{"language":"en_GB","topic":{"id":"p66712i16","strTitle":"Common Threats and How to Counter Them","screens":[{"id":"p66712i16s01","strTitle":"Introduction to the threats","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s01.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s01a01","layoutId":"p66712i16s01lay01","objVideoData":{"strSrc":"42564\/05_common-threats_v0.20_1920x1080_HQ_compressed.mp4","strTranscriptText":"Hundreds of billions of emails are sent each day.\nA large volume of this traffic is spam and malware. \nPhishing and spear phishing emails account for roughly three quarters of all cyberattacks.\nCryptoLocker is ransomware. It encrypts the recipient's files and demands payment to release them.\nCryptoLocker has successfully extorted around $3 million as of 2016.\nHundreds of thousands of Facebook accounts are compromised every day...\nSo how can you keep your information, identity and money safe from social engineering attacks?\nExplore this topic to learn about the key risks areas and how to mitigate them."},"active":1},{"id":"p66712i16s01a02","layoutId":"p66712i16s01lay01","strContent":"Select the [b]Play[\/b] button to watch the video again, or scroll down to continue.","active":1},{"id":"p66712i16s01a03","layoutId":"p66712i16s01lay01","strContent":"Select [b]Play[\/b] to begin.","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i16s02","strTitle":"All my savings are gone: Amy's story","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s02a01","layoutId":"p66712i16s02lay00","objVideoData":{"strSrc":"42564\/161114_16-415_Topic5_FineCut.mp4","strTranscriptText":"Amy: I just feel so stupid - you know - how could I have been so naïve? Now all of my savings are gone... I don't know what I'm going to do!\nThat was the deposit for our first home. So, there's literally nothing left. \nMy only hope is that the online payments company will compensate us...\nWell I was working in my office when I got this email. It said it was from Paybuddy - from their fraud detection team. It certainly looked convincing.\nIt said they had detected suspicious activity on my account and that I should take action immediately. There was a link to a login page, which I clicked, of course.\nI entered all my details when prompted, expecting to see my account - and instead I just got to a screen from their fraud team, saying that my account was unaffected and that no further action was required. I didn't think anything of it at the time.\nI mean, I was relieved actually, after that initial panic, that it was all ok... but, you know, it wasn't ok.\nWhile I was settling back into my normal day, fraudsters now had all my online payment details and were busy spending on my account. \nI only realised when I went to pay for my lunch and my debit card was declined due to lack of funds.\nSo, then I logged on to my online banking and I realised what had happened.\nObviously I called Paybuddy's fraud team right away but because I gave away my information they may not be able to help. \n\nYeah - it's been a very stressful time and it's going to take years to make up for a moment's stupidity.\n\nIf my experience can help other people to stay safe then, you know, maybe that's a small consolation."},"active":1},{"id":"p66712i16s02a02","layoutId":"p66712i16s02lay00","strContent":"You can select the [b]Transcript[\/b] button to read what is being said. After watching the video, select [b]Transcript[\/b] to close the transcript.","active":1},{"id":"p66712i16s02a03","layoutId":"p66712i16s02lay00","strContent":"Select the [b]Play[\/b] button to watch the video again, or scroll down to continue.","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i16s03","strTitle":"What is social engineering?","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s03a01","layoutId":"p66712i16s03lay00","strContent":"Amy is a victim of social engineering. Social engineering is the [b]art of manipulating people[\/b] into giving up their valuable personal information. The goal of these attacks may vary but often involves trying to steal passwords, banking information or other valuable confidential information.\n \nAs you will see in this topic, criminals use a number of different methods, technological or more traditional, to try and obtain this information and they are always coming up with new ways to do this. They all involve trying to gain your trust and give the appearance of legitimacy. That is because they know that human nature is generally the weakest part of any security chain.","active":1},{"id":"p66712i16s03a02","layoutId":"p66712i16s03lay00","strContent":"Scroll down to continue.","active":1},{"id":"p66712i16s03a03","layoutId":"p66712i16s03lay00","strContent":"[b]What is social engineering?[\/b]","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i16s04","strTitle":"Malware and cyber attacks","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s04.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s04a01","layoutId":"p66712i16s04lay00","strContent":"Malware is the term used for 'malicious software' which encompasses a range of different types of cyber threats to information security. The main types of cyber threat are explored here.","active":1},{"id":"p66712i16s04a02","layoutId":"p66712i16s04lay00","strContent":"Select each [b]heading[\/b] to find out more.","active":1},{"id":"p66712i16s04a03","layoutId":"p66712i16s04lay00","arrHottext":[{"strText":"Malware","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s04sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Ransomware","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s04sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Spyware and Adware","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s04sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Hacking and Distributed Denial of Service (DDoS)","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s04sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i16s04a04","layoutId":"p66712i16s04lay00","strContent":"Malware and cyber attacks","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i16s04sub01","strTitle":"Malware","assets":[{"id":"p66712i16s04sub01a01","layoutId":"p66712i16s04sub01lay00","strContent":"A computer virus is software designed to copy itself onto the host system, leading to loss of data or changes to the system.\n \nA worm is a type of virus that uses flaws in the operating system to spread itself on a network and cause harm - often degrading performance in some way.\n\nA Trojan horse is usually an email attachment which is made to look like something legitimate but is actually an executable program which can do anything from modifying files to stealing confidential data and even giving complete control of the computer to the hacker. ","active":1},{"id":"p66712i16s04sub01a02","layoutId":"p66712i16s04sub01lay00","strContent":"Select another heading.","active":1},{"id":"p66712i16s04sub01a03","layoutId":"p66712i16s04sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s04sub02","strTitle":"Ransomware","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s04sub02a01","layoutId":"p66712i16s04sub02lay00","strContent":"Ransomware is a type of attack, where a program is inadvertently installed which encrypts files on the computer and displays a message demanding payment to decrypt those files or refrain from publishing them.\n\nRansomware infections can also spread to other computers on the network and have catastrophic effects on an organisation.","active":1},{"id":"p66712i16s04sub02a02","layoutId":"p66712i16s04sub02lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s04sub02a03","layoutId":"p66712i16s04sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s04sub03","strTitle":"Spyware and Adware","assets":[{"id":"p66712i16s04sub03a01","layoutId":"p66712i16s04sub03lay00","strContent":"Spyware is malicious software which installs itself to gain information about an individual or their organisation without their knowledge.\n\nOne example of this is keylogging software which saves and reports on the users keystrokes with an aim to discover passwords or other confidential access information. Spyware can also be used to provide targeted advertising - this is known as Adware.","active":1},{"id":"p66712i16s04sub03a02","layoutId":"p66712i16s04sub03lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s04sub03a03","layoutId":"p66712i16s04sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s04sub04","strTitle":"Hacking and Distributed Denial of Service (DDoS)","assets":[{"id":"p66712i16s04sub04a01","layoutId":"p66712i16s04sub04lay00","strContent":"Hacking is the act of seeking weaknesses in a computer system or network and exploiting them in some way. Malware distribution is done by hackers who often seek to break into the systems of organisations.\n \nDistributed Denial of Service (DDoS) attacks seek to overload the bandwidth and resources of the targeted system by bombarding it with connections all at once in order to disable or crash that system.","active":1},{"id":"p66712i16s04sub04a02","layoutId":"p66712i16s04sub04lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s04sub04a03","layoutId":"p66712i16s04sub04lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i16s05","strTitle":"Managing the risks","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s05.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s05a01","layoutId":"p66712i16s05lay00","strContent":"Here are some practical steps you can take to avoid the risks of malware and cyber threats at work, at home and on the move.","active":1},{"id":"p66712i16s05a02","layoutId":"p66712i16s05lay00","arrStepData":[{"strTitle":"","objImageSrc":{"strSrc":"42564\/p20825i20s05a02_1.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s05sub01","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"","objImageSrc":{"strSrc":"42564\/p20825i20s05a02_2.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s05sub02","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"","objImageSrc":{"strSrc":"42564\/p20825i20s05a02_3.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s05sub03","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"","objImageSrc":{"strSrc":"42564\/p20825i20s05a02_4.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s05sub04","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"","objImageSrc":{"strSrc":"42564\/p20825i20s05a02_5.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s05sub05","booAssetOwnedSubscreen":true},"strObjectType":"action"}]}],"active":1},{"id":"p66712i16s05a03","layoutId":"p66712i16s05lay00","strContent":"Managing the risks","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i16s05sub01","strTitle":"Subscreen 1","assets":[{"id":"p66712i16s05sub01a01","layoutId":"p66712i16s05sub01lay00","strContent":"Avoid logging in as an administrator (if you have this privilege) - instead use your normal user account. Most users will use a standard account for everyday use of their computer. These accounts have fewer privileges to make changes to the operation of the computer than administrator accounts. A virus downloaded on a standard account may not cause as much damage.\n\nTo minimise the risk of infecting a computer, those with administrator rights should only log on with their administrator account when additional privileges are required.","active":1},{"id":"p66712i16s05sub01a02","layoutId":"p66712i16s05sub01lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i16s05sub01a03","layoutId":"p66712i16s05sub01lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i16s05sub01a04","layoutId":"p66712i16s05sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s05sub02","strTitle":"Subscreen 2","assets":[{"id":"p66712i16s05sub02a01","layoutId":"p66712i16s05sub02lay00","strContent":"Check that your computer's anti-virus and anti-malware software is running and is up to date and also make sure that the most recent security patches have been installed for your operating system and applications.\n \nUp-to‐date software will detect and protect you from known viruses, notifying you when it detects anything that could be harmful.","active":1},{"id":"p66712i16s05sub02a02","layoutId":"p66712i16s05sub02lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i16s05sub02a03","layoutId":"p66712i16s05sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s05sub03","strTitle":"Subscreen 3","assets":[{"id":"p66712i16s05sub03a01","layoutId":"p66712i16s05sub03lay00","strContent":"Email attachments may contain code which can compromise your information and personal details. \n\nBeware of clicking any suspicious links. If an email contains news or a link to an offer that seems too good to be true - it usually is! Only open attachments from trusted contacts, as long as they seem legitimate - this is not foolproof protection as email addresses can be faked and friends and colleagues could also have been hacked, but it does reduce the likelihood of malware infections. \n\nIf you receive an attachment that you are suspicious of, do not open it and report it to your IT department immediately.","active":1},{"id":"p66712i16s05sub03a02","layoutId":"p66712i16s05sub03lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i16s05sub03a03","layoutId":"p66712i16s05sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s05sub04","strTitle":"Subscreen 4","assets":[{"id":"p66712i16s05sub04a01","layoutId":"p66712i16s05sub04lay00","strContent":"Think first and question your actions before you download any software to your computer.\n \nEven legitimate software can cause problems on networked systems, so you should always ask yourself whether you really need the software you're downloading. \n\nAs always, speak to your IT department if you're ever in doubt about the effects of a software installation.","active":1},{"id":"p66712i16s05sub04a02","layoutId":"p66712i16s05sub04lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i16s05sub04a03","layoutId":"p66712i16s05sub04lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s05sub05","strTitle":"Subscreen 5","assets":[{"id":"p66712i16s05sub05a01","layoutId":"p66712i16s05sub05lay00","strContent":"Contact your IT team as soon as you spot anything suspicious on your computer.\n \nThey will be able to help answer any questions you have. ","active":1},{"id":"p66712i16s05sub05a02","layoutId":"p66712i16s05sub05lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i16s05sub05a03","layoutId":"p66712i16s05sub05lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i16s06","strTitle":"Phishing scams","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s06a01","layoutId":"p66712i16s06lay00","strContent":"Phishing is the term given to the way fraudsters try to lure people into giving away personal data. This is normally done by email but can also be done by letter and by SMS (text message) too. Here is an example of what can happen.\n \nJames is the Chief Accountant at his University. One day he receives this urgent email from the Vice Chancellor, requesting a transfer of funds to a contractor which needs to happen immediately.\n \nRead the email and decide - should he action the request?","active":1},{"id":"p66712i16s06a02","layoutId":"p66712i16s06lay00","objNormalSrc":{"strSrc":"42564\/p20825i20s06_1.png","strAltText":""},"active":1},{"id":"p66712i16s06a03","layoutId":"p66712i16s06lay00","objNormalSrc":{"strSrc":"42564\/p20825i20s06_2.png","strAltText":""},"active":1},{"id":"p66712i16s06a04","layoutId":"p66712i16s06lay01","strLabel":"Yes","active":1},{"id":"p66712i16s06a05","layoutId":"p66712i16s06lay01","strLabel":"No","active":1},{"id":"p66712i16s06a06","layoutId":"p66712i16s06lay00","strContent":"Phishing scams","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i16s06sub01","strTitle":"Yes","assets":[{"id":"p66712i16s06sub01a01","layoutId":"p66712i16s06sub01lay00","strContent":"That's right. As you can see, there were some clues that this was a fraudulent email because it contained the following:\n[list]\n[*]An unusual email address and the recipient's email address was not shown\n[*]An impersonal greeting\n[*]Grammatical errors\n[*]An unusual sense of urgency in the tone\n[*]An undue sense of secrecy\n[*]An unusual use of flattery.\n[\/list]\n","active":1},{"id":"p66712i16s06sub01a02","layoutId":"p66712i16s06sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s06sub02","strTitle":"No","assets":[{"id":"p66712i16s06sub02a01","layoutId":"p66712i16s06sub02lay00","strContent":"That's not quite right. As you can see, there were some clues that this was a fraudulent email because it contained the following:\n[list]\n[*]An unusual email address and the recipient's email address was not shown\n[*]An impersonal greeting\n[*]Grammatical errors\n[*]An unusual sense of urgency in the tone\n[*]An undue sense of secrecy\n[*]An unusual use of flattery.\n[\/list]\n","active":1},{"id":"p66712i16s06sub02a02","layoutId":"p66712i16s06sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i16s07","strTitle":"Managing the risks - phishing","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s07.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s07a01","layoutId":"p66712i16s07lay00","strContent":"The kind of email James received is increasingly common as fraudsters seek to target specific organisations and institutions (known as 'spear phishing') or specific individuals with the required level of authority in an organisation (known as 'whaling'). However, there are some simple steps you can follow to help protect you from phishing emails.","active":1},{"id":"p66712i16s07a02","layoutId":"p66712i16s07lay00","strContent":"Select each [b]heading[\/b] to find out more.","active":1},{"id":"p66712i16s07a03","layoutId":"p66712i16s07lay00","arrHottext":[{"strText":"Clicking links","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s07sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Check the email carefully","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s07sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Be cautious of opening attachments","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s07sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Check the website address","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s07sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i16s07a04","layoutId":"p66712i16s07lay00","strContent":"Managing the risks - phishing","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i16s07sub01","strTitle":"Clicking links","assets":[{"id":"p66712i16s07sub01a01","layoutId":"p66712i16s07sub01lay00","strContent":"A simple rule is, don't click links you're not sure of. \n\nThink about whether the person or organisation the email seems to be from is really likely to ask you for the information. Check with your IT department if you are unsure.\n\nFor anything that seems to be from a service you use (e.g. online payment service or bank), go direct to the real website to check - don't use the link in the email.","active":1},{"id":"p66712i16s07sub01a02","layoutId":"p66712i16s07sub01lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s07sub01a03","layoutId":"p66712i16s07sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s07sub02","strTitle":"Check the email carefully","assets":[{"id":"p66712i16s07sub02a01","layoutId":"p66712i16s07sub02lay00","strContent":"While phishing scams are becoming more sophisticated, there can often be telltale signs that something is amiss in the email. \n\nAre there spelling mistakes, or does the wording not have quite the same tone as other communications you've previously had from that person or organisation?\n ","active":1},{"id":"p66712i16s07sub02a02","layoutId":"p66712i16s07sub02lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s07sub02a03","layoutId":"p66712i16s07sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s07sub03","strTitle":"Be cautious of opening attachments","assets":[{"id":"p66712i16s07sub03a01","layoutId":"p66712i16s07sub03lay00","strContent":"If you have any concerns that the email may not be genuine do not open any attachments. \n\nSimply opening a file could result in malware being installed on your computer.","active":1},{"id":"p66712i16s07sub03a02","layoutId":"p66712i16s07sub03lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s07sub03a03","layoutId":"p66712i16s07sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s07sub04","strTitle":"Check the website address","assets":[{"id":"p66712i16s07sub04a01","layoutId":"p66712i16s07sub04lay00","strContent":"If you do follow a link from an email, check the website address carefully. Is it what you'd expect? \n\nBe wary of following any links in emails that take you to a login screen. These may be convincing but may not be genuine.\n\nIf possible, use your mouse to hover over the link to see if it actually redirects to a different website address. Always carefully check the website address you are on and check it is secure before you enter your confidential details.","active":1},{"id":"p66712i16s07sub04a02","layoutId":"p66712i16s07sub04lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s07sub04a03","layoutId":"p66712i16s07sub04lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i16s08","strTitle":"Vishing","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s08.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s08a01","layoutId":"p66712i16s08lay00","strContent":"Another common threat can take place over the phone. Vishing is where a fraudster uses a voice call to try and scam the listener into giving away confidential information that can be used for identity theft or transferring funds into the scammer's own account. The scammer will generally pretend to be from a legitimate business e.g. your bank or credit card company, a company you use (e.g. Microsoft Support) or even the police, and may have already gathered some basic information about the listener through other means (e.g. social media postings) to aid their credibility. They may also imply a sense of urgency for the listener to act. So how can you stay safe?\n[list]\n[*]Be suspicious - if the caller's intention or reason for calling sounds implausible to you or seems to offer something that is too good to be true, it probably is!\n[*]Check any details for yourself - Remember, a legitimate, [b]unsolicited[\/b] call from the police, your bank or a utility company, for example, should not be asking for your card PIN or other secure confidential details. If you have any concerns, hang up and call the actual company or bank back on their official number to check the validity of the request or the status of your account.\n[\/list]\n","active":1},{"id":"p66712i16s08a02","layoutId":"p66712i16s08lay00","strContent":"Scroll down to continue.","active":1},{"id":"p66712i16s08a03","layoutId":"p66712i16s08lay00","strContent":"[b]Vishing[\/b]","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i16s09","strTitle":"Social media","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s09a01","layoutId":"p66712i16s09lay00","strContent":"Think before you post anything online which could reveal personal information about you or your family and friends which could be exploited by others.\n\nA survey by the UK consumer organisation 'Which?' reviewed the social media profiles of 44 volunteers and found that they were giving away a lot more than they realised. 'Which?' even found it possible to obtain a credit card using the information which one of them had provided!\n\nHere are some examples of things to watch out for.","active":1},{"id":"p66712i16s09a02","layoutId":"p66712i16s09lay00","strContent":"Select each [b]image[\/b] to find out more.","active":1},{"id":"p66712i16s09a03","layoutId":"p66712i16s09lay00","objNormalSrc":{"strSrc":"42564\/p20825i20s09a03_n.png","strAltText":"Three mocked up social network images arranged left to right across the screen. Based on page 6 of the Eukleia course. See script here for guidance: \\\\thor\\raid1\\16-415\\design\\content\\scripts\\LEO_UoL_5.Common_Threats_And_How_To_Counter_Them_v1.0.docx"},"objActiveSrc":{"strSrc":"42564\/p20825i20s09a03_h.png"},"objVisitedSrc":{"strSrc":"42564\/p20825i20s09a03_v.png"},"arrHotspots":[{"strText":"A young couple outside their new home.","objCoords":{"intTop":2,"intLeft":2,"intWidth":499,"intHeight":294}},{"strText":"A group of colleagues.","objCoords":{"intTop":299,"intLeft":1,"intWidth":502,"intHeight":290}},{"strText":"A woman celebrating her birthday.","objCoords":{"intTop":592,"intLeft":0,"intWidth":505,"intHeight":299}}],"active":1},{"id":"p66712i16s09a04","layoutId":"p66712i16s09lay00","strContent":"Social media","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i16s09sub01","strTitle":"Subscreen 1","assets":[{"id":"p66712i16s09sub01a01","layoutId":"p66712i16s09sub01lay00","strContent":"This tells a fraudster who this couple are and potentially where they live. ","active":1},{"id":"p66712i16s09sub01a02","layoutId":"p66712i16s09sub01lay00","strContent":"Select another [b]image[\/b].","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s09sub02","strTitle":"Subscreen 2","assets":[{"id":"p66712i16s09sub02a01","layoutId":"p66712i16s09sub02lay00","strContent":"This tells a fraudster who works in a particular department, which they could then use to target a phishing attack for example.","active":1},{"id":"p66712i16s09sub02a02","layoutId":"p66712i16s09sub02lay00","strContent":"Select another [b]image[\/b].","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s09sub03","strTitle":"Subscreen 3","assets":[{"id":"p66712i16s09sub03a01","layoutId":"p66712i16s09sub03lay00","strContent":"This tells a fraudster exactly when this person was born. A date of birth is often a security question which legitimate organisations use to check someone's identity on the phone.","active":1},{"id":"p66712i16s09sub03a02","layoutId":"p66712i16s09sub03lay00","strContent":"Select another [b]image[\/b].","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i16s10","strTitle":"Staying safe - Encryption and passwords","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s10.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s10a01","layoutId":"p66712i16s10lay00","strContent":"One way to make electronic information-handling safer is through the use of encryption.\n\nAn even more common layer of security for many types of application involves having a secure password.\n\nMulti-factor authentication is becoming more prevalent and can significantly enhance security.\n\nSo what are these security measures and how do they work? ","active":1},{"id":"p66712i16s10a02","layoutId":"p66712i16s10lay00","strContent":"Select each [b]heading[\/b] to find out more.","active":1},{"id":"p66712i16s10a03","layoutId":"p66712i16s10lay00","arrHottext":[{"strText":"Data encryption","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s10sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Passwords","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s10sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Passwords - top tips","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s10sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Multi-factor authentication","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i16s10sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i16s10a04","layoutId":"p66712i16s10lay00","strContent":"Staying safe - Encryption, passwords and multi-factor authentication","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i16s10sub01","strTitle":"Data encryption","assets":[{"id":"p66712i16s10sub01a01","layoutId":"p66712i16s10sub01lay00","strContent":"Encrypting data means information is made unreadable and can only be read using a secret 'key' to unlock it (called decryption). If you're dealing with confidential information, you may need to encrypt it. If you're not sure, check with the IT department. \n\nRemember, mobile devices and portable media, which includes laptops, external hard drives, USB memory sticks, CD\/DVDs, etc. pose particular risks because they are easily lost, misplaced, or stolen. So, encryption can be used to protect the information. Data encryption can be applied to both stored data (on computer drives or USB storage devices) and data being transferred via networks.\n \nYou should make sure you only use encryption software approved by your institution. This ensures that encrypted information may be recovered if you forget the secret decryption key.","active":1},{"id":"p66712i16s10sub01a02","layoutId":"p66712i16s10sub01lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s10sub01a03","layoutId":"p66712i16s10sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s10sub02","strTitle":"Passwords","assets":[{"id":"p66712i16s10sub02a01","layoutId":"p66712i16s10sub02lay00","strContent":"Passwords are there to stop unauthorised access to systems. If they are weak or predictable, they can't do that. Despite the warnings, the majority of people still choose poor passwords.\n \nSo what makes a strong password? Cybercriminals use a number of automated techniques to break passwords. Many of these are based on looking at combinations of letters and numbers: the fewer the possible combinations, the easier they are to crack. \n \nShorter, simple passwords like "123456" can be cracked almost instantly, while the ones containing combinations of upper and lower case letters, numbers and symbols take longer. You can put yourself in the shoes of a password hacker in the [b]Cracking the code[\/b] game, which you can find on the menu screen.","active":1},{"id":"p66712i16s10sub02a02","layoutId":"p66712i16s10sub02lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s10sub02a03","layoutId":"p66712i16s10sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s10sub03","strTitle":"Passwords - top tips","assets":[{"id":"p66712i16s10sub03a01","layoutId":"p66712i16s10sub03lay00","strContent":"Choosing the same password for each of your online accounts is like using the same key to lock your home, car and office - if a criminal gains access to one, all of them may be compromised.\n[list]\n[*]Don't use the same password for an online newsletter as you do for your email or bank account. Picking multiple passwords is much safer\n[*]Never use your work password for any account outside of work\n[*]If available, use an encrypted password manager (e.g. LastPass or Keepass) to store your passwords in a private account and use a different password for every service stored in the password manager.\n[*]Never share your password with anyone: you will be responsible if it is misused\n[*]Don't write it down in an obvious place - like a Post-it on your computer. If you can't use a password manager and need to write it down, adapt a method to give yourself a prompt so that you can recall it, rather than writing down the password itself.\n[\/list]\n","active":1},{"id":"p66712i16s10sub03a02","layoutId":"p66712i16s10sub03lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i16s10sub03a03","layoutId":"p66712i16s10sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i16s10sub04","strTitle":"Multi-factor authentication","assets":[{"id":"p66712i16s10sub04a01","layoutId":"p66712i16s10sub04lay00","strContent":"Select another [b]heading[\/b].\n ","active":1},{"id":"p66712i16s10sub04a02","layoutId":"p66712i16s10sub04lay00","strContent":"Scroll down to [b]continue[\/b].\n ","active":1},{"id":"p66712i16s10sub04a03","layoutId":"p66712i16s10sub04lay00","strContent":"Multi-factor authentication is a security mechanism that grants access to a system once two (or more) pieces of evidence (or factors) are provided. This is usually in the form of something you know – a password – and something you have. This could be a code sent via SMS text message or generated through an app such as Microsoft Authenticator, or a biometric identifier such as your fingerprint or face.\n ","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i16s11","strTitle":"Summary","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s12.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s11a01","layoutId":"p66712i16s11lay00","strContent":"That completes this section on common threats and how to counter them. Let's recap what you covered:\n[list]\n[*]Think about and question your actions before downloading software, opening email attachments, or clicking on a link\n[*]Be aware of social engineering and phishing scams - try to verify the legitimacy of any suspicious email and its sender. Contact your IT department for guidance and support\n[*]Think carefully before posting information on social media which could be useful to fraudsters\n[*]Never give out passwords ‐ your work and other reputable organisations will not ask you for them\n[*]Strong passwords contain combinations of upper and lower case letters, numbers and symbols\n[*]Avoid using the same password for different sites and log ins - password manager software can help you to securely manage your different passwords\n[*]Seek advice before disclosing your own or other people's confidential information\n[*]Make sure confidential data held on mobile devices and portable media is encrypted appropriately.\n[\/list]\n","active":1},{"id":"p66712i16s11a02","layoutId":"p66712i16s11lay00","strContent":"Select the [b]home button[\/b] to start another section.","active":1},{"id":"p66712i16s11a03","layoutId":"p66712i16s11lay00","strContent":"Common threats and how to counter them","active":1},{"id":"p66712i16s11a04","layoutId":"p66712i16s11lay00","strContent":"Summary","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i16s12","strTitle":"All my savings are gone: Amy's story","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i20s02.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i16s12a01","layoutId":"p66712i16s12lay00","strContent":"Amy is a University Lecturer. Here you can see how a convincing looking email she received could be set to change her life for the worst, in a matter of moments.","active":1},{"id":"p66712i16s12a02","layoutId":"p66712i16s12lay00","strContent":"Select [b]Play[\/b] to hear Amy's story.","active":1},{"id":"p66712i16s12a03","layoutId":"p66712i16s12lay00","strContent":"Common threats and how to counter them","active":1},{"id":"p66712i16s12a04","layoutId":"p66712i16s12lay00","strContent":"All my savings are gone: Amy's story","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1}],"active":true}}