An Unexpected Trip

Growing up in Sioux Falls, South Dakota, a small city surrounded by endless plains, I've found unexpected echoes of home in China's smaller towns — from the warmth of locals in Huaihua, Central China's Hunan province, to the quiet charm of Yangshuo, South China's Guangxi Zhuang autonomous region. With an itch to see more of China's lesser-visited regions, I began planning a trip to the northwest with seven friends — five Americans, one Pakistani, one Zimbabwean, and one Colombian. We bought round-trip tickets from Shanghai to Yinchuan, Ningxia Hui autonomous region, for less than $120 each. From there, we planned to rent a car and drive to Xining in Qinghai, then on to Qinghai Lake, and finally to Lanzhou, Gansu. To make that possible, several of us applied for Chinese driver's licenses, a process that involved translating our US licenses into Mandarin and passing a short test on traffic laws. Within a day, we were licensed. As we piled into two rental cars in late March to begin our eight-day journey, it became clear that this wasn't just a road trip — it was the culmination of our four years in China, the Mandarin we had so diligently studied, and our ongoing effort to contribute to US-China people-to-people relations. Right away, we drew curious reactions. At the Yinchuan airport, taxi drivers offered us rides into the city, only to stare in astonishment when we told them we had rented cars. "You're driving? In China?" one driver asked, visibly surprised. It was a reaction we'd encountered multiple times during our trip, as foreign drivers are rare in China, especially in remote regions. In Yinchuan, we stocked up on snacks and adjusted to the chilly desert air. From there, we headed west, navigating wide highways framed by dramatic landscapes: arid plains, jagged mountains, and occasionally, a herd of sheep crossing the road. The vastness of the Northwest was humbling — and as someone who grew up on the wide-open prairies of South Dakota, it felt oddly familiar. One of the highlights of our trip was camping by Qinghai Lake, the largest saltwater lake in China. A few summers ago, Santiago Solano, one of my classmates from the US, cycled from Xi'an in Shaanxi to Urumqi in the Xinjiang Uygur autonomous region over the course of a month and met many kind strangers along the way. One of them was Geng San, a Tibetan lamb herder who managed a piece of land right next to Qinghai Lake and graciously invited us to camp there. "That's what China is — it's the people. The quiet generosity of an old Tibetan nomad who, years after we first met, still offered us a place to rest on his land," said Solano, who is also part of the group on this trip. But apparently, we underestimated just how cold it would be to camp next to Qinghai Lake in late March. It was deathly freezing. In preparation for the trip, we had ordered two tent kits and eight sleeping bags. However, when the temperature eventually dropped to — 10 C, all of us piled into the cars and turned the heaters on. So much for camping. From Qinghai Lake, we drove to Lanzhou, where we visited many food markets and tried every type of noodle on offer. Since we are college students, we rented a gaming hotel room — something I've only ever seen in China. At night, instead of attending local parties as we had before, we stayed in the hotel and gamed late into the morning. For me, the trip was as much about the journey as it was about the destinations. Driving through Northwest China gave us a unique perspective on the region's natural beauty and its people. At gas stations, shopkeepers greeted us with curiosity and kindness, often offering recommendations for nearby attractions. At roadside carts, we sampled local specialties, grabbing a quick skewer and a mango for the road. And at every stop, we were touched by the warmth and hospitality that make traveling in China so rewarding. As an American who has lived in China for several years, I'm often asked about my experiences here. Trips like this one remind me of the similarities between the two countries, despite their differences. Just as road trips are a quintessential part of American culture, they've become my favorite way to explore China. Whether it's driving through the rolling hills of South Dakota or the deserts of Ningxia, there's something universal about the freedom and camaraderie that come with having complete control over where you end up. Written by Charlie Howes, a 22-year-old American who has lived in China since 2019. He completed his final year of high school at Beijing No 80 High School and is currently studying at New York University Shanghai. He has founded a company in China focused on facilitating US-China trade and plans to continue living in Shanghai long term. He enjoys road trips, cycling around the world, learning languages, and meeting new people.

An Unexpected Journey to Puerto Rico

An Unexpected Adventure

b1 An Unexpected Adventure

Why and How Managers Plan Importance of planning The planing process Benefits of planning Planning and time management Types of PLans used by managers Long term and short term plans Strageic and tactical plans Operational plans Planning Tools and Techiqunes Forecasting Contrigency planning Scenario planning Benchmaking Use of staff planners Implementing Plans to Achive Results Goal setting Goal management Goal alignment Participation and involvement Planning Def: The process of setting objectives and determining how best to accomplish them Planning at Eaton Corporation “Making the hard decision before events force them upon you, an anticipating the future needs of the market before the demand asset itself Objectives and goals Identifity the specific results or desired outcomes that one intends to achieve Plan Def: A statement of action steps to be taken in order to accomplish the objectives (goals) Steps in the planning process: Define your objectives Determine where you stand vis-a-vis objectives Develpo premises reagrdsing future conditions Analyze alternatives and make a plan Implement the plan and evaluate results What are the benefits of planning Improves focus and flexibility Imporves action orteitation Imporves coordination and control Imporves time management Time Managment Personal time management tips Do say “no” to request that distract you form what you should be doing Dont get bogged down inn details that can be addressed later Do screen telephone calls, emails and meeting request Dont let drop in visitors, text messaging use up your time Do prioritize your important and urgent work Dont become calendar bound by letting other control your schedule Do follow priorities; do most important and urgent work first Some 77% of mangers in one survey said that digital age has increased th number of decisions they have to make 43% said there was less time available to make these decisions Types of plans used by Managers What is teh time horizon Long term vs Short term Long term Look three or more years into teh future Short term plans Typically cover one year or less However: the increasing environmental complexity and dynamism of recent years has severely tested the concept of “long-term” planning Plans are subject to frequent revisions Most executives would likely agree that these complexities adn uncertainties challenge how er actually go about planning and how far ahead we can really plan At the very least we can conclude that there is a lot less permanency to long term plans today and that tey are subject to frequent revision Managment reaeracher Eillot Jaques believes tha people vary in their capability to think with different time horizons Types of Plans used by Managers (3 of 5) Strategic plans Set broad, comprehensive and linger term action directions for teh entire organization or major division Vision Clarifies purpose of the organization and what it hopes to be on the future Typical plans Specify how the organizations resources are used to implement strategy Tactical plans in business often take the form of functional plans Functional plans Incidate how different component within the organiztion will help accompnlish the overall strategy Production plans Finacial plans Facilites Plans Logisitc plans Marketing plans Human Resource Plans Operation plans Describe short-term activities to implement strategic plans Policies: Are standing plans that communicate guidelines for decisions Ex: Policies on office romances: The media is quick to report when a top executive or public figures runs into trouble over an office affair. Are there ant policies on office romances? Employer polices on office raltioshiis vary. One survey find teh following: 24% prohibit relationships among employees in the same department 13% prohibit relationships among employees who have the smae supervisor 80% prohibit relationships between supervisors and subordinates 5% have no restrictions on office romances Procedures: Are rules that describe actions to be taken in specific situations Budgets: are single use plans that commit resources to projects or activities Zero based budgets: allocate resources as if each budget were brand new There is no guarantee that any past funding will be renwer. All propsales, old and new, must compete for available funds at teh start of each new budget cycle Forcasting Attempts to predict the future Qualitaive forecasting uses expert opinions Quantitative forecasting uses mathematical models and statiscal aanylsis of historical data dna surveys Contingency planning Identify alternative course of action to take when things go wrong Anticipate changing conditions Contain trigger points to indicate when to activate plan (or a specific course of action) Scenario planning A long term version of contingency planning Identifying alternative future scenarios Plans made for each future scenario Increases organizations flexibility and preparation for future shocks Benchmarking Use of external and internal comparisons to better evaluate current performance Adopting best practices: things people adn organization do that lead to superior performance Staff Planners Experts who assist in all steps of the planning process They help bring focus and expertise to a wide variety of planning tasks Important: Communication between staff planers landline managers is essential for teh success of teh planning process Goal Setting - Always set SMART goal The solution: Goal Aligment Between Team Leader and Team Member Jonintly plan: Set objectives, set standards, choose actions Individually acy: Perform tasks (member), provide support (leader) Jointly control: Review results, discuss implications, renew cycle x4 Collective effort and commitment Participatroy planning Includes in all planning steps that people who will be affected by the plans adn askedd to help implement them Unloacks motivational potential of goal setting Management by objective (MBO) promotes participation Participation increases understanding and acceptance of plan and commitment to success Participatory planning - Number of people involved in teh decision making process Amazon is intensely focused on what it does. It believes in creating tight single-threaded teams, also known as “2 pizza team.” Data and Decision Making What are some of the important competencies managers must have today? Delegate Marketing and technology Manager must have Technological competency Ability to understand new technologies and to use them to their best advantage Information competency Ability to locate, gather, organize and display information for decision-making and problem solving Analytical competency Ability to evaluate and analyze information to make actual decisions and solve real problems What is the difference between Data and Information Data Raw facts and observation Information Data made useful and meaningful for decision-making Important concepts Big data Exists in huge quantities and is difficult to process without sophisticated mathematical and analytical techniques Data production today Bernard Marr is an internationally best-selling author. He helps organizations improve their business performance, use data more intelligently Data mining The process of analyzing data to produce useful information for decision-makers Management Analytics The systematic evaluation and analysis of data to make informed decision Information drives management Bad Data Refers to information that can be erroneous, misleading, and without general formatting The challenge: Can er use the data that is available in the “Big Data” Needs to be valid Can not trust everything out there Being ethical Look at the trends Data is structured and unstructured Data BIg Data = Structured + Unstructured Information Drive Management decision making What are the characteristics of useful information Easy to access If its credible Accurate Characteristics of useful information: Timely High quality Complete Relevant Understandable What about bad data It's not credible Miss information If it is not structured/ organized Bias based on opinions Confusing If its updated Bad data Refers to information that can be erroneous miss What are some examples of Management information system Business intelligence -BI Information systems to extract and report data in organized ways that are useful to decision-makers Executive dashboards Visually update and display key performance metrics (or Key Performance Indicators -KPIs) and information on a real-time basis Information needs in organization External Environment Information exchanges with the external environment Gather intelligence information Provide public information Information needs within the organizations (internal Enviroement) Information exchange within the organization Facilitate decision making Facilitate problem-solving Managers as information processors Continually gather, share and receive information Now as much electronic as it is face-to-face Always on, always connected How many people telecommute at least once a week 70% of people globally work remotely at least once a week, Work at home after covid 19 our forecast Our best estimate it that 25-30% of the workforce will be working form home multiple days a week by the end of 2021 As of 2023, 12.7% of full time employees work from home, while 28.2% work a hybrid model Managers as problem solvers Problem-solving The process of identifying a discrepancy between actual and desired performance and taking action to resolve it Ishikawa Fishbone diagram To identify the cause of problems Decision A choice among possible alternative courses of action Performance threat Something is wrong or has the potential to go wrong Performance opportunity The situation offers the chance for a better future if the right steps are taken Problem-solving approaches or style - from textbook Problem avoiders Inactive in information gathering and solving problems Problem seekers Proactive in anticipation of problems and opportunities and taking appropriate action to gain an advantage Problem solvers Reactive in gathering information and solving problem Managers - can approach problems in a systematic or intuitive manner Systematic thinking approaches problem in rational, step-by-step and analytical fashion Intuitive thinking approaches problems in a flexible and spontaneous fashion Multidimensional thinking- applies both intuitive and systematic thinking Managers face structured and unstructured problems Structure problems Are ones that are familiar, straight forward, and clear with respect to information needs Program decisions apply solutions that are readily available from past experiences to solve structured problems Know how to solve them Familiar Know what we are dealing with Unstructured problems Are ones that are full of ambiguities and information deficiencies Nonprogrammed decisions apply a specific solution to meet the demands of a unique problem Commonly faced by higher-level management Crisis decision making A crisis involves an unexpected problem that can lead to disaster if not resolved quickly and appropriately Ruled for crisis management Figure out what is going on Remember that speed matters Remember that slow counts, too Respect the danger of the unfamiliar Value the skeptic Be ready to “fight fire with fire” Managers make decisions with various amounts of information Certain environment Offers complete information on possible action alternatives and their consequences Risk environment Lacks complete information but offers probabilities of the likely outcomes for possible action alternatives Uncertain environment Lacks so much information that it is difficult to assign probabilities to the likely outcomes of alternative Ex: Certain and uncertain environments: The worldwide Governance Indicators for over 200 countries, comparing distinct environments (Canada-Brazil) Step 1-Identify and define the problem Focuses on information gathering information processing and deliberation Decision objectives should be established What are some common mistakes in definding problems? Common mistakes in defining problems Defining the problem too broadly or too narrowly Focusing on symptoms instead of causes Choosing the wrong problem to deal with Step 2- Generate and Evaluate Alternative Courses of Action Potential solutions are formulated and more information is gathered, data are analyzed, the advantages and disadvantages of alternative solutions are identified Common mistakes: Abandoning the search for alternatives too quickly Step 3- Decide on a preferred course of Action Two different approaches Behavioural model leads to satisficing decisions Classical model les to optimising decisions Behavioural Model Rationality is bounded because: There are limits our thinks capacity Available information (incomplete) Time constraints Step 4-Implement the decision Involves taking action to make sure the solution decided upon becomes a reality Managers need to have the willingness and ability to implement action plans Problems: Lack of participation error should be avoided Step 5 - Evaluate Results Involves comparing actual and desired results The positive and negative consequences of the chosen course of action should be examined If actual results fall short desire results, the manager returns to earlier steps in the decision-making process At all steps, check ethical reasoning Ask these spotlight questions Utility Does teh decision satisfy all constituents or stakeholders Rights Does the description respect the rights and duties of everyone? Justice Is the decision consistent with the canons of justice Caring Is the decision consistent with my responsibilities to care? Issues in decision-making How do errors happen? Heuristics: are strategies for simplifying decision-making Availability Bias: Bases a decision on recent information or events Representativeness bias: Bases a decision on similarity to other situations Anchoring and Adjustment Bias: Bases a decision on incremental adjustment from a prior decision point Framing error: Tring to solve a problem in the context perceived, positive or negative Confirmation Error: Focusing on information that confirms a decision already made Escalating commitment: Continuing a course of action even though it is not working Creative Decision making Creativity is the generation of a novel idea or unique approach that solves a problem or crafts an opportunity Big C: Creativity occurs when extraordinary things are done by exceptional people Little C: Creativity occurs when average people come up with unique ways to deal with daily events and situations The three types of situational creativity drivers Chapter review What are objectives and goals? The specific results or desired outcomes What are the 5 characteristics of great (SMART) goals? Forecasting - Attempts Qualitative forecasting uses options Quantitative forecasting uses mathematical models and statistical analysis of historical data and surveys Scenarios-Oracle’s crystal ball combines qualitative and quantitative methods

Land warfare is a complex domain that involves the application of military power on the ground to achieve political and strategic objectives. Modern military doctrine, such as that used by the U.S. Army and the Indian Army, categorizes these elements into Combat Power and the Principles of War. 1. The 8 Elements of Combat Power Combat power is the total means of destructive, constructive, and information capabilities that a military unit can apply. It is typically broken down into eight key elements: ElementDescriptionLeadershipThe "multiplier" of all other elements. It provides purpose, direction, and motivation to soldiers.InformationEnables commanders to make informed decisions and creates opportunities to achieve results.Mission CommandThe system used to integrate the other elements. It focuses on decentralized execution based on the commander's intent.Movement & ManeuverThe movement of forces to gain a positional advantage over the enemy to deliver lethal or non-lethal effects.IntelligenceThe understanding of the enemy, terrain, weather, and civil considerations.FiresThe use of weapon systems (artillery, mortars, air support) to create specific lethal or non-lethal effects.SustainmentThe logistics required to maintain operations, including ammunition, fuel, food, and medical support.ProtectionThe preservation of the force so that the commander can apply maximum combat power.2. The Principles of War These are the enduring "rules of thumb" that guide how land forces are employed strategically and tactically: Objective: Direct every operation toward a clearly defined and attainable goal. Offensive: Seize, retain, and exploit the initiative. You cannot win by defending alone. Mass: Concentrate the effects of combat power at the most advantageous place and time. Economy of Force: Allocate the minimum essential combat power to secondary efforts so you can "mass" elsewhere. Maneuver: Place the enemy in a position of disadvantage through flexible movement. Unity of Command: Ensure all forces operate under a single responsible commander toward a common objective. Security: Prevent the enemy from gaining an unexpected advantage. Surprise: Strike the enemy at a time, place, or in a manner for which they are unprepared. Simplicity: Prepare clear, uncomplicated plans to minimize confusion in the "fog of war." 3. The Modern Legal Framework Land warfare is also governed by the Law of Land Warfare (International Humanitarian Law), which rests on four pillars: Military Necessity: Actions must be necessary to achieve a legitimate military goal. Distinction: Forces must distinguish between combatants and non-combatants (civilians). Proportionality: The anticipated harm to civilians must not be excessive in relation to the concrete military advantage gained. Unnecessary Suffering: Weapons and methods must not cause gratuitous or superfluous injury. Note: Contemporary land warfare is increasingly "Multi-Domain," meaning land forces must now integrate with cyber, space, and electronic warfare to be effective. , While land warfare uses many tools, the two primary "philosophies" of how to win a war are Attrition and Maneuver. Most modern conflicts are a spectrum of both, but understanding the pure form of each helps explain military strategy. 1. Attrition Warfare: The "Sledgehammer" Attrition warfare is a strategy where one side attempts to win by wearing down the enemy to the point of collapse through continuous losses in personnel, equipment, and supplies. Core Logic: "I have more than you." It assumes that if you can destroy the enemy’s resources faster than they can replace them, you will eventually win. Focus: Firepower and mass. Success is measured by "body counts," equipment destroyed, and the steady seizing of terrain. Command Style: Usually centralized and methodical. It requires strict synchronization of massive resources (artillery, logistics, manpower). Historical Example: The Battle of Verdun (WWI). German Chief of Staff Erich von Falkenhayn famously stated his goal was to "bleed France white" by forcing them to defend a position they could not afford to lose, regardless of the cost in lives. 2. Maneuver Warfare: The "Scalpel" Maneuver warfare seeks to shatter the enemy’s moral and physical cohesion—their ability to act as a unified force—rather than simply destroying every soldier. Core Logic: "I am faster and more unpredictable than you." It aims to create a state of chaos where the enemy's leadership can no longer make effective decisions. Focus: Speed, surprise, and dislocation (forcing the enemy to be in the wrong place at the wrong time). The OODA Loop: Developed by Col. John Boyd, this is the heart of maneuver theory. It stands for Observe, Orient, Decide, Act. The goal is to cycle through these steps faster than the enemy, essentially "getting inside" their decision-making process until they collapse from confusion. Historical Example: The 1940 Invasion of France (Blitzkrieg). Instead of fighting a line-by-line battle of attrition, German forces used speed and concentrated armor to bypass strongpoints, cut communication lines, and cause a total systemic collapse of the French military in weeks. 3. Key Differences at a Glance FeatureAttrition WarfareManeuver WarfareObjectivePhysical destruction of the enemy army.Functional/Psychological collapse of the enemy.TargetThe enemy's strength (mass).The enemy's weakness (vulnerability).Primary ToolMassed Firepower.Movement and Tempo.Command"Command Push" (Top-down, rigid)."Recon Pull" (Decentralized, flexible).Success MetricExchange ratios (Kill counts).Disruption and loss of enemy control.4. The Modern Synthesis: "Schwerpunkt" In practice, no army is purely "maneuver" or "attrition." To maneuver successfully, you often need a period of attrition to punch a hole in the enemy's line. A critical concept here is the Schwerpunkt (Center of Gravity/Focus of Effort). A commander identifies the single most important place to strike and concentrates all available "elements of power" there. While the rest of the front might look like attrition, the Schwerpunkt is where the maneuver happens to achieve a breakthrough. Modern Reality: In high-intensity conflicts today (like the war in Ukraine), we see a "return to attrition" because modern sensors (drones, satellites) make it very difficult to achieve the surprise needed for pure maneuver warfare. When you can see everything, it's hard to be "unexpected."

Accidents are unexpected events or happening at home, school, on the road or at work which can lead to injuries or death. It can cause pain, sorrow, discomfort or deformation of the body. Some accidents are caused by mistakes, stubbornness, carelessness or disobedience. The accident at home is called domestic accident. TYPES OF ACCIDENT 1) BURNS: These are caused by hot objects like hot iron. Burns could be caused through fire incidents. 2) BITES: These are caused by animals such as snakes, dogs, insects etc. Some insect’s bites may lead to itching of the spot and its surroundings. This may later lead to a serious discomfort. 3) BRUISES: These are marks on the skin which results when one falls of hit by a person in a fight. This action causes the swelling of the skin. 4) SCALDS: Scalds are caused by hot water, hot oil or acid if it mistakenly touches or pours on the body. 5) CUTS: These are caused by sharp objects such as knife, blades, scissors. 6) ROAD ACCIDENTS: These are caused by Reckless driving, bad roads(potholes). 7) AIR AND SEA ACCIDENTS: These are mainly caused by poor weather and engine failure. It can lead to materials and human beings lost. 8) RAIL ACCIDENTS: These are caused by bad railways and careless crossing by motorists. THE FOLLOWING ARE THE WAYS OF PREVENTING ACCIDENTS. 1. Do not play near an open fire or flame. 2. Do not run up the staircase but walk smartly. 3. Do not dare a strange dog. 4. Do not play with sharp objects likes blades, knives and scissors. 5. Do not play with harmful insects. 6. Avoid rough plays to prevent bruises and wounds and other forms of accidents. 7. Remove all objects that can cause a fall on the way. 8. Wear dry rubber slippers before operating an electrical appliance like Television, refrigerator and pressing iron. 9. Always obey your parents’ instructions. 10. Always keep the floor clean at all time.

How is personal data collected? There are several ways that an unauthorised person can try and collect your data. These include: •phishing •smishing •vishing •pharming. Phishing Phishing is when a person sends a legitimate looking email to a user. The email contains a link to a website that also looks legitimate. The user is encouraged to click the link and to input personal data into a form on the website. The email could also simply ask the user to reply to the email with their personal data. The user is tricked into giving their personal data to a source that they believe is legitimate. However, both the email and the linked website are from a fake unauthorised source. The personal data that is input is then collected by an unauthorised person. This person can then use this data for criminal acts, for example, to commit fraud or steal the person's identity. Intimidation has become a common feature of phishing emails, threatening the user that they must click the link and rectify a situation immediately, or there will be a further issue. The aim of a phishing attack is to steal the user's personal data. Figure 5.1: Phishing. A real-life example of phishing PayPal have been the subject of several different phishing emails. Users receive an email that looks as though it has been sent from PayPal, as it has the PayPal branding. The email normally warns of an issue such as unexpected activity on their account, or that some kind of verification of their account is required. The user is then asked to click a link to log into their account and resolve the issue. The link takes them to a webpage that looks like the PayPal login page. If the user inputs their login details into this page, they will not be taken to their account. It is often at this stage that the user may realise that the email and webpage are fake. However, they have already given the unauthorised person their PayPal login details. Figure 5.2: An example of a phishing email claiming to be from PayPal. How to recognise phishing There are several guidelines to be aware of regarding emails to avoid being subjected to phishing. These include: •Don't even open an email that is not from a sender that you recognise or a trusted source. •Legitimate companies will never ask you for your personal data using email. Be immediately suspicious of any email that requests your personal data. •Legitimate companies will normally address you by your name. Be suspicious of any email that addresses you as ‘Dear Member' or ‘Dear Customer'. •Legitimate companies will send an email that uses their domain name. If you hover your mouse over the sender's name, it will show the email address that the email is sent from. If this does not look legitimate, for example, does not contain the correct domain name, then it is probably fake. For example, if the sender's email is user@paypal1.com rather than user@paypal.com, this is from an incorrect domain name. •Legitimate companies are protective of their professional reputation and thoroughly check any communications. They will make sure that all information given is grammatically and correctly spelt. Be suspicious of any email that contains bad grammar or spelling mistakes. •A link in an email from a legitimate company will also normally contain the domain name of the company. You can sometimes hover over the link, or right click and inspect the link, to see the address of the URL that is attached. If the URL does not contain the domain name, or also contains typical errors such as spelling mistakes, then be suspicious of this. PRACTICAL ACTIVITY 5.02 Ask a friend or a member of your family if they have ever received an email that they believed was a phishing email. Ask them how they identified it was phishing. Ask them if they know all of the given guidelines for identifying phishing emails. Smishing Smishing (or SMS phishing) is a variant of phishing that uses SMS text messages to lure the user into providing their personal details. The user is sent an SMS text message that either contains a link to a website, in the same way that phishing does, or it will ask the user to call a telephone number to resolve an urgent issue. The same advice can be followed for smishing as given for phishing. The user must question at all times any links that are sent from an unknown or suspicious user. It is advisable that if a user believes the message may be legitimate, to type in the domain name for the legitimate company website into their web browser, rather than following the link in the message. Users should block any numbers that they believe are suspicious to prevent any further risk of smishing from that number. Figure 5.3: Smishing. Vishing Vishing (or voice phishing) has the same aim as phishing, to obtain a user's personal details. The user receives a telephone call that could either be an automated system or could be a real person. An automated voice could speak to the user and advise them that an issue has occurred, such as there has been suspicious activity regarding their bank account. The user may then be asked to call another number, or just to simply press a digit and be directed to another automated system. This system will ask them to provide their bank account details to resolve the issue. The bank account details have then been obtained by the unauthorised user and can be used to commit a crime against the user. The automated system could be replaced by a real person who will try to do the same thing. They will try to convince the user that there has been an issue with an account they have and to provide the log-in details or PIN for the account to verify who they are so the issue can be resolved. The precaution to take for vishing is that no company will ever call you and ask you to provide any log-in details or PIN details over the telephone. They may ask you to provide other personal information, and if you are in doubt that the person on the other end of the phone is legitimate, it is always advisable to put the phone down and call the company back on a legitimate number that you may already know or can obtain. Figure 5.4: Vishing. Pharming Pharming is when an unauthorised user installs malicious code on a person's hard drive or server. The malicious code is designed to redirect a user to a fake website when they type in the address of a legitimate one. The fake website is designed to look like the legitimate one, to trick the user and make sure they are not aware that their request has been redirected. The user will then enter their personal details into the fake website, believing it is the legitimate one, and the unauthorised person will now have their personal data. A common technique used in pharming is called domain name server (DNS) cache poisoning. This technique exploits vulnerabilities in the DNS and diverts the internet traffic intended for a legitimate server toward a fake one instead. The unauthorised user needs to find a way to install the malicious code on the computer. They often hide the malicious code in an email attachment or link. When the user opens the email attachment or clicks the link, the malicious code is downloaded also. Figure 5.5: Pharming. The aim of a pharming attack is also to steal a user's personal data. A real-life example of pharming In 2007 50 different companies all over the world were subject to a pharming attack, these included PayPal, eBay, Barclays bank and American Express. Over a three-day period, hackers managed to infect over 1000 PCs a day with a malicious pharming code. When users who had been infected visited the websites of the different companies, they were redirected to a legitimate-looking version of the site that was designed to steal their personal data. The original email, containing the malicious code, was set up to look like a shocking news story. Users were encouraged to click a link in the email to find out more information. The code was downloaded when the user clicked the link. This was quite a sophisticated attack that required legitimate looking websites to be set up for a large number of companies. It is not known how much money the hackers were able to retrieve as a result. How to prevent pharming All of the guidelines to avoid being subjected to phishing are also relevant for recognising pharming. There are also several other precautions that can be taken to check for pharming attacks. These include: •Have a firewall installed and operational. A firewall monitors incoming and outgoing traffic from your computer. It checks this traffic against set criteria and will flag and stop any traffic that does not meet the criteria. A firewall could detect and block suspicious traffic, such as a malicious code trying to enter your system. •Have an anti-virus program installed that is designed to detect malicious pharming code. You need to scan your computer on a regular basis to check for any malicious code. It is advisable to set up an automatic scan on a daily basis at a time when your computer will normally be switched on. •Be aware when using public Wi-Fi connections. A hacker could look to directly access your computer and install the malicious code if you are connected to a public Wi-Fi connection. It is often advisable to use a VPN when using public Wi-Fi. This will help shield your internet activity and personal details from a hacker, making it more difficult for them to access your computer. Smishing can also be used as a form of pharming. A user is sent a link, that when they click is designed to download malware onto their mobile device. Therefore, it is advisable to have security software installed on your mobile and also scan it regularly to detect any presence of malware.

Related quizzes

Related quizzes