Norton Article Library

Introduction

Fast and easy, instant messaging is a convenient way to communicate. It's also evolving into a sophisticated, multi-dimensional technology that is attracting cybercriminals. Protecting yourself requires a combination of common sense, vigilance, and a few key security tools.

IM vulnerabilities

The things that make instant messaging useful also make it risky.

• Most IM tools offer a method for sending and receiving file attachments—a major point of vulnerability. IM attachments, just like email attachments, can carry destructive viruses, Trojan horses, and worms.
  
  
• There's also a new breed of IM worms. To your friends and colleagues, it appears as though they're receiving a message from you. In reality, the message is generated by a worm, and may contain a link to a Web site that automatically downloads another bit of malicious code.
  
  
• Because it's so easy to create an IM identity, instant messaging is also a ripe medium for online scams, identity theft, and other predatory behavior. Cybercriminals use all sorts of devious methods—including hacking into accounts and impersonating legitimate users—to gain trust and elicit information from unwitting IM users.
  
  
• Finally, there's spim. Spim—the name given spam sent over IM—is on the rise. Some spim can contain offensive language or links to Web sites with content inappropriate for children.
  
  

Evolving safeguards

Most free instant messaging tools have minimal security features. Other than basic password protection, IM security is usually limited to allowed and ignore lists, and perhaps some spim filters. IM service providers continue to improve their products' security capabilities, so download patches and updates whenever they become available. Despite these efforts, however, plenty of instant messaging risks remain.

Common sense and caution

The following security tips go a long way toward making IM more safe.

• Use a strong password and change it often. To learn more about creating and maintaining strong passwords, read our password security article.
  
  
• Keep your IM , operating system, and security software up to date.
  
  
• Don't send credit card numbers, Social Security Numbers, or any other vital information over IM.
  
  
• Don't open attachments or click on Web links sent by someone you don't know.
  
  
• Even if you know who sent a Web link, hover over the link with your cursor before clicking it to check whether the Web address seems legitimate.
  
  
• Don't send files over IM unless you have no other alternative, and never send files containing information you want to keep private.
  
  
• Be wary of odd behavior. If a person on your allowed list is sending strange messages, terminate your IM session and contact them over the phone or on email.
  
  
• Protect your computer and data with Norton AntiVirus. Anti-virus scans IM attachments for all known virus, Trojan horses, worms, and other blended threats.
  
  
• Take advantage of Norton 360, which delivers proven, automatic protection for everything you care about, providing automatic and transparent protection for viruses, spyware, fraudulent Web sites, phishing scams, and the latest online threats.
  
  
• Take advantage of third-party encryption and authentication tools—but only if they've received solid reviews.
  
  

Helping your kids

If you're a parent, not only must you educate yourself about the dangers of instant messaging, you also have to make sure your children understand and respond to its risks as well. Taking these steps will help.

• Have open conversations with your children about safety, warning them specifically about the dangers of talking with strangers over IM.
  
  
• Make sure your family's IM profiles do not contain personal information—especially phone numbers, addresses, photos, or anything that could connect your children with their IM identities.
  
  
• Show interest in your children's online life. Get to know their online friends the same way you'd get to know their neighborhood friends.
  
  
• Know your children's IM member names and the names of their online pals.
  
  

Conclusion

As you join the ranks of IM users, take its risks seriously. Protect yourself and your family with knowledge, vigilance, and the best security software you can find.