How to Shop Safely on the Internet | Complete Security Software

-

How to Shop Safely on the Internet | Complete Security


Following several inquiries regarding purchases on the Internet, I will help you see it more clearly and better still, I will show you how to be sure that your bank card number does not fly away in Seychelles after buying your detector. UFO (because yes, you can buy a UFO detector).

First Step: Check the Site Where you Buy

You are very probably familiar with the famous PayPal, eBay, Priceministrer, RueduCommerce, and so on. These sites are supposed to be healthy, you can shop there. But how can you be sure that you are buying from one of them and not from a phishing site?

Answer: Look at the URL.

Here is a very good example in a picture made by PayPal itself:

This fake site visually copies PayPal. But when you send your money, it is gone forever. Buying safely on the Internet, therefore, requires first looking at the URL and making sure that you can see the official site.

The URL (small 1 in the image) is not that of PayPal. If you come across this kind of site, report it here and take no further action.

Important note: Even if you see HTTP s in the URL, the counterfeit site may very well use the HTTP s protocol without actually being the real one: Anyone can request an HTTPS certificate.

Perfect transition to the second stage.

Step two: Check if the Transmitted Data is Encrypted

This is where we will see if the site presents HTTP s in the URL during the purchase.

But in fact, why make sure the site contains https?

Did you know that you can very well make a purchase on a classic HTTP site, but that it is not recommended for two reasons:

1. A trusted commercial site must be in HTTPS

2. Traffic can be captured and reveal your card number in the clear.

Am I going too fast?

Clarification on this second point.

When I say that traffic can be captured, I am referring to capture software also called network scanners or sniffers. These programs, although legal to perform various network analyzes, also literally allow you to see the data that passes between two machines.

Thus, if you make a purchase on a site that is not in HTTPS, AND that at the same time your information is captured via the computer of a smart little guy sitting behind you at the airport, your card number receives a second owner. More information on this with an example of password capture with WireShark

Important note: The site must be in HTTPS when you enter your personal information.

It is therefore very possible that a given site that is not in HTTPS has a buy button taking you to the secure HTTPS site.

This is the case for several sites including Le Blog Du Hacker training courses, the sales page is not encrypted because no personal information is transmitted. It is only once you arrive on PayPal after clicking on the payment button that you will be in HTTPS. So there is no problem.

Step three: Check that there is no Malware On the Computer

Everything we have just seen is fine, BUT if a keylogger is on your computer, your card number is retrieved even if you are on a site known as HTTPS.

Why ?

Attention technical part insight.

A keylogger retrieves the keys typed on the keyboard. Imagine someone looking over your shoulder as you type your password. In this case, is it important to be in HTTPS or not? No.

The keylogger cares completely about sites visited and mocks even whether HTTP or not. It almost foolishly recovers what is typed on the keyboard and sends it later to its owner by email (among others).

Another problem therefore arises:

How can we be sure that no malicious program picks up what we type?

This is a whole program that takes time but is not very complicated (it is a manual detection of malware), if you really want to know more, I invite you to download the How To Protect Your Computer training and its Private Life.

Normally a good antivirus will stop most keyloggers, but not all, and… what is 99% secure is not secure. The proof is here and there. Hence the need to follow a manual method. Complete Security software is the best antivirus for your device.

I also give in the training a new tip to be sure that even with a keylogger on his computer it is possible to enter his security card number or any other personal data. (Basically, it is a question of making register another number by the keylogger even though the correct number is sent to the site). And I take this opportunity to tell you that it would not have been possible to give such a tip without understanding how attacks and keyloggers work.

Learn the attack to better defend yourself - Ethical hacking slogan.

Buy safely on the Internet: Miscellaneous

Also, be aware that when shopping online there should always be some trusted information :

  • The site contains legal notices and conditions of sale
  • The site offers a reimbursement period


Comments

Post a Comment

Popular posts from this blog

Why Not to Restart Your Computer if It Is Infected With the Ransomware | Total Security

-
Image
The Internet has made our lives easy, especially in the field of online buying and selling, but with simplicity come greater challenges. One of the main issues that come with shopping online is its security concerns. So far this year, more than a thousand shoppers in Australia alone have reported cases of online shopping fraud, and 56.6 percent of those cases come with massive financial losses. As the Internet has become our daily tool for trading, investing, and consuming content, we cannot stop buying and selling online, although we are at risk of phishing from scammers who get richer by defrauding users, so we can do a lot to prevent our money from being stolen and defrauded. Buying from various online stores. This article provides practical advice for smart shopping online. These tips are classified into two parts: 1- Prevention Tips - How to protect yourself from fraud and deception while shopping on the Internet? 2- Tips - What do you do after being deceived? 1- How to protect yo...
Read more

What Is a Ransomware Virus and How Do You Protect Your Computer From It | Total Security

-
Image
The attacker then demands a ransom from the victim to regain access to the data upon payment in a virtual currency such as Bitcoin. You are presented with instructions on how to pay a fee to obtain the decryption key. Costs can range from a few hundred dollars to thousands, and you pay cybercriminals in Bitcoin. What are the types of ransomware? Depending on the result of the attack, ransomware can be classified into the following categories: Locker Ransomware: ransomware that shuts down your system and demands a ransom is classified to give you access to locker ransomware. Crypto-Ransomware: This type of ransomware encrypts your files and forces you to pay a specified amount of money to decrypt your files. The victim is required to pay for the anti-virus program that removes this virus. Ransomware Android Mobile Device: This type of ransomware either permanently close your mobile phone or steals its sensitive data, and requires a ransom to unlock it or to return the data. IoT Ransomwa...
Read more

What is a zero-day threat? Free Antivirus Software

-
Image
Day zero refers to the time since the vulnerability was discovered by software developers. There are two types of zero-day threats. A zero-day vulnerability is a software security flaw that can be reproduced in a browser or application. A zero-day attack is an attempt to install malware on a victim's computer by exploiting a zero-day vulnerability in the program. How Do Zero-Day Threats Arise? As the name suggests, a zero-day vulnerability is not yet known to the developer, antivirus companies, or the general public - zero-day attacks are carried out by cybercriminals who were among other things, vulnerabilities in browsers and e-mail clients are especially often exploited in zero-day attacks due to their widespread distribution among users. How to Recognize a Zero-day Attack? Once discovered by users and developers, these are no longer zero-day threats! This is why zero-day attacks are one of the most difficult types of threats with the most devastating consequences today, but the...
Read more