Everyone knows that cybercriminals hit Facebook, LinkedIn, Instagram and other sites in search of information they can use against their victims.
But other areas bear watching, too.
Dating sites and job boards are two areas where you can be revealing too much information for hackers, as a Wall Street Journal article shows.
While people commonly share personal information with connections on dating sites, malicious actors can be looking on, eager to glean data that will help them hack your organization.
Be sure to vet connections and then look for more secure means where you can continue the conversation privately, says Carrie Gardner, a cybersecurity engineer and leader of the Insider Risk Team at Carnegie Mellon University’s Software Engineering Institute.
“The pictures we share, the descriptions we give, the conversations we have when we think it’s just the two of us…it’s worth thinking about when the right moment is to move all that over to a more secure place like Signal or even a phone call,” Gardner told the Journal.
Criminals look at job-search sites to find information on you and various companies.
Mask as much information as possible, says Aaron Barr, chief technology officer of PiiQ Media, a social-media threat-intelligence and risk-analytics company.
“Unless I’m trying to find a job, I’m not sure it’s critical that people know I went to Old Dominion University, so I just make it generic and say ‘Major University,’ the years I attended, and my major,” he said.
Also, display skill sets and types of jobs you’ve held but delete phone numbers and email addresses.
If you are seeking a new job, Barr suggests posting a fully loaded CV for a period, then taking it down once the job hunt is completed. And don’t send any information to people who ask for it unless you confirm their identity.
One common tactic for criminals mining job boards is to send a job offer or interview request simply to get more information for you. Check out the veracity of all emails before responding.
Bad guys use AI
Cyber-criminals use artificial intelligence to collect piles of information and create profiles they can use against you and your organization.
And hacks at Facebook and LinkedIn have bared the personal information of hundreds of millions of users.
This is why it’s vital to protect as much detail as possible from unwanted eyes.