The Art of Social Profiling

Data Harvesting Techniques used in Social media platforms like Facebook, Twitter, Instagram, and LinkedIn are treasure troves of personal data. Scam artists employ various methods to extract sensitive information from these sources. In this article, we delve into the world of data hackers and scam artists, exploring their tactics, techniques, and the devastating consequences of their actions. Moreover, we will provide valuable insights into preventive measures individuals can take to safeguard their personal information and maintain control over their digital identities.

Social Engineering

Social engineering is a psychological manipulation tactic that hackers frequently employ to trick individuals into revealing confidential information. This approach relies on exploiting human emotions and vulnerabilities. Scammers often impersonate authority figures or trusted contacts to gain their victim’s trust and obtain sensitive information like birth dates, addresses, or financial details.

Examples of social engineering include questions like asking where you live, your name, your activities and so on. Scam artists can delve deeply into your Social media profiles and garner enormous amounts of information from your social posts, comments and private photos. These discovered insights then develop into data profiles for scammers to use as leverage to approach you on an emotional level.

Not necessarily. Scam artists and hackers have the ability to create code to scrape data and gather specific information such as an email address, date of birth and much more. It is now becoming much easier to do this with the expanse of AI producing code.

For more information on how to protect yourself from data scraping on social media visit Facebook Help Centre

Cross-Platform Aggregation

Hackers capitalise on the interconnectedness of the digital landscape by aggregating information from multiple online platforms. Information seemingly innocuous on its own can become a potent weapon in the hands of a hacker who pieces together various fragments to build a comprehensive profile of an individual. The more social media profiles you have the more you are exposing your data.

Data Brokers and Dark Web

Data brokers operate in the shadows, trading personal information for profit. These entities acquire and sell large datasets to the highest bidder, often without the consent or knowledge of the individuals involved. Such data often finds its way onto the dark web, where it can be accessed by malicious actors willing to pay for it.

Identity Theft

With a complete digital profile at their disposal, hackers and scam artists can easily steal identities, opening financial accounts, applying for loans, or making unauthorised purchases in the victim’s name. The victims are often left to deal with significant financial and emotional burdens.

Cyberstalking and Harassment

Social profiling can be weaponised for cyberstalking and harassment. Armed with intimate details of a person’s life, malicious actors can launch targeted attacks that infringe upon a person’s privacy and personal safety.

Reputation Damage

The exposure of private information can lead to reputational harm, both personally and professionally. Online bullying, shaming, or even the spread of false information can wreak havoc on a person’s life.

Phishing and Fraudulent Schemes

One of the most common techniques is phishing, where scammers create fake websites or emails to trick users into divulging their login credentials. Once hackers gain access to a user’s account, they can mine vast amounts of personal data. Personal data collected through social profiling can be used to craft highly convincing phishing attempts. Scammers can manipulate victims into clicking on malicious links, or attachments leading to financial loss, malware infection, or further data breaches.

Australian Bureau of Statistics (22 February 2023), 13.2 million Australians exposed to scams, ABS Website, 20 July 2023.

How do we fix this? Combating scammers

1. Strengthen Your Passwords

Begin with strong, unique passwords for each online account. Use a combination of upper and lowercase letters, numbers, and special characters. Enable two-factor authentication (2FA) wherever possible to add an extra layer of security. Use a password management tool that alerts you to password breaches and other security problems and reduces repetitive use of the same password. Password management tools can also generate unique strong passwords for you on the fly.

2. Limit Public Information

Review your social media profiles and limit the amount of personal information you share publicly. Avoid posting your full birth date, address, phone number or contact details, as this information can be exploited by hackers. Take care with photos you share, don’t post photos of others without consent and try not to expose full frontal clear photos of your face as facial recognition software is advancing at a rapid rate.

3. Educate Yourself and Others

Stay informed about the latest hacking techniques and scams. Educate yourself and your loved ones on how to identify and avoid suspicious online activities. A well-informed community is less likely to fall victim to social profiling. Notify others if you think their social media account has been hacked.

In Australia you can report a scam on the ACCC Government Scamwatch website.

4. Regularly Review Privacy Settings

Frequently check and adjust the privacy settings on your social media accounts to control who can view your information. Be cautious when accepting friend requests or connection requests from unknown individuals.

5. Beware of Social Engineering

Be wary of unsolicited communication, especially when it involves requests for personal information. Always verify the identity of the person or organisation before sharing any sensitive data. For example a bank will never send you an email or SMS asking for banking information like your ID, password, or internet codes; or include a link to login directly from an email or SMS. Some banking websites in Australia have robust information including pictures about the latest scams, frauds and security alerts so its good to check regularly and keep an eye on the latest information at hand.

6. Utilise Privacy Tools

Leverage privacy-enhancing tools and browser extensions that block tracking cookies, prevent ad targeting, and secure your online browsing experience. Be wary of add-ons to browsers. Installing an extension introduces new software to your browser — software which could potentially have security weaknesses (or be downright malicious). Third-party extensions might secretly include malware, or have security flaws that hackers can exploit.

7. Monitor Your Digital Footprint

Regularly search for your name and monitor your digital footprint. Set up Google Alerts for your name to receive notifications if it appears on unfamiliar websites or forums. You can also run a background check on your email address to see if it has been compromised using the haveibeenpwned website which will show information of organisations that have exposed your email address or have been data breeched.

8. Phone call defenses

Never answer an unsolicited phone call with your name. A greeting is fine, however by answering your a call with your name you are confirming at first instance your identity. With the advent of voice recognition software prepare with family, friends and associates by sharing a ‘secret code’ that only your close ones will know so you can eliminate if it is a fake voice over. Another step you can take for preventing phone call scams is using a voice call recording software which will digitally record all phone calls. The voice transaction over the phone from both ends is recorded and other information such as date and time and could possibly be used as valuable information for investigators.

The cyber war at hand

In the ongoing battle against data hackers and scam artists, there is light at the end of the tunnel. Obvious to most there are language barriers, and very poor language skills in simple phishing emails. Keep an eye on the sender email addresses. On most occasions phishing emails have conspicuous or unrelated email addresses that don’t match the organisation that it has been sent from.

As citizens we need to be questioning our laws governing the validity of facial recognition data collection. You would be inclined to put it on the same level as finger print collection. Facial recognition data is a set of unique measurement data points on a persons face which is unchangeable, unless you have face surgery, and now we have retails shops collecting this data and not everyone is aware. More often than not this data collection is happening without obvious consent. This does not bode well for consumers, and may in turn destroy trust of these retail business environments that are using facial recognition software.

In conclusion

The world of social profiling is a gloomy realm where hackers and scam artists manipulate personal information to exploit and harm individuals. By understanding their techniques and adopting preventive measures, we can empower ourselves to take back control of our digital identities. There is hope for a secure and resilient digital future, where the importance of privacy and cybersecurity stands triumphant against the onslaught of cyber threats.