.. but since I never have - not once - ever - in my life - dealt with Western Union .. I think it is safe for me to Mark as phishing. (Congrats, Hotmail, for adding this feature [finally].)
Is it safe yet, these days, to say that, if it has an exclamation mark in the subject line, it's from a scammer ? A new Rule Of Thumb?
Copyright 2007-9 © Tech Paul. All rights reserved.Folks, if you use the very popular VoIP program Skype - as I do - you need to be aware of some recent cybercriminal activities.
1) The fake "Windows needs immediate attention" attack is active again. Please see, Skype — "Windows Requires Immediate Attention".. Not!
2) There's a new attempt - using a trojan - to steal your account information. Please see, SpySkype.C Trojan Wants to Talk to You!
Copyright 2007-9 © Tech Paul. All rights reserved.Folks, as I -- and other members of the media -- have been warning, the underground economy known generically as "hackers" and "cyber-criminals" has ramped up their efforts during this Holiday (shopping) period.
Spam e-mails containing links to bogus ID Stealing websites are flooding our Inboxes (some are aimed at our insecurities during this period of financial stress); and more "legit" websites are being poisoned; and, new variants of the fake "you have been infected" (or, "VirusX_YZ has been detected on this machine! Click here to..") scam "warnings" have been released onto the web. Etc. Etc. Etc.
It is all about stealing your money. It has been for some time.
And these guys are good. They stole between $10 - $105 billion last year (depending on which source you read).
As a result, I have recently been swamped with calls for help from people with badly infected machines (this is why I couldn't post, or only was able to re-post these last few days).
Today is no different. And so today all I have time to do is direct your attention to two articles which I consider to be important, and would ask my readers to read.
The first is, Shocking - 98% of Computers are Insecure, by Internet Security blogger Bill Mullins. You will find helpful advice here, and not just doom and gloom.
Also, you may be being ripped off right now, and be unaware of it, via your phone bill-- as fellow blogger Rick Robinette describes here, Beware! Telephone Bill Rip-Off…
I truly believe (and life experience backs me up) that awareness on the part of web surfers (us "regular Joe's and Jane's") prevents a lot of this vile crime.. the "savvier" you are, the less likely you are to need to have to give me a call. Be smart. Be safe. Be aware.
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
| Share this post : |  |  |  |  |  |  |  |  |  |  |  |
Folks, for the second day, I have been up to my eyeballs with clients. And so I must simply repost a prior article.. I hope to write a new post a little later tonight, but in the meantime...
“Dear Wells Fargo customer,
Security and confidentiality are at the heart of Wells Fargo. Your details (and your money) is protected by a number of technologies, including Secure Sockets Layer (SSL) encryption.
We like to notify you that Wells Fargo carries out customer details confirmation procedure that is compulsory for all our customers. This procedure is attributed to a routine banking software update.
Please visit our Customer Verification Form using the link below and follow the instructions on the screen.”
There are several things wrong here, and I hope you detect them. Loyal Friends and True to this series should recognize a couple right away. (And if you remember this recent article, the word “compulsory” might have rung a bell.) Here’s how the e-mail actually looks. 
* One BIG clue is that in this case Hotmail has detected the Sender and the true source don’t match. That means the Sender has been “spoofed”. The red shield and warning doesn’t always mean a phraudulent e-mail, but 9 times out of ten it does.
* The next clue is the two “Bcc” recipients.. similar in name, but completely unrelated. Why are they there?
* There is some poor grammar.
* The next clue is that I don’t currently bank at Wells Fargo. I haven’t in, oh, about 20 years.
* Another clue is that e-mail contains a hyperlink (you are always suspicious of e-mail hyperlinks, right?), and that hyperlink is a little bit “off”. Yes, it says “wellsfargo.com”.. but what’s the www4? And all that other garbage?
* (now this is interesting) when you place the cursor on the URL (hyperlink), the actual link– shown in the lower left of the bottom bar of Internet Explorer — are different. Clicking on the link that says “www4.wellsfargo.com/blah blah blah” will REALLY take you to someplace called “online7.wellsfargo.com.bnk7.co.uk/blah blah blah”.
Now.. why would they want to put a hidden redirect as the link? Hmmm?
* And lastly, (as you know) legitimate businesses never send you important information, requests, or “notices” via e-mail.
This is a classic phish. It is an attempt by cyber-criminals to get you to visit a webpage they have created which looks very much like a Wells Fargo web page. On that page you will be asked to enter your Wells Fargo logon/password, all your person information, and banking details. When you’re finished giving your identity away, and handing them the keys to your bank account, you will be thanked for your cooperation and “bounced” to the real Wells Fargo website.
Game over.
Surely.. nobody falls for this anymore, right?
Wrong. The experts will tell you that cyber-criminals have a harder time moving all the money they steal than anything else.
But, if I clicked the link.. and I filled out the “compulsary” Customer Verification Form.. and basically just handed my information over.. is it really stealing?
Tip of the day: Be savvy. And that means always be suspicious and wary. Look for the tell-tales.
Copyright 2007-8 Tech Paul. All rights reserved.
post to jaanix
| Share this post : | | | | | | | | | | | |
This CNN special report interviews spammer Jason Carpenter. Though it is dated, it is interesting.
As so often happens when the Powers that establish Law and Order fail to protect us, folks take matters into their own hands. It's only natural, I think.
One doesn't really need to study, or be particularly tech savvy to know that there really isn't enough being done to prevent cybercrime.
And, I think we understand that there are aspects to this *new* "shadow economy" that make it very difficult, if not impossible, for the Powers That Be to be effective, should they even try to do something about cybercrime.
The other day, when a person called me (at Aplus Computer Aid) for my help "to make these porno popups go away", and I had to tell them that they had been tricked into installing a rogue antivirus.. and explained all the implications.. they were somewhat stunned, and muttered, "I'd like to find the guy who did this to me.."
His was a typical reaction.
(For more on rogues, and to see an instructional video, please see my article, Scare Tactics.)
Almost everyday, someone asks me, "what is being done about this?", and I tell them the truth; basically, nothing.
How would you find the guy? And when/if you did track him down, in the Ukraine, or China, or Bangladesh, or Peru.. how would you prosecute him?
I am pleased to report that cybercrime is being taken more seriously by the Powers, and the laws are changing. International cooperation is starting to happen. But that didn't stop an estimated $105 Billion dollar loss last year.
BILLION.
$105.
(Hey, that's what insurance is for.. right?)
But let's get back to today's title, shall we? I just read that recently a company had received a blackmail threat:
"St. Louis-based Express Scripts disclosed last week it received an anonymous letter that included the names, Social Security numbers, birth dates and, in some cases, prescription information of 75 members. The writer or writers threatened to release millions more of similar records if the business failed to pay an unspecified sum of money."
Cyber-extortion.
After following proper procedures (such as notifying law enforcement), and looking at all their options, a new -- and I hope effective -- strategy was decided upon. This company has decided to offer a $1 million reward for information leading to the conviction of these extortionists.
They've posted a bounty.
History has shown that where's there's a bounty, there's going to be bounty hunters.. and so I hope that this is just the first such offer of reward. Somebody needs to go after these guys.
Copyright 2007-8 © Tech Paul. All rights reserved.Cyber-criminals have been capitalizing on the global financial crisis in the past several weeks by increasing the volume of phishing and spam messages being sent.
These emails are not much different from older attacks, but because they are topical and look authentic, nervous consumers are at risk for falling for the scam.
Internet users should be on alert for fake emails that look as if they have come from an authentic financial institution. These phishing messages are seeking personal information – account numbers, passwords and Social Security numbers - which cyber-criminals will use to empty out accounts, and then sell on the underground market.
These e-mails (usually) contain links which take you very legit-looking login websites, which in fact are created by the crook. This short video from the good folks at WOT demonstrates how this works.
Tip of the day: Follow these security tips to get protection from phishing attacks:
Today's free download: Yes, this is a repeat; but if you haven't downloaded the WOT browser plug-in, maybe today you'll go ahead and give it a try. Why not? It's light-weight, effective, easy to understand, and free!
“System Restore won’t work”, “I’m worried about ID Theft, how do I know if an email is legit?”, “I can’t get this #$*& program out of my Startup folder” — these are examples of some of the questions I have received since posting my articles on these 
Tip of the day: Since I’m going to cover the questions above, there is not going to be a single “Tip of the day” today. Instead, there will be “Today’s three questions”…
More on System Restore: What to do when System Restore just refuses to work. As I mentioned in my first System Restore post, SR simply is not a failsafe miracle worker. There are troubles that can occur that it simply does not repair — such as a corrupted SAM database. It is however a good place to start. It does undo a lot of the damage you can accidentally do to your machine. This fact is why you should always make a back up of your system — either a “disk image” made with a 3rd-party utility like Acronis True Image, or Norton Ghost, and/or Windows Backup Utility (Start >Programs >Accessories >System tools >Backup).
** My illustrated tutorial for that is here.**
I stated in the prior article, and will repeat here, that you may have to repeat the System Restore process several times before one “snapshot” finally takes. When you use SR, you will see a calendar with available snapshots in bold dates. You should see several. Start with the most recent date and time, and work your way backwards. If you have done this with no luck, you probably have one of those troubles System Restore is not designed for. Either look elsewhere for solutions, or call for some Tech Support (we Tech Support folks need to make a living too, you know).
Legit vs. Phishing: “how do I know if an email is legit?” In my post about the rocket scientist, I discussed phishing and recommended an anti-phishing site toolbar, which combats a form of phishing called “pharming“.
I suggest you take no chances with emails.
* Simply do not click on links in emails.
* Also, realize that your bank will not send you links. They know about phishing, and they figure you already know their url (you should have it bookmarked, so use that…or call them directly).
* Also be aware that just because an email claims to be from a friend or relative, doesn’t mean that it is. If you are not expecting an “executable” (application) or “you gotta see this!” .jpeg from Uncle Fred, by all means don’t open it! Contact him and ask him, “did you send me a..?” It is an easy thing for an Evil Doer to 'spoof' an address.
* And finally, make sure your antivirus definitions are up to date. If it is not already on by default, open your antivirus’ Options and look in “Update Options” for “Download and install new definitions automatically” (or words to that effect) and make sure it’s selected. If available, have it set to scan email and email attachments as well. (And, if your AV cannot scan incoming e-mail.. think about switching to one that does!)
Removing stubborn start up programs: If the methods I described in “My Startup folder is a clown car” proved insufficient for getting rid of a really determined program, there are more methods you can try. The first is using the msconfig tool.
Start by opening the msconfig utility. Click Start >Run and type in “msconfig” (no quotes), and then click on the Startup tab. Here you will see a list of the programs scheduled to start when Windows boots. Uncheck the checkbox next to the program you are having the troubles with. You will need to restart your system for the changes to take effect.
**Vista users: Manage Startup programs in Vista**
If you have already tried the aforementioned methods and simply cannot kill the autolaunch, please consider simply using Add/Remove Programs to “retire” the troublesome program altogether…or install a startup manager program like StartUp Cop.
Today’s free link: GIMP Open Source digital image manipulating tool. This completely free application is a bit tricky to install but is well worth it as it offers a full range of tools for adjusting your digital images, and it does that in an interface that’s comfortable to folks with Photoshop experience.
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
"Dear Wells Fargo customer,
Security and confidentiality are at the heart of Wells Fargo. Your details (and your money) is protected by a number of technologies, including Secure Sockets Layer (SSL) encryption.
We like to notify you that Wells Fargo carries out customer details confirmation procedure that is compulsory for all our customers. This procedure is attributed to a routine banking software update.
Please visit our Customer Verification Form using the link below and follow the instructions on the screen."
There are several things wrong here, and I hope you detect them. Loyal Friends and True to this series should recognize a couple right away. (And if you remember this recent article, the word "compulsory" might have rung a bell.) Here's how the e-mail actually looks.
* One BIG clue is that in this case Hotmail has detected the Sender and the true source don't match. That means the Sender has been "spoofed". The red shield and warning doesn't always mean a phraudulent e-mail, but 9 times out of ten it does.
* The next clue is the two "Bcc" recipients.. similar in name, but completely unrelated. Why are they there?
* There is some poor grammar.
* The next clue is that I don't currently bank at Wells Fargo. I haven't in, oh, about 20 years.
* Another clue is that e-mail contains a hyperlink (you are always suspicious of e-mail hyperlinks, right?), and that hyperlink is a little bit "off". Yes, it says "wellsfargo.com".. but what's the www4? And all that other garbage?
* (now this is interesting) when you place the cursor on the URL (hyperlink), the actual link-- shown in the lower left of the bottom bar of Internet Explorer -- are different. Clicking on the link that says "www4.wellsfargo.com/blah blah blah" will REALLY take you to someplace called "online7.wellsfargo.com.bnk7.co.uk/blah blah blah".
Now.. why would they want to put a hidden redirect as the link? Hmmm?
* And lastly, (as you know) legitimate businesses never send you important information, requests, or "notices" via e-mail.
This is a classic phish. It is an attempt by cyber-criminals to get you to visit a webpage they have created which looks very much like a Wells Fargo web page. On that page you will be asked to enter your Wells Fargo logon/password, all your person information, and banking details. When you're finished giving your identity away, and handing them the keys to your bank account, you will be thanked for your cooperation and "bounced" to the real Wells Fargo website.
Game over.
Surely.. nobody falls for this anymore, right?
Wrong. The cyber-criminals have a harder time moving all the money they steal than anything else.
But, if I clicked the link.. and I filled out the "compulsary" Customer Verification Form.. and basically just handed my information over.. is it really stealing?
Tip of the day: Be savvy. And that means, be suspicious and wary. Look for the tell-tales.
Copyright 2007-8 Tech Paul. All rights reserved. post to jaanix
WINNING CONFIRMATION DETAILS
Your email address won £915,810.00 GBP in this month NATIONAL LOTTERY.
To file for your claim, contact our agent Rev.Harry Smith with
the details below(Full Names, Contact Address, Country, Age, Sex, Occupation & Telephone numbers) to this email: revharrysmith1940@gmail.com Phone Number: +44 (701) 115 3332
Please Confirm Your Purchase 
Re: You have not responded to my previous letter
From a Ewald de Bever (Mr), claiming to be an "Oracle Database Engineer currently in London..." wants my help 'confirming' that it was my very wealthy relative who died.
Tip of the day: If you do not already do so, please get into the habit of marking these items as spam. Doing so will help your filters "learn" what is spam and what is legit.
* Fraud Prevention Tips
* Managing junk mail in Outlook/Thunderbird
Today's free download and link: Today is a "two-fer", and not my usual method for providing links to great free software. By clicking this link, you will read about a handy little app on a great blog written by a freeware devotee. Check 'em both out, click the link!
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
There is an epidemic of fake anti-malware software on the Internet-- which is collectively called "rogue anti-malware"
Marketed under hundreds of different names, such as VirusRemover 2008 and Antivirus XP 2009, this type of rogue software scares people by giving false alarms, and then tries to deceive them into paying for removal of non-existing malware.
This video (produced by the good folks at WOT*) shows what happens when a legitimate site gets infected and redirected to one of these bogus anti-malware scams.
Yes, folks, legitimate websites.
The people behind this scourge use many different ways to try to entice you to click-- realistic pop-up windows appear, offers of "free trials" arrive in e-mail, and "free scan" buttons on legit-looking 'fight malware' websites, etc..
As this video shows, the user is tricked into (scared into, really) providing their credit card # (oops.. might want to cancel that card..) to clean infections that weren't there before they clicked.
* The 'false positives' are not "cleaned" BUT, more adware and spyware is installed.
* A good percentage of my calls at Aplus Computer Aid are folks needing help with getting rid of these rogues, because they use the latest techniques to combat removal, and can be quite tough.. if not impossible.. to remove them.
* Is that anti-spyware program really spyware?
* A Website dedicated to combating this epidemic is Spyware Warrior. It has a pretty good list of known rogues, and much more detailed information.
Today's free download: WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky Website. It's easy and it's free.
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
New, scary e-mail subject line.. Same bogus scam. (This one can slip past filters)
Clicking the link will take you to a realistic-looking but completely fake PayPal login page.
Follow these tips to help protect yourself from fraud.
Today's free download: I found this list on the Wells Fargo Fraud Information Center. This site is a valuable public service that contains much useful advice, such as "How Fraudsters Operate", "How To Protect Yourself", and "Online, Mobile, Computer and Email Security Tips". It is a free education, so check it out.
Copyright © 2007-8 Tech Paul. All rights reserved. post to jaanix
Folks, two weeks ago I wrote an article advising you to immediately delete, unopened, these types of e-mail.. which are inevitably forwarded to us by well-meaning friends and family.
There's one going around right now, warning about "the worst virus ever".
Please read, SEND THIS E-MAIL TO EVERYONE YOU KNOW!, and then please forward it to those friends and family members who show a proclivity to be helpful and concerned -- and fall for this scam. (You know who they are.)
These e-mails will contain an image (attachment) which will automatically be downloaded and displayed when you open the e-mail -- please see, HTML e-mail and image spam (repost) -- which automatically gives the cyber-criminal a matching valid e-mail address and machine/IP address-- yours.
You don't need to click any links, you just need to view the message, and the damage is done.
So even though the Subject line advises DO NOT DELETE, go ahead and do so-- immediately and unopened. You'll be protecting your Inbox and Identity.
Today's free link: Today's link is to a bargain shopper's Website recommended to me by a Loyal Friend and True of Tech--for Everyone. FatWallet.com has the steals, online coupons, price comparisons, and forums you're looking for.
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
Folks, after a quiet period, cyber-crooks are once again using Skype to send phishing "chats" in an attempt to defraud you. So, I am reposting this article. It is the exact same ruse, but the name has changed.
Yesterday a "chat" window (Skype) opened on my machine, and presented me with a dire warning from someone named "Software Update" "Registry Scan Online®". It said that "WINDOWS REQUIRES IMMEDIATE ATTENTION" and, it provided me with a solution. 
(Click on image to see large version)
Please, folks, tell me you have spotted this for what it is. Please tell me that you knew --instantly-- that this is a cyber-crime attempt; that it is Phraud-ulent.
Please tell me that you know what will happen if the link provided in this message is clicked; and, please, please, please tell me you would never click the link.
Just in case you aren't sure:
* "Software Update" "Registry Scan Online ®" doesn't exist.
* "www.onlinemonitor.info" "www.registryscan.com" is not registered in ARIN (the registry of Internet addresses).
* clicking the link will allow scripts to run, and/or take you to a poisoned Website which will install malware on your machine, or/and it may take you to a site that will sell you a rogue anti-spyware program (please read my article, Is that antispyware program really spyware).
* Microsoft DOES NOT alert you via Instant Messaging. No legitimate company does. Period. Ever. This is a classic example of a hacker's attempt to get you to click their link.
All of this so they can rip you off. It's their full time job.
Please point your less-savvy friends and family to this article and educate them to the dangers of spam (unsolicited) messages and tell them-- NEVER CLICK THE LINK.
[Note: while this article directly references the VoIP client Skype, you may see this type of thing in other Instant Messaging/Chat programs.]
Today's free link(s): I have assembled on my Website a collection of links to the best free anti-malware programs to help you prevent infection.. and clean up if you've been infected. To see them, click here.
Also, Bill Mullins has posted a very complete tutorial, Think You Have A Virus?-- Some Solutions, which is quite probably the best one-stop lesson on malware I have ever run across. (I also recommend his How Fake/Rogue Software Affects Real People.)
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
Folks, a new scam e-mail is appearing that warns of changes to your Credit Score. In the ones I have seen, the Sender is "Credit Report Time".
Delete it. Directly contact legitimate services -- such as your bank-- if you really feel the need to check your activity/credit report.
If you use Gmail and haven't yet taken advantage of a feature Google recently provided to prevent hackers from hijacking your inbox, now would be an excellent time to do that. (click here, and read Tip #1.)
A security researcher at the Defcon hacker conference in Las Vegas demonstrated a tool he built that allows attackers to break into your Inbox even if you are accessing your Gmail over a persistent, encrypted session (i.e. using https://, which you might recognize as the "gold lock" icon).
Here is a video demonstration of how an attacker would use an automated tool to hijack your login. The music may strike you as offensive, and there's no narrative, so feel free to mute the sound.
Surf Jacking Gmail demonstration from Sandro Gauci on Vimeo.
While it may seem like Gmail is being singled out here, you should realize that other websites are vulnerable to side-jacking and cookie stealing too.. notably Facebook (I mention it because it has so many users), but Gmail is one of the few that allows you to thwart this attack method.
So how do you prevent this? Here are some simple but, inconvenient, solutions you can use to protect your data.
Folks, the Internet is broken.. and it is the hunting ground for criminals. Please.. let's be careful out there (and by careful, I mean "paranoid").
Today's free link(s):
* Because the Internet is not safe, Please look over, Top 10 Things You Should Do To Your Computer.
* AbsoluteShield Internet Eraser. Yes, this is a repeat, but if you don't have it, click the link and read the page. Look for the link for the free version.
Copyright 2007-8 Tech Paul. All rights reserved. post to jaanix
It's like we woke up inside a horror movie-- we are under attack by zombies.
Yes. It's true. Real life is imitating art (if you're willing to call Night of the Living Dead "art"). We really are under attack by zombies-- only our zombies aren't trying to eat our flesh, they are trying to sell us bootleg f@rmacuticals and Vl@gra, fake Rolex watches, and steal our identities. [note in the photo how the zombie is reaching for the wallet?]
In real life, our zombies can't claw at us directly and they don't have teeth. Our zombies are computers. Our computers. And they attack via e-mail and the Internet. Like the zombies in Night, they spread the zombie disease by infection. Also, our zombies aren't mindless, they're controlled by villains (aka "cyber-criminals").
Yes. Your computer may be a zombie.
If it isn't a zombie (yet), it is constantly under the attack of infection via the Internet. An unprotected computer, connected to the Internet, will be infected within 8 minutes.
90 to 95% of all Internet traffic traveling the wires (using "bandwidth") is zombie-generated junk e-mail that's either a fraud attempt or (and?) loaded with malware-- the "attack".
How did this happen? Well, part of it is the Tech Industry's fault (see, How the Tech Industry is Failing You), either unintentionally, or through lack of foresight, or through willful negligence and the rush to market. Security either wasn't considered, or it was too expensive.
Nobody predicted the nerdy hackers evolving into organized, well-financed, criminal gangs of today.
And they put too powerful, fully capable machines into the hands of the unwashed masses-- us. The rest of it is our fault.
* We let our antivirus expire and everyday close the warning.
* We think we've just won the British Lottery.
* We still run Window 98 because we're "comfortable with it".
* We cannot resist 'free' pornography.
* We cannot be bothered with those REALLY ANNOYING little windows that pop open at the worst times and tell us that a "new version is available."
* When someone tries to tell us about our machines, they start using big words in a funny language and we 'tune out'.
* We believe that everything computer-related should be free, so we download cracked (aka "pirated") software, bootleg music and video, and we don't care who or where it comes from.
I could go on and on and on.
Yes.. we are our own worst enemies. But, you don't have to be a part of the problem. And you don't have to learn a big word-filled foreign language (aka "Geek speak") to avoid the zombie attack.
Today's free link: I have put together a list of proactive steps every computer user should know.. a checklist. In it you will find links to free, safe, and effective methods for protecting your computer, and keeping it safe. Please look over, Top 10 Things You Should Do To Your Computer. And then do us all a favor, pass the list on to your friends who have computers.
Copyright 2007-8 © Tech Paul. All rights reserved. post to jaanix
post to jaanix
