IS&T Security FYI

Cyber Monday & Online Shopping

More people are expected to shop online on Cyber Monday than visit stores on Black Friday, according to American Express. The use of mobile devices for online shopping is projected to increase as well.

Whether you’ll be conducting transactions from your desktop, laptop or mobile device, keep these tips in mind to help protect yourself from identity theft and other malicious activity:

• Secure your computer and mobile device by making sure they are current with all operating system and application updates. Anti-virus software should be installed and running.
• Use strong passwords. When logging on to your computer or mobile device and when visiting sites or using applications for shopping, use passwords that are not used for other accounts.
• Use applications with caution. Malware could be downloaded onto seemingly legitimate shopping applications, to steal credit card or other sensitive information.
• Know your online merchants. Limit your shopping to merchants you know and trust. Go to them by typing in the URL rather than through a search bar. If you are unsure about a merchant, check with the Better Business Bureau or Federal Trade Commission.
• Consider using an online payment system or credit card. Where available, use online payment services, which keep your credit card information stored on a secure server, and let you make purchases online without revealing your card details to retailers (example: PayPal). When you use a card online, use a credit, not debit card, which are protected by the Fair Credit Billing Act and may reduce your liability.
• Look for “https” before you click to purchase. The “s” stands for secure and indicates the transaction will be encrypted. A padlock in your browser’s status window is another indicator.
• Secure your browser. Make sure it is up-to-date with latest security patches. Turn off pop-ups and unwanted ads (some browser plug-ins can suppress ads on web pages). You may also set the browser status to “private,” so that your activity on the Web can not be traced, removing any history and cache information from others who may have access to the same device.
• Do not use public computers or open wireless networks for your online shopping. Criminals may intercept traffic on public wireless to steal sensitive information. Make sure the settings for your computer or device prevent it from automatically connecting to open wireless spots.
• Home wireless networks should be secure with authentication requirements and a strong password.
• Be alert for scams. Cyber criminals try to take advantage of people’s generosity during the holiday season and can use fake charity requests to gain access to your information or computer/device. Think before clicking on emails making these requests. Don’t give your financial information to anyone via email, text or phone, especially when it is unsolicited.

More online shopping assistance can be found at:

• US-CERT
• OnGuard Online
• Microsoft
• Privacy Rights Clearinghouse
• Internet Crime Complaint Center
• Internal Revenue Service