How Can We Avoid, or Reduce Our Exposure to, Malware?
By Using Updated Operating Systems and Applications
One of the most important ways to protect yourself from malware is to have an updated and licensed operating system, whether open source (Linux), or proprietary (Windows and OSX). Malware takes advantage of outdated and cracked software and operating systems to infect them.
•If using open source (or FLOSS) applications, only download them from known projects – for those who are interested, the website osalt offers suggestions for open source alternatives to popular proprietary applications.
•Only download software from official sources, or trusted download sites via official websites.
•Be wary of using unknown and untrusted third-party sites or file-sharing sites.
•The experience of Syrians being targeted with malware in a number of ways is a useful cautionary example, as well as the Tibetan community.
Using SHA or MD5 Hashes
To verify downloads whenever possible. Suggested tools for this include FileInfo Professional (Free, OSX), HashTab (Paid, OSX), HashCheck (Free, Windows), Rapid CRC Unicode (Free, Windows).
By Downloading over an Encrypted Connection
Usually SSL in the browser, whenever possible; similarly, turn on auto-updates for the operating system and applications you use – Flexera for Windows is a free tool that will check to make sure your installed software is up to date.
By Enabling the Firewall
On your device to protect yourself; this can also help reduce the spread of malware if you are infected. If you have OSX users, mention that Apple devices are sold with the Firewall OFF by default. Direct them to where they either confirm that it is turned ON or turn it ON themselves (Preferences -> Security & Privacy -> Firewall). Windows usually has firewalls ON by default; to confirm or to turn ON, go to (Control Panel -> Security -> Windows Firewall).
By Using Anti-Malware Tools
There are different types of anti-virus and anti-malware tools. However, just to make it more confusing, some tools are combined into one, and others have various capabilities enabled depending on whether or not they’ve been paid for.
If participants ask for a place to compare tools, you can point them to AV Comparatives’ Summary Reports for both Windows and OSX tools.
Types of anti-virus and anti-malware tools to describe and differentiate for participants include:
•Anti-virus (more on these below)
•Anti-malware scanners (like Malwarebytes)
•Anti-Spyware scanners like SuperAntiSpywareFree
Have an active and updated anti-virus program that checks for malware for other operating systems as well, not solely the one on the device it’s installed on – this is to avoid the spread of malware that doesn’t affect one kind of operating system to devices using other operating systems that may be affected. This is most relevant for OSX and Linux operating systems.
Free anti-virus apps for Windows include:
•Avast! (also checks for software updates)
•ClamWin (open source)
•Avira
•AVG
Free anti-virus apps for OSX include:
•Avast!
•Avira
•ClamXav (open source)
Have an anti-virus program that has active monitoring capabilities, or “real-time protection”, and use it. This allows the program to actively monitor your computer’s activities to alert you to potential malware, instead of discovering malware during scans alone.
Do not run more than one anti-virus/anti-malware tool that provides active monitoring capabilities.
•Program your anti-virus program to conduct regular scans.
•If you can afford it, use an anti-virus tool that provides “web browsing” protection if you have a Windows device.
•This can help protect you from “drive-by downloads” when browsing the web, which can even happen on seemingly innocuous websites that have been exploited.