Email and instant messaging threats
Although the majority of malware is introduced through browsing of unsafe sites, email is still a major source of concern with regard to spreading of malware and of phishing for personal details. Be sensible when reading your email and follow these basic guidelines:
- Install anti-virus software, firewall software and anti-spyware software and keep it up-to-date by installing updates regularly
- Don't open file attachments if you don't know the person the message is from - just delete it
- Don't click on links in the message body if you don't know who the message is from - just delete it
- If someone you know sends an unexpected attachment or asks you to click on a link, contact them to check that they sent the message - if they didn't, delete it and suggest they check their computer for malware
- Filter out unwanted spam - some spam will always get through, but most won't
- Do not transmit sensitive or confidential information - emails and instant messages can be intercepted and read
- If your instant messaging client asks you to fill out a profile of yourself, do not give unnecessary personal information
- Download security patches for your instant messenger and upgrade when available - new upgrades fix security holes
Apart from the threat of infecting your computer with malware, emails and instant messages are commonly used to phish for personal information. Any personal information you give away could help someone to steal your identity.
General advice
- Don't reply to spam, whatever the provocation in the message - delete the message
- Be wary of messages purporting to be from your bank, or other organisations with which you have an account, that ask you to enter personal details or to click a on a link - this is likely to be a phishing scam. Generally, if the message is genuine, it will refer to you by name rather than as 'dear valued customer'. Also, remember that no member of UOB staff will ever ask you for your password.
- If a message tells you that you are a lucky prize winner, ignore it - claiming the 'prize' generally involves having to buy something else, to subscribe to something, or will otherwise require you to give personal information - delete the message
- If a message asks you to 'pass this message on', don't - just delete it, no matter how threatening it may sound, or no matter how much it has pulled at your heartstrings - read more information on chain emails
- If a message tells you that you have been chosen to be the recipient of a huge amount of money that has to be got out of a foreign country by legal means, subterfuge or any other 'interesting' ways, just delete it - read more information on advance fee fraud