Group C Project
Types of Cybercrime and How to Prevent Them
1. Spoofing
What is Spoofing?
Spoofing is one of the crimes in cyberspace that works by illegally accessing computers, mobile, email, and other accounts, and then the criminal will pretend that he is the real owner. The purpose of spoofing is to obtain sensitive information from both individuals and organizations. After successfully gaining access, hackers will begin to perform adverse actions.
How does spoofing happen?
Usually spoofing is done by manipulating the name of a reputable organization/company to make people believe to provide sensitive data owned such as usernames and passwords. Spoofing is usually done by sending files containing malware or creating links that contain fake pages with complete forms including the use of fake company logos. After you enter all the data it will be sent to the spoofing actor.
Type of Spoofing
Spoofing is not only limited to illegal access, there are several types of spoofing with different targets that you need to be aware of. Here we have summarized some of the types of spoofing that are rife today:
Identity Spoofing
Identifying spoofing is a crime by infiltrating by illegally hacking the real identity and then utilizing the identity for crimes that harm various parties.
2. IP Spoofing
IP spoofing is a type of spoofing that utilizes IP to hide or disguise the location from which they send and receive data online. The purpose of IP Spoofing is so that they cannot be tracked when committing cybercrime. An easy example is a DDoS action.
3. Email Spoofing
Spoofing these emails becomes the most common crime on the internet. Usually, they send emails with fake senders to steal important information that you have. Usually, they use fake addresses by posing as friends, co-workers, organizations, and companies, in terms of logos, fonts, CTA buttons when compared to the original will look the same, checks are also usually spoofing many errors in typo.
4. DNS Spoofing
DNS spoofing occurs by falsifying or changing the IP address of its destination domain.
How to Prevent Spoofing
To minimize the occurrence of spoofing, you can prevent it by doing the following:
Using SSL
Always make sure the URL checks the website correctly and not by seeing whether it uses SSL services or not. Websites that use SSL in the URL section have a padlock logo, meaning that the website is protected safely from hackers and the like.
2. Install filters on the Router
Ip filters installed on the router allow you to filter from suspicious incoming IPs, so IP spoofing actions can be avoided.
3. Encryption and Authentication
Encryption and authentication for all who use passwords, so there is double security so it is difficult to be penetrated by irresponsible people.
4. Carefully accept emails
When receiving an email, you need to check from the sender of the email, the contents of the email and the link, attachments to be carefully checked whether it is the correct email or the spoofing trial email. If it is indicated spoofing you can just delete it to make it more secure.
5. Turn on spam filters
Spam filters can detect early on for emails that prove suspicious, so emails that go into the inbox are already secure there is no indication of spoofing.
2. Hacking and Cracking
What is Hacking or Cracking?
Hacking or cracking is an infiltration activity into a computer system or a network with the aim of abusing or damaging any existing system.
Cause that makes the website easy to hack we have to :
Using a fake template and plugins.
The website password is too weak.
Server performance was lousy.
Using public connection.
No viral protection.
How to protect websites from attack by hackers:
Backup data at all times.
Use firewall.
Use SSL.
Always update software and application.
Selecting a trusted provider could hosting.
3. Carding
What is Carding?
Carding - This is a crime of stealing someone else's credit card information, and then that data is used for transactions using someone else's credit card to harm the person both material and non-material.
Carding can be attributed to the recklessness of the credit card itself, the act of theft, or the use of someone else's credit card by accidentally locating it. Online, carding itself can be caused by a weak link between the online shopping service management system and the electronic data capture (EDC). Carding can also be done by stealing data from a database that lists credit CARDS and owners' data and then using it for electronic shopping or for online shopping. Normally, hacking data thefts can be performed by someone.
The way to avoid carding :
Maintain personal data safety.
Does not use public wi-fi to do online transactions.
4. Grooming
What is Grooming?
Grooming is - Growing as one of the major cyber threats faced by children and teenagers. It is a practice where someone builds an emotional bond with children through social media on messaging platforms with the objective of gaining their trust for sexually abusing or exploiting them.
The cyber groomers can use gaming websites, social media, email, chat rooms, instant messaging, etc. by creating a fake account and pretending to be a child or having some interest as in the child.
Cases of sexual crimes committed using the internet (social media) have become viral in recent years, and it is unfortunate that they occur in our environment. This crime case targets children who are active on social media.
According to an information source from https://www.kompasiana.com :
"Perpetrators or predators will use underage children who have been identified through social media and online games such as Instagram, tik tok, telegram, hago, and others that are currently popular. Among children to adults. Types of sexual crimes against minors are carried out through forming bonds with the victim (child) and gaining the trust of the victim (child). After it is felt that the victim (child) believes in the perpetrator (predator), the victim (child) you have to do what the perpetrator (predator) tells you to get photos and videos without clothes."
In solving this case, the role of parents is needed in supervising their children, especially those who are still underage.
In a case like this the perpetrator will be punished with multiple articles, concerning article 29 of Law no. 44 of 2008 on pornography, Law no. 3 of 2014 concerning child protection, PERPU No. 1 of 2016 concerning sexual crimes against children, and Article 27 paragraph (1) of Law no. 19 of 2016 concerning Information and Electronic Transactions because the perpetrator has distributed the video. It is hoped that this regulation can suppress or even eliminate the number of cases occurring in Indonesian society.
5. Website Defacement
What is Website Defacement?
According to https://idcloudhost.com :
"A website defacement is an attack in which a malicious party penetrates a website and replaces the content on the site with their messages. These messages can convey political or religious messages, swearing or other inappropriate content that will embarrass the website owner, or notice that the website has been hacked by a certain group of hackers".
This case is targeting a website that has a vulnerability that can be taken over and used by the perpetrator. The purpose of the defacer is different, some are aimed at testing its capabilities, stealing data, or taking other advantages from the victim's site. from the government, the goal is clear for political interests or hurt the government.
The ways that can be taken to overcome this problem are:
1. Use SSL / TLS.
2. Beware of Error Messages.
3. Avoid default admin directory and admin email.
4. Restrict the type and size of uploaded files.