Wednesday, 28 August 2019

What is Ethical Hacking?

Ethical hacking, sometimes known as white hat hacking is when a digital forensics expert or OSINT investigator attempts to penetrate a computer system, network or app on behalf of the owners – with their permission. Ethical hacking is usually done to find if there is any security vulnerabilities that a hacker or cybercriminal could use to exploit someone.

The purpose of ethical hacking is to test the security of the systems involved and identify if there are any vulnerabilities in the system as well as the network or infrastructure. Investigators involved will often attempt to exploit the vulnerabilities themselves to see whether malicious activities are possible.


Black hat hackers are the unethical counterpart of ethical hackers. Rather than take advantage, ethical hackers will use their skills to document if there are any weaknesses in the systems and give advice on how to fix them and then strengthen their overall security systems.

Here are some ways ethical hacking done by digital forensics experts involve in OSINT (Open Source Intelligence) can help businesses and organisations:

1. Finding Vulnerabilities: By using ethical hacking you can discover if the IT security measures are working properly as well as whether they need to be updated. A business can use the advice from ethical hackers and improve their overall security to stay safe from cyber-attacks, including online scams and fraud.

2. Demonstrate Cybercrime Methods: These demonstrations can help show users how malicious hackers will attach their systems and create disasters for businesses. Those who have an in-depth knowledge of this are better able to prevent it from happening again in the future.

3. Prepare for a Cyber-attack: The one way to destroy a business is a cyber-attack, especially small businesses, but businesses are still not prepared! Ethical hackers know how cybercriminals work so they can assist businesses and business owners with prepare for the future and better adapt to online threats.

Some say that hacking is hacking, but ethical hacking is done by professionals to assist businesses and organisations with their security systems and ensure they are effective and successful.

Is your security system up to par? Contact the OSINT or digital forensics department on 021 110 0422 or email contact@osint.co.za | contact@tcgforensics.co.za. Alternatively, you can find out more on the website www.osint.co.za | www.tcgforensics.co.za

Wednesday, 21 August 2019

How can a Digital Device be involved in a Cyber Crime?

In this day and age, it is so easy for criminals to use a digital device to carry out a traditional crime.


A traditional crime such as blackmail which, back in the day, would usually be done using newspaper cuttings collaged together to create a ransom note is now being done in a completely different way using the power of digital devices as well as the internet.

These days, it is so much easier for criminals to just use a computer to carry out a range of crimes such as, blackmail, identity theft, social media scams, ticket scams, dating bots, data theft and so much more.

Some examples of other traditional crimes where a digital device can be used include instant messaging, which is often used to commit harassment. Criminals also continue to pose as your bank where they will SMS you and try to scam you into paying fake accounts, etc.

Email is also used by cybercriminals on a regular basis to commit fraud by using phishing scams. It seems that the list is endless and so is the workload of digital forensics investigators as well as those dealing with Open Source Intelligence! Want to know more about our digital forensics and OSINT services? Please contact us on 021 110 0422, email contact@tcgforensics.co.za | contact@osint.co.za.

In the TCG Digital Forensics and OSINT department, we combine the experience of seasoned investigators with the latest technologies to achieve the results that you require. Contact us today!

Wednesday, 7 August 2019

Using OSINT to Detect and Prevent Online Fraud!

These days most of our purchases these days are being made online. You can buy everything online from clothing, a new car, groceries and so much more.


Unfortunately, because of this, there is a rise in the amount of online fraud occurring. Find out about our OSINT services and how you can be safe and secure online.

All across the internet fraud and illegal activities are continuously growing and those who are involved in manufacturing, insurance industries and finances are experiencing an even higher increase of fraud, leading to significant financial loss.

Did you know that it is estimated that 2% of the world’s total current output comes from illegal activity online?

It’s time to fight fraud with open-source intelligence!

Every business or organization knows that it is vital to prevent fraud in order to keep your company healthy and successful.

However, most only think it is necessary to monitor the internal data, but this is only a small fraction of the amount of information available online. In order for you and your business to fight against online fraud, it is important to consider OSINT services.

The primary factor of using our OSINT services is to discover important data that a regular person cannot find on an ordinary search on Google. Why? Because most illegal online activities happen on the deep or dark web.

Are you ready to fight online fraud? Please contact our OSINT division on 021 110 0422 or email contact@osint.co.za if you’d like to find out more or schedule a meeting! Alternatively you can contact our digital forensics department on contact@tcgforensics.co.za

Wednesday, 31 July 2019

Is it Real? 4 Ways to Identify a Fake Degree Certificate

It is shocking to discover how many fake degrees are actually out there and they are becoming a massive global problem! Buying a fake degree certificate is only a small part of the problem; those who already have degrees are also faking their academic transcripts and adding or altering their qualifications on their CVs.

Related image

Fake credentials such as fake degree certificates are a growing issue in South Africa. Just a year or two ago the country had a large increase in the number or fraudulent qualifications reported and those were just the fake credentials reported, the real number is probably through the roof.

As a business or university,  it can be worrying, who amongst your employees was actually telling the truth about their qualifications?

Here’s how you can identify if it is a fake degree certificate.

DESIGN

Always inspect the design of the degree and be aware that a genuine certificate will be embossed with a watermark visible under a light. The signature should also not be printed but written in ink without any silly spelling mistakes.

LANGUAGE

The language and grammar on a degree certificate should always be studied thoroughly. There should be no spelling errors or incorrect order of words such as “Cape Town University” instead of “The University of Cape Town.”

LOCATION

Always double check the location of the university to confirm that it is a genuine institute. By using Google maps you’ll be able to locate the address provided and spot any fake universities.

TRUST THE PROFESSIONALS

By simply following the steps provided you’ll be saving yourself a lot of hassles in the long run. 

Should you need some assistance please do not hesitate to contact our OSINT department about our Due Diligence processes on 021 110 0422 or email contact@osint.co.za. Alternatively, you can email chris@tcgforensics.co.za for more details on how our pre-employment due diligence can help YOU get the right candidate!

Monday, 29 July 2019

Are you Flirting with a Dating Bot?

Guess what, dating bots are a real thing and falling for one is easier than you think.


Online dating is supposed to be fun and convenient, you get to chat with new, fascinating people that could potentially turn into love interests plus it takes away that first-date awkwardness.

But it’s never that simple.

Dating online has many pitfalls including dating bots that clog almost all the online dating sites you use. Did you know that almost 60% of traffic online is generated by bots? This includes dating websites and social media sites.

Online dating bots are specifically designed to chat with you and trick you into paying membership fees on dating websites; they can even trick you into giving out your private information such as your banking details.

Here’s how to recognize a dating bot:
  • Their profile picture is a professional glamour shot.
  • They profess their undying love for you a day or two after chatting.
  • They make promises to meet you in person, but something always comes up.
  • They ask you for money for things such as emergency medical bills, travel expenses, etc.

It is important that you know that there is a difference between dating bots and malicious scammers. A scammer is a cybercriminal who wants to steal your money and possibly your personal information, but a dating bot is an automated computer script.

Are you flirting with a dating bot? Here are some signs to look out for:
  • They have automated scripts so they will respond to your messages really fast.
  • They don’t respond directly to you if you ask a specific question instead, they’ll respond with a series of lines.
  • They don’t have mutual friends or interests.
  • They immediately encourage you to visit a specific site or share your personal information with them.
Despite all the negatives about online dating, in this day and age online dating is a great way to meet new people and possibly find your perfect companion.


If you think you’ve been scammed, contact OSINT immediately on 021 110 0422 or email contact@osint.co.za.

Friday, 26 July 2019

What are Online Ticket Scams?

Online ticket scammers usually target various, popular events or destinations to try and take advantage or all the people who are desperately rushing and searching for tickets for buy.


Fake tickets for various events include:

- Concerts
- Conferences
- Plays
- Sporting events
- Live performances
- Shows
- Flight or train tickets
- Other special events


In general, all the tickets that these scammers sell are completely fake. Other times the tickets don’t exist, to begin with, so you pay but never receive anything.

Since 2015 online ticket scams have been increasing and occurring more often. Scammers have been having a field day because of all the popular shows and events that are happening these days.

Here are some tell-tale signs to lookout for:

- The prices are much higher than the regular ticket price OR the prices are suspiciously low.

- Before you buy tickets from a website, always check the contact details to make sure it’s legitimate.
- If the website URL doesn’t include “https” you’re most likely dealing with a scammer.

- If the seller requests a very specific payment for the ticket such as cash, a gift card or cryptocurrency, it’s most likely a scam.

- If they’re selling the tickets on social media, the language is stilted and it seems English isn’t their first language.

- Their social media profile includes no details, all their posts were made a couple of days ago and their friends were all recently added.

And obviously, if it feels like it is too good to be true then it probably is!


If you paid for fake tickets, contact OSINT immediately on 021 110 0422 or email contact@osint.co.za. And we will do everything we can to assist you in getting your money back and catching the scammers!

Thursday, 25 July 2019

How to spot a Social Media Scam

Social media has made it possible for people to interact with each other from all over the world – everyone knows what everyone else is doing, where they’re going on vacation, when they got married, etc.


However, social media networks have also made it possible for more users to become victims of scams. Over the last few years, social media scams have basically quadrupled with fake accounts popping up everywhere.

Don’t become the next victim of a scam – here’s how to spot, prevent and deal with social media scams:

- There is an ad or poster offering an amazing deal or job that sounds too good to be true.
- A job, prize or loan application asks you to pay upfront beforehand.
- A popular company uses a Yahoo or Gmail email account to contact you.
- You are urged to act immediately!
- They ask you to share your private information.
- You get a friend request from a “friend” but they ask you random questions or for money.


How to prevent social media scams from happening:

- Preventing social media scams is easy; all you have to do is use your common sense!
- Always think before you click on something.
- If it sounds dodgy or overly intrusive, ignore it.
- Never share your personal information on social media sites.
- Be wary when it comes to loan scams – here are the red flags to look out for.
- Never agree to pay for something upfront without being certain that it’s legitimate.
- Go through your social media privacy settings on a regular basis to ensure they haven’t changed.
- Never post any personal information about yourself that can be stolen and used to steal your identity.


If you’re a victim, here’s what to do:

- Shut down your computer and use a different device to change all your passwords immediately.
- Put out a fraud alert on your credit to stop any loans or lines of credit the scammer may try to take out.
- Call our OSINT division for professional assistance: 021 110 0422 | contact@osint.co.za
- Tell your friends so that they know about the scam and can avoid it if it pops up on their social media feeds.

Do not let the social media scammers bait and hook you – always be safe online!