This phenomenon is caused by hackers hijacking your Gmail account using a technique called Cross Site Request Forgery (CSRF), Techniques requires that you click a link on a dummy hacker Web site, spam or pop-up when you are logged into your Gmail account. This action can transplant a digital spy in the form of a cookie or java script code on your PC. When your Gmail account is opened, Digital Spy tricks your browser to send an invisible request to Gmail servers.
This request can be download your account information, your contact list, or your emails. As long as you kept your Gmail account open the digital spy could download info uninterrupted until you exit from your account. This technique could also load spam and other hacker scripts into your Gmail account. The stolen information would be used to pilfer other account information. Or hackers can profit by selling the Gmail account info to spammers for the highest price.
Google has been able to respond to the Gmail flaw quickly by tightening its security structure. But, the CSRF attack can also work with your Google Toolbar and other websites, not only Gmail. If hackers are able to hijack your Gmail accounts, this technology could be used to request financial information when making online transactions. There are reports that CSRF attacks were able to initiate money transfer by incorporating a code of java script in all web browsers during online banking.
A CSRF technique relies primarily on ignorance and trust they have for major user sites. Here is a simple strategy to stop hackers from stealing your information online.
1. Never instruct your browser to remember your login information. This allows hackers to easily enter your trusted sites using a hijacked Web browser.
2. Also perform a "secure delete" of cookie history after you disconnect the network. Visit www.delete-computer-history.com/delete-cookie-history for instructions.
3. Use a third-party firewall with high security settings to monitor network traffic in and out.
4. Use Firefox as your main browser. Active development allows the Firefox Web browser respond immediately to security threats. This action also provides a decent amount of online security against such attacks. However, online security flaws are not necessarily the fault of Internet users. Security flaws in a trusted website is the main avenue used for an attack. Trust in major sites is the weapon CSRF attackers use to steal information. For this reason, Gmail and other webmail providers are the best places for hackers to launch an attack.
After all, having a constant high speed network connection comes with a high price. If you do not protect the door to your online personal information is open.
0 komentar