how to practice - mayne island lions club...kevin mitnick () how to practice safe hex … 2019-04-13...

2019-04-13How to practice safe HEX… #1

HOW TO PRACTICE

‘SAFE HEX’

Mayne Island Lions Club

April 17th, 2019

[email protected]


WELCOME:

AND

SOME DEFINITIONS


WHAT DO WE MEAN BY:

SPAM

SPIM

SPIT

SOCIAL ENGINEERING


WHAT DO WE MEAN BY:

IDENTITY THEFT,

SMISHING

PHISHING, PHARMING

AND

SCAMS


SPAM: Unwanted and

unsolicited email messages

(named after SPAM sandwich

meat created by leftovers from

various roasts etc… -- popular

in earlier days when food was

scarce) – SOME folks are still

addicted to SPAM (less sodium)!


SPIM: Same as SPAM above

using Instant Messaging

SPIT: Same as above using

Voice over IP (VOIP). In this

case, it is misuse of your

ability to make voice calls.


SOCIAL ENGINEERING:

A CON ARTIST ATTEMPTING TO

TRICK YOU INTO REVEALING

YOUR CREDENTIALS,

WHICH WILL BE SUBSEQUENTLY

USED TO STEAL YOUR IDENTITY.

“The Art of Deception” by

KEVIN MITNICK

(www.knowbe4.com)


IDENTITY THEFT: The forging of

transactions using the theft of your

credentials.

A mortgage, a new car, many

products and services on

YOUR ACCOUNT.

SCAMS: The various means by

which IDENTITY THEFT CAN

HAPPEN.


PHISHING, PHARMING:

A derivative of “gone fishing”

Created by telephone PHONE

PHREAKERS in the “bad old

days”

“2600 Club” is a phone

phreaker newsletter


“2600 Club” is a phone

phreaker newsletter

ANYONE REMEMBER THESE?


PHISHING, PHARMING:

TRYING TO HOOK YOU INTO

BECOMING A VICTIM

SPEARPHISHING: AS ABOVE

BUT FOCUSSED ON THE HIGH

GAIN TARGETS

SMISHING: INSTANT MESSAGING

PHISHING


SPEARPHISHING:

FOCUSSED ON THE HIGH GAIN

TARGETS

SENIOR EXECUTIVES, DECISION

MAKERS, HIGH $ VALUE

CONTROLLERS:


FROM THE TRENCHES: The TOP

TEN…….My thanks to lifewire and other resources

for this list:


TEN…….

01 – PHISHING EMAILS AND FAKE WEB PAGES–

This is the most widespread internet and email scam today. A "phishing" email lures you into divulging your login credentials — your username and password — through convincing emails and links to web pages.


NOTE:OVER 80% OF ALL SUCCESSFUL

CYBERCRIMES (in North America)

LAST YEAR BEGAN WITH

A SUCCESSFUL EMAIL PHISHING COMPROMISE


TEN…….

01 – PHISHING EMAILS AND FAKE WEB PAGES – Continued…

These phishing emails will lead you to

fake websites that resemble legitimate credit authorities like CRA, TD BANK, “YOUR” CREDIT UNION or PayPal. The emails will either frighten you or entice you into clicking on a link that delivers you to the phony web page, where you can enter your ID and password.



TEN…….


A common ruse is an urgent need to "confirm your identity." The message will even offer you a story of how your account has been attacked by hackers to trick you into divulging your confidential information. Or a payment failed.

Netflix has become a popular choice.



TEN…….


This is called SOCIAL ENGINEERING: IT IS A CRIME and recent statistics indicate that Canadians lost $Billions last year related to this activity.

The Victoria Time Colonist ran a recent front page alert message about this.




TEN…….


TEN…….

02 – THE NIGERIAN SCAM – Continued…

Many of you may have received an email from a member of a Nigerian family with wealth. It is a desperate cry for help in getting a very large sum of money out of the country. A common variation is a woman in Africa who claimed that her husband had died and that she wanted to leave millions of dollars of his estate to a good church.



TEN…….


This is known as the Nigerian scam, and also as the "4-1-9" (which refers to the section of The Nigerian Criminal Code that deals with fraud) and the "Advance Fee Scam.“

There are other very clever versions where your “long lost relative”, who has died in a traffic accident, has no one left to give the money to and the scammer has found you.



TEN…….


In every variation, the scammer is promising obscenely large payments for small unskilled tasks.

This scam, like most scams, is too good to be true, yet people still fall for this money transfer con game. It has been reported that very greedy people who fell for this scam and travelled to Nigeria to collect have disappeared.




TEN…….


TEN…….

03 – LOTTERY SCAMS – Continued…

Many of us dream of hitting it big in a lottery.

Chances are you will receive at least one intriguing email from someone saying that you did indeed win a huge amount of money.

The seductive visions of wealth may make you overlook that you never even entered this lottery.



TEN…….


This scam will usually come in the form of a conventional email message. It informs you that you have won millions of dollars, and it flatters you with congratulations repeatedly.

The catch: Before you can collect your winnings, you must pay the “processing fee" which can be upwards of several thousands of dollars.



TEN…….


The “processing fee“ will be in the form of a money order or some other negotiable form of payment.

The moment the bad guy cashes your money order, you lose.

Usually, by the time you realize you have been suckered by a con artist, they are long gone with your money.



TEN…….



TEN…….

04 – ADVANCED FEES FOR CREDIT CARD SCAMS

– Continued…

If you are thinking about applying for a “pre-approved” loan or a credit card that charges an upfront fee, ask yourself: “Why would a bank do that?” These scams are obvious to people who take the time to scrutinize the offer.

Reputable credit card companies may charge an annual fee, but it is never charged up front (again, why on Earth would they? It's more lucrative to apply the fee to your credit balance and potentially collect interest on it!).




TEN…….

04 – ADVANCED FEES FOR CREDIT CARD SCAMS

– Continued…

As for incredible pre-approved loans for half-a-million dollar homes! Use your common sense! These people do not know you or your credit situation, yet they are willing to offer massive credit limits? Not a chance.

Sadly, far too many victims are pressured by financial problems and are susceptible to this con. If only one in every thousand people falls for this scam, the scammers have won.



TEN…….



TEN…….

05 – OFFER TO PAY MORE FOR PRODUCTS SCAMS –Continued…

This one involves an item YOU might have listed for sale such as a car, truck, or some other expensive item. The scammer finds your ad and sends you an email offering to pay much more than your asking price.

The reason for overpayment is supposedly related to the international fees to ship the car overseas or some other wrinkle.

In return, you are to send him the car and the cash for the difference.



TEN…….

05 – OFFER TO PAY MORE FOR PRODUCTS SCAMS – Continued…

The money order you receive looks real so you deposit it into your account. In a couple of days or the time it takes to clear, your bank informs you the money order was fake and demands you pay that amount back immediately.


05 – OFFER TO PAY MORE FOR PRODUCTS SCAMS – Continued…

In most documented versions of this money order scam, the money order was indeed an authentic document, but it was never authorized by the bank it was stolen from.

In the case of cashier's checks, it is usually a convincing forgery. The results are devastating — you have lost the car, the cash you sent with the car, and you owe a hefty sum of money to your bank (and potentially fees) to cover the bad money order or the fake cashier's check.

OOOPS…


TEN…….



TEN…….



TEN…….

06 – EMPLOYMENT SEARCH SCAMS – Continued…

You have posted your resume, with at least some personal data accessible by potential employers, on a legitimate employment site.

You receive a job offer to become a "financial representative" of an overseas company you have never even heard of before. The reason they want to hire you is that this company has problems accepting money from US customers and they need you to handle those payments.

You will be paid a percentage commission per transaction.If you apply, you will provide the scammer with your personal data, such as bank account information, so you can “get paid.”



TEN…….

06 – EMPLOYMENT SEARCH SCAMS – Continued…

Instead, you will experience some, or all, of the following:

• Identity theft

• An emptied bank account

• You may receive fake checks or money orders for payments which you deposit into your account but must send the majority of it to your “employer.”

Soon you will owe money to your bank because the checks or money orders were fake.



TEN…….



TEN…….

07 – DISASTER RELIEF SCAMS – Continued…

What do NY City on 9/11, the Tohoku Tsunami in 2011,the Fort McMurray and California wildfires and Hurricane Katrina have in common?

These are disasters in which people died or lost everything. In times like these, good people pull together to help the survivors, including through online donations.

Shortly after the disaster strikes the RED CROSS and other agencies jump into gear to address the need.



TEN…….

07 – DISASTER RELIEF SCAMS – Continued…

Enter the scammer, who sets up fake charity

websites to steal money donated to the victims of disasters.

If your request for the donation came via email, there is a chance it is a phishing attempt. Do not click on any links in the email or provide any bank account or credit card information.

You can avoid this scam and still help those in need by contacting recognized charitable organizations directly by phone or through their websites that you navigate to directly (and not through an email link!).



TEN…….



TEN…….

08 – TRAVEL SCAMS – Continued…

These scams are most active during the summer months. You receive an email with the offer to get amazingly low fares to some exotic destination, but you must book it today or the offer expires that evening.

If you call, you’ll find out the travel is free but the hotel rates are highly overpriced.

Maybe you get the “TELEPHONE CALL” telling you

that this is your lucky day! Either way you will not

like the result!



TEN…….

08 – TRAVEL SCAMS – Continued…

Some TRAVEL SCAMS can offer you rock-bottom prices but hide certain high fees until you “sign on the dotted line.” Others, in order to give you the freebie, will make you sit through a timeshare pitch at the destination. Still, others may just take your money and deliver nothing. Getting a refund, should you decide to cancel, is usually impossible.

Your best strategy is to book your trip in person, through a reputable travel agency or proven legitimate online service like Travelocity or Expedia.

OR stay home and relax!



TEN…….



TEN…….

09 – “MAKE MONEY FAST” CHAIN EMAILS

A classic pyramid scheme: You receive an email with a list of names and are asked to send 5 dollars (or so) by mail to the person whose name is at the top of the list, add your own name to the bottom, and forward the updated list to a number of other people.

The author of this scam letter painstakingly explains that, if more and more people join this chain, when it’s your turn to receive the money, you might even become a millionaire!



TEN…….

09 – “MAKE MONEY FAST” CHAIN EMAILS

Bear in mind that, most times, the list of names is manipulated to keep the top name (the creator of the scam, or his friends) on top, permanently.

As with the previously circulating snail-mail version of this chain, the email edition is just as illegal. Should you choose to participate, you risk being charged with fraud — definitely not something you want on your record or resume.



TEN…….



TEN…….

TOP 10 – NUMBER 10

Although not precisely a scam like the others on this list, this scheme is deceptive and dangerous.

It works like this: You can turn your computer into a money-making machine, just like howthousands of other now-rich people have done. Just send money for instructions on how to download and install a program on your computer that will indeed turn it into a money-making machine…for spammers.



TEN…….

TOP 10 – NUMBER 10

At sign-up, you get a unique ID and you have to give them your PayPal account information for the “big money” deposits you’ll get “soon.” The program that you are supposed to run, sometimes 24/7, opens multiple ad windows, repeatedly, thus generating per-click revenue for spammers.

This is just bad business, so don't get seduced into trying it.



TEN…….

MAJOR TAKEAWAYS FROM THE TOP TEN:

IF IT LOOKS TOO GOOD TO BE TRUE – IT LIKELY IS A SCAM.

TRUST IF YOU MUST BUT VERIFY USING LEGITIMATE SOURCES.

NEVER CLICK ON ANY LINK THAT COMES TO YOU UNANNOUNCED OR UNEXPECTED.

KEY IN THAT “SUPPOSED LEGITIMATE LINK” {MANUALLY}TO DETERMINE IF IT IS INDEED LEGITIMATE.

STAY CURRENT ON FRAUD ALERTS!


THE LATEST THIS WEEK

FROM SCAMMERS CENTRAL

WHY IS THIS A SCAM ATTEMPT?

My brother-in-law, Gerald Day, Died in 2013.

His last email distribution list continues to be

used to try to trick me and the others.


CLICKING ON THIS LINK

WOULD DROP YOU INTO

VERY DEEP DOODOO

AND

YOUR IDENTITY WOULD

BE STOLEN --

ALONG WITH

NASTY MALWARE BEING

DEPOSITED ON YOUR

MACHINE.


ANOTHER RESOURCE TO

PRACTICE SAFE “HEX”

THE LITTLE BLACK

BOOK OF SCAMS

Link:

http://www.competitionbureau.gc.ca/eic

/site/cb-bc.nsf/eng/04333.html

http://www.competitionbureau.gc.ca/eic/site/cb-bc.nsf/eng/04333.html


MANY THANKS TO

LION LEN EPP

FOR SHARING THIS

RESOURCE:

THE LITTLE

BLACK BOOK OF

SCAMS


THE RESOURCE TOPICS

FROM THE LITTLE BLACK

BOOK OF SCAMS……

1. SUBSCRIPTION TRAPS: Good deals can bait you

into falling for expensive traps!

2. IDENTITY THEFT: Help ensure your identity

remains yours alone!

3. CEO SCAMS: Your CEO is asking for money

urgently; make sure the email is legitimate!

NOTE: THIS IS AN PRIME EXAMPLE OF

SPEARPHISHING!!

4. HEALTH AND MEDICAL SCAMS: Watch out for

magical cures that offer quick and easy fixes.

5. ROMANCE SCAMS: Who is really behind the

keyboard?


THE RESOURCE TOPICS


BOOK OF SCAMS……

6. BUSINESS SCAMS Stay up to date on the schemes

targeting businesses!

7. PHISHING AND SMISHING SCAMS Be on the

lookout. Messages are easily fabricated!

8. TAX SCAMS Got a call or email from the CRA?

Make sure it’s real!

9. DOOR-TO-DOOR SCAMS Knock, knock! Who’s

there? A scammer!

10.EMERGENCY SCAMS Caring grandparents, don’t

act too quickly!


THE RESOURCE TOPICS


BOOK OF SCAMS……

11. PURCHASE OF MERCHANDISE SCAMS Not all online

vendors are reputable!

12. SALE OF MERCHANDISE SCAMS Scammers can pose

as buyers.

RED FLAGS: THINGS TO WATCH FOR Learn to

recognize the signs that something is amiss.

Wire transfer. Unsolicited calls.

Overpayment. Unsolicited friend requests

on social media.

Spelling mistakes. Astounding mail offers.

Personal information request. It’s just too good to be

true.


FROM THE LITTLE BLACK BOOK

OF SCAMS:

SUBSCRIPTION TRAPS:



OF SCAMS:

SUBSCRIPTION TRAPS:



OF SCAMS:

IDENTITY THEFT:



OF SCAMS:

CEO SCAMS



OF SCAMS:

HEALTH AND MEDICAL SCAMS



OF SCAMS:

ROMANCE SCAMS



OF SCAMS:

BUSINESS SCAMS



OF SCAMS:

The City of Tallahassee Florida Lost Half a Million

Dollars in an Insidious Payroll Attack –

Payroll direct deposit records were manipulated……

April 15th 2019

Grant MacEwan University loses $11.8 million to

scammers in phishing attack – Aug. 23, 2017

Low-level MacEwan University staffers were tricked

into transferring $11.8 million into scammers’ bank

accounts in what one expert said is among the largest

publicly disclosed phishing scams.



OF SCAMS:

PHISHING AND SMISHING SCAMS



OF SCAMS:

TAX SCAMS



OF SCAMS:TAX SCAMS



OF SCAMS:

DOOR-TO-DOOR SCAMS



OF SCAMS:

EMERGENCY SCAMS



OF SCAMS:

PURCHASE OF MERCHANDISE SCAMS



OF SCAMS:

SALE OF MERCHANDISE SCAMS



OF SCAMS:

HATS OFF TO THE CREATORS OF

THIS LITTLE BLACK BOOK OF

SCAMS!

WONDERFUL CARTOONS AND

GREAT TIPS FOR PRACTICING

SAFE “HEX”

PLEASE GET YOUR COPY!!!

http://www.competitionbureau.gc.ca/eic

/site/cb-bc.nsf/eng/04333.html

http://www.competitionbureau.gc.ca/eic/site/cb-bc.nsf/eng/04333.html



OF SCAMS:

AND THE SCAMMERS

KEEP ON TRYING!


FROM MY EMAIL IN BASKET

YESTERDAY:

Tue 2019-04-16 8:39 AM

Interac e-Transfer ®

<[email protected]>

[SPAM][SUSPICIOUS MESSAGE] INTERAC

e-Transfer: Canada Revenue Agency (CRA)

sent you money.

DO AN IMMEDIATE GOOGLE SEARCH ON:

‘interac.ca scam’


FROM MY EMAIL IN BASKET

YESTERDAY April 16, 2019:


Fake Transfers. Criminals (aka CRA in this

example) may attempt to convince you

they have sent you money, by sending

you an email that appears to be using

the Interac e-Transfer service, but isn’t.

Fraud Update - interac.ca

https://www.interac.ca/en/fraud-update

https://www.interac.ca/en/fraud-update


TIME FOR SOME OF

YOUR STORIES AND

QUESTIONS…..


THANK YOU FOR

YOUR TIME AND

ATTENTION:

LOOK BOTH WAYS

WHEN CROSSING

THE NET!

[email protected]

how to practice - mayne island lions club...kevin mitnick () how to practice safe hex … 2019-04-13...

Documents