Tuesday, March 31, 2020

Learn examples of Cyber scams so you can protect yourself - Part 2

Hi mate, here are my tips for staying safe. Apologies for some beginner tips. Please kindly share your tips too. Thank you. I wish you and your family safety from Coronaviruses.

NBN internet cut off scam - ask you to pay a fee so you can get internet back

Problem with computer scam - ask you to pay a fee to fix your computer

Do not open suspicious texts, pop-up windows or emails—delete them. If unsure, verify the identity of the  contact through an independent source such as a phone book or online search. Don’t use the contact  details provided in the message sent to you.

Never send money or give your personal details to someone you have only met online. Watch out if an online admirer asks to communicate outside the dating website or social media platform after only a few ‘contacts’ or conversations—it could be a scammer. Do an image search of your admirer to help determine if they really are who they say they are. You can use image search services such as Google or TinEye. Be cautious when sharing intimate pictures or videos online.

Scammers are known to blackmail their targets using pictures or video of you that you don’t want anyone else to see.

Be alert to the fact that scams exist. When dealing with uninvited contacts from people or businesses,  whether it’s over the phone, by mail, email, in person or on a social networking site, always consider the  possibility that the approach may be a scam. Remember, if it looks too good to be true, it probably is.

Know who you’re dealing with. If you’ve only ever met someone online or are unsure of the legitimacy of a  business, take some time to do a bit more research. Do a Google image search on photos or search the  internet for others who may have had dealings with them.

Oversharing on social media

Nowadays, it's commonplace for people to share their every thought on social media. However, less is more is a good rule of thumb to keep in mind before posting anything—at least from a cybersecurity perspective. Hackers are always scouring social platforms, just waiting for you to reveal information that might be part of your password. "Phishing and spear phishing attacks use social media-derived information to make their attacks more effective," says Michael Kapono, digital manager at Tetra Defense. And for other ways to ensure your accounts are secure, check out The Single Best Way to Store Your Passwords Safely Online is on paper in a safe. You can always wait to reach home to enter your password.

Shopping on websites you're unfamiliar with"Shopping on a fake website could result in your personal or financial information being stolen or your device becoming infected with a virus or malware," warns security site ASecureLife.

Before you make a purchase on a site you haven't used before Messier suggests you make sure " the site you're visiting is legitimate—look for https and a lock symbol in the address bar, so you know any information you're submitting is secure." As an additional step, look up the name of the site on Whois to make sure that it's registered to a legitimate business.

Saving your information on shared computers

There's a reason why web browsers and websites always warn you not to save your login information on shared computers. Even if you're only doing so on a work computer used exclusively by you during the workday, you never know who has access to that computer after you've gone home for the evening. Plus, you have no idea how secure the WiFi network at your workplace is; for all you know, it could require little to no effort to hack it!

Accepting friend requests from strangers

According to the ACCC, scammers will sometimes set up fake profiles on social media sites in order to get to their victims. So, how does this work? A con artist can use a social media site to their advantage by luring someone into a fake relationship and then convincing that person to send them money.

Other criminals will simply collect information available on your profile and messaging with you until they have enough to either hack your accounts or steal your identity.

Sending photos of your credit card via email or text

Never, ever send a picture of your credit card somewhere where hackers can access it. If you absolutely have to give someone your account information, then do so over the phone; otherwise, meet up in person so you can avoid the possibility of a scammer accessing your information. Additional reporting by Allie Hogan.

Having online relationships with strangers

"By and large, the number one way people get targeted by scammers is looking for love online," says private investigator Daniel McBride. "It often begins with simple conversations on some platform and once the scammers see an opening they begin working their mark. Eventually, they might proposition a meet-up that requires travel expenses, share an elaborate and false tale that requires monetary assistance, and so on, to get their victim primed to allocate finances."McBride says he has seen monetary losses up to $100,000, and that most victims have been females between the ages of 30-50 years old. If you want to date safely online, "verify you're engaging with the person or organization you believe you're interacting with," he says. "Cross-reference phone numbers, addresses, and any other pertinent information that's relevant for your budding relationship."

If you've received an email claiming that you're about to inherit some serious money from a relative you've never heard of, or clicked on a pop-up that says you've won a big prize, you're in the company of countless others targeted by internet scams.

Dating and romance scams

How the scam works

Dating and romance scammers create fake profiles on legitimate dating websites, mobile apps or social media platforms like Facebook using photos and identities often stolen from other people. They use these profiles to try to enter into a relationship with you that can run for months or even years, just so they can get a hold of your money.

The scammer will ask for money to help with illness, injury, travel costs or a family crisis. They are heartless and will lie to you to take advantage of your better nature.

Scammers will usually be overseas and have an excuse for why they are there, such as being on military service, working as an engineer or caring for a friend or relative. They are never who they say they are and some cunning scammers may even send small gifts. This is only part of their grand plan to get even more money out of you later.

Investment scams

How the scam works

Investment scams come in many forms including cryptocurrency purchase, binary options trading, business ventures, superannuation schemes, managed funds and the sale or purchase of shares or property. Scammers dress up ‘opportunities’ with professional looking brochures and websites to mask their fraudulent operations.

They often begin with a phone call or email out of the blue from a scammer offering a ‘not-to-be-missed’, ‘high return’ or ‘guaranteed’ opportunity.  The scammer usually operates from overseas, and will not have an Australian Financial Services licence.

Computer prediction software scams promise to accurately predict stock market movements, the results of horse races, sports events or lotteries. They are simply a form of gambling disguised as investments. Most of the schemes or programs do not work and buyers cannot get their money back. In many cases the supplier simply disappears.

Superannuation scams offer to give you early access to your super fund, often through a self-managed super fund or for a fee. The scammer may ask you to agree to a story to allow the early release of your money and then, acting as your financial adviser, they will deceive your superannuation company into paying out your super benefits directly to them. Once they have your money, the scammer may take large ‘fees’ or leave you with nothing at all.

Protect yourself

Don’t let anyone pressure you into making decisions about your money or investments—especially if the offer has come out of the blue. Before parting with your money, do your own research on the investment company and check out www.moneysmart.gov.au to see if they have an Australian Financial Services Licence. Ask yourself: if a stranger knew a secret to making money, why would they share it?

If you are under retirement age, watch out for offers promoting easy access to your preserved superannuation benefits. If you illegally access your super early, you may face penalties under taxation law.

Online shopping, classifieds and auction scams:

Scammers love the ease of online shopping too.

How the scam works

Consumers and businesses are increasingly buying and selling online.Unfortunately, scammers like to shop online for victims.Scammers can create very convincing fake retailer websites that look like the real thing, including on social media like Facebook.The biggest tip-off that a retail website is a scam is the method of payment – be wary if you are asked to pay by wire transfer or other unusual methods.An online auction scam involves a scammer claiming that you have a second chance to buy an item that you placed a bid on because the winner has pulled out. The scammer will ask you to pay outside of the auction site’s secure payment facility; if you do, your money will be lost you won’t get what you paid for and the auction site will not be able to help you.The online classifieds scam is a common scam targeting both buyers and sellers. Buyers should beware of scammers who post fake ads on legitimate classifieds websites. The ads can be for anything from rental properties to pets, used cars or cameras, and will often be cheaply priced. If you show interest in the item, the scammer may claim that they are travelling or have moved overseas and that an agent will deliver the goods following receipt of payment. Following payment you will not receive the goods or be able to contact the seller.

For sellers, a classified scammer will respond to your advertisement with a generous offer. If you accept it, the scammer will pay by cheque or money order. However, the amount that you receive is for more than the agreed price. In this overpayment scam, the ‘buyer’ may tell you that this was a mistake and will ask you to refund the excess amount by money transfer. The scammer hopes that you will transfer the money before you discover that their cheque has bounced or that the money order was phony. You will lose the money, as well as the item you sold if you have already sent it.

Protect yourself

Find out exactly who you are dealing with. If it is an Australian retailer, you are in a much better position to sort out the problem if something goes wrong.

Check if the seller is reputable, has a refund policy and complaint handling services.

Avoid any arrangement that asks for up-front payment via money order, wire transfer, international funds transfer, pre-loaded card or electronic currency. It is rare to recover money sent this way. Never send money or give credit card or online account details to anyone you don’t know or trust and never by email.

Only pay via the website’s secure payment method—look for a web address starting with ‘https’ and a closed padlock symbol.

Never accept a cheque or money order for payment that is more than what you agreed upon or forward money on for anyone.

Scams targeting computers and mobile devices

Remember: anything that connects to the internet is vulnerable.How the scam works

Remote access scammers call you on the phone claiming that your computer is infected by viruses. If you follow their instructions, it will allow them to access and control your computer where they can steal information or install malware. They may also try to convince you to purchase ‘anti-virus’ software, which usually turns out to be overpriced or freely available on the internet.

Protect yourself

Be wary of free downloads offering music, games, movies and access to adult sites. They may install harmful programs without you knowing.

Keep your office networks, computers, and mobile devices secure.Update your security software, change passwords and back up your data regularly. Store your backups offsite and offline.

www.staysmartonline.gov.au explains how to back-up your data and secure your mobile devices. • Do not open attachments or click on links in emails or social media messages you’ve received from strangers—just press delete.

All scams have the potential for identity theft. Protecting yourself from scams also means keeping your personal information safe.Identity theft is a threat in every scam

Most people associate scams with attempts to trick you out of your money. However, your information is also valuable to scammers.

Scammers steal your personal details to commit fraudulent activities like making unauthorised purchases on your credit card, or using your identity to open bank or telephone accounts. They might take out loans or carry out other illegal business under your name.

They may even sell your information to other scammers for further illegal use.

Having your identity stolen can be both financially and emotionally devastating. It can take months to reclaim your identity and the impact of having it stolen can last for years.

As part of any scam—Scammers often ask for personal information in other scams. In a lottery scam, scammers often ask for a driver’s licence or passport to ‘prove your identity before they can release the prize money’. In dating and romance scams they might ask for information ‘to sponsor their visa application to visit you in Australia’.

Remember: Giving away personal information to a scammer can be just as bad as giving away money. Keep your personal details to yourself and keep them secure.

Protect yourself

Think twice about what you say and do in an online environment

Be careful sharing information about yourself online, including social media, blogs and other online forums. Stop and think before filling in surveys, entering competitions, clicking on links or attachments, or even ‘befriending’, ‘liking’ or ‘sharing’ something online.

Beware of any request for your details or money

Scammers will try to trick you into handing over your data by using the names of well-known companies or government departments.

If you think it’s a scam, don’t respond. Use the phone book or an online search to check the organisation’s contact details. Never use the contact details provided in the original request.If you have provided personal identification information to scammers, contact IDCARE on 1300 432 273.Online scamsScammers lurk within the anonymous environment of the internet.

Email is a favoured scam delivery method, providing a cheap and simple way to communicate on a large scale. Phishing emails that ‘fish’ for your personal information are the most common email scam type.

Social networking platforms, dating sites and online forums allow scammers to ‘befriend’ you and enter into your personal life to access your personal details, which can then be used against you or your family and friends.

Online shopping, classifieds and auction sites are used by scammers to target buyers and sellers, with initial contact often made through reputable and trusted sites or fake websites that look like the real thing. Look for secure payment options and beware of unusual payment methods such as wire transfer, Bitcoins or pre- loaded money cards. Credit cards usually offer some protection.

Ransomware: What do ransomware do? Ransomware hijack ur data. To free it, you need to pay a ransom. Hackers tell u to go somewhere to buy iTunes, Western Union fund transfer that can’t be traced.

What is an example of a social media or text message scam?“Hi, just found some funny photos of us. Click here: ”When you clicked link from pretend friend." The software or website will ask u for information to enter your personal or bank details. The next day, your money is gone. Or when you go to the website, it auto installs a key logger on your device to record your bank website log in details.

When you ask your friend about the message, he will say he didn’t send it. Friend will say maybe truth or not that his computer have been hacked and all contacts have been taken.

Internet Extortion Scam > These are Internet love scams where Internet users are propositioned by online perpetrators whom they befriended through online dating or social networking sites. The victims would be enticed to perform sexual acts in front of their perpetrators. The perpetrators would record the acts without the victims' knowledge and subsequently threaten to circulate compromising photos and videos of the victims in order to extort money from them. Internet users are to take the following measures to avoid becoming a victim to such crime: > Exercise caution when dealing with unknown persons befriended through the internet. > Never put yourself in a vulnerable position or give personal details about yourself when interacting with other internet users. > Do not remit or transfer money to unknown persons. > Inform the Police immediately if anyone attempts to extort money from you.

Internet Love Scams > In love scams, victims are befriended by criminals at match-making, dating or social networking websites. The criminals mislead the victim with his false promise of transferring a large sum of money to her. The victim would be instructed to remit money to a bank account before the promised sum can be transferred to her. After the victim has remitted the money, the culprit would cease contact. In other cases, the perpetrators may claim to be in financial difficulty and request for help. Criminals may also claim to be detained by the authorities and request for financial assistance. Members of public are advised to adopt the following crime prevention measures: > Be wary of messages from strangers who want to befriend you. > Do not remit or transfer money to people whom you do not know well enough. Criminals may spend months building rapport with you online before asking for money. > Victims of online scams should report the matter to the Police immediately.

Is this real or a scam?"Ive had so much fun talking to you over the last 2 months. I really want to start a life together, I'm  totally in love with you. Unfortunately I was fired from my job yesterday. It was horrible, I really want to fly to meet you but I cant afford the flights right now. I need you to send $2000 so I can pay for flights. Please, can you do this? I really want to see you, once  were together things will be perfect!!!!"This is a romance scam. Here’s how you can tell: You meet someone online, who professes strong feelings for you after only a few contacts. The scammer will often reference information on your profile, claiming to have similar interests. They can also use a variety of tricks to make them seem more trustworthy – for example, pretending that they are a friend of a friend. Scammers may send photos, emails and call you on the phone. They often wait weeks, months, or even years to gain your trust. Eventually, they tell you an elaborate story and ask for money, gifts or bank/credit card details. Protect yourself. Confirm their identity. Do an image search of your admirer to determine if they really are who they say they are. You can use image search services, such as Google orTinEye. Refuse requests for money. Never send money or give credit card details, online account details, or copies of important personal documents to anyone you don’t know or trust. Limit the personal information you share. Scammers may use your information to create a fake identity. You should also be very cautious when sharing personal pictures or videos with prospective partners, especially if you’ve never met them before – scammers are known to blackmail their targets using compromising material.

Is this real or a scam?" Candy Higgins February 17, 2017 at 7:36 pm Hey, Check out this video I found of you - it’s hilarious! http://short.ly/fCSSjk "You're right - this is a scam! This is a keylogger scam. Here’s how you can tell: The scammer has hacked into your friend’s social network account. You receive a message appearing to be from your friend, which entices you to click on a link. The link takes you to a copycat YouTube page, where you are prompted to ‘upgrade your Flash player now’. This installs the keylogger, which is a form of ‘malware’ (malicious software) on your computer. Once on the computer, the keylogger logs your keystrokes to capture and transmit your passwords and credit card numbers to the scammer. With your information, the scammer can access your money, and contact your friends in an attempt to scam them. Protect yourself. Does the message look legitimate? Think before you click on links sent to you in an email or posted on your social network account. Need to update software? It’s best to upgrade it directly through the software company’s website. Protect your device. Keep your anti-virus software up-to-date.

Is this real or a scam? Dear XYZ bank customer, Recently our customers have been the target of a large number of identity theft attempts. To safeguard your account, we require you to confirm your online account details. This process is mandatory - if you do^^no? confirm your details within 5 days, we will suspend your online  account as a safety measure. To securely confirm your account details, please follow the link:  https://www.xyzank.net.au/confirmdetails/login.html Thank-you for your prompt atten’ ion to this matter, and for using the XYZ bank. Sincerely, XYZ bank Online Services Team. This is a phishing scam. Here’s how you can tell: The email prompts you to click on the link, which directs you to a fake version of the bank’s website set up by the scammer. If you enter your online account, credit card details or passwords into the copycat site, the scammer will gain access to your personal details and your funds. Protect yourself. Read the email carefully. Be sceptical of emails asking you to visit a website to ‘update’, ‘validate’ or ‘confirm’ your account details and passwords. Is the link legitimate? Check carefully that the URL provided in the email is a perfect match for the bank’s real website. If in doubt, navigate to the bank’s website independently without clicking any links in the email. Don’t send your account information. Genuine organisations such as banks, PayPal and eBay will never ask you to provide your account details via email. Don’t provide account details over the phone to someone who contacts you, either. Only provide this information if you initiated the phone call and are sure you’re dealing with a genuine bank representative. Need to phone your bank? Navigate to their website independently and use the phone number listed there. Alternatively, you can use the phone number listed on your account statement, or on the back of your ATM or credit card. Be wary of links or phone numbers in emails. Don’t perform online banking from public computers. Scammers can install spyware software on public computers to collect your account details.

Is this real or a scam? HI, I'M CALLING FROM PC CONSUMER CARE. YOUR COMPUTER APPEARS TO HAVE A SERIOUS ISSUE...YOU TO DOWNLOAD SOME SOFTWARE IMMEDIATELY TO FIX THE ERROR. OTHERWISE, YOU CAN GIVE ME REMOTE ACCESS TO YOUR PC AND fix it for you. This is a computer repair scam. Here’s how you can tell: The scammer says they are phoning from a major computer company and have detected an error or virus on your PC. They may provide fake ‘error reports’ as evidence that your computer is infected. The scammer may either: direct you to install software to fix the error. The program they direct you to will capture sensitive data on your PC, such as online banking user names and passwords. They might then also charge you to remove that program. Push for you to provide them with remote access to your computer, or trick you into downloading software that provides access. Once they have it, they can install malicious software, and then demand payment to remove it. Protect yourself. Hang up. None of the major technology companies will make unsolicited phone calls to charge you for computer security. Verify their identity. Never give control of your computer to a third party unless you can confirm that it is a legitimate representative of a computer support team with whom you are already a customer. You can do this by checking that they know relevant information about you – your customer ID number, for example.

Counterfeitor person counter argument to cashier: I took it from the bank

Example of an investment scam call: Scammer > Hi, my name is Brad. I'm calling from spirit of wealth investments. I hope you've been having a good day! We have some fantastic investment opportunities that I'd love to discuss - All guaranteed to give a high return. We're also offering a special discount if you sign up today. This is an investment scam. Here’s how you can tell: You are contacted unexpectedly with an investment offer. The scammer typically claims that the investment opportunities will guarantee you a high return. You are pressured into signing up immediately, often with the promise of a discount. Protect yourself. Don’t engage with them. If you receive a phone call or email from someone trying to sell you an investment opportunity – hang up/delete it. Be wary of high pressure and slick sales tactics. This includes `limited-time’ offers or professional-looking websites which contain reports and graphs on past performance. Don’t let them pressure you into financial decisions. Always get independent legal or financial advice. 

Property Scam Email: Hi Jim, Thanks for your interest in moving in to our rental property. It really is a nice apartment, isn't it? I'd love to show you around the place, but unfortunately I'm currently overseas. As you can imagine, we're getting a lot of interest in the property. If you'd like to secure it. I'll need you to pay your bond and first month's rent upfront via an online money transfer ($3,100 total), and then I'll get the process started. I've attached my account details, and some more wonderful images Of the property. 🙂 Thanks, Michelle Smith This is a rental scam. Here’s how you can tell: Scammers advertise rental properties on well-known property websites. When you express interest, they say they are overseas or interstate and that you must conduct the transaction online. The scammers may try to appear genuine by providing photos, real addresses of properties, land title deeds and even scans of stolen passports.  They scam you by asking for up-front payment to secure the property. If you pay by money transfer, there is very little chance of recovering your money. Protect yourself. Have you inspected the property? Inspect the property in person before sending any money. Is the owner being evasive? If the owner offers ongoing excuses about why you cannot view the property in person - such as them being away overseas – be wary. Avoid paying via money transfer. Payments made by money transfers are often impossible to recover. You should be very suspicious when this is the only method of payment available.Know what you are signing up (fine print) for in newsletters, tick boxes and competitions - give a separate non personal phone number and email dedicated to newsletters and competition ONLY.

Back to part 1: https://www.reddit.com/r/cybersecurity/comments/fsa7cu/learn_examples_of_cyber_scams_so_you_can_protect/


No comments:

Post a Comment