Report Incident
× Home Cybertech Africa 2023 2 DPO Rw-CSIRT Website About Rw-CSIRT Alerts Advisories About NCSA Documentation News & Events Topics Contact us Opportunities Privacy Policy

Instant Messaging Services: The threats and how to respond

Kinyarwanda version
 
Like many of the things we do online, instant messaging services have their own risks that users must be aware of. Here we highlight some of the most common threats so that you can understand how to respond and use these platforms as safely as possible.
 
Online grooming
 
Online grooming is a common issue associated with instant messaging services. In this scenario, someone befriends a child online and builds up their trust with the intention of exploiting them and causing them harm.
 
To prevent online grooming:
 
1.  Ask children about the people they interact with online
This helps you to be aware of the situations in which they may encounter danger.
 
2.  Encourage contact with only the people your children know in real life
Interacting with only trusted individuals will help to create a safer network for your child.
 
3.  Be aware of the services your child uses and become a friend, follower or subscriber
Being present within the digital space your child occupies will help you to safely oversee their activity.
 
It is important to employ these measures without being overly strict, as an open environment of conversation is best for discussing the dangers of the internet with your child.
 
 
Cyberbullying
 
Cyberbullying is bullying through the use of digital technologies. It is common on instant messaging services and aims at scaring, angering or shaming those who are targeted.
 
To prevent cyberbullying:
 
1.  Protect your accounts with MFA (Multi-Factor Authentication)
If your account is compromised, someone can post on your behalf in order to shame you. Add an extra layer of security by employing multi-factor  authentication to your instant messaging accounts where possible.
 
2.  Share appropriate photos that wouldn’t harm you if spread widely
Once content appears on the internet it is likely to stay there forever. Share photos that you know cannot be used to shame you in the future.
 
3.  Pause and think before posting
Take time to reflect on what you are posting to ensure you do not post anything that would damage your reputation or can be used against you.
 
4.  Set up privacy controls on your accounts
Restricting your profile to only trusted friends will help to keep those with negative intentions from viewing your information.
 
 
Cyber-stalking
 
Cyber-stalking is the intentional use of a computer system to harass or threaten with the intent to place another person in distress or fear.
 
To prevent cyber-stalking:
 
1.  Review privacy settings to control who views your content
Actively manage the privacy settings related to your account to determine who is granted access to your content. Determining who should see what you post will help prevent strangers or unwanted contacts from engaging with you.
 
2.  Don’t post private information in public online
Sharing information such as your address, phone number, birthday or family members’ names, allows a stranger to have further methods or more information to use in their online harassment. Avoid sharing this kind of information in public wherever possible.
 
3.  Share personal details (such as a phone number) in private messages
If you must share personal details on instant messaging services/platforms, don’t share them on public posts but in private messages with your trusted contacts.
 
4.  Only accept friend and follower requests from people you know in person
Allowing strangers into your network can open the door to a cyber stalker. Keep your profile secure by only connecting with people you trust.
 
 
Lack of end-to-end encryption
Not all instant messaging services feature end-to-end encryption, which ensures only you and the person you're communicating with can read or listen to what has been sent in a chat. Without it, a malicious actor can get in between and read what has been shared privately.
 
Before signing up to an instant messaging service, read the privacy policy to check whether it uses end-to-end encryption to keep your private data secure.
 
 
Instant messaging phishing
Similarly to the use of email, text messages and phone calls, instant messaging services are used by malicious actors to send dangerous links that aim to obtain sensitive data such as credit/debit card information or passwords.
 
Never click on links sent by strangers, or links you weren’t expecting that are sent from friends. These attacks can appear to come from people you know if their account has been compromised.

12 May 2022

© 2024 National Cyber Security Authority