Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Online Shopping for the Holidays? Tips, News and a Fair Warning - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Online Shopping for the Holidays? Tips, News and a Fair Warning

'Tis the season of online shopping with more of your shopping online than ever before.  As the old saying goes, "On the Internet, nobody knows you're a dog" (*), how do your users know that they are buying from a safe vendor?  In timely news, the US Federal Government shut down 132 "fake online shopping sites" for selling counterfeit goods.  Our own Dr. Johannes wrote this piece in Forbes today with 7 safe steps to stay safe shopping online today:

  1. Stick to Sellers you Know
  2. Don't Trust Customer Reviews Blindly
  3. Be Careful with "Phishing"
  4. Watch Your Credit Card Statement Carefully
  5. Be a Cautious Seller
  6. Be Careful When and How to Meet a Craigslist Seller
  7. Don't Buy Stolen Property

Read the whole thing for more explicit details and share with your users.  Some things for the more technically inclined to be aware of.  Many fake online shopping sites come with malware, particularly those that arrive via spam.  And, of course, with SEO, blind google searches could land you on a bad site instead of a good one.  Is there something we missed?  Use the contact form and chime in!

--
John Bambenek
bambenek \at\ gmail /dot/ com
Bambenek Consulting

* - 

John

248 Posts
ISC Handler
Always use "online credit card numbers' sich as the one from Discover: https://www.discover.com/credit-cards/member-benefits/security/create-online-account-number.html

It generates a unique number linked to your regular account that can only be used at the vendor where it was first used. If the vendor gets hacked, they are still the only ones who can submit a charge.
Anonymous
Posts
It sounds like a one time only Virtual Credit Card would come in very handy and could possibly reduce a large number of hassles with current credit cards (e.g. overcharges, non authorized charges, unauthorized subscriptions, ...) If I only want to buy one widget for $10, a one time Virtual Credit Card good for only $10 at Vendor X could solve that problem. Just like cash used to...
Anonymous
Posts
Re the cartoon: Someone zoomed in on the screen. All is not as rosy as it seems.

Second cartoon on this page:

http://www.unc.edu/depts/jomc/academics/dri/idog.html
Graeme

1 Posts Posts

Sign Up for Free or Log In to start participating in the conversation!