FreshRSS

πŸ”’
❌ Secure Planet Training Courses Updated For 2019 - Click Here
There are new available articles, click to refresh the page.
Before yesterdayYour RSS feeds

How to Protect Your Social Media Passwords from Hacks and Attacks

What does a hacker want with your social media account? Plenty.Β 

Hackers hijack social media accounts for several reasons. They’ll dupe the victim’s friends and followers with scams. They’ll flood feeds with misinformation. And they’ll steal all kinds of personal informationβ€”not to mention photos and chats in DMs. In all, a stolen social media account could lead to fraud, blackmail, and other crimes.Β 

Yet you have a strong line of defense that can prevent it from happening to you: multi-factor authentication (MFA).Β 

What is multi-factor authentication (MFA)?Β 

MFA goes by other names, such as two-factor authentication and two-step verification. Yet they all boost your account security in much the same way. They add an extra step or steps to the login process. Extra evidence to prove that you are, in fact, you. It’s in addition to the usual username/password combination, thus the β€œmulti-factor” in multi-factor authentication.Β Β 

Examples of MFA include:Β 

  • Sending a one-time code via a text or phone call, often seen when logging into bank and credit card accounts.Β 
  • Sending a one-time code to an authentication app, such as when logging into a gaming service.Β 
  • Asking for the answer to a security question, like the name of your elementary school or the model of your first car.Β 
  • Biometric information, like a fingerprint or facial scan.Β 

With MFA, a hacker needs more than just your username and password to weasel their way into your account. They need that extra piece of evidence required by the login process, which is something only you should have.Β 

This stands as a good reminder that you should never give out the information you use in your security questionsβ€”and to never share your one-time security codes with anyone. In fact, scammers cobble up all kinds of phishing scams to steal that information.Β 

How to set up MFA on your social media accounts.Β 

Major social media platforms offer MFA, although they might call it by other names. As you’ll see, several platforms call it β€œtwo-factor authentication.”  

Given the way that interfaces and menus can vary and get updated over time, your best bet for setting up MFA on your social media accounts is to go right to the source. Social media platforms provide the latest step-by-step instructions in their help pages. A simple search for β€œmulti-factor authentication” and the name of your social media platform should readily turn up results.Β 

For quick reference, you can find the appropriate help pages for some of the most popular platforms here:Β 

  • Facebook two-factor authentication help pageΒ 
  • Instagram two-factor authentication help pageΒ 
  • Twitter two-factor authentication help pageΒ 
  • TikTok two-factor authentication help pageΒ 
  • Snapchat two-factor authentication help pageΒ 

Another important reminder is to check the URL of the site you’re on to ensure it’s legitimate. Scammers set up all kinds of phony login and account pages to steal your info. Phishing scams like those are a topic all on their own. A great way you can learn to spot them is by giving our Phishing Scam Protection Guide a quick read. It’s part of our McAfee Safety Series, which covers a broad range of topics, from romance scams and digital privacy to online credit protection and ransomware.Β Β 

MFA – a good call for your social media accounts, and other accounts too.Β 

In many ways, your social media account is an extension of yourself. It reflects your friendships, interests, likes, and conversations. Only you should have access to that. Putting MFA in place can help keep it that way.Β 

More broadly, enabling MFA across every account that offers it is a smart security move as well. It places a major barrier in the way of would-be hackers who, somehow, in some way, have ended up with your username and password.Β 

On the topic, ensure your social media accounts have strong, unique passwords in place. The one-two punch of strong, unique passwords and MFA will make hacking your account tougher still. Wondering what a strong, unique password looks like? Here’s a hint: a password with eight characters is less secure than you might think. With a quick read, you can create strong, unique passwords that are tough to crack.Β 

Lastly, consider using comprehensive online protection software if you aren’t already. In addition to securing your devices from hacks and attacks, it can help protect your privacy and identity across your travels onlineβ€”both on social media and off.Β Β Β 

The post How to Protect Your Social Media Passwords from Hacks and Attacks appeared first on McAfee Blog.

How to Use Google Authenticator

The two-factor authentication tool got some serious upgrades that can help you bolster security for your online accounts.

S3 Ep131: Can you really have fun with FORTRAN?

Loop-the-loop in this week's episode. Entertaining, educational and all in plain English. Transcript inside.

Beware rogue 2FA apps in App Store and Google Play – don’t get hacked!

Even in Apple's and Google's "walled gardens", there are plenty of 2FA apps that are either dangerously incompetent, or unrepentantly malicious. (Or perhaps both.)

Twitter tells users: Pay up if you want to keep using insecure 2FA

Ironically, Twitter Blue users will be allowed to keep using the very 2FA process that's not considered secure enough for everyone else.

SIM swapper sent to prison for 2FA cryptocurrency heist of over $20m

Guilty party got 18 months, also has to pay back $20m he probably hasn't got, which could land him in more hot water.

Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?

Is this the same suspect as before? Is he part of LAPSUS$? Is this the man who hacked Uber and Rockstar? And, if so, who else?

Facebook 2FA scammers return – this time in just 21 minutes

Last time they arrived 28 minutes after lighting up their fake domain... this time it was just 21 minutes

Facebook 2FA phish arrives just 28 minutes after scam domain created

The crooks hit us up with this phishing email less than half an hour after they activated their new scam domain.

Cryptocoin broker Crypto.com says 2FA bypass led to $35m theft

The company has put out a brief security report that summarises the 'what', but not yet the 'how' or 'why'.

❌