20% higher than the global average.<\/p>\n

For more on this wide-reaching type of cyber crime, check out our blog What is phishing? And how can you avoid it?<\/a><\/p>\n

How to protect your device<\/h2>\n

If you want to protect your device, try following these steps…<\/p>\n