Posts Tagged: ‘Scamicide’

Scam of the day – April 18 2013 – Hitman scam update

April 18, 2013 Posted by Steven Weisman, Esq.

I have previously warned you about the hitman scam on January 15, 2012 and January 29, 2013, but I am doing so again today because this scam, which is still unfamiliar to many, is making a comeback.  Recently the FBI has been getting many complaints about incidents of this scam that begin when you receive an email informing you that the sender is a hitman who has been hired to kill you, but that if you pay him $10,000 he will refrain from doing so.  Although this is a scary email to receive, you should ignore it other than to report it to your local police and the Internet Crime Complaint Center at www.ic3.gov.

TIPS

Indications that the email is a scam include the fact that is entirely lacking in specific details about you.  It does not use your name or other identifying information.  In one phony email  it is addressed to “Friend.”  In addition it does not provide any details about who has hired the hitman, where you live or any other details that would take this out of a generic, mass produced scam email.   It often contains much of the poor grammar found in many email scams originating in foreign countries.  If you receive this email and have any concerns that it might be real, report it to the local police.  If you are convinced that it is a scam, report it to the Internet Crime Complaint Center at www.ic3.gov.

For a sample copy of one of the phony letters, go to the Scamicide archives for January 29, 2013. It is a good idea to always check the Scamicide archives for scams that you may hear about.  Chances are you will find information there.

Scam of the day – February 26, 2013 – Microsoft hacked – what it means to you

February 25, 2013 Posted by Steven Weisman, Esq.

A few days ago, Microsoft announced that it, like Apple, Facebook, Twitter and hundreds of other prominent companies had been hacked.  The Microsoft hacking is still being investigated and it has not yet been determined if sensitive information was compromised or taken by the hackers, but the lesson is clear for us all.  You are only as secure from identity theft as the security of the weakest place that holds personal information about you.  In the Microsoft and other company hackings in recent days, it appears that, once again, it was a vulnerability in Java that was exploited by the hackers and since anti-virus security software is always playing catch-up when responding to the latest viruses created by the hackers and identity thieves, people should ask themselves whether or not they need to use Java software on their computer.  It has been estimated that half of the major computer hacking last year was done by exploiting vulnerabilities in Java.  It would appear that as soon as Java plugs a hole in their software, the hackers find another to exploit.

TIPS

You should consider whether or not you need Java software since it is such a target for hackers who may hack into your computer just as they have done with hundreds of businesses that use Java.  If you need Java, you should install the latest security patch.  Here is the link to information about both installing the latest Java security patch as well as information about deactivating Java from your computer.  http://www.us-cert.gov/cas/techalerts/TA13-051A.html

Here at scamicide, I will continue to promptly update you with the latest information about security patches you should use to make sure your computer is protected as well as possible.

You should also make sure that your Firewall is operating, use a complex password, maintain constantly updated security software and be prudent when downloading anything or clicking on a link as I have described in my book “50 Ways to Protect Your Identity in a Digital Age” because, as I have told you before, security software is only about 5% effective against the latest viruses.  It takes generally about a month before the software is updated.  Also, in order to limit your exposure to identity theft, limit the amount of information that you provide to companies and websites that store that information because if they are hacked, your security is compromised.

Scam of the day – December 14, 2012 – New Mac app scam

December 14, 2012 Posted by Steven Weisman, Esq.

For many years, users of Apple computers have felt safe knowing that by and large most of the computer scams have targeted users of PCs rather than Macs.  However, with the increasing popularity of Apple computers and portable devices, more and more scammers and identity thieves have begun to tailor their illegal activities to Mac users.  Earlier this week the Russian Security software company, Doctor Web announced that it had found  new malware that is aimed at Mac users.  The scheme starts with a text message or email that asks for you to enter your phone number.  In response the victim receives a text message asking for a registration code.  When the victim responds, automatically continual charges are made to the victim’s smart phone in a scam called cramming.  The particular scam found by Doctor Web targeted people using a music app.

TIPS

Only get your apps from legitimate sources.  The cost of many free apps that you may find on the Internet is far too dear.  A good rule to follow is never to install an app if you are required to provide your smart phone number or send a confirming text message.  That text message may just sign you up for continuing charges wtihout your being aware of it.  Finally, it is time for Mac users to join the rest of the world and realize that scams are not just found on PCs, but are also written for Macs too.

Scam of the day – October 6, 2012 – FTC freezes accounts of scammers

October 6, 2012 Posted by Steven Weisman, Esq.

On July 15, 2012 I warned you about a scam in which you receive a telephone call purportedly from Microsoft, Dell or other major computer companies or security software companies such as McAfee and Norton telling you that they have remotely determined that your computer is seriously infected with computer viruses and that you need to immediately remedy the problem for fees ranging from $49 to $450.  To confirm the problem, they tell you to go to your Windows’ Event Viewer which is a utility that keeps track of program errors and other events on your computer.  Everyone’s Windows’ Event Viewer will show many errors, but almost universally they are of no significance.  However, when directed to this utility and seeing a long list of problems, people can begin to trust the scammer, not knowing that these “problems” are insignificant.  The victim is then directed to a website to download a code or download a software program that permits remote access to the scammer under the guise that the scammer would then remove the offending malware.  Too often when the victim downloaded the software, they also downloaded dangerous keystroke logging programs that allowed the scammer and identity thief full access to all of the information in the victim’s computer that, in turn, let the scammer steal the identity of the victim.

TIPS

This week the Federal Trade Commission filed legal actions against 14 companies and 17 people the FTC said were involved in this scam and a New York Federal Court Judge ordered the assets of these defendants be frozen while the case proceeds.  I will keep you informed as to the progress of the cases.  Meanwhile, the best place to find a helping hand is at the end of your own arm, so my advice to you is to be proactive and protect yourself from these scams.  Whenever you receive a telephone call from someone saying they are with a particular company, you can never be sure that they are who they represent themselves to be.  Never give out personal information to someone who calls you on the phone.  If you believe a call is legitimate, call the company back at a number you know is accurate.  It is also important to remember that none of these computer companies or software security companies will ever initiate a call to you so if someone contacts you purporting to be from one of these companies to tell you that your computer is having problems, hang up;  they are scammers.  Always maintain up to date security software and if you have questions, call your computer company or your security software company directly at a telephone number that you know is accurate.

 

Scam of the day – October 2, 2012 – White House spearphishing hack

October 2, 2012 Posted by Steven Weisman, Esq.

Yesterday, a White House spokesman confirmed that a computer network used by the White House Military Office that deals with military support for various White House functions was hacked into last month purportedly by Chinese hackers through the common scammers technique called “spearphishing.”  You can read in more detail about spearphishing in my “scam of the day” of September 11, 2012, which can be accessed in the scamicide archives.  Phishing occurs when you receive an email message or other communication that takes you to a phony website or link that automatically will download malware, such as a keystroke logging program called Trojan Horse that will steal all of the information from your computer and can help make you a victim of identity theft.  Spearphishing is a particularly insidious variation of phishing.  It occurs when you get an email message or other communication that appears to be from someone you know that contains a link or an attachment that when you download it automatically downloads the malware I previously described.  People often let their guard down when they receive an email or other communication from someone that they know even though it is easy to hack into someone’s email and steal their identity to send out these kinds of specially targeted spearphishing emails.  Too often they trust that the email is genuine and either click on the link or download the attachment without being sure that it is legitimate.  Often this can bring terrible results.

TIPS

Remember my motto:  Trust me, you can’t trust anyone.  Never download attachments or click on links unless you are absolutely are sure that the email or other message is absolutely legitimate.  When in doubt (and you should always have some doubt) you should confirm with the person that you think sent you the email that it is legitimate.  It may seem a bit paranoid, but remember, even paranoids have enemies.  If the White House can fall for this scam, so can you, so be extra careful.

Scam of the day – August 14, 2012 – More IRS identity theft scams

August 14, 2012 Posted by Steven Weisman, Esq.

The recent report by the Treasury Inspector General for Tax Administration of the IRS’ poor record when it comes to preventing tax identity theft where identity thieves steal the names of Social Security numbers of their victims and then file phony federal income tax returns claiming phony tax refunds is absolutely startling when you consider that the IRS’ computers were not able to find anything amiss when  it issued more than a million dollars in refund checks regarding 741 separate income tax returns that all used the same Belle Glade, Florida address.  But that wasn’t even the worst example.  The IRS sent checks totalling more than 3.3 million dollars in regard to 2,137 individual returns that all listed the same Lansing, Michigan address.

TIPS

As I have explained previously on this website/blog, identity thieves get names and Social Security numbers of people to file phony income tax returns from Social Security’s own Death Master File which lists the names and Social Security numbers of recently deceased individuals.  This information is available free on line.  They also have stolen the names and Social Security numbers of Puerto Rican citizens who are not liable for federal income taxes, they have stolen the names and Social Security numbers of children and they have stolen the names and Social Security numbers of many others through a large variety of illegal tactics.  To keep yourself from becoming a victim of tax identity theft, keep your Social Security number as private as possible.  The fewer places that have this information, the better.  Also, file your income tax return as early as possible.  Identity thieves file phony income tax returns in the names of their victims before W-2s are required to be filed with the government this year until February 28, 2013.  The Identity thieves forge phony w-2 forms which the IRS may not have a valid W-2 to compare it to.

Scam of the day – August 9, 2012 – Largest Identity theft ring in American history

August 9, 2012 Posted by Steven Weisman, Esq.

Recently, Amar Singh and his wife Neha Punjani-Singh were sentenced to prison for their role in a thirteen million dollar identity theft ring that operated in the United States with help from abroad between July and November of 2011.  The Singhs were only two of a group of 111 people who were arrested by federl authorities in regard to the scam.  Amar Singh was one of four top operators of the identity theft ring which received stolen personal information on American victims from sources in Russia and China as well as from American based identity thieves who obtained the personal information of their victims primarily through skimming devices, which as I have explained previously in this website/blog are small electronic devices that are used by identity thieves to illegally swipe a credit card used in a restaurant or retail establishment at the same time the victim presents his or her card for a legitimate purchase.  The skimmer steals the information stored on the card.  The information gathered both home and abroad was used to creat counterfeit credit cards that were used by the criminals to the detriment of the identity theft victims.

TIPS

As much as possible, when you pay with a credit card, keep the card in sight to help insure that your card is not being swiped through a skimmer.  Skimmers can also be installed on gas pumps and ATM machines so look for signs of tampered machines.  Also, limit your use of your debit card to ATM machines because the risk of losing money through a debit card is greater than through a credit card due to different federal laws that govern each type of card.  Protect your personal financial information as much as possible and keep it private because data breaches in any place that holds your information puts you at risk.  Finally, read your monthly credit card bill carefully each month to make sure that there are no fraudulent charges and if you do find them, report them immediately.

Scam of the day – August 6, 2012- Wireless phone cramming

August 6, 2012 Posted by Steven Weisman, Esq.

Many of you may be familiar with the scam of “cramming” where unauthorized charges are added to your phone bill.  Often due to phone bills being so lengthy and confusing, people may not spot small recurring bills for services that they do not recognize and just ignore them while the scammer continues to steal the victim’s money.  Since October of 2011, customers have been permitted to block third party billing on their landlines, however, the ability to add such third party charges on your smart phone is still legal and abused by scammers who do this for illegal purposes.

TIPS

Sometimes cramming is the result of a scammer just getting the information to access your phone and add charges, but other times, people may not realize that they have given permission for such additional charges in the fine print contained on documents, such as a contest form, that they might find at a fair or other public event.  The lesson is to first, always read the fine print of anything you sign and second to read your smart phone bills carefully each month and make sure that you understand what every charge is for and dispute any charges that are bogus.

Scam of the day – August 4, 2012 – Online job scams

August 4, 2012 Posted by Steven Weisman, Esq.

The convenience of looking for a job online is somewhat balanced by the ease with which scammers can exploit this process to steal money from you or make you a victim of identity theft.  Merely because you find a job listing on a legitimate job site, such as Monster.com does not meant that the company is legitimate.  Despite the best efforts of employment websites, scammers do get through.

TIPS

If a company doesn’t even list its name, don’t even bother to respond to the advertisement.  Real companies are not afraid of using their names in their ads.  Stick to legitimate sites, such as Monster.com  which at least make an effort to try to weed out the scammers.  The key to identity theft is your Social Security number so do not provide your Social Security number on any initial job application.   A problem, however, is that companies may do a background check on prospective employees and to do that effectively they will need your Social Security number.  If you get to that point in the process call the HR department of the company at a telephone number that you know is accurate to confirm that indeed the job offer is a legitimate one and not just someone posing as that company.  Finally, whenever you provide pesonal information online, make sure that the URL begins with “https” rather than just “http.”  That letter “s” indicates that the information is being encrypted

Scam of the day – August 3, 2012 – Online gaming scams

August 3, 2012 Posted by Steven Weisman, Esq.

Playing online video games is a popular pastime, but it also can lead to identity theft if you do not protect yourself.  Many multiplayer online games are connected to cerdit card accounts that can make the players vulnerable as we have seen with the major data breach at Sony with its online Play station gaming when 77 million people had their data including credit card numbers compromised.  But there are things you can do to lessen your chance of becoming a victim of identity theft.

TIPS

Use a complicated password and don’t use the same password for anything else.  You should always use a unique password for every account that requires one so that if your security is breached you have not provided the keys to all of your accounts to the identity thief.  Never download add-ons or modifications to your game from unofficial sources.  If you do so, you risk downloading dangerous keystroke logging malware that can steal all of the information from your computer.  Finally, make sure that your computer security software is up to date.