• Use at least 3 characters or more to create a password. The more number of characters we use. the more secure is our password.
• Use various combinations of characters while creating a password. For example, create a password consisting of a combination of lowercase, uppercase, numbers and special characters etc.
• Avoid using the words from dictionary. They can be cracked easily.
• Create a password such that it can be remembered. This avoids the need to write passwords somewhere. which is not advisable.
• A Password must be difficult to guess.
• Change the password once in two weeks or when you suspect someone knows the password.
• Do not use a password that was used earlier.
• Be careful while enteringa password when someone is sitting beside you.
• Do not use the name of things located around you as passwords for your account.
• Be aware of Shoulder Surfers at public places or schools while entering your passwords. Cover the keyboard with paper or hand or something else from viewed by unauthorized users.
• You should not write the passwords on the paper or on any disk drive to store it. Brain is the best place to store them.
• You should not use a password that represents their personal information like nicknames, phone numbers, date of birth etc.

• Say, you have won a lottery of million dollars, getting or receiving such kind of mails is a great thing, and really it's the happiest thing. However, these mails may not be true. By responding to such a kind of mails many people lost huge amount ofmoney. So ignore such kind ofe-mails, do not participate in it and consider it as a scam.
• Sometimes e-mails offering free gifts and asking personal information are received from unknown addresses. This is one wayto trap your personal information.
• Generally spammers or hackers try to steal e-mail address and send malicious software or code through attachments, fake e-mails, and spam and also try to collectyour personal information.

• Since the e-mail messages are transferred in clear text, it is advisable to use some encryption software like PGP [pretty good privacy) to encrypt e-mail messages before sending, so that it can be decrypted only by the specified recipient only.
• Use E-Mail Filtering Software to avoid Spam or so unwanted mails that only messages from authorized users are received. Most E-Mail providers offer Filtering services.
• Do not open attachments coming from strangers, since they may contain a virus along with the received message.
• Be careful while downloading attachments from E-Mails into your hard disk. Scan the attachment with updated antivirus software before saving it
• Do not send messages with attachments that contain executable code like Word documents with macros, .EXE files and ZIPPED files. We can use Rich Text Format instead of the standard .DOC format RTF will keep your formatting, but will not include any macros. This may prevent you from sending virus to others if you are already infected by it.
• Avoid sending personal information through E-Mails.
• AVoid filling forms that come via E-Mail asking for your personal information and do not click on links that come via E-Mail.
• Do not click on the E-Mails that you receive from unknown users.

• Confirm whether e-mail is received from bank or not : Be cautious while providing bank details online and before proceeding further confirm with the bank about the e-mail you received. Thinkthat, ifsomethingis important or urgent why doesn't the bank call me instead ofsending e-mail?
• Confirm the Shipping: Beware of shipping scam. Make sure you get authorized signed document via fax before proceeding further and make sure that you receive it from an authorized company.
• Be cautious during online auction : : Don't be trapped with discounts and think wisely before you proceed with online auction. Think why $200 productwould be $ 20.
• Be aware about the product you receive via e-mail : Be aware about the products you get for a discounted price. Think why you have received e-mail for products when you never enter any online shopping or contest.
• Don't be trapped by lottery scam : Don't get trapped by scammers and e-mails with a subject line you won some $10000. lust think why only you have received the e-mail without your participation!

• Limit the information you put in the social networking sites.
• Don't put personal information like your family details, addresses, personal photographs, video, etc.
• In case if you put your personal photographs try to change settings and make visible only for friends
• Most of the sites and services provide options for privacy settings to prevent attackers to view your information. You can make use ofthese options to choose/deny whom you want to allow to see your information.
• Be careful ifyou want to meet social networking friends in person, sometimes it may not be their true identity which is posted on the social networking sites.
• Always think before you meet such strangers. If you decide to meet them do it in a public place during the day. Kids should never be allowed to meet such strangers alone.
• Always clean browser's cookies and cache.
• lnstall a good and latest version ofAnti-virus to keep your system free from malicious applications like virus, worms and Trojans.
• Don't ever run any java script while logged into your social networking accounts.
• Don't ever share your password with anyone; and keep changing your password regularly. Always use proper password (min 8 digits with a mix ofalpha numeric & special characters).
• Don't ever login to any site other than the legitimate sites and always check the URL for misspelled links before you proceed further.
• Use Virtual Keyboard, wherever possible to enter your password for better security as these cannot be captured by key-loggers.

• The fraudster inserts a folded piece of plastic film into the ATM card slot so that it will hold the card and will not allow it to be expelled by the machine.
• Another method involves use offake cards using data collected from tiny cameras and devices called "skimmers" that capture and record bank account information.
• Another interesting method of ATM frauds involves the use of "duplicate ATMs" by the fraudsters that uses software which records the passwords typed on those machines.

• Enable your mobile phone number and e-mail with your banking transactions for timely SMS and e-mail alerts.
• Your Financial Institution or Bank will never send you an e-mail asking you to enter your Banking details online.
• Check regularly your credit card or bank account details and keep track ofyourtransactions.
• Update your details such as change ofaddress for receipt ofcheque books, statements, debit / credit cards at the right address.
• For protecting phishing attacks, your browser should be enabled with phishing filters and never click links in your e-mail for updating and transactions.
• Keep a strong and easy to remember password and change it regularly.
• Vishing is a form of phishing, where instead of people receiving an e-mail trying to lure them into giving personal information, the criminal uses a phone call, either live or automated to attackthe bank or credit union customer and get critical information.
• Try to restrict yourself from giving personal information when you receive a call from a Bank or Credit Card Provider.
• Look for a "no tampering" sign. Crooks often place these to stop anyone curious about a new piece of equipment.
• Steer clear of a jammed ATM machine that forces customers to use another ATM that has a skimmer attached. Often, the criminal will disable other ATMS in the area to draw users to the one that has the skimming device on it
• Customers should check their bank accounts regularly to make sure there are no unusual or unauthorized transactions. If you find any unauthorized ATM transactions on your bank account, immediately notify local law enforcement agency as well as your financial institution and/ or the establishment where the ATM is located.
• Always protect your PIN: Don't give the number to anyone, and cover the keypad while you are entering yours.

• Never click web links in your e-mail and no bank will ask you to update the accounts through online.
• Never provide personal information including your passwords, credit card information, account numbers to unknown persons.
• Never keep username, account name and passwords at one place. Always try to remember passwords.
• Always use phishing filters at your Internet Browser.
• DO not click any images in the web sites if you are unsure.
• Confirm whether e-mail is received from bank or not.
• Be cautious while providing bank details via online, before proceed further confirm with bank about the e-mail you received. Think that if something is important or urgent why don't bank calling me instead of sending e-mail?
• Delete all cookies and history file before you perform online transactions.
• Always use virtual keyboard while accessing online banking.
• Delete all the history and cookies once you are done with online transactions.
• Avoid accessing online banking in cybercafes.

• Before you go for online shopping make sure that your PC is secured with all core protections like antivirus, anti spyware, firewall including system updated with all patches and web browser security.
• Before buying things, one should research about the web site from which he/she wants to buy. Attackers try to trap with websites that appear to be legitimate, but they are not. So make a note of the telephone number and physical address of the vendor and confirm that the website is a trusted site. Search for different web sites and compare the prices. Check the reviews of consumers and media of that particular web site or merchants.
• If you are ready to buy something online, check whether the site is secure like https or padlock on the browser address bar or at the status bar and then proceed with financial transactions.
• After finishing the transaction take a print or screenshot ofthe transaction records and details of purchase data like price, confirmation receipt, terms and conditions ofthe sale.
• Immediately check the credit card statements as soon as you finish online transaction. Verify about the charges you paid were same, and ifyou find any changes immediately report to concerned authorities.
• After finishing your online shopping, clear all the web browser cookies and turn offyour PC since spammers and phishers will be looking for the system connected to the Internet and will try to send spam e-mails and will try to install the malicious software that may collect your personal information.
• Beware of the e-mails like "please confirm of your payment, purchase and account details for the product". Remember legitimate business people never send such e-mails. If you receive such e-mail immediately call the merchant and inform the same.
• A new kind offraud attempt is being observed in the case of mobile wallets. User should be careful and should not disclose his/her PIN.

There are various threats, which can affect the mobile users in several ways. For example, sending multimedia messages and text messages to the toll free numbers, unknowingly clicking for a message received through the mobile phone. Now-a-days many malicious programs have come which will try to get access over mobile phones and laptops and steal the personal information inside it.

• Be careful while downloading applications through Bluetooth or as MMS attachments. They may contain some harmful software, which will affect the mobile phone.
• Keep the Bluetooth connection in an invisible mode, unless you need some user to access your mobile phone or laptops. If an unknown user tries to access the mobile phone or laptop through blue tooth, move away from the coverage area of blue tooth so that it automatically gets disconnected.
• Avoid downloading the content into mobile phone or laptop from an untrusted source.
• Delete the MMS message received from an unknown user without opening it.
• Read the mobile phone's operating instructions carefully mainly regarding the security settings, pincode settings, Bluetooth settings, infrared settings and procedure to download an application.This will help in making your mobile phone secure from malicious programs.
• Activate the pin code request for mobile phone access. Choose a pin, which is unpredictable and which is easy to remember for you.
• Use the call barring and restriction services provided by operators, to prevent the applications that are not used by you or by your family members.
• Don't make you mobile phone as a source for your personal data, which is dangerous if it falls in to the hands of strangers. It is advisable not to store important information like credit card and bank cards passwords, etc in a mobile phone.
• Note the IMEI code of your cell phone and keep it in a safe place. This helps the owner to prevent access to the stolen mobile. The operator can block a phone using the IMEI code.
• Regularly, backup important data in the mobile phone or laptop by following the instructions in the manual.
• Define your own trusted devices that can be connected to mobile phone or laptop through Bluetooth. Use free cleansing tools, which are available in the Internet to make your mobile work normally, whenever it is affected by malicious softwares.

Cyber Awareness Video - 1