Toro-Blog-listing

Stay Safe: Stop Oversharing on Social Media

Written by Connor Conlan-Coke - Cyber Security Consultant | Aug 19, 2024 4:40:29 PM

Wheels down, beverage ordered. Next step lets take a picture and check-in on Facebook. Sound familiar? It does to me. In the height of the holiday season these posts are far too common. Or perhaps it’s new home day. Let’s get a picture with the keys held up high and clear. You know the one’s I mean, right? But should we be doing this? I mean what’s the harm in spreading a bit of joy? - This holiday body deserves appreciation after all!  

Well, the issue lies in what you’re inadvertently telling people. According to the ICO, just a quarter of the UKs Facebook, Instagram, X and TikTok users have their channels set to private.1 Leaving the other 75% visible to anyone who would care to look. 

So, it raises the question. What’s the big deal? Let’s kick off with the obvious ones - your email address or phone number. A quick check online and I can see if you have suffered any data breaches. I might even be lucky enough to find a password that you’re still using for your social media or other online accounts. Even just a phone number provides me with the opportunity to either spoof you or send smishing attacks. If I am really motivated, I can siphon through your pictures and figure out your home address, perhaps even your work address and the route you take to get there. I can research what you follow, what interests and political leanings you have. I could target your friends and family and try to manipulate them with all the information I’ve just learned about you. The possibilities are almost endless. However, the end result is almost always the same. A complete target file with a list of vulnerabilities to exploit. 

Now before the pessimistic amongst us roll their eyes in disbelief let’s look at some other mistakes made online. New home day photos and keys held in front of the camera. What if I told you burglars can make copies from just the pictures alone. Don’t worry they’ve already got the address and house number from the other photos you posted. Thanks for that.  

However, it doesn't just stop there. Why rob the vault if there’s no gold inside? Well, put simply you don’t... That’s why I’m flicking through your Instagram page to see what goodies you’re advertising for me to steal. After all, I have a high taste and an expensive lifestyle.  

So, what does this equate too? 

Well as of Monday last week my target Harry who for some bizarre reason accepted my friend request even though he’s never met me is now on holiday in Scotland after checking in online. Fortunately, I know where he lives, number 4 Privet drive after he posted celebratory pictures last month along with the keys. Spare set cut and ready. Range rover on the drive which should fit the 65-inch OLED he’s got on his wall. He’s also been flashing off a couple of watches recently which if I’m being perfectly honest would look better on me, so I’ll be taking them too.   

Luckily for Harry and number 4 Privet drive this is all fictional. However, this does regularly happen in the real world. Avoid falling victim to this by implementing these social media guidelines: 

  • Set your social media accounts to private and remove all contact and address information from the public eye. 
  • Decline connection requests from people you do not know. 
  • Wait until you’re back from holiday to share the experience with your network. Never share that you’re not at home! 
  • When taking photos be careful of what is in the surroundings. Try not to divulge unnecessary information such as car key locations or street names.   

Remember the hunt is always on. It’s not about being the fastest. Just don’t be the slowest. Take 10 minutes out of your weekend to implement these changes and avoid the jaws of regret. Stay safe.  

 

1) https://metro.co.uk/2022/02/01/ex-burglars-reveal-common-social-media-posts-that-help-them-steal-16026693/#:~:text=According%20to%20ICO%2C%20just%20a,the%20crime%20easier%20to%20commit.