BEIJING, September 4 (Xinhuanet) -- Internet users are leaving themselves open to security risks by adopting weak passwords, a new study reveals. British insurer CPP said that too many people are using things like memorable dates, names of their children and are even sharing them with friends and colleagues. The survey also found that some 46 percent were even using the same password to login to banking, shopping and social networking sites. More worrying was that of 1,661 Britons questioned, nearly 40 per cent of adults admitted that at least one other person knows their passwords, ranging from children, colleagues and friends. With phishing and smishing attacks, as well as malicious software attacks, on the rise, consumers and Internet users need to be more careful with their personal data. Phishing is the process whereby criminals attempt to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity, such as a banking website or email. Smishing is also becoming more common with unsuspecting members of the public tricked into giving up sensitive information. Similar to phishing, smishing uses cell phone text messages or sometimes phone calls to initiate the attack. An average person may visit up to 23 different sites that require a login, and they are becoming an increasing target for fraudsters. The survey even found that some 39 percent of its respondent thought that someone else had logged in to a website with their details. The threat is particularly real with around 18 percent saying goods had been bought illegally in their name, and one in eight reported to having had money stolen with the average sum being over 1,000 pounds (1,632 U.S. dollars). Around 5 percent reported having their identity stolen. The excuse many gave in using the same passwords across sites was that they found them too difficult to remember. Others say they were afraid of forgetting passwords and being locked out. But Sarah Blaney, identity theft expert at CPP, said: "No sensible person would use the same key for their house, car and garage. In the same way, we shouldn't use the one password for everything. If possible people should use multiple passwords with a combination of letters and numbers, which should be difficult to crack." Robert Schifreen, a reformed computer hacker and author of the best-selling book "Defeating The Hacker", says that a different password should be used for every website that someone signs up to. "An online fraudster who manages to find your single password will have the keys to your entire online life," Schiffreen says. He advises people never type their credit card number, or any other confidential information, into a web site that doesn't have the closed padlock symbol to show the data is being encrypted. Antivirus software subscriptions should also be kept up to date he says. The most popular passwords were pet's names, chosen by 18 percent of those questioned. Around 12 percent chose birthdays as a memorable date while around 10 percent chose their children's names as a login. In July Twitter's accounts were compromised after a French hacker guessed the password belonging to one of its employees. It was in fact simply 'password'. (Agencies) |