admin
Tom Muleya
Fraud Insight
Cases of corporates being defrauded by cyber criminals through acts of unauthorised access to a computer network or unauthorised use of passwords are on increase.
The most common are cases involving former employees who once held administrative privileges of company social media accounts such as Facebook, Instagram, Twitter, YouTube and WhatsApp, who leave the company without surrendering administrator privileges.
As noted in previous articles, policing in cyber space is currently one of the biggest challenges facing law enforcement agents globally.
Some experts have predicted that cybercrime is poised to cost the world US$10.5 trillion annually by 2025.
The prediction is a clear indication that cybercrime will become more and more sophisticated each day.
This requires individuals and the corporate world to understand the economics of cybercrime to adequately fight it.
Looking ahead, entities should remain aware of the risks on cyber space and come up with appropriate solutions to prevent cyber-attacks as they conduct business on various social media platforms.
Now let us consider the following scenario: X was employed by company Y as a marketing officer. The duties included digital marketing and managing the company’s social media accounts; Facebook, Instagram, Twitter and WhatsApp. X was the custodian of the social media accounts. X used his personal computer to conduct business at company Y. X then left employment, but did not surrender administrator privileges and went on to manipulate the company.
The former employee would remove new administrators for company Y’s social media accounts at will and divert their business for personal monetary gain.
To avoid some unwarranted manipulation and cyber-attacks, companies should consider the following;
No single employee is given exclusive administrative powers or privileges to control company social media accounts. Where such a scenario cannot be avoided, someone in higher authority should superintend.
Do not promote the use of personal gadgets for company business. Such a situation allows the employee to link the corporate’s social media accounts to personal accounts. Where personal gadgets are used, the company must have a clear Bring Your Gadget (BYG) policy to regulate and safeguard against wilful abuse.
Where an employee leaves employment that held a key position in company social media communication, a disclaimer should be made and pinned to the social media accounts that the said employee is no longer representing the company in any communication.
Passwords must be changed regularly, and strong passwords should be used on all social media accounts.
A Cyber intelligence system should be put in place to detect unauthorised access into their network.
When an employee who had access to company social media information leaves, all accounts should be signed out, and new passwords for new administrators used instead. This will ensure former employees cease to have access.
Employees should surrender all their administrative privileges when they leave.
Participate in the fight against cybercrime on social media. Your security on cyberspace matters, Think Cyber Security, practice Cyber hygiene, and Be careful when you do business on social media.
Join the fight against cybercrime. Get empowered by Fraud Insight and be part of a solution.
For your feedback, WhatsApp line: 0772 764 043, or e-mail: [email protected]. Tom Muleya is a Detective Assistant Inspector working under the CID Commercial Crimes Division. He is also a member of the National Cyber Security Taskforce, Zimbabwe.
Online Reporter