I’ve mentioned this several times before (here, here, and here), but if you’re one of the 2.4 million people at risk because of the Carphone Warehouse data loss recently, now might be a good time to heed my advice on password security. It’s also a timely reminder that nobody is safe if they ignore the risks and don’t protect themselves with some essential security measures.
Hackers generally don’t steal data for kicks and giggles. Most of them are fully aware that they are committing a criminal act, and as such they’re generally looking for some kind of reward. Of course there are some people who do this for attention, but on the whole they’re doing it for financial reward.
With your money…….
How do they get your money?
Ordinarily they’re trying to engineer a way to use your online accounts elsewhere to obtain cash, goods or services by having you pay for it.
First they steal a database from somebody; this data contains your username and password for that company.
Although the password information is usually encrypted, with the huge amounts of data they steal, and the technology availble to them, it’s a simple process to ‘crack’ the encryption if you use a normal word as a password, or part of a password. The more complex the password (i.e. random), the more difficult it is to crack the encryption.
Once they have your password for one service, they’ll try it with lots of others. This may reveal further information about you which can be sold online to identify thieves. Or grant them access to your accounts enabling them to order high resale goods for themselves. This kind of crime has been going on for years, well before the Internet was commonplace […]