Cyber Crime
 | 5 min read

Cyber Smart Week: Tips for Family and Home from Kordia and Aura’s Cyber Experts

By  Kordia,
 10 October 2024

With devious cyber criminals looking for any opportunity to scam and defraud anyone they can, staying cyber safe in your home life is more important than ever. Smart devices and online services are being used increasingly across all ages, so it’s crucial to protect yourself and your family from potential cyber threats. Here are some valuable tips from the cyber security experts at Aura and Kordia to help you stay safe online.

1. Children and Online Purchasing Do Not Mix
A recent incident here in New Zealand highlighted the importance of keeping devices with banking apps away from children. In this case, a child managed to withdraw $56,000 from his father’s bank account by adding his face to the phone’s recognition system and observing the bank login code. To avoid such unfortunate outcomes, ensure that your devices are secured with strong passwords and biometric data that only you can access. Additionally, educate your children about the importance of not tampering with devices that contain sensitive information.


2. Watch Out for QR Codes
QR codes are convenient, but they can also be risky. Treat them like any other link—if you can’t verify the source, don’t scan it. Attackers have been known to place malicious QR codes over legitimate ones in public places. For example, a QR code on a restaurant menu might be replaced with one that leads to a phishing site. Always be cautious when scanning QR codes, especially in public locations. If you’re unsure about a QR code, it’s better to manually enter the URL into your browser.


3. Be Cautious with Trial Accounts for AI Tools
As families explore new AI tools for tasks like homework, photos, and creative projects, it’s important to manage trial accounts carefully. Use a password manager to generate unique passphrases for each subscription and consider using a separate email address. For instance, if you sign up for a photo editing AI tool, use a unique password and a secondary email. If linking to Google or Facebook profiles, regularly review and unlink any tools you no longer use to avoid potential security risks. This practice can prevent unauthorised access to your primary accounts and reduces the risk of data breaches. Also read the T&Cs about what the Ai company are allowed to do with your data. You could be signing up to have your data used for training models.


4. What to Do When You’re Breached
If you or your family fall victim to data breaches, identity theft, phishing, ransomware, or telephone scams, IDCARE (0800 121 068) is your lifeline. This free national service provides expert advice and tailored support to help you respond and recover. Their Identity & Cyber Security Case Managers offer practical guidance to help Kiwi families navigate the aftermath of an incident. For example, if your personal information is compromised in a data breach, IDCARE can assist you in securing your accounts and monitoring for signs of identity theft.


5. Separate Work and Personal Life
To keep your work and personal life separate, use different devices if possible. Avoid using work devices for personal activities like email, banking, or shopping online. For instance, if you use your work laptop for personal online shopping, a malware infection could compromise both your personal and work data. Don’t save work passwords in your personal browser, as compromising your personal device could put work accounts at risk. This separation helps protect sensitive work information and reduces the risk of cross-contamination between personal and professional data.


6. Secure Smart Home Devices
Many homes now have IoT devices like smart TVs, thermostats, doorbells and cameras. Unfortunately, smart devices, like any internet connected device, are vulnerable to hacking – take the case of a baby monitor that was hijacked by a malicious threat actor in the UK. Ensure these devices are password-protected and updated with the latest firmware. For example, change the default username and password of your home Wi-Fi router to something unique and secure. Use WPA3 encryption for added security, and make sure your network is password-protected. Regularly update the firmware on your smart devices to protect against known vulnerabilities. These steps help safeguard your home network and prevent hackers exploiting bugs in the software to gain access to your smart home devices.

7. Teach Kids About Online Safety
Educate your children about online safety, including the dangers of chatting with strangers and sharing personal information. Teach them early on not to share personal details, passwords, or other sensitive information. Explain to them that not everyone online is who they claim to be and that they should never share their home address or school name with strangers. Encourage open communication so they feel comfortable reporting any suspicious activity or interactions. 

8. Help Older People
Start conversations with grandparents about online safety. Older people are frequently targeted by online fraud, with reports indicating that scams targeting individuals aged 60 and older caused over $3.4 billion in losses in 2023 according to the FBI. It can be incredibly embarrassing to ask for help, but you should break the stigma and encourage our older generations to ask for help. If they encounter suspicious emails or phone calls or get wrapped up in financial offers or romance scams that sound too good to be true - and steer them towards resources to recognise and report scams.

9. Social Media Scams
Social media platforms like Facebook, Instagram, and LinkedIn are common targets for scammers – it’s fairly easy for any dishonest person to create fake profiles, send spam messages, or post malicious links. To avoid these scams, be cautious of friend requests from strangers, avoid clicking on suspicious links, and report any suspicious activity. Even if you receive a message from someone you know asking to click on something, for personal information or money, check through another method (such as phone call or in person chat) – hackers can take over or impersonate legitimate accounts. 

10. Back Up Devices and Data
Some data is irreplaceable if lost. Regularly back up your devices and data, including photos and other sentimental data, to ensure you don’t lose them forever if your phone is lost or stolen. Use cloud services like Google Photos or One Drive, or even external hard drives to create backups. Set up automatic backups for your smartphone to a cloud service so that your data is always up-to-date and secure. This will help you recover your cherished memories in case of device loss or theft.

Stay vigilant, educate your loved ones, and take proactive steps to ensure your online safety. For more tips, visit the National Cyber Security Centre's Cyber Smart Week website.