W W W . S A B R I C . C O . Z A 1 4 N O V E M B E R 2 0 1 9 W W W - PDF document

W W W . S A B R I C . C O . Z A 1 4 N O V E M B E R 2 0 1 9

W W W . S A B R I C . C O . Z A 1 4 N O V E M B E R 2 0 1 9 F E S T I V E AWA R E N E S S

1 4 N O V E M B E R 2 0 1 9 Today’s agenda 11AM – 11:30 11:35AM 11:40AM – 12:15AM 12:30AM A R R I V A L , T E A & C O F F E E W E L C O M E P R E S E N T A T I O N & Q & A L U N C H Louise van der Merwe Susan Potgieter SABRIC SABRIC Media & Communications Acting CEO W W W . S A B R I C . C O . Z A

S O C I A L E N G I N E E R I N G 1 4 N O V E M B E R 2 0 1 9 Hot off the • Elderly people being targeted by criminals who con them into withdrawing their savings in exchange for a job. press – an MO • The criminal approaches the elderly person and tells them resurfaces that his boss wants to recruit pensioners as drivers. • The criminal then asks if they have a driver’s license and a bank account. • The criminal then tells the potential victim that his boss needs to check their bank balance as he cannot employ them if they have money in their account. • The elderly person is then encouraged to withdraw all their savings. They are then robbed. W W W . S A B R I C . C O . Z A

G O T T H A T ‘ H O L I D A Y F E E L I N G ? ’ 1 4 N O V E M B E R 2 0 1 9 ‘Tis the season to be social but don’t let it be ruined by social engineering. W W W . S A B R I C . C O . Z A

S O C I A L E N G I N E E R I N G 1 4 N O V E M B E R 2 0 1 9 Social Engineering is manipulative. It exploits human vulnerability because criminals know that the weakest link in the information security chain is the human being. W W W . S A B R I C . C O . Z A

S O C I A L E N G I N E E R I N G 1 4 N O V E M B E R 2 0 1 9 Social Engineering is a manipulative tactic used to gather information about you. This information can be used to defraud you. W W W . S A B R I C . C O . Z A

S O C I A L E N G I N E E R I N G 1 4 N O V E M B E R 2 0 1 9 We are all #ImStaying But SABRIC says #NotSaying W W W . S A B R I C . C O . Z A

I D E N T I T Y T H E F T 1 4 N O V E M B E R 2 0 1 9 Don’t let ‘holiday mode’ see you give away your personal information. W W W . S A B R I C . C O . Z A

W W W . S A B R I C . C O . Z A 1 4 N O V E M B E R 2 0 1 9

I D E N T I T Y T H E F T 1 4 N O V E M B E R 2 0 1 9 Confidential Personal information information Personal information includes identity documents, driver’s licenses, passports, Confidential information, which includes usernames, password and addresses and contact details amongst others. PIN numbers Only share it very selectively and on a need to know basis only. N E V E R S H A R E O N LY S H A R E T H E S E O N A N E E D W W W . S A B R I C . C O . Z A TO K N OW B A S I S

I D E N T I T Y T H E F T 1 4 N O V E M B E R 2 0 1 9 But you’ve got the power… • Don’t carry unnecessary personal information in your wallet or purse . • Don’t write down PINs and passwords, and avoid obvious choices like birth dates and first names. • Verify all requests for personal information and only provide it when there is a legitimate reason to do so. W W W . S A B R I C . C O . Z A

1 4 N O V E M B E R 2 0 1 9 • Don’t use Internet cafes, hotels or conference centres to do your banking. • To prevent your ID being used to commit fraud if it is ever lost or stolen, alert the SA Fraud Prevention Service immediately on 0860 101 248 or at www.safps.org.za. • Use strong passwords for all your accounts. W W W . S A B R I C . C O . Z A

S O C I A L E N G I N E E R I N G 1 4 N O V E M B E R 2 0 1 9 How else does it happen? W W W . S A B R I C . C O . Z A

P H I S H I N G 1 4 N O V E M B E R 2 0 1 9 The opportunity is created by… They log into your bank account and steal your money. 1 2 3 B E L I E V I N G C L I C K I N G E N T E R I N G Y O U ’ V E B E E N P H I S H E D ! that an email is from an on a link in the email. Entering confidential authentic organisation or information into a form The criminal now has service provider. on a spoofed website. your confidential W W W . S A B R I C . C O . Z A information.

V I S H I N G 1 4 N O V E M B E R 2 0 1 9 The opportunity is created by… They log into your bank account and steal your money. 1 2 3 B E L I E V I N G B U Y I N G G I V I N G A W AY Y O U ’ V E B E E N V I S H E D ! that a phone call is from into the story on the your confidential The criminal now has your bank or a legitimate information. other end – often out your confidential service provider. W W W . S A B R I C . C O . Z A of fear and a sense of information. urgency.

S M I S H I N G 1 4 N O V E M B E R 2 0 1 9 The opportunity is created by… They log into your bank account and steal your money. 1 2 3 B E L I E V I N G C L I C K I N G I N S TA L L I N G Y O U ’ V E B E E N that an SMS is from an M A L W A R E S M I S H E D ! on a link in authentic organisation which either acts like a the SMS. Your information is or service provider. legitimate app or takes you sent to W W W . S A B R I C . C O . Z A to a fake site where you are cybercriminals. tricked into typing in confidential information.

P H I S H I N G , V I S H I N G A N D S M I S H I N G 1 4 N O V E M B E R 2 0 1 9 But you’ve got the power… • Do not click on links or icons in unsolicited emails. • Know that criminals can mask their telephone numbers seem as if a legitimate individual or company is making the phone call. • Banks will never ask you to confirm your confidential information over the phone . W W W . S A B R I C . C O . Z A

1 4 N O V E M B E R 2 0 1 9 • Do not click on links or icons in unsolicited SMSs . • If you lose mobile connectivity under circumstances where you are usually connected, check whether you may have been the victim of a SIM swop . W W W . S A B R I C . C O . Z A

P A S S W O R D S 1 4 N O V E M B E R 2 0 1 9 Make sure your password is super- strong… Try SABRIC’s password tester! www.becyberstrong.co.za W W W . S A B R I C . C O . Z A

P A S S W O R D S 1 4 N O V E M B E R 2 0 1 9 But you’ve got the power… • The key to strong passwords is to make them very long - the more characters, the better. • Use a ‘passphrase’ ! • This is a strong password that uses a short sentence or a string of random words . • Passphrases should be easy for you to remember , but difficult for a criminal to guess . W W W . S A B R I C . C O . Z A

V I S H I N G 1 4 N O V E M B E R 2 0 1 9 Share our WhatsApp Vishing Video PLAY W W W . S A B R I C . C O . Z A

F E S T I V E S E A S O N E X P L O I T A T I O N 1 4 N O V E M B E R 2 0 1 9 How else are criminals planning to exploit you this Festive Season? W W W . S A B R I C . C O . Z A

B O O K I N G Y O U R H O L I D A Y 1 4 N O V E M B E R 2 0 1 9 Criminals are depending on your last minute holiday booking! W W W . S A B R I C . C O . Z A

B O O K I N G Y O U R H O L I D A Y 1 4 N O V E M B E R 2 0 1 9 The opportunity is created by… Your holiday accommodation does not exist and your money is gone. 1 2 3 But when you contact S E A R C H I N G B O O K I N G PAY I N G the ‘rental agent’ to the Internet for last your holiday quick, for your holiday in make final minute holiday quick. full via your bank arrangements but get accommodation and find card or EFT. W W W . S A B R I C . C O . Z A no answer! You have an incredible deal. been ghosted…

B O O K I N G Y O U R H O L I D A Y 1 4 N O V E M B E R 2 0 1 9 C A R D D E TA I L S You entered your card details on the bogus website. What you don’t know is the website PAY M E N T you The transaction did not go through and you were directed to do an EFT into a specific used to book was bank account which you promptly do. bogus… C O M P R O M I S E W W W . S A B R I C . C O . Z A Your card details were compromised and the fraudster not only has your money, but your card details as well – which can be used to commit further fraud.

B O O K I N G Y O U R H O L I D A Y 1 4 N O V E M B E R 2 0 1 9 But you’ve got the power… • Do not trust websites that are unfamiliar. • Don’t fall for offers that are available at a very low price. If an offer seems to be too good to be true , it usually is. W W W . S A B R I C . C O . Z A

1 4 N O V E M B E R 2 0 1 9 • Register for 3D Secure to secure your card details. • Don’t send emails that quote your card number and expiry date . • If you are requested to confirm your banking or personal details via a link, don’t click on it. W W W . S A B R I C . C O . Z A

C A R R Y I N G H O L I D A Y C A S H 1 4 N O V E M B E R 2 0 1 9 Criminals want your bonus and holiday cash. W W W . S A B R I C . C O . Z A

C A R R Y I N G H O L I D A Y C A S H 1 4 N O V E M B E R 2 0 1 9 The opportunity is created by… You are robbed at gun-point 1 2 3 You are then W I T H D R A W I N G L E A V I N G A L O N E T R A V E L I N G surprised by the alone with lots of alone through a large amounts of cash robber – who knew cash on you. remote location to inside the bank or at an or was informed… get to you ATM – but someone destination. knows! W W W . S A B R I C . C O . Z A