{"id":12545,"date":"2013-05-01T08:38:03","date_gmt":"2013-05-01T15:38:03","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=12545"},"modified":"2015-03-26T16:13:51","modified_gmt":"2015-03-26T23:13:51","slug":"8-ways-to-accidentally-infect-your-friends-with-malware","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/8-ways-to-accidentally-infect-your-friends-with-malware\/","title":{"rendered":"8 Ways to Accidentally Infect Your Friends with Malware"},"content":{"rendered":"

\"infected-laptop-blog-header\"<\/p>\n

A lot has been said over the years about the best ways to protect your machine from attacks and malicious code. But where do those recommendations intersect with ways to protect your friends from attacks? By failing to protect your own data, you\u2019re sometimes putting them at risk as well. Here are a few ways people end up mindlessly spreading the malware love.<\/p>\n

1. Neglect to Scan That File Before You Share It<\/h3>\n

\"\"<\/p>\n

That spreadsheet you shared with your friends to organize a summer beach trip could end up bringing with it some unexpected cooties. But a quick once-over with an up-to-date antivirus scanner will help keep your trip relaxing.<\/p>\n

2. Pick Up Abandoned USB Keys and Use\/Share Them<\/h3>\n

\"usb-stick\"<\/p>\n

Would you pick up and use a comb someone dropped in the parking lot? Probably not \u2013 who knows what sorts of grossness could be lurking on it! But not everyone is so fastidious about their digital hygiene. A shocking number of people<\/a> in one study picked up a \u201clost\u201d USB drive in a parking lot. Ewh. Even experts are not immune<\/a>. And then to share it with your friends? Totally uncouth. USB sticks are considered an infection vector unto themselves, as many Windows-based threats will attempt to run automatically upon inserting the drive. While it may not affect you, it may get your friends.<\/p>\n

3. Click on Every Stupid Link on Facebook<\/h3>\n

\"facebook-scam\"<\/p>\n

OMG, your best friend from the 3rd grade just posted something that offers a free ticket to a tropical, sunny location just for clicking on a link! Who could it possibly harm to try it? Sometimes those scams come with more than you bargain for, and you could in fact be putting your friends\u2019 data up for grabs by clicking that link. Be skeptical of links that seem shocking or potentially scammy. Ask them if they intended to post the link if you really feel inclined to click.<\/p>\n

4. Fall for Phishing Scams<\/h3>\n

\"no-phishing\"<\/p>\n

It\u2019s tough when phishing emails are getting increasingly sophisticated and adept at making scary claims about what will happen if you don\u2019t click that link. But it\u2019s always a good idea to verify before you trust. Since the aim of phishing is in part to steal your contact data so they can hit your friends too, there\u2019s more on the line than just your own data. If you receive an email from any of your accounts (social, financial, or otherwise) saying that you need to click a link and access your account, you can indeed check your account to be safe, but never<\/strong> do it via a link in email. Go directly to your browser and type in the address for the site.<\/p>\n

5. Use a Weak Password on Your Email\/Social Networking Accounts<\/h3>\n

\"weak-password\"<\/p>\n

This is much the same idea \u2013 your password doesn\u2019t just protect access to your account, but access to your friends\u2019 data as well. Choose unique, strong passwords and change them often, or just use a password manager<\/a> that will do the heavy lifting for you. (After all, the most secure password is the one you don\u2019t know.)<\/p>\n

6. Break into Your Neighbors\u2019 WiFi<\/h3>\n

\"steal-connection\"<\/p>\n

It\u2019s tempting, as more and more people get WiFi routers at home, to simply poach your neighbor\u2019s bandwidth and save yourself that few bucks a month. But you really don\u2019t have any idea what their level of protection is. I attempted this once on a sacrificial research machine, for the sake of curiosity and science, and the machine was infected almost immediately. That blew even my<\/em> jaded, professionally paranoid mind. If you then have friends over that connect into your network, you could be putting them at risk, too.<\/p>\n

7. Install Pirated Software on Your Friends’ Computer<\/h3>\n

\"danger-skull\"<\/p>\n

Oh, the digital hygiene horror! This is the InfoSec equivalent of having a dinner party to share your \u201cfreegan<\/a>,”\u00a0dumpster-diving haul. It\u2019s one thing to take your chances with your own intestinal tract or computing device, but it\u2019s another thing entirely to share that with your friends. Warez is a popular way for malware authors to spread their<\/em> wares, as many people still believe you can get something for nothing without realizing the potential consequences.<\/p>\n

8. Be Lazy About Updating Your WordPress Installation<\/h3>\n

\"wordpress-orange-logo\"<\/p>\n

Your friends love your blog about designer dog sweaters, but it\u2019s not yet caught on with the general public. So who needs to get around to updating it with the latest and greatest WordPress version? It\u2019s precisely that problem (okay, maybe not the dog sweater part) that led to the explosion of Flashback<\/a>. Lots of people with old blogs got compromised, and their friends and fans paid the price.<\/p>\n

It only takes a little thought and effort to avoid common ways for spreading malware. The investment is far less than it would take to write sincere, contrite apology emails to your friends and family members who had to deal with the virtual crud they got from you.<\/p>\n

Further Reading:\u00a0<\/strong><\/p>\n