Skip to main content
Advertisement
Live broadcast
Main slide
Beginning of the article
Озвучить текст
Select important
On
Off

Cybersecurity experts have named the simplest but most effective way to protect against fraudsters. It turned out to be a code word or a question that can be asked in a conversation. This method will help to verify the identity of the interlocutor if he introduces himself as a relative or boss. Izvestia tells you how to use a life hack, and why it's better to get into the habit.

How to choose a code word

The code word, which is used during important calls, is the most effective and effective method of protection against fraudsters. Igor Biryukov, CEO of InfEra Security and ambassador of the Cyberdom Business Club, said this in a conversation with Izvestia.

телефон
Photo: IZVESTIA/Konstantin Kokoshkin

However, he advised against using data that could be compromised, such as date of birth, address, place of work or study. Their users indicate them on the sites when registering, therefore they can "leak".

–– My recommendation is to ask a question that connects you with a specific interlocutor. For friends, the question of the year of dating or the method of dating will be suitable, for example: "What grade have we been friends from?" For relatives, it's about the general way of life, and for colleagues, it's about the office number or the HR department, everyone goes through it. There is a lot of room for imagination, but vigilance and willingness to ask such a question are more important," Biryukov noted.

In turn, the CEO of Secure-T (Solar Group of Companies) Khariton Nikishkin advised installing caller ID or installing programs that can detect fraudulent calls. And hang up on any questionable calls (for example, if "relatives" ask for a loan or the bank threatens to block the account) and call back.

–– The same applies to cases when a notification has arrived from Public Services: "Your account has been hacked." You should not follow the link, you need to open the official website of Public Services and see if everything is in order with our account. It's the same with the banking application if they talk about problems with the account," Nikishkin emphasized.

How to behave in case of questionable calls

Schemes where scammers pose as close people and ask for help are still common. Therefore, it is important to come up with a "password" - it may be a common "trick" or a characteristic feature unique to who they appear to be, says Alexandra Pozharskaya, an expert at the Popular Front for Borrowers' Rights project and the Moshelovka platform.

–– As practice shows, this technique can be useful to everyone. It is suitable for the elderly, children, youth, and mature people, regardless of gender, status, and education. If the interlocutor's answer is incorrect, then you can be sure that this is a fraud," the expert notes.

хакер
Photo: IZVESTIA/Sergey Konkov

She calls the habit of following the principle of "zero trust" another simple way of protection. In combination with a code word, it can become an absolute guarantee of protection from fraudsters in personal communications.

–– A model of behavior based on "zero trust" implies doubting the veracity of any information until it is proven. This model consists of several stages: first, no matter what anyone reports, you must not give in to emotions. Secondly, you need to think about whether there is anything atypical, inconsistencies or errors in the information. Thirdly, you always need to double-check - search on the official website, call back to the official phone number," the Izvestia interlocutor notes

According to her, that's the test word that might be useful at this stage. But if a person chooses a particular word, its reliability depends on its complexity, adds Maxim Alexandrov, an expert in Security Code software products. The main risk is that people often choose information related to their lives (mother's maiden name, pet's nickname), which can be guessed or found through social engineering. Therefore, it is important to choose something unusual and known only to your loved ones.

Why is it important to use code words and other protection methods?

It is important to use code words and other protection methods because scammers know a lot about their victims, which means they can easily deceive them. They have learned how to fake audio messages, generate fake "circles" in messengers, so it is better to check any dubious information and requests.

девушка на кровати
Photo: Global Look Press/IMAGO

Criminals take important information about a person from merged databases. At the same time, Igor Biryukov adds, collecting information about Russians is a whole line of criminal activity. For hackers, this is an industry for making money: not only by selling stolen data, but also hacking systems in order to encrypt data and then sell it.

–– Today, the personal data of all residents of Russia is publicly available. Fraudsters use complex IT systems, analyze a large amount of data, then use special software to build relationships, identify sensitive points, and now they are increasingly using AI. And so they prepare to attack the victim. It is important to be able to recognize it," the expert concludes.

How else can you protect yourself?

In addition, it is important to follow simple technical ways to protect yourself from fraudsters. As Maxim Alexandrov notes, it is important to study the security settings in messengers, social networks and important services. You should definitely install two-factor authentication, which creates an additional barrier for intruders.

–– Simple rules are also required: under no circumstances are SMS codes, passwords, or bank card details reported. You should not follow suspicious links in messages or download attachments from emails from unknown senders," says an expert in Security Code software products.

карты мир
Photo: IZVESTIA/Eduard Kornienko

He advises to consider calls from unknown numbers as potentially fraudulent. At the same time, it is important to remember that the interlocutor's knowledge of the victim's general data (full name, address, passport data, account number) does not mean anything today - if desired, anyone can find them.

Переведено сервисом «Яндекс Переводчик»

Live broadcast