Episode 4: Malware & Email

So what is malware? How do you get it and what does it do? 

Malware, short for malicious software, is a tiny viral program that runs on your computer and collects information without you knowing about it. It's main purpose these days is to steal your banking and/or credit card information and passwords. These highly sophisticated cyber criminals can use that information either for themselves or they can sell it on the black market.

Malware can infect your computer in a variety of ways. An infected thumb drive, if inserted, can immediately spread onto your computer, a deceitful website download. Now, there are even criminals who will pay legit websites to host their malware infected ads so be careful there. But two I want to target specifically: Email and Software add-ons.

Software:

On the Internet there is no shortage of free programs, apps and other software that you can download. But free often comes at a cost, and in many cases this means downloading attached “sponsored programs” that are really nothing more than malware. All those toolbars you may have on your browser is most likely malware. When installing one of these free programs, do not get lured into the "Recommended Install" but rather choose the "Custom Install" and read each install screen carefully and choose the right option. If there is not "Custom Install" option, and this program is not from a trusted source, don't bother installing it. 

Email:

Now, we're going to get back to basics here so I'm not trying to insult your intelligence. We have to re-train our way of thinking. Let's say you get an email saying you received a $50 gift card from Kohl's. You even open the email and the page looks legit, looks like a professional ad and everything. But it has links that if you click on, will take you to a site that will install malware. Now let's look at common sense: Maybe you shop at Kohl's, maybe you don't, but do you really think that Kohl's just randomly knows your email address? 

Another example: UPS emails you that your shipment is delayed. First, have you ordered anything that has a UPS tracking number? Again, UPS does not know your email address. Or the IRS, again, these entities are not going to email you UNLESS, you specifically sign up for their newsletters/offers/updates/etc...

So if an email slips through the spam filter and into your inbox, think before you open it. "Do I know this person", "Did I order anything", "How did that Nigerian prince find me to pay me for holding onto his inheritance". Also, look for misspellings or other weird things in the email's subject line.

Prevention:

There are two things I use and both are free. For anti-virus, I use Avast. Another layer of Malware protection is Malwarebytes. Install these and try to do scans about once a month and stay protected.