Have You Been Pwned? 

With so much of our lives and work conducted online, it’s no surprise that cybercrime is now the most prevalent type of crime in New Zealand.  In today's digital age, the rise of cybercrime poses a significant threat to individuals and businesses alike. With increasing sophistication in cyber-attacks, including the use of AI tools like ChatGPT and Fraud GPT, protecting personal and financial information has never been more critical. This blog explores the dangers of online threats and offers practical steps, such as enabling Multi-Factor Authentication (MFA), to safeguard against cybercriminals. 

The Rise of Cybercrime and the AI Connection 

The rise of artificial intelligence (AI) has made cybercrime easier and more sophisticated. With tools like ChatGPT, which can access a vast amount of online data, creating phishing sites and other fraudulent activities can be done in just a few minutes. These phishing sites are designed to gather personal information, which can be sold on the dark web, leading to identity theft, financial fraud, and more. 

There’s even a more dangerous AI tool on the dark web called Fraud GPT, which makes it easier for criminals to buy stolen identity lists and commit fraud. In New Zealand, Inland Revenue is the most impersonated organisation, with fraudsters often using phishing emails and texts that mimic the official MyIR login site to steal login details. Once fraudsters have access to your MyIR account, they can change bank account details, manipulate tax returns, and redirect refunds without you even knowing. 

Protect Yourself with Multi-Factor Authentication (MFA) 

One of the best ways to protect yourself from cybercrime is by enabling Multi-Factor Authentication (MFA) on your accounts, especially with Inland Revenue's MyIR site. MFA adds an extra layer of security by requiring not just your password but also a one-time code sent to your phone or via an app. While Inland Revenue hasn't made this mandatory due to concerns about accessibility for some users, we strongly recommend activating it to safeguard your information. 

To activate MFA on MyIR, simply go to "Manage My Settings" at the top right of the page and find the "Security" section, where you can turn on MFA. 

What is Multi-Factor Authentication? 

MFA acts as a digital gatekeeper, ensuring that only you can access your accounts by requiring multiple forms of verification—usually a password and a one-time code.  

To use MFA, you'll need an authenticator app, which can be downloaded from the Android or Apple store. PC Magazine's August 2023 post highlights the best authenticator apps, including 2FAS, which offers a cloud backup feature in case you lose your phone. 

Why Use MFA? 

MFA is crucial in stopping cybercrime: 

• 65% of people reuse the same password 

• The average person reuses passwords 14 times 

• 44 million accounts are vulnerable due to weak or compromised passwords 

Even if a hacker fails to access one account, reused passwords across multiple sites make other accounts vulnerable. 

How to Check if Your Identity Has Been Compromised 

To see if your email has been part of a data breach, visit Have I Been Pwned?. If any of your email addresses appear in the search results, change your password immediately and enable MFA on all affected sites. Remember to update any other sites where you’ve used the same password. 

Managing Your Passwords 

Keeping track of multiple passwords can be a challenge. A password manager is a secure solution that stores all your passwords in one place, meaning you only need to remember one (strong!) master password. Just make sure to enable MFA on your password manager as well for added security. Cybernews offers helpful recommendations on password managers here. 

What to Do if You've Been Attacked 

If you’ve fallen victim to a cyber-attack, reach out to IDCare, the national identity and cyber support service for Australia and New Zealand. They’ve helped countless individuals and organisations recover from the misuse of their identity information. You can find more information about their services here. 

Additionally, if you or your business discover a security issue, we recommend reporting it to CERT NZ at CERT NZ's reporting page. CERT NZ helps individuals and businesses assess what is happening and provides guidance on the next steps to resolve the issue. Reporting to them not only helps protect your data but also contributes to national efforts to tackle cyber threats. 

Stay safe online and take steps now to protect your personal and financial information from cybercrime.