The 411…

Entries categorized as ‘Security’

Protecting Children Online & On Mobile…

May 20, 2009 · 1 Comment

The World Telecommunications & Information Society Day was held on Sunday 17th May & the theme was on “Protection of Children in Cyberspace…”

This led me to wonder how we’re protecting our young ones from mobile content now that there’s a lot of adult stuff sold on mobiles e.g. wallpapers, tips on relationships, dating services etc.

Children now have access to both web & mobile (with mobiles being harder to monitor).

Who out there is working on such issues?

Categories: Security

Citizen’s Watch: Samuel Ngure Kariuki…

May 13, 2009 · 16 Comments

Believe it or not, the young man pictured above is the mastermind behind some of the fradulent SMSes you have been receiving on your cellphones. He’s also responsible for fraudulent advertisements that appear on our daily locals, especially in the classified section as well as the lonely hearts column. Buying a car or plot? Looking for a house?  Looking for a soulmate? Be very warned that most of those advertisements originate from within prison cells!

He has in the last four years been behind bars at the Kamiti Maximum Security Prison where he’s on death row. The sad thing is he’ll soon be among us if his appeal goes through. He has been working with fellow conmen who are in our midst to swindle innocent wananchi of their hard earned cash. Thanks to the naivety of most Kenyans, this young man has become a millionaire behind bars & now employs several conmen who help him do what he knows best, coning you & I!

This is a man who’ll do anything, impersonate anyone just to make you part with your money. If you’re wondering how he does it behind bars without meeting you, he’ll always claim to be busy in & out of the country & as such has to leave most of his work to his “personal assistant” (employed conmen outside prison), therefore, you’ll never question his absence until you’re robbed, after which he throws away that SIM card & moves on to his next victim. His tactics are very well organized & it’s very hard to even imagine that he’s behind bars; don’t we all now know that inmates usually have access to high tech mobile phones & even laptops that enable them to communicate to the outside world as though they were not in jail? Samuel Ngure Kariuki is one untouchable inmate at the “Condemn G” block, nicknamed “Garrisa Lodge” due to the fraudulent business deals that take place with the outside world…

The way his appeal case at the high court is going, there’s every indication that this man will be back among us, moreover, we can’t talk of any reforms on his part. If anything, the prison has only made him a better conman & thief! It’s with this in mind that we request you to circulate this. Who knows? He may soon join your neighbourhood, he might come knocking at your office selling you stuff that only exits on paper or your church… He might even become your friend’s boyfriend, who knows? Fact is, he’s very gentlemanly in his ways, very eloquent in his English & you’ll never suspect he’s a conman & thief.

Categories: Citizen's Watch

Wanted: Computer hackers to help government…

April 21, 2009 · 1 Comment

WASHINGTON – Wanted: Computer hackers.

Federal authorities aren’t looking to prosecute them, but to pay them to secure the nation’s networks.

General Dynamics Information Technology put out an ad last month on behalf of the Homeland Security Department seeking someone who could “think like the bad guy.” Applicants, it said, must understand hackers’ tools and tactics and be able to analyze Internet traffic and identify vulnerabilities in the federal systems.

In the Pentagon’s budget request submitted last week, Defense Secretary Robert Gates said the Pentagon will increase the number of cyberexperts it can train each year from 80 to 250 by 2011.

With warnings that the U.S. is ill-prepared for a cyberattack, the White House conducted a 60-day study of how the government can better manage and use technology to protect everything from the electrical grid and stock markets to tax data, airline flight systems, and nuclear launch codes.

President Barack Obama appointed a former Bush administration aide, Melissa Hathaway, to head the effort, and her report was delivered Friday, the White House said.

While the country had detailed plans for floods, fires or errant planes drifting into protected airspace, there is no similar response etched out for a major computer attack.

David Powner, director of technology issues for the Government Accountability Office, told Congress last month that the U.S. has no recovery plan for a digital disaster.

“We’re clearly not as prepared as we should be,” he said.

Administration officials says the U.S. has not kept pace with technological innovations needed to protect its computer networks against emerging threats from hackers, criminals or other nations looking for national security secrets.

U.S. computer networks, including those at the Pentagon and other federal agencies, are under persistent attack, ranging from nuisance hacking to more nefarious assaults, possibly from other nations, such as China. Industry leaders told Congress during a recent hearing that law enforcement and other protections are too outdated to fend off threats from criminals, terrorists and unfriendly foreign nations.

Just last week, a former government official revealed that spies had hacked into the U.S. electric grid and left behind computer programs that would let them disrupt service. The intrusions were discovered after electric companies gave the government permission to audit their systems, said the ex-official, who was not authorized to discuss the matter and spoke on condition of anonymity.

Cyberthreats are also included as a key potential national security risk outlined in a classified report put together by Adm. Mike Mullen, chairman of the Joint Chiefs of Staff. Pentagon officials say they spent more than $100 million in the last six months responding to and repairing damage from cyberattacks and other computer network problems.

Nadia Short, vice president at General Dynamics Advanced Information Systems, said the job posting for ethical hackers fills a critical need for the government.

The analysts keep constant watch on the government networks as part of a program called Einstein that was initiated by the Bush administration under the U.S. Computer Emergency Readiness Team.

Short said the $60 million, four-year contract with US-CERT uses the ethical hackers to analyze threats to the government’s computer systems and develop ways to reduce vulnerabilities.

Faced with such cyberchallenges, Obama ordered the 60-day review to examine how federal agencies manage and protect their massive amounts of data and what the government’s role should be in guarding the vast networks that control the country’s vital utilities and infrastructure.

Over the past two months, Hathaway met with hundreds of industry leaders, Capitol Hill staff and other experts, seeking guidance on what the federal government’s role should be in protecting information networks against an attack. She sought recommendations on how officials should define and report cyberincidents and attacks; how the government should structure its cyberoversight; and how the nation can increase security without stifling innovation.

A task force of technology giants, including representatives from General Dynamics, IBM, Lockheed Martin and Hewlett-Packard Co. urged the administration to establish a White House-level official to lead cyberefforts and to develop ways to share information on problems more quickly with the private sector.

The administration has struggled with the basics, such as who should control the nation’s cyberspace programs. There appears to be some agreement now that the White House should coordinate the overall effort, rejecting suggestions that the National Security Agency take it on – a plan that triggered protests on Capitol Hill and from civil liberties groups worried about giving such control to spy agencies.

Source: http://www2.tbo.com/content/2009/apr/19/191330/wanted-computer-hackers-help-government/news-breaking/

Categories: Security

The Evolution of Mobile Phone Thugs…

March 16, 2009 · 1 Comment

AUTHOR’S NOTE:

Reposted with permission from Becky. The original post can be found here…

I think it has become slightly safer for people to talk on phone while walking downtown Nairobi. After seeing their comrades beaten to death over cheap phones, I guess the thugs have changed tact.

But it does not mean that the thieves have abandoned their trade, they have just become sharper; the steal the phones that are more expensive.

My friend Muthoni, made us laugh the other day when she told a story of how the thugs in the estates have learned the value of the phone by the ringtone.

Her story was that there was this woman going home one day in Dandora estate, and she was passing through an alley. It was at 7 pm so there were many people walking to and from the shops, acting busy.

Though her phone was ringing, she could not pick because of the four men who were walking with her group. So the phone annoyingly rung and it was apparent that she was fearing that her phone might just go.

Put off by the ringing or failure to remove the phone from the bag, one guy said, “Mama oya thimu ithuii tutiendaga Motorola.” (Just pick up the phone we are not interested in your Motorola).”

But if its a Nokia, they know the series by the ring tone and they just kindly ask you to pretend you are relatives and just hand over the phone! They even force you to hug them as they rob you in front of everyone.

Others are able to tell the kind of phone when its in the pocket; depending on the shape it projects in the pocket.

The tips are apparent; don’t wear tight trousers then slide the phone in the pocket, unless you want to invite the crooks. If you can, let the phone be on vibrator or the single beep then vibrator otherwise the phone will just go.

Categories: Security

New type of SMS Fraud…

February 9, 2009 · Leave a Comment

AUTHOR’S NOTE:

This is a message I came across a mailing list I’m a member of & I thought it might be worth sharing with you readers. Anybody come across something similar?

“Wanabidii,

I have two friends who received threatening Sms Messages purporting to originate from hired killers. The messages originated from different numbers and I have been thinking that its a new type of fraud because in one of the instances, the ‘Killers’ requested for 30,000 to be sent via Mpesa to a particular number so that any further action can be forestalled. The sms message from the number 0735974157 read as follows…

‘Okey !! There is a fellow business man . who is behind your life. Am a killer if you want help  call us now.’

In case you call and happen to be very scared you can imagine that you will just fall into their trap and they will get to know more about you and progress further with their threats. However if you ignore such a message they could just re-send once more before they give up.

My friend happened to have been going through a legal dispute case and so it appeared so real to her. She called to find out the details but that made things worse and for a number of days she could not eat and was really scared. She reported the case to the police for investigation. My other friend who had got almost similar message just wondered who would want to ‘Kill’ him and for what reason. He just ignored the second message sent to him and I therefore thought to myself that this is just a case of attempted sms fraud.

The fraudsters know that people have problems of every kind so they chance to prey on unsuspecting people who may be conned out money easily. I think the 30k Mpesa amount is carefully chosen as this is the max limit one can send in a single transaction. In case anyone has come across such types of messages please report appropriately to the police and mobile service provider.

Please also share in this forum so that we can get to know the extent of the problem. Is there a journalist in this forum  who can investigate this scam and publicise accordingly? I can imagine there are people out there suffering silently.

MM”

Categories: Security

Study finds few Internet predators…

January 22, 2009 · Leave a Comment

The Internet may not be such a dangerous place for children after all.

A task force created by 49 U.S. state attorneys general to look into the problem of sexual solicitation of children online has concluded that there really is not a significant problem. The findings run counter to popular perceptions of online dangers as reinforced by depictions in the media.

Full story: http://www.iht.com/articles/2009/01/14/america/net.1-407132.php

Categories: Security

Security Warning From Facebook…

January 3, 2009 · Leave a Comment

We have detected suspicious activity on your Facebook account and have reset your password as a security precaution. It is possible that malicious software was downloaded to your computer or that your password was stolen by a phishing website designed to look like Facebook. Please carefully follow the steps provided:

1) Run Anti-Virus Software: If your computer has been infected with a virus or with malware, you will need to run anti-virus software to remove these harmful programs and keep your information secure. For Microsoft:

http://www.microsoft.com/protect/viruses/xp/av.mspx
http://www.microsoft.com/protect/computer/viruses/default.mspx

For Apple:

http://support.apple.com/kb/HT2550

2) Reset Password: Be sure that you use a complex string of numbers, letters, and punctuation marks that is at least six characters in length.

3) Never Click Suspicious Links: It is possible that your friends could unwillingly send spam, viruses, or malware through Facebook if their accounts are infected. Do not click this material and do not run any .exe files on your computer without knowing what they are. Also, be sure to use the most current version of your browser as they contain important security warnings and protection features.

4) Log in at Facebook.com: Make sure that when you access the site, you always log in from a legitimate Facebook page with the facebook.com domain. If something looks or feels suspicious, go directly to www.facebook.com to log in.

5) Report Suspicious Activity: Please visit the following pages for further information about Facebook security and information on reporting material: http://www.facebook.com/help.php?page=420 and http://www.facebook.com/security

Once you have performed all these steps, your account should once again be secure. Please be sure to visit the Facebook Help Center for further information regarding these security issues and let us know if you need assistance.

Thanks,
Facebook Security Team

Categories: Security

Social Engineering…

October 8, 2008 · Leave a Comment

“Social engineering” is hacker-speak for conning legitimate computer users into providing useful information that helps the hacker gain unauthorized access into the computer system.

Full article: http://rf-web.tamu.edu/security/SECGUIDE/V1comput/Social.htm

Categories: Scams · Security

‘Raila Odinga’ computer virus routs Malawi’s cities…

September 22, 2008 · Leave a Comment

A computer virus called ‘Raila Odinga’ is bad news in Malawi’s main commercial city of Blantyre as it has caused huge damages. The virus according to experts is believed to be a complicated group of deadly computer worms, trojans, spywares & adwares operating together as a single entity.

Full story: http://www.nyasatimes.com/national/1367.html

Categories: Security

Virus Infects International Space Station…

September 1, 2008 · Leave a Comment

The first ever reported computer virus has struck the international space station and many are wondering how it got there since they don’t have direct internet access…

Full story: http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=knowledge_center&articleId=325193&taxonomyId=1&intsrc=kc_top

Categories: Security