Hack me now, hack me then @ btp

Copyright © 2011 CyberSecurity
Malaysia
What is All About?
The awareness session is aimed to highlight the
common misconception and mistake of computer
and internet users on how to secure their
computers. The key points include
 Inside the Hackers’ Mind
 Hackers’ Malicious Techniques
 Secure The Human
Hack Me Now, Hack Me Then
The Wonderful World of HackersThe Wonderful World of Hackers

Jazannul Azriq Aripin
Senior Executive, Outreach Dept., CyberSecurity Malaysia
Mr. Jazannul Azriq B. Aripin; Senior Executive of Outreach
Department, CyberSecurity Malaysia. He has a degree in
Computer Science from Universiti Malaysia Sabah. A Microsoft
Certified System Engineer (MCSE) and ISMS Lead Auditor. Five
years with CyberSecurity Malaysia doing Facebook Security,
Facebook Forensic, Information Security Audit (ISMS/ISO27001-
2005) and Social Engineering

What You Keep Inside Your
Computer
Work-Related Information
 company information
(structure, process, systems)
 corporate email
 business applications access
 business servers access
 business documents
 customer information
 vendor information
Personal-Related Information
 personal information
 personal emails
 online banking
 social networking
 personal documents
 personal photos
 your dirty little secrets

Know Your Enemy
Cyber Criminal Someone You
Know
Someone
You Don’t Know
Copyright © 2013 CyberSecurity Malaysia

Hack Me #2 – Password

Test Your Password

Hack Me #4 – Installed Software

Hack Me #5 – Wireless Connection

Copyright © 2010 CyberSecurity Malaysia19
WiFi Hacking Toolkits

WiFi Hackers Can View Your Password

WiFi Hackers Can Read Your Email

WiFi Hackers Can See Your IM Chat

Hack Me #6 – Internet Browser

Facebook Statistics
27
53%
47%
35%

Privacy Setting

Hack Me #8 – Instant Messaging & Web Cam
Webcam

Don’t Phish Me

Hack Me #13 – Device Repairs

Hack Me #14 – Social Engineering
Human-based Social Engineering
 gathering sensitive information by
human interaction
 famous tactics: posing as legitimate
users, tech support, important users,
shoulder surfing, eavesdropping,
dumpster diving
Computer-based Social Engineering
 gathering sensitive information by
using computer
 famous tactics: email attachment, IM
attachment, spam email, website, hoax
email, chain letter, pop up windows,
phishing
The technique of gaining sensitive information by exploiting basic human
nature such trust, fear, desire to help.

39
Case Study - Parcel Delivery Scam
chatting email notification parcel delivery website money mule
Find the victim and
gain the trust.
Parcel scam begins
with parcel delivery
stuck for custom
clearance.
Verify the scam with
the tracking code in
the website
Fees need to be paid
to the local banks
and money mule will
transfer to the cyber
criminal

40
Chatting
HiHi HiHi
A/S/L? I’m
Edward from
England
A/S/L? I’m
Edward from
England
Oh I’m 35,
Liza from KL
Oh I’m 35,
Liza from KL
Sweet!
Single?
Sweet!
Single?
Yeah, sort
of …
Yeah, sort
of …
Find the victim
and gain the trust.
Cybercriminal Victim

41
Chatting (cont’d)
I’m in love
with you
I’m in love
with you
I know. I
love u too!
I know. I
love u too!
I’d like to
come to
Malaysia and
marry you!
Next Month
I’d like to
come to
Malaysia and
marry you!
Next Month
Oh really?Oh really?
I’m going to
send you some
gifts + cash
I’m going to
send you some
gifts + cash
How
Sweet!
How
Sweet!
After few months of
romantic moments
Cybercriminal Victim

Email Notification
From: Pro-Link International Express Courier <southeastasia@plinkcourier.com
Date: Tue, Apr 20, 2010 at 9:23 AM
Subject: Parcel Withheld Pending Clearance.
To: LIZA
Date: 20th April, 2010.
Tracking Code: 1438312582
Dear Valued Customer,
With reference to the delivery of your package, we wish to bring to your
notice that your package has been placed on hold by the Malaysian customs
for some reasons which happened to violate the shipping policies.
As the goods arrived Malaysian custom check point, the Malaysian custom
detected that currency notes were included in your parcel.

Email Notification (cont’d)
Thereby, certain commissions must be paid as customs duty via us which is
for the immediate clearance of your package. In the mean time, the
reference of tracking on the status of your package is "pending",
which is in accordance with the mode of operation in the courier sector
for financial delivery. We have already taken order number for this
package from the custom.
You are required to follow all instructions to be given to you to
facilitate the release of your package. To do this, you are required
to pay the required charges listed below for the immediate release of your
package. Upon confirmation of payment, your package will be delivered to
your address above in less than 24 business hours.
Outstanding Charges:
Administrative .........................RM 2,550.00
Clearance.............................. RM 1,500.00
TOTAL = RM4, 050.00
A total of 4, 050.00 Malaysian ringgit has been charged.

Parcel Delivery Website

Parcel Delivery Website - Enter the Tracking Code

THANK YOU
for listening
Jazannul Azriq Aripin
Senior Executive Outreach,
CyberSecurity Malaysia
Email : azriq@cybersecurity.my
website : www.cybersafe.my
inquiry : cybersafe@cybersecurity.my
reporting : cyber999@cybersecurity.my

Hack me now, hack me then @ btp

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (19)

Andere mochten auch

Andere mochten auch (8)

Ähnlich wie Hack me now, hack me then @ btp

Ähnlich wie Hack me now, hack me then @ btp (20)

Mehr von Ministry of Education Malaysia

Mehr von Ministry of Education Malaysia (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Hack me now, hack me then @ btp

Hinweis der Redaktion