Tips on cyber security when away from home
On a business trip - and especially when on holiday - it's easy to overlook the security measures that you instinctively take at home. Kaspersky Lab's experts share advice on what you need to do to make sure your hotel Wi-Fi access is secure, you're safe to buy tickets online and how you can respond if your device is lost or stolen.
Hotels, restaurants, and business centres sometimes offer free tablets to their guests. While working on these devices, users tend to leave a lot of private information that could potentially be used by cybercriminals. You have no way of knowing if a keylogger or other malware has been installed to capture your keystrokes, including user names and passwords, as you type. These machines should be used only to visit public information websites, never for online shopping or for business purposes, such as editing documents or connecting to websites that require a password.
In 2014, Kaspersky Lab released information about the Dark Hotel targeted campaign, which used an effective intrusion set on hotel networks, even to systems that were believed to be private and secure. Cybercriminals waited until, after check in, the victim connected to the hotel Wi-Fi network. Then they tricked the target into downloading and installing a backdoor that pretended to be an update for legitimate software. Once on the system, the backdoor downloaded more advanced tools to collect data about the system, steal all keystrokes, and hunt for cached passwords in browsers and other private information.
The 'update' could prove to be malware
It's always a good idea to keep your software updated. But when on a trip, make sure you download updates directly from vendor websites: if your computer tells you that your software needs updating, don't click on a button to download and install the update there and then; the 'update' could prove to be malware.
If you need to use internet for something that involves sensitive information take care to use a safe connection:
If you go online to buy tickets for a show or book a hotel in another city, consider the following:
Physical security should also be considered as your data is at risk any time you leave your computer unattended while travelling. Devices are also susceptible to being lost or stolen. So sensible precautions include setting a login password if there is not one already - although this only offers a low level of protection; requiring a password to be re-entered after a relatively short idle period. Also it's good to disable booting from a CD or USB drive in the BIOS to prevent hackers bypassing a login password, and then setting a BIOS password to prevent the BIOS settings being changed.
Take precautionary measures by familiarising yourself with the anti-theft features available to you on whatever device you are using. For example, the Kaspersky Phound! free application for smartphones or tablets - as well as Kaspersky Lab's consumer products, including Kaspersky Internet Security Multi-Device, - can help with a number of features, including locating the device on a map using GPS, GSM or Wi-Fi networks, turning on an Alarm feature that continues until the owner enters a secret code or even removing all personal data.
"A lot of people travel nowadays with their smartphones, notebooks and tablets, or use devices provided to them on the trip. When quickly packing a bag for a trip, in a hotel or in an airport, it's easy to overlook even the simplest security measures, such as backing up files or encrypting vital business data. Then there are threats like losing passwords or getting infected by cybercriminals via untrusted public charging stations that use a USB connection. You should take precautions on your travels just like you would at home," said Stefan Tanase, senior security researcher, Global Research and Analysis team, Kaspersky Lab, during his presentation at Kaspersky Lab's Cyber Security Weekend conference, held in Lisbon in April 2015.
Related
The high cost of a cyberattack: Tips to secure your business this festive season 21 Nov 2024 Companies can do much more to empower women 29 Aug 2024 Rumours of Google killing cookies have, once again, been exaggerated 26 Jul 2024 Sibanye-Stillwater website still down after cyberattack 15 Jul 2024 Temu app considered malicious malware in new US lawsuit [Updated] 27 Jun 2024 Can face mapping still identify you if your features change? 13 Jun 2024
