Oooh, Bob sent me a link.......

Inspired by the link: http://www.sophos.com/blogs/gc/g/2010/05/31/viral-clickjacking-like-worm-hits-facebook-users/

"Don't click links you don't trust". This has been the mantra of I.T. security professionals since time began (was there a time before emails?). But what if the link comes from (or at least appears to come from) a friend? Unfortunately there is no easy answer.

Bad guys know how you think, and know the ways to entice you into clicking a link. But if a friend has recommended it, then it must be OK?........

Not all the time. The bad guys know how to spoof emails, know how to use "hacked" social networking accounts and send the malicious link to the entire friends list, and many other tricks to get the highest possible hit rate on these malicious links. So what can you do? A few simple steps can dramatically reduce the risk.....

1. Keep your Operating System (OS) up-to-date with the latest security patches. - Most modern day OS' allow configuration of automatic updates, which will require minimal user interaction. Windows users (most people who are reading this I assume use Windows), can browse to http://windowsupdate.microsoft.com/ for assistance setting up automatic updates.

2. Keep your web browser up-to-date. - Newer versions of your favourite web browsers have been developed with more security in mind.

3. Keep your antivirus up-to-date. - With new malware seemingly being discovered every other minute it is imperitive to keep antivirus products up-to-date with the latest definitions etc. Most will ask you to configure automatic updating when you install it, DO NOT SKIP THIS STEP!!! Please :D

4. Check a links destination before clicking. - It is trivially easy to "hide" a links true destination. If you hover your mouse cursor over the link, WITHOUT CLICKING, the real destination can be observed. (In the bottom left hand corner of your web browser is the usual place).

5. Use your instinct. - If it doesn't feel right, don't click it. Taking a few minutes to email or message the person asking if they have really sent the message could save you hours (or even days/months!) of work attempting to rectify any damage. Use yourself as the first line of defence, computers will always have security holes, being aware of this can save you.

Comments and questions are always more than welcome.

On a side note, it seems my son knows the perfect way to keep safe online....

Eat the device connected to the Internet! Such a wise head on those young shoulders :)