- At-Large - lists.icann.org

Phishing (Identity Theft): How to Spot it and What to DO About it
by Jonathan Zuck (ALAC Chair) Dec. 6, 2023

Dec. 6, 2023

*La version française est en dessous de la version anglaise.* * La versión en español está debajo de la versión en francés.* Greetings! Phishing is an online scam that tricks Internet users into providing personal information by posing as a trusted company or person. You receive an email with a link and you are taken to a website that LOOKS like an organization you trust but it's not. Last year more than 1 million unique domain names were reportedly used for phishing! We are the At-Large community [atlarge.icann.org] a group of volunteers that represent the interests of individual end users in matters of internet domain names. *Recognizing a Phishing Email* The first step is to learn to recognize a phishing email so you don't click on a bad link. Google has created a wonderful "Phishing Quiz" that helps you to identify a phishing attack and avoid it. It's available in many languages, but here it is in English/French/Spanish [customize to email language] Phishing Quiz, EN, https://atlarge.news/phishingquiz01 [atlarge.news] *Reporting a Phishing Website* If you would like to go a step further and report a phishing website, there is a new tool to make it easier to do called NetBeacon [netbeacon.org] We've created a small video that demonstrates how to use the reporting tool. NetBeacon Demo, EN: https://atlarge.news/NetBeaconDemo_EN_01 [atlarge.news] *Reporting a Compromised Site* Sometimes the scammers are clever and direct you to a page of a legitimate website, over which they have taken control. When you believe the website is OK, other than a particular page, you can report that to the website's hosting company. To identify the hosting company for a website, the new ACID tool [acidtool.com] makes it easy! Here's a short video on how to use the ACID tool to identify a website host. ACID Demo, EN, https://atlarge.news/ACIDDemo_EN_01 [atlarge.news] Together we can combat phishing to protect ourselves and others. Please let us know if this information was helpful and what additional resources you might need! Thank you. The At-Large Community ** *Objet : L’hameçonnage (usurpation d'identité) : comment le détecter et que faire ?* Bonjour ! L’hameçonnage est une escroquerie en ligne via laquelle une entité encourage les internautes à fournir leurs données personnelles en se faisant passer pour une entreprise ou une personne de confiance. Vous recevez un e-mail avec un lien vous dirigeant vers un site web qui RESSEMBLE à celui d’une organisation en laquelle vous avez confiance mais qui n’est en fait pas le site de l’organisation en question. L’année dernière, plus d’un million de noms de domaine uniques auraient été utilisés à des fins d’hameçonnage ! Nous sommes la communauté At-Large [ atlarge.icann.org] un groupe de volontaires qui représente les intérêts des utilisateurs finaux eu égard aux noms de domaine d’Internet. *Reconnaître un e-mail d’hameçonnage* La première étape est la suivante : apprendre à reconnaître un e-mail d’hameçonnage de sorte que vous ne cliquiez pas sur un lien malveillant. Google a créé un remarquable « Quiz de l’hameçonnage » qui vous aide à identifier une attaque par hameçonnage et à l’éviter. Ce quiz est disponible dans plusieurs langues, mais vous le trouverez ici en anglais/français/espagnol [personnalisé en fonction de la langue de l’e-mail]. Quiz de l’hameçonnage, FR : https://atlarge.news/phishingquiz_FR01 [atlarge.news] *Signaler un site web d’hameçonnage* Si vous souhaitez aller plus loin et signaler un site web d’hameçonnage, il existe un nouvel outil qui facilite cette démarche. Il s’appelle NetBeacon [ netbeacon.org] Nous avons conçu une brève vidéo montrant comment utiliser l’outil de signalement. Démo NetBeacon, FR : https://atlarge.news/NetBeaconDemo_FR_01 [atlarge.news] *Signaler un site compromis* Parfois, les escrocs sont malins et vous dirigent vers une page d’un site web légitime, sur laquelle ils ont pris le contrôle. Si vous estimez que le site web ne pose aucun problème mis à part une page spécifique, vous pouvez signaler cette situation à la société d'hébergement du site web. L’identification de la société d'hébergement d’un site web est facilitée par le nouvel outil ACID [acidtool.com] ! Voici une brève vidéo montrant comment utiliser l’outil ACID afin d’identifier l’hébergeur d’un site web. Démo ACID, FR : https://atlarge.news/ACIDDemo_FR_01 [atlarge.news] Ensemble, nous pouvons lutter contre l’hameçonnage afin de nous protéger et de protéger les autres. N’hésitez pas à nous faire savoir si ces informations vous ont été utiles et si vous souhaitez consulter d’autres ressources. Merci. La communauté At-Large ** *Asunto: phishing (robo de identidad) cómo detectarlo y qué HACER al respecto* ¡Hola! El phishing es una estafa en línea que engaña a los usuarios de Internet para que faciliten información personal haciéndose pasar por una empresa o persona de confianza. La persona recibe un correo electrónico con un enlace y la dirige a un sitio web que PARECE una organización en la que confía, pero no lo es. ¡Según informes, el año pasado se utilizaron más de un millón de nombres de dominio únicos para phishing! Somos la comunidad At-Large [atlarge.icann.org] un grupo de voluntarios que representa los intereses de usuarios finales individuales en cuestiones relacionadas con los nombres de dominio de Internet. *Cómo reconocer un correo electrónico de phishing* El primer paso consiste en aprender a reconocer un correo electrónico de phishing para no hacer clic en un enlace malicioso. Google ha creado una maravillosa “encuesta sobre phishing” para ayudar a las personas a identificar un ataque de phishing y cómo evitarlo. Está disponible en muchos idiomas, pero aquí está en inglés/francés/español (personalice la opción al idioma de correo electrónico] Encuesta sobre phishing, ES, https://atlarge.news/PhishingQuiz_ES01 [atlarge.news] *Cómo denunciar un sitio web de phishing* Si desea dar un paso más allá y denunciar un sitio web de phishing, existe una nueva herramienta para facilitarle la tarea denominada NetBeacon [ netbeacon.org] Hemos creado un breve video que muestra cómo usar la herramienta de informes. Demostración de NetBeacon, ES, https://atlarge.news/NetBeaconDemo_ES_01 [atlarge.news] *Cómo denunciar un sitio comprometido* A veces, los estafadores son astutos y dirigen a la persona a una página de un sitio web legítimo, sobre el cual ellos tienen el control. Cuando crea que el sitio web está bien, salvo una página específica, puede informar de ello a la compañía de alojamiento del sitio web. Para identificar la compañía de alojamiento de un sitio web, la nueva herramienta ACID [ acidtool.com] lo hace fácil. A continuación, se incluye un breve video sobre cómo usar la herramienta ACID para identificar el host de un sitio web. Demostración de ACID, ES, https://atlarge.news/ACIDDemo_ES_01 [atlarge.news] Juntos, podemos combatir el phishing para protegernos y proteger a otros. Háganos saber si esta información le ha resultado útil y qué otros recursos puede necesitar. Gracias. La comunidad At-Large

5 4

Fwd: [DC] IGF 2024 Call for Thematic Inputs Open!
by Olivier MJ Crépin-Leblond Dec. 1, 2023

Dec. 1, 2023

FYI -------- Forwarded Message -------- Subject: [DC] IGF 2024 Call for Thematic Inputs Open! Date: Fri, 1 Dec 2023 11:22:44 +0000 From: IGF Secretariat <igf(a)un.org> To: dc(a)intgovforum.org <dc(a)intgovforum.org> **** *Your Inputs Wanted <https://intgovforum.org/en/content/igf-2024-call-for-thematic-inputs> for IGF 2024 Programme * *○ ○ ○* What digital issues matter most to you? The IGF is inviting all stakeholders to share what the IGF 2024 intersessional and meeting programme should cover in the annual Call for Inputs <https://intgovforum.org/en/content/igf-2024-call-for-thematic-inputs> *○ ○ ○* Submit through the thematic inputs form*HERE <https://intgovforum.org/en/content/igf-2024-call-for-thematic-inputs>*! ** *○ ○ ○* *Deadline 31 January 2024*

1 0

Interested to Subscribe
by Ashrafur Rahman Piaus Nov. 28, 2023

Nov. 28, 2023

Interested to subscribe -- Regards, ASHRAFUR RAHMAN PIAUS Bangladesh SIG

1 0

ICANN Reception Music Performance - GEMS at ICANN 78
by Olivier MJ Crépin-Leblond Nov. 1, 2023

Nov. 1, 2023

Dear Colleagues, be sure to attend tomorrow's Host Reception by the Government of Germany, as it will include a performance by GEMS. See below and share it with your friends and colleagues. Olivier -------- Forwarded Message -------- Subject: ICANN Reception Music Performance - GEMS at ICANN 78 Date: Thu, 19 Oct 2023 23:49:47 +0200 From: Olivier MJ Crépin-Leblond <ocl(a)gih.com> To: Dear Colleagues, arrangements for GEMS Hamburg are coming along well and the time and date are confirmed! Monday October 23rd 2pm setup backline for band 3:30pm stage ready for rehearsals 5:30pm start reception 7:30-8pm end of reception and tear down stage The reception itself will be: 5:30pm - 6:00pm Jazz set 6:00pm - host welcoming speeches (German Government) Once speeches are finished - hopefully within 30 minutes, the Rock set will take over until 7:30-8:00pm. We've got a full set of instruments including an electric violin and 2 saxophones, 2 keyboards, 2 guitars, 1 Bass. A full drum set, lots of mics, lots of music stands as well as percussion (congas etc.)!!! After much searching and asking, GEMS will be able to perform at the Welcome Reception by the Government of Germany. At this point, I'd like to thank them very much because they made the rebirth of GEMS at ICANN possible - not only by offering the space/time, but by fully financing and arranging the instrument and backline rental including the live technicians. Details of the session are here: https://icann78.sched.com/event/1T4Oo/welcome-reception-by-the-government-o… See you there! Olivier

5 4

Ars Technica : Google-hosted malvertising leads to fake Keepass site that looks genuine Google-verified advertiser + legit-looking URL + valid TLS cert = convincing lookalike
by Dev Anand Teelucksingh Oct. 22, 2023

Oct. 22, 2023

I hope someone at the ICANN meeting can ask SSAC and the UASG as to what steps are being (or could be) taken to minimize this happening Dev T https://arstechnica.com/security/2023/10/google-hosted-malvertising-leads-t… “ Google has been caught hosting a malicious ad so convincing that there’s a decent chance it has managed to trick some of the more security-savvy users who encountered it. Looking at the ad, which masquerades as a pitch for the open source password manager Keepass, there’s no way to know that it’s fake. It’s on Google, after all, which claims to vet the ads it carries. Making the ruse all the more convincing, clicking on it leads to ķeepass[.]info, which, when viewed in an address bar, appears to be the genuine Keepass site. A closer look at the link, however, shows that the site is not the genuine one. In fact, ķeepass[.]info—at least when it appears in the address bar—is just an encoded way of denoting xn--eepass-vbb[.]info, which, it turns out, is pushing a malware family tracked as FakeBat. Combining the ad on Google with a website with an almost identical URL creates a near-perfect storm of deception.”

1 0

WEBCAST OCT 10 – IGF 2023 DC-CIV Evolving Regulation and its impact on Core Internet Values
by Joly MacFie Oct. 12, 2023

Oct. 12, 2023

The one IGF session I never miss! [image: ISOC LIVE] <https://isoc.live/16944%20>On Tuesday October 10 2023 at 16:20-17:50 JST (07:20-08:50 UTC) the *Dynamic Coalition on Core Internet Values <https://igf-dcad.org> *(DC-CIV) presents a round-table '*Evolving Regulation and its impact on Core Internet Values <https://intgovforum.org/en/content/igf-2023-dcad-re-envisioning-dcad-for-th…>*'. Our experts will examine new regulatory initiatives, and other policy proposals, and their impact on the Core Internet Values, which comprise the technical architectural values by which the Internet is built and evolves. *INTRODUCTION* *Sébastien Bachollet*, Chair, EURALO *SPEAKERS* *How have things changed over the years which the Pew Research Center has studied the Internet* *Lee Rainie* - Lee Rainie, Former Director, Internet and Technology research,Pew Research Center *How we have seen regulation erode the Internet Invariants over the years* *Jane Coffin*, formerly of Internet Society / Connect Humanaity *How AFRINIC, African's Regional Internet Registry was affected by local legislation in Mauritius - and what impact this could have or Regional Internet Registries* *Nii Quaynor*, Chairman of the Board, Ghana.Com *Protecting point to point messaging systems globally and why it is important?* *Ref <https://www.atlanticcouncil.org/in-depth-research-reports/report/point-to-p…>* *Iria Puyosa*, DFRLab, Atlantic Council Likely effects of some regulations which are well intended but may have unexpected or undesirable side-effects. *Vint Cerf*, Chief Internet Evangelist, Google *MODERATORS* *Sébastien Bachollet*, Chair, EURALO *Alejandro Pisanty*, UNAM, Mexico *LIVESTREAM https://livestream.com/internetsociety/dc-civ-igf2023 <https://livestream.com/internetsociety/dc-civ-igf2023>* *PARTICIPATE VIA ZOOM https://bit.ly/3RLguxA <https://bit.ly/3RLguxA>* *REAL TIME TEXT https://www.streamtext.net/player?event=CFI-IGF11 <https://www.streamtext.net/player?event=CFI-IGF11>* *TWITTER #CoreInternetValues <https://bit.ly/46HvEIj> #igf #IGF2023 @lrainie @jane_coffin @niinarkuquaynor @NSC @DFRLab @vgcerf @apisanty @SebBach @Olivier_CL* *MASTODON #CoreInternetValues <https://mastodon.social/tags/CoreInternetValues>* *SIMULCASTS* *https://youtu.be/6h3HysGuNhI <https://youtu.be/6h3HysGuNhI> *(IGF YouTube) *https://twitter.com/ISOC_Live <https://twitter.com/ISOC_Live>* *https://www.twitch.tv/isoclive <https://www.twitch.tv/isoclive>* *https://www.facebook.com/liveisoc/ <https://www.facebook.com/liveisoc/>* *ARCHIVE* *https://archive.org/details/dc-civ-igf2023 <https://archive.org/details/dc-civ-igf2023>* Permalink https://isoc.live/16944 - -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 1

IPNSIG - Governance report
by Roberto Gaetano Oct. 3, 2023

Oct. 3, 2023

Dear all, Please find below the published report by IPNSIG on Solar System Internet Governance - thanks to IPNSIG Chair Yosuke Kaneko for providing the info. It’s pretty heavy loaded (80pages) but it addresses many perspectives to achieve a common and shared network infrastructure event in space. The Multistakeholder governance approach is advocated in this report as well. The report can be retrieved through the IPNSIG website as well. Right under the banner. https://www.ipnsig.org/ For ease of use, I will share the direct link to the report and a QR code as well. https://drive.google.com/file/d/1anMcVEqXjNtk5gdo_qce28SowusXKkfi/view And a QR code, which I thought might be useful as well: [cid:C14DD8DC-4B25-410C-AC4E-51B8E26EFB85] The issue of Internet Governance in relation to IPN will also be addressed in the upcoming IPNSIG Academy event - please see https://www.ipnsig.org/events. Best regards, Roberto

2 1

WEBCAST SEP 28 – 4th GFCE Triple-I workshop in India
by Joly MacFie Sept. 28, 2023

Sept. 28, 2023

This is under way. Full programme! Morning Real Time Text is https://bit.ly/3F09nJO [image: ISOC LIVE] <https://isoc.live/16920>On *Thursday 28th September 2023* the *4th GFCE Triple-I workshop in India <https://triple-i-workshop-2023.gfce-events.com/>* will be held at the Indian Institute of Technology in Guwahati (IIT-G), and in conjunction with *InSIG 2023 <https://insig.in/>*. The *GFCE Triple-I initiative <https://thegfce.org/>* facilitates awareness raising and capacity building events in different regions of the world in order to enhance justified trust in the use of Internet and/or email in those regions through multistakeholder cooperation. This workshop is fully devoted to support the *Digital India Action plan <https://en.wikipedia.org/wiki/Digital_India>*, and aims at bringing together local stakeholders with local, national and global experts to explore together what steps to take to enhance justified trust in the use of the Internet and/or email in the region. *PROGRAMME* (All times IST = UTC+5.5) *https://triple-i-workshop-2023.gfce-events.com/page/1352843 <https://triple-i-workshop-2023.gfce-events.com/page/1352843>* *09:00 Opening by Host and Moderator: Welcome and Intent of the Day* *Satish Babu*, India School for Internet Governance *Maarten Botterman*., GFCE Triple-I moderator, *Prof. Sukumar Nandi*, Senior Professor, Department of Computer Science & Engineering, India Institute of Technology, Guwahati *09:30 Block I: Better Use of Today’s Open Internet Standards*: *Section 1: DNSSEC, TLS and DANE*: *Yazid Akanho* and *Jia Rong Low* (ICANN) *Section 2: RPKI and ROA: APNIC* – *Terry Sweetser* (APNIC) *Section 3: DMARC, DKIM, SPF* – *Gerasim Hovhannisyan* (EasyDMARC) *Section 4: IPv6: Anurag Bhatia* (Hurricane Electric) *Section 5: Current status of adoption based on internet.nl <http://internet.nl/> measuring: **Anand Raje*. *11:15 Block II part 1: Inspiration from Good Practice Actions* *Internet Resilience Index*: *Sarah Lake* (ISOC) *MANRS: * *Anand Raje* (MANRS Ambassador) *KINDNS: Jia Rong Low* (ICANN). *13:30 Block II part 2: Inspiration from Good Practice Actions* *DDOS mitigation: Octavia de Weerdt*, NBIP *IoT security: Maarten Botterman* (IGF DC IoT) *UA/IDN status overview for India: Jia-Rong Low (ICANN), Anil Jain* (NIXI/UASG) *15:15 Block III: Planning for a More Trusted Internet: Marketplace for Action* Facilitated brainstorm *16:45 Conclusions and Closing Remarks* *MODERATOR* *Maarten Botterman*, GFCE Triple I Coordinator *LIVESTREAM https://livestream.com/internetsociety/GFCE-India4 <https://livestream.com/internetsociety/GFCE-India4>* *REAL TIME TEXT* (see *ISOC.LIVE <https://isoc.live/16920>*) *TWITTER #theGFCE <https://bit.ly/theGFCE> #CyberCapacityBuilding @theGFCE* *MASTODON #theGFCE <https://mastodon.social/tags/theGFCE>* *SIMULCASTS* *https://twitter.com/ISOC_Live <https://twitter.com/ISOC_Live>* *https://www.twitch.tv/isoclive <https://www.twitch.tv/isoclive>* *https://www.facebook.com/liveisoc/ <https://www.facebook.com/liveisoc/>* (AI Captions) *ARCHIVE* *https://archive.org/details/GFCE-India4 <https://archive.org/details/GFCE-India4>* *Permalink https://isoc.live/16920 <https://isoc.live/16920>* - -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 0

WEBCAST SEP 26 – ICANN and ISOC Norway ‘Discussing Cryptography’
by Joly MacFie Sept. 26, 2023

Sept. 26, 2023

A deep dive into cryptography courtesy ISOC Norway [image: ISOC LIVE] <https://isoc.live/16912>On *Tuesday October 26 2023* at *17:00-20:00 CEST* (15:00-18:00 UTC) the *Internet Corporation for Assigned Names and Numbers <https://icann.org/>* (ICANN) and the* Internet Society Norway Chapter <https://isoc.no/> *(ISOC Norway) will hold a session '*Discussing Cryptography <https://isoc.no/event/a-session-discussing-cryptography/>*' at Rebel in Oslo. Experts in applied cryptography will discuss current practices, including key management and quantum key cryptography, and generally talk about the state of cryptography in ICT in 2023. *AGENDA* *Quantum-readiness and high function crypto* *Arne Tobias Malkenes Ødegaard*, Norwegian National Security Authority (NSM) *Automated key rollovers in the DNS* *Lars-Johan Liman*, Netnod *Real-world crypto mistakes* *Tor Erling Bjørstad*, Mnemonic *A Brief Primer on Managing the Keys to the Internet* *David Huberman*, ICANN *MODERATOR* *Steinar Grøtterød* - President, ISOC Norway *LIVESTREAM https://livestream.com/internetsociety/discussingcryptography <https://livestream.com/internetsociety/discussingcryptography>* *PARTICIPATE VIA ZOOM https://bit.ly/456aZwj <https://bit.ly/456aZwj>* *REAL TIME TEXT* (see *ISOC.LIVE*) *TWITTER #cryptography @ICANN @ISOCNorway <https://bit.ly/3taBaVt> @NSM_no @netnod @mnemonic_sec @sgrotter #encryption #encryptionday #quantumkey* *MASTODON #cryptography <https://mastodon.social/tags/cryptography> @isocnorway@mastodon.social* *SIMULCASTS* *https://twitter.com/ISOC_Live <https://twitter.com/ISOC_Live>* *https://www.twitch.tv/isoclive <https://www.twitch.tv/isoclive>* *https://www.facebook.com/liveisoc/ <https://www.facebook.com/liveisoc/>* *ARCHIVE* *https://archive.org/details/discussingcryptography <https://archive.org/details/discussingcryptography>* Permalink https://isoc.live/16912 -- -------------------------------------- Joly MacFie +12185659365 -------------------------------------- -

1 0

Global IGF sessions
by Maureen Hilyard Sept. 25, 2023

Sept. 25, 2023

Hi everyone If you are going to be participating as a presenter in a session (in person or virtually) at the Global IGF in Kyoto from 8 - 12 October, and would like to have your session promoted at the At-Large/ICANN Booth. please upload your session information on the At-Large IGF wiki space <https://community.icann.org/pages/resumedraft.action?draftId=244946648&draf…> Contact staff(a)atlarge.icann.org if you need help to upload your information (please include the date, time and room number of your session). Aris and I (and anyone else is welcome) will be on site at the booth each day (early in the day - at a time to be determined) as soon as we get information from At-Large participants who are going to be involved in this IGF event either in person or virtually. Please get in touch with us. Maureen *Maureen Hilyard* Development Consultant Cook Islands Internet Action Group *Mobile (Cook Islands) *+682 54641 *Mobile (NZ) *+64 2108192283 *hilyard(a)oyster.net.ck <hilyard(a)oyster.net.ck>* *maureen.hilyard(a)gmail.com <maureen.hilyard(a)gmail.com> * *Linkedin <https://www.linkedin.com/in/maureen-hilyard-consultant/?original_referer=>* PO Box 156, Avarua, Rarotonga COOK ISLANDS

1 0