Since the collapse of the Afghan government and the takeover by Taliban forces, many ordinary Afghans have been the target of some unscrupulous hackers trying to make money out of their desperation.
This article by Reuters highlights just one of the ways that hackers are using their techniques to achieve this and gain access to people's devices.
Top Tips - Staying safe online
The SEPAR team have put together a few tips to stay safe online in these testing times:
Take some time to understand the digital landscape in Afghanistan
Updated digital risks in Afghanistan
Active and reliable mobile companies
Active and reliable internet service providers
Alternative communication methods
Digital Situational Awareness
On arrival, get acquainted with the digital environment and learn from the locals on the digital do’s and don'ts.
If not required for use, avoid exposing you equipment
Habituate access control practices ie from mobile phone, laptop to website passwords
Make it strong
Tidy up your digital environment, from desktops to social media profiles.
Ensure you have installed applications to help scan, identify and mitigate risks. This includes anti-malware and firewalls
Manage your digital personal and professional profiles before going in. Based on your personal and professional risk levels, evaluate the risk exposure from your digital profile
Before going to the country, identify the data and information at hand. Classify their sensitivity.
Sensitive data or information should be accorded the safety management practices they deserve.
Avoid having sensitive at hand. If possible, access it remotely or utilize encryption methods to secure the data in storage drives
Employ backup practices where possible.
Use secure communications where possible
SMS: Avoid if possible. It is not secure. If internet is disconnected, use Silence App to send secure encrypted SMS
Internet: Use secure apps to communicate ie Signal, WhatsApp, Wire
If sending sensitive information, even via secure apps, enable “disappearing” messages or “secret” chats to erase messages after a set period of time.
For emails, avoid sensitive subject titles. The body of the email might be secure, but the subject might not be encrypted during transmission.
Use a VPN where possible.
For further information on digital security in Afghanistan or other hostile locations please contact the team
Alternatively SEPAR International HEAT/HEFAT Courses cover modules on digital security. For more information on what courses are available in which countries please click here
**Please note given the changing circumstances in Afghanistan some information may be subject to change. SEPAR International makes no claim as to the accuracy of the information or to the validity of the assessments and conclusions contained within this document.