A recent scam that has been victimizing people starts when you get an Instagram notification telling you that you have been tagged in a post called “Ugly List 2016.” To make things worse, it appears that it is a friend of yours who tagged you. The notification contains a link to enable you to see the full post. If you click on it, it takes you to what appears to be the Instagram log in page where you have to type in your username and password in order to see the full Ugly List 2016. However, the log in page to which you were directed by the link is a phony and if you type in your username and password, you have just turned over that information to a hacker. The hacker, in turn, may send out Instagrams that appear to come from you including new Ugly List 2016 tags to your friends.
But why, would a hacker do this?
Certainly sometimes it is just done to embarrass people, but other times it is done to get people to turn over their usernames and passwords to the cybercriminals who count on many people using the same usernames and passwords for all of their accounts including online banking and other online accounts that have information that can be used by the cybercriminal for purposes of identity theft.
In regard to this particular scam, it is important to remember that there is no Ugly List 2016 so do not respond to it. It is also important to remember when you are contacted by your friends through social media or even through emails or text messages, you can never be sure that any links contained in these communications that you are urged to click on are legitimate. They may be tainted with malware. Remember my motto, trust me, you can’t trust anyone. These messages that appear to come from your friends may indeed come from their accounts which have been hacked and sent by an identity thief. Never click on links or download attachments in emails, text messages or on social media until you have absolutely confirmed that the communication is legitimate.
As for your passwords, it is important to have a complex an unique password for every online account you have.