2019-04-13How to practice safe HEX… #1
HOW TO PRACTICE
‘SAFE HEX’
Mayne Island Lions Club
April 17th, 2019
2019-04-13How to practice safe HEX… #2
WELCOME:
AND
SOME DEFINITIONS
2019-04-13How to practice safe HEX… #3
WHAT DO WE MEAN BY:
SPAM
SPIM
SPIT
SOCIAL ENGINEERING
2019-04-17How to practice safe HEX… #4
WHAT DO WE MEAN BY:
IDENTITY THEFT,
SMISHING
PHISHING, PHARMING
AND
SCAMS
2019-04-13How to practice safe HEX… #5
SPAM: Unwanted and
unsolicited email messages
(named after SPAM sandwich
meat created by leftovers from
various roasts etc… -- popular
in earlier days when food was
scarce) – SOME folks are still
addicted to SPAM (less sodium)!
2019-04-17How to practice safe HEX… #6
SPIM: Same as SPAM above
using Instant Messaging
SPIT: Same as above using
Voice over IP (VOIP). In this
case, it is misuse of your
ability to make voice calls.
2019-04-17How to practice safe HEX… #7
SOCIAL ENGINEERING:
A CON ARTIST ATTEMPTING TO
TRICK YOU INTO REVEALING
YOUR CREDENTIALS,
WHICH WILL BE SUBSEQUENTLY
USED TO STEAL YOUR IDENTITY.
“The Art of Deception” by
KEVIN MITNICK
(www.knowbe4.com)
2019-04-13How to practice safe HEX… #8
IDENTITY THEFT: The forging of
transactions using the theft of your
credentials.
A mortgage, a new car, many
products and services on
YOUR ACCOUNT.
SCAMS: The various means by
which IDENTITY THEFT CAN
HAPPEN.
2019-04-17How to practice safe HEX… #9
PHISHING, PHARMING:
A derivative of “gone fishing”
Created by telephone PHONE
PHREAKERS in the “bad old
days”
“2600 Club” is a phone
phreaker newsletter
2019-04-17How to practice safe HEX… #10
“2600 Club” is a phone
phreaker newsletter
ANYONE REMEMBER THESE?
2019-04-17How to practice safe HEX… #11
PHISHING, PHARMING:
TRYING TO HOOK YOU INTO
BECOMING A VICTIM
SPEARPHISHING: AS ABOVE
BUT FOCUSSED ON THE HIGH
GAIN TARGETS
SMISHING: INSTANT MESSAGING
PHISHING
2019-04-17How to practice safe HEX… #12
SPEARPHISHING:
FOCUSSED ON THE HIGH GAIN
TARGETS
SENIOR EXECUTIVES, DECISION
MAKERS, HIGH $ VALUE
CONTROLLERS:
2019-04-17How to practice safe HEX… #13
SPEARPHISHING:
FOCUSSED ON THE HIGH GAIN
TARGETS
SENIOR EXECUTIVES, DECISION
MAKERS, HIGH $ VALUE
CONTROLLERS:
2019-04-13How to practice safe HEX… #14
FROM THE TRENCHES: The TOP
TEN…….My thanks to lifewire and other resources
for this list:
FROM THE TRENCHES: The TOP
TEN…….
01 – PHISHING EMAILS AND FAKE WEB PAGES–
This is the most widespread internet and email scam today. A "phishing" email lures you into divulging your login credentials — your username and password — through convincing emails and links to web pages.
2019-04-13How to practice safe HEX… #15
NOTE:OVER 80% OF ALL SUCCESSFUL
CYBERCRIMES (in North America)
LAST YEAR BEGAN WITH
A SUCCESSFUL EMAIL PHISHING COMPROMISE
FROM THE TRENCHES: The TOP
TEN…….
01 – PHISHING EMAILS AND FAKE WEB PAGES – Continued…
These phishing emails will lead you to
fake websites that resemble legitimate credit authorities like CRA, TD BANK, “YOUR” CREDIT UNION or PayPal. The emails will either frighten you or entice you into clicking on a link that delivers you to the phony web page, where you can enter your ID and password.
2019-04-13How to practice safe HEX… #16
FROM THE TRENCHES: The TOP
TEN…….
01 – PHISHING EMAILS AND FAKE WEB PAGES – Continued…
A common ruse is an urgent need to "confirm your identity." The message will even offer you a story of how your account has been attacked by hackers to trick you into divulging your confidential information. Or a payment failed.
Netflix has become a popular choice.
2019-04-13How to practice safe HEX… #17
FROM THE TRENCHES: The TOP
TEN…….
01 – PHISHING EMAILS AND FAKE WEB PAGES – Continued…
This is called SOCIAL ENGINEERING: IT IS A CRIME and recent statistics indicate that Canadians lost $Billions last year related to this activity.
The Victoria Time Colonist ran a recent front page alert message about this.
2019-04-13How to practice safe HEX… #18
2019-04-13How to practice safe HEX… #19
FROM THE TRENCHES: The TOP
TEN…….
FROM THE TRENCHES: The TOP
TEN…….
02 – THE NIGERIAN SCAM – Continued…
Many of you may have received an email from a member of a Nigerian family with wealth. It is a desperate cry for help in getting a very large sum of money out of the country. A common variation is a woman in Africa who claimed that her husband had died and that she wanted to leave millions of dollars of his estate to a good church.
2019-04-13How to practice safe HEX… #20
FROM THE TRENCHES: The TOP
TEN…….
02 – THE NIGERIAN SCAM – Continued…
This is known as the Nigerian scam, and also as the "4-1-9" (which refers to the section of The Nigerian Criminal Code that deals with fraud) and the "Advance Fee Scam.“
There are other very clever versions where your “long lost relative”, who has died in a traffic accident, has no one left to give the money to and the scammer has found you.
2019-04-13How to practice safe HEX… #21
FROM THE TRENCHES: The TOP
TEN…….
02 – THE NIGERIAN SCAM – Continued…
In every variation, the scammer is promising obscenely large payments for small unskilled tasks.
This scam, like most scams, is too good to be true, yet people still fall for this money transfer con game. It has been reported that very greedy people who fell for this scam and travelled to Nigeria to collect have disappeared.
2019-04-13How to practice safe HEX… #22
2019-04-13How to practice safe HEX… #23
FROM THE TRENCHES: The TOP
TEN…….
FROM THE TRENCHES: The TOP
TEN…….
03 – LOTTERY SCAMS – Continued…
Many of us dream of hitting it big in a lottery.
Chances are you will receive at least one intriguing email from someone saying that you did indeed win a huge amount of money.
The seductive visions of wealth may make you overlook that you never even entered this lottery.
2019-04-13How to practice safe HEX… #24
FROM THE TRENCHES: The TOP
TEN…….
03 – LOTTERY SCAMS – Continued…
This scam will usually come in the form of a conventional email message. It informs you that you have won millions of dollars, and it flatters you with congratulations repeatedly.
The catch: Before you can collect your winnings, you must pay the “processing fee" which can be upwards of several thousands of dollars.
2019-04-13How to practice safe HEX… #25
FROM THE TRENCHES: The TOP
TEN…….
03 – LOTTERY SCAMS – Continued…
The “processing fee“ will be in the form of a money order or some other negotiable form of payment.
The moment the bad guy cashes your money order, you lose.
Usually, by the time you realize you have been suckered by a con artist, they are long gone with your money.
2019-04-13How to practice safe HEX… #26
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #27
FROM THE TRENCHES: The TOP
TEN…….
04 – ADVANCED FEES FOR CREDIT CARD SCAMS
– Continued…
If you are thinking about applying for a “pre-approved” loan or a credit card that charges an upfront fee, ask yourself: “Why would a bank do that?” These scams are obvious to people who take the time to scrutinize the offer.
Reputable credit card companies may charge an annual fee, but it is never charged up front (again, why on Earth would they? It's more lucrative to apply the fee to your credit balance and potentially collect interest on it!).
2019-04-13How to practice safe HEX… #28
2019-04-13How to practice safe HEX… #29
FROM THE TRENCHES: The TOP
TEN…….
04 – ADVANCED FEES FOR CREDIT CARD SCAMS
– Continued…
As for incredible pre-approved loans for half-a-million dollar homes! Use your common sense! These people do not know you or your credit situation, yet they are willing to offer massive credit limits? Not a chance.
Sadly, far too many victims are pressured by financial problems and are susceptible to this con. If only one in every thousand people falls for this scam, the scammers have won.
2019-04-13How to practice safe HEX… #30
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #31
FROM THE TRENCHES: The TOP
TEN…….
05 – OFFER TO PAY MORE FOR PRODUCTS SCAMS –Continued…
This one involves an item YOU might have listed for sale such as a car, truck, or some other expensive item. The scammer finds your ad and sends you an email offering to pay much more than your asking price.
The reason for overpayment is supposedly related to the international fees to ship the car overseas or some other wrinkle.
In return, you are to send him the car and the cash for the difference.
2019-04-13How to practice safe HEX… #32
FROM THE TRENCHES: The TOP
TEN…….
05 – OFFER TO PAY MORE FOR PRODUCTS SCAMS – Continued…
The money order you receive looks real so you deposit it into your account. In a couple of days or the time it takes to clear, your bank informs you the money order was fake and demands you pay that amount back immediately.
2019-04-13How to practice safe HEX… #33
05 – OFFER TO PAY MORE FOR PRODUCTS SCAMS – Continued…
In most documented versions of this money order scam, the money order was indeed an authentic document, but it was never authorized by the bank it was stolen from.
In the case of cashier's checks, it is usually a convincing forgery. The results are devastating — you have lost the car, the cash you sent with the car, and you owe a hefty sum of money to your bank (and potentially fees) to cover the bad money order or the fake cashier's check.
OOOPS…
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #34
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #35
FROM THE TRENCHES: The TOP
TEN…….
06 – EMPLOYMENT SEARCH SCAMS – Continued…
You have posted your resume, with at least some personal data accessible by potential employers, on a legitimate employment site.
You receive a job offer to become a "financial representative" of an overseas company you have never even heard of before. The reason they want to hire you is that this company has problems accepting money from US customers and they need you to handle those payments.
You will be paid a percentage commission per transaction.If you apply, you will provide the scammer with your personal data, such as bank account information, so you can “get paid.”
2019-04-13How to practice safe HEX… #36
FROM THE TRENCHES: The TOP
TEN…….
06 – EMPLOYMENT SEARCH SCAMS – Continued…
Instead, you will experience some, or all, of the following:
• Identity theft
• An emptied bank account
• You may receive fake checks or money orders for payments which you deposit into your account but must send the majority of it to your “employer.”
Soon you will owe money to your bank because the checks or money orders were fake.
2019-04-13How to practice safe HEX… #37
FROM THE TRENCHES: The TOP
TEN…….
2019-04-17How to practice safe HEX… #38
FROM THE TRENCHES: The TOP
TEN…….
07 – DISASTER RELIEF SCAMS – Continued…
What do NY City on 9/11, the Tohoku Tsunami in 2011,the Fort McMurray and California wildfires and Hurricane Katrina have in common?
These are disasters in which people died or lost everything. In times like these, good people pull together to help the survivors, including through online donations.
Shortly after the disaster strikes the RED CROSS and other agencies jump into gear to address the need.
2019-04-13How to practice safe HEX… #39
FROM THE TRENCHES: The TOP
TEN…….
07 – DISASTER RELIEF SCAMS – Continued…
Enter the scammer, who sets up fake charity
websites to steal money donated to the victims of disasters.
If your request for the donation came via email, there is a chance it is a phishing attempt. Do not click on any links in the email or provide any bank account or credit card information.
You can avoid this scam and still help those in need by contacting recognized charitable organizations directly by phone or through their websites that you navigate to directly (and not through an email link!).
2019-04-13How to practice safe HEX… #40
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #41
FROM THE TRENCHES: The TOP
TEN…….
08 – TRAVEL SCAMS – Continued…
These scams are most active during the summer months. You receive an email with the offer to get amazingly low fares to some exotic destination, but you must book it today or the offer expires that evening.
If you call, you’ll find out the travel is free but the hotel rates are highly overpriced.
Maybe you get the “TELEPHONE CALL” telling you
that this is your lucky day! Either way you will not
like the result!
2019-04-17How to practice safe HEX… #42
FROM THE TRENCHES: The TOP
TEN…….
08 – TRAVEL SCAMS – Continued…
Some TRAVEL SCAMS can offer you rock-bottom prices but hide certain high fees until you “sign on the dotted line.” Others, in order to give you the freebie, will make you sit through a timeshare pitch at the destination. Still, others may just take your money and deliver nothing. Getting a refund, should you decide to cancel, is usually impossible.
Your best strategy is to book your trip in person, through a reputable travel agency or proven legitimate online service like Travelocity or Expedia.
OR stay home and relax!
2019-04-13How to practice safe HEX… #43
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #44
FROM THE TRENCHES: The TOP
TEN…….
09 – “MAKE MONEY FAST” CHAIN EMAILS
A classic pyramid scheme: You receive an email with a list of names and are asked to send 5 dollars (or so) by mail to the person whose name is at the top of the list, add your own name to the bottom, and forward the updated list to a number of other people.
The author of this scam letter painstakingly explains that, if more and more people join this chain, when it’s your turn to receive the money, you might even become a millionaire!
2019-04-17How to practice safe HEX… #45
FROM THE TRENCHES: The TOP
TEN…….
09 – “MAKE MONEY FAST” CHAIN EMAILS
Bear in mind that, most times, the list of names is manipulated to keep the top name (the creator of the scam, or his friends) on top, permanently.
As with the previously circulating snail-mail version of this chain, the email edition is just as illegal. Should you choose to participate, you risk being charged with fraud — definitely not something you want on your record or resume.
2019-04-13How to practice safe HEX… #46
FROM THE TRENCHES: The TOP
TEN…….
2019-04-13How to practice safe HEX… #47
FROM THE TRENCHES: The TOP
TEN…….
TOP 10 – NUMBER 10
Although not precisely a scam like the others on this list, this scheme is deceptive and dangerous.
It works like this: You can turn your computer into a money-making machine, just like howthousands of other now-rich people have done. Just send money for instructions on how to download and install a program on your computer that will indeed turn it into a money-making machine…for spammers.
2019-04-17How to practice safe HEX… #48
FROM THE TRENCHES: The TOP
TEN…….
TOP 10 – NUMBER 10
At sign-up, you get a unique ID and you have to give them your PayPal account information for the “big money” deposits you’ll get “soon.” The program that you are supposed to run, sometimes 24/7, opens multiple ad windows, repeatedly, thus generating per-click revenue for spammers.
This is just bad business, so don't get seduced into trying it.
2019-04-13How to practice safe HEX… #49
FROM THE TRENCHES: The TOP
TEN…….
MAJOR TAKEAWAYS FROM THE TOP TEN:
IF IT LOOKS TOO GOOD TO BE TRUE – IT LIKELY IS A SCAM.
TRUST IF YOU MUST BUT VERIFY USING LEGITIMATE SOURCES.
NEVER CLICK ON ANY LINK THAT COMES TO YOU UNANNOUNCED OR UNEXPECTED.
KEY IN THAT “SUPPOSED LEGITIMATE LINK” {MANUALLY}TO DETERMINE IF IT IS INDEED LEGITIMATE.
STAY CURRENT ON FRAUD ALERTS!
2019-04-13How to practice safe HEX… #50
THE LATEST THIS WEEK
FROM SCAMMERS CENTRAL
WHY IS THIS A SCAM ATTEMPT?
My brother-in-law, Gerald Day, Died in 2013.
His last email distribution list continues to be
used to try to trick me and the others.
2019-04-13How to practice safe HEX… #51
CLICKING ON THIS LINK
WOULD DROP YOU INTO
VERY DEEP DOODOO
AND
YOUR IDENTITY WOULD
BE STOLEN --
ALONG WITH
NASTY MALWARE BEING
DEPOSITED ON YOUR
MACHINE.
2019-04-17How to practice safe HEX… #52
ANOTHER RESOURCE TO
PRACTICE SAFE “HEX”
THE LITTLE BLACK
BOOK OF SCAMS
Link:
http://www.competitionbureau.gc.ca/eic
/site/cb-bc.nsf/eng/04333.html
2019-04-13How to practice safe HEX… #53
MANY THANKS TO
LION LEN EPP
FOR SHARING THIS
RESOURCE:
THE LITTLE
BLACK BOOK OF
SCAMS
2019-04-17How to practice safe HEX… #54
THE RESOURCE TOPICS
FROM THE LITTLE BLACK
BOOK OF SCAMS……
1. SUBSCRIPTION TRAPS: Good deals can bait you
into falling for expensive traps!
2. IDENTITY THEFT: Help ensure your identity
remains yours alone!
3. CEO SCAMS: Your CEO is asking for money
urgently; make sure the email is legitimate!
NOTE: THIS IS AN PRIME EXAMPLE OF
SPEARPHISHING!!
4. HEALTH AND MEDICAL SCAMS: Watch out for
magical cures that offer quick and easy fixes.
5. ROMANCE SCAMS: Who is really behind the
keyboard?
2019-04-17How to practice safe HEX… #55
THE RESOURCE TOPICS
FROM THE LITTLE BLACK
BOOK OF SCAMS……
6. BUSINESS SCAMS Stay up to date on the schemes
targeting businesses!
7. PHISHING AND SMISHING SCAMS Be on the
lookout. Messages are easily fabricated!
8. TAX SCAMS Got a call or email from the CRA?
Make sure it’s real!
9. DOOR-TO-DOOR SCAMS Knock, knock! Who’s
there? A scammer!
10.EMERGENCY SCAMS Caring grandparents, don’t
act too quickly!
2019-04-17How to practice safe HEX… #56
THE RESOURCE TOPICS
FROM THE LITTLE BLACK
BOOK OF SCAMS……
11. PURCHASE OF MERCHANDISE SCAMS Not all online
vendors are reputable!
12. SALE OF MERCHANDISE SCAMS Scammers can pose
as buyers.
RED FLAGS: THINGS TO WATCH FOR Learn to
recognize the signs that something is amiss.
Wire transfer. Unsolicited calls.
Overpayment. Unsolicited friend requests
on social media.
Spelling mistakes. Astounding mail offers.
Personal information request. It’s just too good to be
true.
2019-04-13How to practice safe HEX… #57
FROM THE LITTLE BLACK BOOK
OF SCAMS:
SUBSCRIPTION TRAPS:
2019-04-17How to practice safe HEX… #58
FROM THE LITTLE BLACK BOOK
OF SCAMS:
SUBSCRIPTION TRAPS:
2019-04-13How to practice safe HEX… #59
FROM THE LITTLE BLACK BOOK
OF SCAMS:
IDENTITY THEFT:
2019-04-17How to practice safe HEX… #60
FROM THE LITTLE BLACK BOOK
OF SCAMS:
IDENTITY THEFT:
2019-04-17How to practice safe HEX… #61
FROM THE LITTLE BLACK BOOK
OF SCAMS:
CEO SCAMS
2019-04-17How to practice safe HEX… #62
FROM THE LITTLE BLACK BOOK
OF SCAMS:
CEO SCAMS
2019-04-13How to practice safe HEX… #63
FROM THE LITTLE BLACK BOOK
OF SCAMS:
HEALTH AND MEDICAL SCAMS
2019-04-17How to practice safe HEX… #64
FROM THE LITTLE BLACK BOOK
OF SCAMS:
HEALTH AND MEDICAL SCAMS
2019-04-13How to practice safe HEX… #65
FROM THE LITTLE BLACK BOOK
OF SCAMS:
ROMANCE SCAMS
2019-04-17How to practice safe HEX… #66
FROM THE LITTLE BLACK BOOK
OF SCAMS:
ROMANCE SCAMS
2019-04-13How to practice safe HEX… #67
FROM THE LITTLE BLACK BOOK
OF SCAMS:
BUSINESS SCAMS
2019-04-17How to practice safe HEX… #68
FROM THE LITTLE BLACK BOOK
OF SCAMS:
BUSINESS SCAMS
2019-04-17How to practice safe HEX… #69
FROM THE LITTLE BLACK BOOK
OF SCAMS:
The City of Tallahassee Florida Lost Half a Million
Dollars in an Insidious Payroll Attack –
Payroll direct deposit records were manipulated……
April 15th 2019
Grant MacEwan University loses $11.8 million to
scammers in phishing attack – Aug. 23, 2017
Low-level MacEwan University staffers were tricked
into transferring $11.8 million into scammers’ bank
accounts in what one expert said is among the largest
publicly disclosed phishing scams.
2019-04-17How to practice safe HEX… #70
FROM THE LITTLE BLACK BOOK
OF SCAMS:
PHISHING AND SMISHING SCAMS
2019-04-17How to practice safe HEX… #71
FROM THE LITTLE BLACK BOOK
OF SCAMS:
PHISHING AND SMISHING SCAMS
2019-04-17How to practice safe HEX… #72
FROM THE LITTLE BLACK BOOK
OF SCAMS:
TAX SCAMS
2019-04-17How to practice safe HEX… #73
FROM THE LITTLE BLACK BOOK
OF SCAMS:TAX SCAMS
2019-04-13How to practice safe HEX… #74
FROM THE LITTLE BLACK BOOK
OF SCAMS:
DOOR-TO-DOOR SCAMS
2019-04-17How to practice safe HEX… #75
FROM THE LITTLE BLACK BOOK
OF SCAMS:
DOOR-TO-DOOR SCAMS
2019-04-17How to practice safe HEX… #76
FROM THE LITTLE BLACK BOOK
OF SCAMS:
EMERGENCY SCAMS
2019-04-17How to practice safe HEX… #77
FROM THE LITTLE BLACK BOOK
OF SCAMS:
EMERGENCY SCAMS
2019-04-17How to practice safe HEX… #78
FROM THE LITTLE BLACK BOOK
OF SCAMS:
PURCHASE OF MERCHANDISE SCAMS
2019-04-17How to practice safe HEX… #79
FROM THE LITTLE BLACK BOOK
OF SCAMS:
PURCHASE OF MERCHANDISE SCAMS
2019-04-17How to practice safe HEX… #80
FROM THE LITTLE BLACK BOOK
OF SCAMS:
SALE OF MERCHANDISE SCAMS
2019-04-17How to practice safe HEX… #81
FROM THE LITTLE BLACK BOOK
OF SCAMS:
SALE OF MERCHANDISE SCAMS
2019-04-17How to practice safe HEX… #82
FROM THE LITTLE BLACK BOOK
OF SCAMS:
HATS OFF TO THE CREATORS OF
THIS LITTLE BLACK BOOK OF
SCAMS!
WONDERFUL CARTOONS AND
GREAT TIPS FOR PRACTICING
SAFE “HEX”
PLEASE GET YOUR COPY!!!
http://www.competitionbureau.gc.ca/eic
/site/cb-bc.nsf/eng/04333.html
2019-04-17How to practice safe HEX… #83
FROM THE LITTLE BLACK BOOK
OF SCAMS:
AND THE SCAMMERS
KEEP ON TRYING!
2019-04-13How to practice safe HEX… #84
FROM MY EMAIL IN BASKET
YESTERDAY:
Tue 2019-04-16 8:39 AM
Interac e-Transfer ®
[SPAM][SUSPICIOUS MESSAGE] INTERAC
e-Transfer: Canada Revenue Agency (CRA)
sent you money.
DO AN IMMEDIATE GOOGLE SEARCH ON:
‘interac.ca scam’
2019-04-16How to practice safe HEX… #85
FROM MY EMAIL IN BASKET
YESTERDAY April 16, 2019:
2019-04-17How to practice safe HEX… #86
Fake Transfers. Criminals (aka CRA in this
example) may attempt to convince you
they have sent you money, by sending
you an email that appears to be using
the Interac e-Transfer service, but isn’t.
Fraud Update - interac.ca
https://www.interac.ca/en/fraud-update
2019-04-17How to practice safe HEX… #87
TIME FOR SOME OF
YOUR STORIES AND
QUESTIONS…..
2019-04-17How to practice safe HEX… #88
THANK YOU FOR
YOUR TIME AND
ATTENTION:
LOOK BOTH WAYS
WHEN CROSSING
THE NET!