As Kenyans take to digital platforms to mobilize and air their views on a controversial Finance Bill, a cybersecurity threat lingers. Experts from the cyber sector have identified a number of web links taking advantage of #RejectFinanceBill2024 to spread malware. Some are used by malicious actors to collect Personally Identifiable Information (PII).
PII is any form of data that can be used to identify a person. This information can directly or indirectly reveal more data about an individual. PII is considered sensitive data and can be a target for attackers in data breaches.
If lost, PII can lead to identity theft or other fraudulent use, such as someone taking money from a bank account or using a credit card in someone’s name.
One reason why links are shared out is to help crowdsource information. Hence, various tech initiatives have been developed. Links are also shared to help crowdfund money for different initiatives. So far, two protestors have been killed and citizens have helped raise funds to help with burial arrangements.
How to check Web Links to see if a site is Safe
Unfortunately, bad actors are taking advantage. In a post on X that has since been deleted, Dr Bright Mawudor flagged some of the threats. The cyber security expert recommended Kenyans use tools like Virus Total to scan links.
He further advice those who may have already clicked on a malicious links to clear web browser caches and cookies immediately.
For caution, Google has a Safe Browsing site where everyone can check the status of a link. The free technology examines web links. Links detected to be malicious are flagged and will have an alert even when someone else tries to open via google.
It can’t hurt to cross-check with more than one tool and Norton SafeWeb URL checker is another option. Even try a WHO IS lookup, via any registrar like GoDaddy. Do this by pasting the base part of a link. This is the main domain name like techweez.com and do a WHO IS on that domain name.
While the domain name itself might not tell you much, the behind-the-scenes information, like the servers the website uses (DNS server), can offer clues about the website’s owner or who is hosting it. Additionally, checking who registered the domain name (domain registrar) and their contact details can help you decide if the website seems trustworthy.