![Dark Reading Global Logo Dark Reading Global Logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc8a6395802cafad0/654e0d60123f32040a075bab/Dark_Reading_Logo_Global_k.png?width=700&auto=webp&quality=80&disable=upscale)
Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa.
Experts Ponder Effectiveness of Official Warnings of Cyber Scams
Dubai Police and Ghana's Cyber Security Authority issue public warnings, but they're battling human nature and users' inattention.
January 17, 2024
![Smartphone with triangle caution warning icon on the screen Smartphone with triangle caution warning icon on the screen](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt2814b8138916cb50/65a6a82d907405040aaab66b/smartphone_warning_Mohd_Izzuan_Roslan_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
The Dubai Police, from the United Arab Emirates, and the Cyber Security Authority of Ghana have already issued two warnings this year, thanks to a series of unsolicited scam messages being sent to individuals.
In addition, malicious websites have recently been impersonating Dubai's Road and Transport Authority, and with some clever use of "black hat search engine optimization," these were ranking high on search results, and were convincing enough for unsuspecting browsers to hand over money to these scam websites.
Is it the fault of the public for continuing to fall for these fairly obvious scams, or do we need to do more to prevent these threats from flourishing? Security experts have a variety of takes on the answer to that question.
We're Too Trusting
Thea Mannix, director of research at Praxis Security Labs, says humans often operate in what she calls a "default mode," as information is passively consumed and there is a default response, which is to trust an authority figure.
When an authority figure asks you to do something, you are going to comply with whatever they tell you to do, she posited. So if an individual receives an email asking for money from what appears to be a legitimate entity, most recipients are less likely to question it.
Mannix explains that scammers or attackers are more likely to snare someone when the user isn't paying attention. And while a person may be more savvy when presented with a threat in real life, "in a digital space [the brain] is not really built for that," she adds, where we're more likely to miss the telltale signs of a scam site or message.
Kai Roer, CEO of Praxis Labs, agrees, saying "we are created to trust" and accept at face value, and that individuals will inherently trust the person communicating with you "because that is necessary for me and for you to survive as a species."
Joe Stewart, principal security researcher at eSentire, says it is all too easy to presume that no one would fall for a particular scam, but he points to the issue of "implicit trust" in search engine results.
"Attackers will use third-party blogs that they have hacked to increase their page ranking through SEO tricks and to get themselves placed higher," Stewart says. "A lot of the reasons that they are so successful is that they use highly targeted keywords."
What appears higher in search results is more likely to be clicked on, and Stewart says there is some responsibility on search engine operators to ensure malicious content — and sponsored adverts that lead to scam websites — get taken down.
It's less clear if warnings came from the police and the national cybersecurity agency make a real impact on the public. Stewart says there is always a belief that campaigns could be done better, but many agencies and law enforcement organizations are constrained by budgets and how much money they can devote to countering these threats.
Roer says there is a need for humans to have "constant reminders that we need to tell our brain to stop automatically making decisions," and be wary that not everything is as it seems.
Read more about:
DR Global Middle East & AfricaAbout the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024