Mario Crosby - Chapter 3 Labs
docx
keyboard_arrow_up
School
Pensacola State College *
*We aren’t endorsed by this school
Course
2211
Subject
Information Systems
Date
Feb 20, 2024
Type
docx
Pages
3
Uploaded by HighnessDanger101400
Security Awareness - Chapter 3 Labs
Project 3.2: Looking for Auction Fraud
1.
Go to any auction site and try to identify whether there are any sellers you think might be fraudulent. In the space below, identify the seller, what product(s) they are selling, and what clues lead you to believe the seller is fraudulent: I chose to use the site eBay and I researched these well-known shoes called "Nike SB dunk Low x Power puff girls" and they normally go on the markets for about 150 - 250. When I went onto eBay, a guy named "rickyk04" had them listed at about $500, which is about an extra 200 dollars. Shoes can be expensive, but this was fraudulent because they should not be that high. Hands On Activity: Phishing Test
Detecting phishing e-mails can often be difficult. For this lab, you will be taking a Phishing IQ Test. To complete this lab, open your browser and go to https://www.sonicwall.com/phishing-iq-test/
and use the link on that page to take the test. Keep in mind some of the e-mails are legitimate while some are phishing. Below, list your score for the test and describe what you could have done to improve your score. What can a test like this teach computer users? Something I can do to improve is to pay attention to the different misspellings in the domain names cause scammers will use very similar ones but be slightly different. Also, make sure the emails are grammatically correct; this is another way to point out scam emails. I learned to pay attention to how the URLs can be hidden and portrayed as a different realistic text that leads you to something totally unrelated. A test like this could be very helpful to many people like me, for instance, teaching how the data in these emails can be flawed. This could help people prevent their personal data from being spread by these scammers. Hands On Activity: Family Tree Now OptOut
Army Criminal Investigations Division (CID) put out an alert notice concerning a free public website that contains a lot of Personally Identifiable Information (PII) and historical information. The site can be
found at www.familytreenow.com
. It provides information on a person's full name, age, birth year, family members, associates, and addresses (current and past). This website poses a security threat in today's climate for soldiers, DoD civilians, contractors, and their families. If your information is found on this site, there is an option to remove it by selecting to "Opt Out". Once you "Opt Out" the information no longer shows up on the web site.
I searched this site and found my own record and it did contain more information than I was comfortable being searchable by anyone in the public. http://www.familytreenow.com/optout
Before you opt out, ensure that you are clearing your own records as there were many out there with the same name and you will want to be certain that you opt on your record and not someone else’s by mistake. This would leave your information still out there. I encourage you to share this information with family members, friends, and anyone else that may be associated with your ID on this site.
1.) Go to familytreenow.com and search for your name. What did you find?
“We couldn't find any exact matches for your search criteria. Showing expanded matches.”
However, other users have the same first and last names on the site. This site shows some key information that many people wouldn't be comfortable with, like showing their emails, siblings, etc. I also searched some associates, saw information, and told them about the things that are out there for the public to see. 2) What could an attacker use this information for? Seeing how detailed their personal information is on the sites allows them to know much information. The site has people's email, living addresses, possible associates, phone numbers, etc. This information is open to the public and potential hackers to do fraudulent things. I personally would not be okay with some of this information being put out there for anybody to look up. Information about others that are known personally to you could also be put here. Hands On Activity: Clerk of Courts Record Search
There are other resources available to the Human Resources departments that allows them (or anyone for that matter) to check on the background of potential employees. Most businesses would like to know if there is any criminal history on an employment candidate.
Go to https://www.escambiaclerk.com/258/Online-Public-Records
In the middle of the page near the top you will find COURT RECORDS. Click on the “Online Court Records” link. On this page, select the option on the left side to search by Name and enter your last name and first name. Fill in the Captcha information at the bottom and click the Search button. Did anything come back on you that may not be yours? Did you have no records?
No, there are no records on me. Clean slate with no bad ties. Search for friends or family members and see if any information comes back. Did you find anything surprising? I searched for some people I know and saw the type of data on file, which was some info on their criminal history and the things they did. I was surprised but not too much cause I had a feeling. These public documents allow anyone to go and see the things that someone may have done. How easy is it for an employer to perform these types of simple searches on the Internet to obtain some
background on a potential employee? How easy is it for anyone to check your information? It makes it fairly simple for employers to just go on these websites, type in your information, and find what they need. They can find criminal history records, education, and more. Jobs have to have some information on the people they are considering hiring, so if somebody has a bad record, they will be able to see this stuff.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help