Since the beginning of the quarantine, the number of scams and cyberattacks has grown considerably. If we consider only the banking sector, the increase in the number of phishing scams, which steal user data, was 70% according to the Brazilian Federation of Banks (Febraban). And it doesn't stop there; various other sectors are suffering from this.
Generally, these attacks have occurred through WhatsApp, emails, websites, social media, and SMS, or by someone posing as a legitimate company or institution. According to Fortinet, in March there was a 131% increase in the incidence of viruses, compared to the same month in 2019. To protect themselves, Demetrios Andrigo, Information Security Coordinator at WAVY Global, explains that from the consumer's perspective, identifying a message as trustworthy is the first step towards secure communication. Companies, on the other hand, need a certified provider that can offer this protection to users.
“Scams don't just happen because of security flaws in apps, but also because of old tactics like messages with fake links, phishing scams, messages from accounts that aren't verified by WhatsApp, and even emails from untrusted senders,” explains the executive from the Movile Group's customer experience company. He also emphasizes the importance of companies being concerned with cybersecurity measures. “At WAVY, we are committed to the security of our user base and dedicated to delivering the highest level of customer experience in all aspects. And because we value having the best security practices, we sought and obtained ISO 27001 certification, mainly because it serves as a basis for new adaptations, such as those required by the General Data Protection Law (LGPD),” he points out.
However, some simple tips can help users avoid falling for scams. See the company's guidelines:
• In the case of SMS, the sender is always a short number.
If an SMS comes from a traditional number (10 digits) and pretends to be a message from a bank or brand, that's the first clue that it's not trustworthy. The 5- to 6-digit codes are set by companies that have the infrastructure and relationships with the most relevant telephone operators in the country.
• Check if the WhatsApp account is verified.
Only engage in conversations with verified profiles. This is a safety measure for consumers and lends credibility to businesses. This feature is only available to businesses that have passed WhatsApp validation, a Facebook product. To confirm if an account is verified, users simply need to click on "more information about the number" and check if it displays the "verified business" information in blue, which confirms the account is official.
• Identify the sender of the message (SMS)
If you receive a text message with the institution's name instead of a phone number, there are strong indications that it is a legitimate message. The brand identification labels are developed by certified companies to offer security to all users.
Companies never request confidential information.
Any official communication from brands aims to inform or notify about an operation and should never, without reason, request confidential data, especially passwords or bank or credit card details. Therefore, it's important to be suspicious of anyone asking for this type of information. Product advertisements have become a gateway for scammers to steal the user's original access. To prevent this from happening, the advice is to never provide security codes from any authentication mechanism, whether from apps, banks, or emails.
• The quality of information is essential.
When receiving a message or email, the first step is always to evaluate the type of information received. Telephone operators, for example, prohibit the distribution of spam messages and require companies to ensure the quality of the information distributed to users. Always be suspicious of messages with content that promises something too good to be true and sometimes unrealistic.
SOURCE:
SECURITY MAGAZINE
