Cómo proteger tus cuentas de correo electrónico de hackers

Les escribo para alertarlos sobre un nuevo riesgo de seguridad que afecta a las cuentas de correo electrónico de Hotmail. En los últimos meses, he recibido varias consultas de personas que han sido víctimas de ataques a sus cuentas de Hotmail. Los hackers han descubierto cómo ingresar a estas cuentas utilizando técnicas como phishing, malware o fuerza bruta.

Si tienen una cuenta de Hotmail que está vinculada a su banco, sitio web, redes sociales u otras plataformas importantes, les recomiendo que la cambien lo antes posible. Gmail es una buena opción alternativa, ya que ofrece más almacenamiento, filtros de spam más avanzados y una interfaz de usuario más moderna.

El correo electrónico es una herramienta esencial para la comunicación y el trabajo en la actualidad. Sin embargo, también es un objetivo frecuente de los ciberataques. Los hackers pueden utilizar las cuentas de correo electrónico para robar información personal, difundir malware o realizar fraudes.

Proteger tus cuentas de correo electrónico es crucial para garantizar la seguridad de tu información personal y profesional. Aquí hay algunas medidas que puedes tomar para proteger tus cuentas de correo electrónico:

  1. Utiliza una contraseña segura.:
    • Utiliza contraseñas largas y complejas que incluyan letras mayúsculas, minúsculas, números y caracteres especiales.
    • Evita contraseñas obvias como “123456” o “password”.
    • No utilices información personal fácilmente disponible, como tu nombre o fecha de nacimiento, en tus contraseñas.
    • Una contraseña segura debe tener al menos 12 caracteres de longitud e incluir una combinación de letras, números y símbolos. No utilices contraseñas que sean fáciles de adivinar, como tu nombre, fecha de nacimiento o número de teléfono.
  2. Autenticación de dos factores (2FA):
    • Habilita la autenticación de dos factores siempre que sea posible. Esto añade una capa adicional de seguridad, ya que requiere un segundo método de verificación, como un código enviado a tu teléfono móvil, además de la contraseña.
    • La verificación en dos pasos agrega un nivel adicional de seguridad a tu cuenta al requerir que introduzcas un código de seguridad adicional además de tu contraseña.
    • Actualiza tu software de correo electrónico y tu sistema operativo con regularidad.
    • Los proveedores de software suelen lanzar actualizaciones para corregir vulnerabilidades de seguridad. Es importante instalar estas actualizaciones lo antes posible para protegerte de los ataques.
  3. Mantén tu software actualizado:
    • Actualiza regularmente tu cliente de correo electrónico y sistema operativo, ya que las actualizaciones a menudo incluyen parches de seguridad importantes.
  4. Phishing y correos electrónicos sospechosos:
    • Ten cuidado al abrir correos electrónicos de remitentes desconocidos o sospechosos.
    • Ten cuidado con los correos electrónicos sospechosos. 
    • No hagas clic en enlaces ni descargues archivos adjuntos de correos electrónicos que parezcan sospechosos.
    • Si recibes un correo electrónico que solicita información personal o financiera, verifica la autenticidad antes de responder.
    • Los correos electrónicos de phishing están diseñados para engañarte para que proporciones información personal o financiera. Si recibes un correo electrónico que parece sospechoso, no hagas clic en ningún enlace ni abras ningún archivo adjunto.
  5. Protección antivirus y antimalware:
    • Instala un software antivirus y antimalware actualizado en tu computadora para protegerte contra amenazas en línea.
  6. Sesiones seguras:
    • Siempre cierra la sesión de tu correo electrónico cuando hayas terminado de usarlo, especialmente en dispositivos compartidos o públicos.
    • Utiliza conexiones seguras (HTTPS) para acceder a tu correo electrónico.
  7. Contraseñas únicas para cada servicio:
    • No utilices la misma contraseña para todas tus cuentas. Utiliza contraseñas diferentes para cada servicio en línea.
  8. Monitoriza tu cuenta:
    • Regularmente revisa la actividad de tu cuenta de correo electrónico en busca de actividades inusuales o no autorizadas.
    • Si notas alguna actividad sospechosa, como cambios en tus contraseñas o direcciones de correo electrónico, ponte en contacto con tu proveedor de correo electrónico de inmediato.
  9. Cuidado con las respuestas a preguntas de seguridad:
    • Evita utilizar información fácilmente accesible o adivinable para las preguntas de seguridad de tu cuenta.
  10. Respaldo de datos:
    • Realiza copias de seguridad periódicas de tus correos electrónicos importantes. Esto te ayudará a recuperar tu información en caso de que ocurra un problema con tu cuenta.
  11. Educación en ciberseguridad:
    • Mantente informado sobre las últimas amenazas de seguridad en línea y las mejores prácticas de ciberseguridad.
  12. Utiliza un proveedor de correo electrónico seguro. Algunos proveedores de correo electrónico ofrecen más seguridad que otros. Investiga las opciones disponibles antes de elegir un proveedor.
  13. Utiliza una dirección de correo electrónico diferente para cada servicio. Esto dificultará que los hackers accedan a todas tus cuentas si una de ellas se ve comprometida.

Con estas recomendaciones, puedes ayudar a proteger tus cuentas de correo electrónico de los ciberataques y y reducir el riesgo de ser víctima de ataques cibernéticos.

Do you need an SEO?

SEO is an acronym for “search engine optimization” or “search engine optimizer.” Deciding to hire an SEO is a big decision that can potentially improve your site and save time, but you can also risk damage to your site and reputation. Make sure to research the potential advantages as well as the damage that an irresponsible SEO can do to your site. Many SEOs and other agencies and consultants provide useful services for website owners, including:

  • Review of your site content or structure
  • Technical advice on website development: for example, hosting, redirects, error pages, use of JavaScript
  • Content development
  • Management of online business development campaigns
  • Keyword research
  • SEO training
  • Expertise in specific markets and geographies.

Advertising with Google won’t have any effect on your site’s presence in our search results. Google never accepts money to include or rank sites in our search results, and it costs nothing to appear in our organic search results. Resources such as Search Console, the official Google Search Central blog, and our discussion forum can provide you with a great deal of information about how to optimize your site for organic search.

Getting started with SEO

If you run a small local business, you can probably do much of the work yourself. Here are some good resources:

  • Check out our video series on building an online presence for your business.
  • Search Essentials
  • How Google crawls, indexes, and serves the web.
  • The SEO starter guide describes much of what your SEO will do for you. Although you don’t need to know this guide well yourself if you’re hiring a professional to do the work for you, it is useful to be familiar with these techniques, so that you can be aware if an SEO wants to use a technique that is not recommended or, worse, strongly discouraged.

Remember that it will take time for you to see results: typically from four months to a year from the time you begin making changes until you start to see the benefits.

If you think that you still need extra help from a professional, continue reading about how to choose an SEO.

Choosing an SEO

If you’re thinking about hiring an SEO, the earlier the better. A great time to hire is when you’re considering a site redesign, or planning to launch a new site. That way, you and your SEO can ensure that your site is designed to be search engine-friendly from the bottom up. However, a good SEO can also help improve an existing site.

  1. Be committed to implementing the recommended changes. Making the changes recommended by an SEO takes time and effort; if you aren’t going to take the time to make these changes, it’s not worthwhile hiring a professional.
  2. Interview your potential SEO. Some useful questions to ask an SEO include:
    • Can you show me examples of your previous work and share some success stories?
    • Do you follow the Google Search Essentials?
    • Do you offer any online marketing services or advice to complement your organic search business?
    • What kind of results do you expect to see, and in what timeframe? How do you measure your success?
    • What’s your experience in my industry?
    • What’s your experience in my country/city?
    • What’s your experience developing international sites?
    • What are your most important SEO techniques?
    • How long have you been in business?
    • How can I expect to communicate with you? Will you share with me all the changes you make to my site, and provide detailed information about your recommendations and the reasoning behind them?
    • See if the SEO is interested in you and your business. If they’re not interested, find someone who is. Your SEO should ask questions such as:
      • What makes your business or service unique and valuable to customers?
      • Who are your customers?
      • How does your business make money, and how can search results help?
      • What other advertising channels are you using?
      • Who are your competitors?
  3. Check your SEO’s business references. Ask past clients if they felt that this SEO provided useful service, was easy to work with, and produced positive results.
  4. Ask for a technical and search audit for your site to learn what they think needs to be done, why, and what the expected outcome should be. You’ll probably have to pay for this. You will probably have to give them read-only access to your site on Search Console. (At this stage, don’t grant them write access.) Your prospective SEO should be able to give you realistic estimates of improvement, and an estimate of the work involved. If they guarantee you that their changes will give you first place in search results, find someone else.
  5. Decide if you want to hire.

Precautions

While SEOs can provide clients with valuable services, some unethical SEOs have given the industry a black eye by using overly aggressive marketing efforts and attempting to manipulate search engine results in unfair ways. Practices that violate our spam policies may result in a negative adjustment of your site’s presence in Google, or even the removal of your site from our index.

When your SEO comes up with a set of recommendations for your site, ask them to corroborate these recommendations with a trusted source, such as a Search Console help page, Google Search Central blog entry, or Google-sanctioned response in the forum.

Here are some things to consider:

  • One common scam is the creation of “shadow” domains that funnel users to a site by using deceptive redirects. These shadow domains are often owned by the SEO who claims to be working on a client’s behalf. However, if the relationship sours, the SEO may point the domain to a different site, or even to a competitor’s domain. If that happens, the client has paid to develop a competing site owned entirely by the SEO.
  • Another illicit practice is to place “doorway” pages loaded with keywords on the client’s site somewhere. The SEO promises this will make the page more relevant for more queries. This is inherently false since individual pages are rarely relevant for a wide range of keywords. More insidious, however, is that these doorway pages often contain hidden links to the SEO’s other clients as well. Such doorway pages drain away the link popularity of a site and route it to the SEO and its other clients, which may include sites with unsavory or illegal content.
  • Finally, avoid getting involved in link schemes, such as buying links from other sites to increase your ranking. This is against Google’s spam policies and can result in a manual action against some or all of your site, which will negatively affect your site ranking.

If you feel that you were deceived by an SEO in some way, you may want to report it.

In the United States, the Federal Trade Commission (FTC) handles complaints about deceptive or unfair business practices. To file a complaint, visit: https://www.ftc.gov/ and click on “File a Complaint Online,” call 1-877-FTC-HELP, or write to:

Federal Trade Commission
CRC-240
Washington, D.C. 20580

If your complaint is against a company in a country other than the United States, file it at https://www.econsumer.gov/.

Helpful guidelines

  • Be wary of SEO firms and web consultants or agencies that email you out of the blue.Amazingly, we get these spam emails too:“Dear google.com,
    I visited your website and noticed that you are not listed in most of the major search engines and directories…”
    Reserve the same skepticism for unsolicited email about search engines as you do for “burn fat at night” diet pills or requests to help transfer funds from deposed dictators.
  • No one can guarantee a #1 ranking on Google.Beware of SEOs that claim to guarantee rankings, allege a “special relationship” with Google, or advertise a “priority submit” to Google. There is no priority submit for Google. In fact, the only way to submit a site to Google directly is through the URL Inspection Tool or by submitting a Sitemap, and you can do this yourself.
  • Be careful if a company is secretive or won’t clearly explain what they intend to do.Ask for explanations if something is unclear. If an SEO creates deceptive or misleading content on your behalf, such as doorway pages or “throwaway” domains, your site could be removed entirely from Google’s index. Ultimately, you are responsible for the actions of any companies you hire, so it’s best to be sure you know exactly how they intend to “help” you. If an SEO has FTP access to your server, they should be willing to explain all the changes they are making to your site.
  • You should never have to link to an SEO.Avoid SEOs that talk about link popularity schemes or submitting your site to thousands of search engines. These are typically useless exercises that don’t affect your ranking in the results of the major search engines—at least, not in a way you would likely consider to be positive.
  • Choose wisely.While you consider whether to go with an SEO, you may want to do some research on the industry. Google is one way to do that, of course. While Google doesn’t comment on specific companies, we’ve encountered firms calling themselves SEOs who follow practices that are clearly beyond the pale of accepted business behavior. Be careful.
  • Be sure to understand where the money goes.While Google never sells better ranking in our search results, several other search engines combine pay-per-click or pay-for-inclusion results with their regular web search results. Some SEOs will promise to rank you highly in search engines, but place you in the advertising section rather than in the search results. A few SEOs will even change their bid prices in real time to create the illusion that they “control” other search engines and can place themselves in the slot of their choice. This scam doesn’t work with Google because our advertising is clearly labeled and separated from our search results, but be sure to ask any SEO you’re considering which fees go toward permanent inclusion and which apply toward temporary advertising.
  • What are some other things to look out for?There are a few warning signs that you may be dealing with a rogue SEO. It’s far from a comprehensive list, so if you have any doubts, trust your instincts:
    • Owns shadow domains
    • Puts links to their other clients on doorway pages
    • Offers to sell keywords in the address bar
    • Doesn’t distinguish between actual search results and ads that appear on search results pages
    • Guarantees ranking, but only on obscure, long keyword phrases you would get anyway
    • Operates with multiple aliases or falsified WHOIS info
    • Gets traffic from “fake” search engines, spyware, or scumware
    • Has had domains removed from Google’s index or is not itself listed in Google
Skip to content