Don't get caught in the dark web

IT'S a shadowy virtual underworld where criminals operate in secret.

 

On the Dark Web, it is claimed, you can find almost anything for sale, from hitmen to heroin.

Now it has emerged that packages of data stolen from millions of people during cyberattacks on big companies can be added to the list.

When we log on to the internet via our computers, mobile phones and tablets we always leave a trace.

Each device has a unique IP (Internet Protocol) address. It’s like an online fingerprint, allowing the authorities to track down people who do anything illegal.

But think of the everyday internet where we do our browsing, shopping and banking, as merely a first layer.

Underneath are multiple levels that are much harder to access. This is the Dark Web, also known as the Deep Web.

You won’t find pages on the Dark Web using a traditional search engine, such as Google, but they are visible if you know where to look.

However, they are heavily encrypted using a tool known as The Onion Router (TOR).

 

Ross Ulbricht, founder of Dark Web marketplace Silk Road, will spend the rest of his life in prison

Criminals love the Dark Web because it’s much easier to remain anonymous and very difficult to penetrate

Dr Christopher Richardson

When the TOR device is used the IP address and location of the creator of the websites is concealed.

Only if you have the correct codes can you enter this murky online black market.

Most notorious is the Silk Road website, allegedly used for buying and selling drugs.

Another site is the go-to place for stolen luxury goods. It’s reported that stolen personal information is being offered for sale on the Dark Web.

Customer details from brand names are said to be involved. Last week TalkTalk admitted some details of 1.2 million customers had been stolen by hackers.

“Criminals love the Dark Web because it’s much easier to remain anonymous and very difficult to penetrate,” says Dr Christopher Richardson, head of Bournemouth University’s Cyber Unit.

“The further you delve into this quagmire of information the darker it gets.

“It allows organised crime gangs to communicate in private.”

 

We should all be aware of the existence of the Dark Net and the threat it poses to our security.

Recent scandals involving data theft have raised the stakes because criminals may already know more about us than we ever imagined possible.

It’s claimed that bank and credit card details, dates of birth, passwords and addresses are all up for grabs.

More than 600,000 customers have had details stolen from companies in the UK last year.

“There’s no doubt that personal data is up for sale on the Dark Web and obviously there are criminals who are quite willing to purchase it,” says Dr Richardson.

A criminal will think nothing of paying £10 for details of a stolen credit card, knowing that he can reap many times that amount.

Stolen information is also sold in bundles, allowing the crooks to target multiple victims.

This problem is growing as the cyber-attacks on big companies provide large hauls of customer details.

 

Only logging into secure websites can help improve internet security

Data belonging to older people carries a premium on the Dark Web because pensioners are more likely to have bigger sums in bank accounts and pension pots.

Sadly, older people are also more likely to fall for scams.

“There’s no doubt the criminals are way ahead of some of the companies they are targeting and they often have people on the inside,” adds Dr Richardson.

“They are incredibly innovative and this is a global problem. Law enforcement agencies are not having a lot of success tracking them down and it is spreading quickly.

“It doesn’t matter how strong the security of the companies holding your data is – at some point the criminals will crack it.

"We should assume that much of our personal data is already out there and consider what harm that can do.

“We have to make it more difficult for these people.”

So what can you do to protect yourself? There are some obvious steps including never divulging your PIN (personal identification numbers) over the telephone.

Your bank or building society will never ask for the full number.

Don’t click on any links in emails unless you are sure of the sender.

 

Try not to use the same password for all your devices

Make sure your computer has up-to-date anti-virus software and a firewall installed.

Consider any email you receive asking for financial information very carefully as it may be a scam.

Remember that the fraudster may already have some personal details such as the name of your bank, account number or name and address.

These can all be used to make an email, or letter, appear more authentic. Scams are getting much more sophisticated.

The issue of passwords is always tricky. For ease of remembering we tend to use the same ones, or variations, for different organisations.

That’s a common mistake says Tony Neate, a former police officer who is now chief executive of Get Safe Online.

He adds: “You would never consider having just one key for everything, including your car and all your doors, so why take the chance with passwords,” he adds.

The best solution is to have lots of passwords and invest in an online password safe, which you can buy from reputable internet security providers such as Norton or McAfee.

If you must use variations at least make them more complex than simply sticking the number 1 or 2 on the end.

You should also change your passwords each year, or immediately if you are worried there has been a security breach.

The strongest passwords contain a mix of letters, numbers and symbols.

Make sure you take advantage when you are offered security updates on your computer, tablet or phone.

Providers are always battling to keep up with the scammers so don’t risk being left behind.

Consider having a separate credit or debit card solely for phone and online transactions with a set limit of, say, £200.

It’s also worth considering a dedicated account (with a separate bank) for all internet and phone purchases.

Criminals are adept at using social media to build up a profile of an individual.

If you must put your details on sites such as Facebook consider who will view them.

Lock your profile so that only trusted friends can see it.

Be aware of “fraud recovery fraud”. This is when fraudsters pretend to be a lawyer or a law enforcement officer and tell you they can help you recover the money you’ve lost.

Many companies ask for personal details for marketing reasons.

You don’t have to provide them and you should be wary about giving out your email address.

Consider creating a secondary email address for nonurgent matters. Never worry about appearing rude by being suspicious about a caller’s credentials.

“Generally we are far too trusting,” says Neate. “If you have the slightest concern end the call and make some checks.” This will also give you space to think about what’s happening.