Cybersecurity: be cautious, not paranoid

While people should be aware and cautious of scams, those in the tech industry say it's also important not to be paranoid about using online tools.

Staples Technology Supervisor Adam Lane said they see many people who won't do everything they can on their personal devices because they fear getting hacked.

"I emphasize to be smart. Use your gut, slow down, and verify information that you get sent, but don't be afraid to use technology to better your life," he said. "We've got some great technology out there now, we've got some great technology in the future that's going to make our lives [richer], but if you're afraid to use it and you're constantly thinking you're going to get hacked, then you'll never take advantage of that."

Some of the common types of scams include phishing (emails), smishing (SMS text messages), and vishing (voice).

Lane said with emails, look at the sender because an additional character will often be hidden in their email address. Phishing emails will also often include typos or pleading and urgent wording, demanding payment.

However, Lane said 'snail mail' scams appear to be making a comeback. He said fake utility or shopping account letters are sent to individuals, asking to be paid.

"So they're pinpointing older people that trust the traditional mail service over technology," he said. 

Lane said artificial intelligence (AI) could also make scams more deceptive. 

AI uses ChatGPT to draft emails to make them sound more professional. It also uses an algorithm to test weak passwords to try to hack into people's accounts. Surprisingly, Lane said the most common passwords continue to be "12345678" and "password".

AI can also use deep fakes, an image or voice recording that sounds like a loved one who needs immediate help.

"This new technology that's out here right now is just getting better and better so the problem is that we're not able to rely on our senses to be able to determine what's real and what's not real," he said. "That's what's scary, what's scaring me. So we basically just have to make sure we are cautious and we verify as much as we can with the people that we know."

Lane said the urgency tactic is a red flag to be aware of. His tips are to stay calm, slow down, and verify information when dealing with any type of scam.

He said before agreeing to anything, reach out to a specific family member or friend to double-check if they tried to contact you. Lane said people can also establish a "safe word" so as to authenticate the caller.

Some proactive measures to protect from phishing scams include regularly changing passwords, using password managers such as Bitwarden or 1Password, using two-step verification, updating devices, using security software, and avoiding online shopping on open networks (settings where the WiFi is open to the public and doesn't require a password). The use of a virtual private network (VPN) can also help, especially for those who travel.

If one's information is compromised, Lane said the first thing to do is change all passwords. Additional steps include contacting the police and their personal bank.

"When you get compromised usually, [scammers will] put malware onto your system that will then stay on there and spy on you. So we get a lot of customers in at Staples with instructions from the banks saying 'Take your device to Staples, make sure it gets reset... get their tech support to reset the device.' Then we supply them with written verification by a trusted player and then [the bank] will give them new cards and reinstate their accounts," he said. "There's no quick fix. When you're a victim of identity theft, it takes a long time to get that information back and I don't think you ever will get everything. There's always going to be something out there that is obtainable by bad people that has your personal information on it."

Aside from seeking tech support, Lane said people can learn more about cyber security on the Government of Canada's cyber safe website.

Lane spoke at a Kiwanis Club of Sarnia-Lambton Golden K meeting on Tuesday.

Although the presentation was geared toward seniors, Lane said it's relative information everyone could use.