Wednesday, April 9, 2025

Hacker Defense

 People are scammed and hacked every day.   That is a troubling fact, but worse yet is the tactics that they use are constantly changing, from simple phishing attacks to complex stolen-info scams, there are more and more ways to get ripped off.

 I ran across a  post on reddit that had some good advice, and I will share that here.

 

1. **Disconnect Devices**: Turn off Wi-Fi on all devices to stop the hacker’s access.
2. **Enable 2FA**: Use two-factor authentication (2FA) on all accounts.
3. **Contact Email Provider**: Report the hack and regain control of the email account.
4. **Check for Recovery Options**: Use the “Forgot Password” link to reset passwords securely.
5. **Scan Devices**: Run antivirus software to remove malware.
6. **Notify Banks/Creditors**: Protect financial accounts.
7. **Don’t Pay the Hacker**: Ignore ransom demands.
 
I also learned about this site with a specific help site for seniors, also worth a look.
 
https://www.cisa.gov/resources-tools/resources/cisa-cybersecurity-awareness-program-older-american-resources.
 
I would add to that to also set up recovery accounts for MS, email, etc., whenever possible since it will aid in recovering a compromised account much faster.  Make sure that you also update the phone numbers/recovery email addresses  anytime that the information changes.
 

 

 

We need to change our thinking when strangers contact us!

I have a customer/friend.  I will call her Jean.  She contacted me to help her with her PayPal account recently.   When I got there, she described the following scenario.

She has a friend in Norway that is trying to pay her back for a loan (via PayPal).  She tried to receive a payment from the friend, but it was blocked.  She was supposed to unblock her account via instructions provided by her "friend"

 PayPal limits transactions on personal accounts, and if you try to pay or receive an amount greater then their limit you have to upgrade your account first.

 This was for Thousands of dollars, so I naturally assumed that this was a friend/relative, or someone she had known for years.  She said no, this was someone that she met online.  They chatted for some time, and they were both believers. It wasn't until he mentioned (in an indirect way) that he was in a financial hardship that they ever discussed money or financial matters.

Jean is a single 50-60 year old woman, and I don't know anything of her personal life but it seemed very plain to me that this person was taking her for a ride.  I had to tell Jean that I think she was scammed, and I think that the "instructions" may have had her unlock her account so that her "friend" could steal more from her.  While there are controls to help prevent this type of theft, they clearly didn't work in this case.  The scammers are constantly evolving their tactics to work around new policies to protect their users.

 People are taken advantage of every day using some very slick tricks and some very organized behaviors to outright rob, steal identities, empty bank accounts, open lines of credit, and any other conceivable theft against people who are either confused by slick, fast-talking sharks, or just confused in general.

Our default stance when we deal with strangers should be suspicion and defense.  Not giving out information on ourselves that might allow them to access our accounts.  Legitimate businesses won't be put out when we exercise caution.  They understand the world we live in.

It's also a great idea to have someone you can call on when you want a second opinion about things that "just don't feel right"  Feel free to call on me if you want a 2nd opinion.