As Threads, a new social media platform, gathers momentum, what are the dangers of this social media platform? cyber security experts explore how the platform might be a target for subversion by cyber criminals looking to prey on early adopters.
Created by Meta, the owner of Instagram and Facebook, Threads has been described as a two-in-one social media platform. It has all the photo and video sharing capabilities of Instagram, in addition to the text-based interactions that make Twitter so popular. It's the best of both worlds.
While there has been a buzz surrounding Threads since its release, with many users flocking to try it, it is still too early to predict how this particular platform will pan out.
Regardless of its staying power, Threads (and all other social media platforms for that matter) present a multitude of risks to users. From influencer scams to data privacy issues are just a few of the possible social media risks associated with Threads. Here are some thoughts by members of the International Cyber Expo Advisory Council on how to keep your guard up in relation to the use of new and upcoming, and therefore unfamiliar, platforms.
Being aware of malicious tactics
Scams have become a big danger of social media in recent years. Lisa Ventura MBE, Member of the International Cyber Expo Advisory Council and Founder of Cyber Security Unity, said: ‘Scammers will often adapt their tactics to exploit new platforms and technologies, and doing so on Threads will be no exception, so it is possible that Threads will become a target very quickly.’
Considering Threads is so new, it is possible that users may find it difficult to determine the validity of profiles and messages, at least in these early stages.
According to Lisa, some of these scams and attacks ‘could be done via phishing with the use of notifications or messages that appear to come from Threads, asking users for sensitive information like usernames, passwords, or financial details. Fake profiles or accounts like on other social media platforms could also be an issue, as they will pertain to be from legitimate users, influencers, or other customer support representatives to gain trust and manipulate users into sharing personal information or engaging in fraudulent activities.’
Social engineering such as the above is a prevalent entry point for threat actors in social media, and beyond. In particular, cybercriminals will seek to exploit the users learning to use Threads. This is why it is essential to be aware of possible social engineering and phishing attacks, especially when using a new platform.
Old advice is still good advice
Simon Newman, Member of the International Cyber Expo Advisory Council and CEO of the Cyber Resilience Centre for London, gave some practical tips for users when on social media or just online: ‘Cyber criminals are becoming increasingly sophisticated, making it harder to spot scams. However, you should look out for several things that can help you avoid falling victim. For example, a promise that sounds too good to be true – such as a guaranteed return on investment. You should also be wary of celebrities being used in adverts to front these types of schemes.’
Another social media risk that is becoming more prevalent is deep fakes.
He commented, ‘the rise of ‘deep fake’, where Artificial Intelligence is used to create fake video, audio and photography is becoming harder to spot as the technology improves.’
On social media platforms, deep fakes are becoming increasingly popular, and ever more convincing. A video of an influencer or celebrity convincing their audience to peddle a certain scheme or scam is likely to become par for the course, because as Simon explained, ‘criminals are very good at using people we trust to encourage others to part with their money. Many well-known TV personalities have been used without their permission to advertise a wide range of scams.’
Exploitation through impersonation
It is not just celebrities and influencers that cybercriminals are likely to impersonate on social media. According to Lisa Ventura, ‘another main way that scammers could target users on Threads is by impersonating platform officials, moderators or popular figures within the community. They may try to exploit users by claiming to offer special privileges, promotions, or exclusive content in exchange for personal information, payment or other deceptive means or actions.’
For these reasons, it is extremely important to be on your guard against possible scams and social engineering attacks on platforms like Threads, Instagram, Facebook, and Twitter.
Yet, cybercrime is not the only thing to be wary of when signing up for a new social media platform. Data privacy and collection is an enormous risk of social media use. While we are still learning about Threads and all the data that it collects, we do have information on Instagram data usage.
Lisa Ventura explained: ‘Instagram, like many other social networks, collects data from its users to build detailed profiles that help tailor content, advertisements, and recommendations. Users will often provide information via data which is shared when creating an Instagram account or creating a profile, and will often include sensitive personal details such as name, username, email address, phone number, profile and photo. Users will also often provide information willingly such as age, gender, location, and interests, without realising the impact this will have, as Instagram will utilise this information to personalise the user experience and send targeted ads.’
Think about your data
While personalised ads can be great and helpful, they also present some concern when it comes to data privacy. Social media apps will track all activity of users and use this data to cater the experience to individuals. According to Lisa, the activity tracked will include ‘the content users post, the accounts they follow, the posts they like and comment on, and the stories they view.’
For you
Be part of something bigger, join BCS, The Chartered Institute for IT.
But it is not just social media activities that a platform like Instagram will track. According to Lisa once again, ‘Instagram collects data from external sources to enhance its understanding of users. This data will often come from third-party websites and apps that have integrated Instagram functionalities... Additionally, Instagram may receive information from data brokers and other partners who provide demographic, behavioural, or interest-based data.’
While many users agree to the privacy policies of the various social media platforms they use, many do not know the extent to which these platforms collect information on users.
Lisa said, ‘it is generally understood that social networks like Instagram primarily exist to serve targeted content and advertisements, and thus, data collection is an integral part of their business models. In other words, each end user is the product.’
A significant problem with this is that users typically have very little control of how social media platforms collect their data. There are some actions, however, that users can take to mitigate any consequences that come with this data collection. Lisa suggests that users review their privacy settings, limit the amount of data that is shared, opt out of personalised ads, and to regularly review privacy policies to remain abreast of any changes.
There are always actions that can be taken to protect yourself, as the above advice by the International Cyber Expo Advisory Council members suggests. However, in this age of an ever-increasing online presence, it is incredibly important that individuals weigh the benefits and disadvantages of signing up for Threads or any other social media platform. It can be difficult to protect yourself against the dangers of social media like phishing, scams, and data privacy violations, and so it is up to each person to decide whether these risks are worth taking.
