{"id":176,"date":"2019-01-03T12:24:37","date_gmt":"2019-01-03T10:24:37","guid":{"rendered":"https:\/\/binaryvikings.io\/?p=176"},"modified":"2019-01-04T16:21:55","modified_gmt":"2019-01-04T14:21:55","slug":"was-under-attack-change-your-access-data","status":"publish","type":"post","link":"https:\/\/binaryvikings.io\/?p=176","title":{"rendered":"*** was under attack! Change your access data!"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-178\" src=\"https:\/\/binaryvikings.io\/wp-content\/uploads\/2019\/01\/scamemailheader.png\" alt=\"\" width=\"865\" height=\"242\" srcset=\"https:\/\/binaryvikings.io\/wp-content\/uploads\/2019\/01\/scamemailheader.png 865w, https:\/\/binaryvikings.io\/wp-content\/uploads\/2019\/01\/scamemailheader-300x84.png 300w, https:\/\/binaryvikings.io\/wp-content\/uploads\/2019\/01\/scamemailheader-768x215.png 768w\" sizes=\"auto, (max-width: 865px) 100vw, 865px\" \/><\/p>\n<h1>What the scam?!<\/h1>\n<p>Email scams! We&#8217;ve most likely all tried it and while most of the scams are easy to spot, there will be some that are less easy and more scary.<\/p>\n<p>It might appear less scary if the email is sent from weiufgwefug@whateverbiz-lookinglikearealcompany.com &#8211; But what about when it is then sent from your own account? But is it really sent from your own account?<\/p>\n<p>The fact that it shows your email in the &#8220;sent&#8221; field, doesn&#8217;t necessarily mean that it was indeed sent from your own account. This can be done with email spoofing and will appear as if it was sent from your own email.<\/p>\n<p>In layman&#8217;s terms; imagine you&#8217;re the perpetrator, sending a package at the post office, but the address you put on the label, is also the return address, but neither address is your own.<\/p>\n<h1>Trending email scam.<\/h1>\n<p>A popular email scam at the moment is one where the perpetrator claims to have footage of you, in an intimate situation, while also having recorded what is on the screen. I have put the exact email below:<\/p>\n<p><em><span style=\"color: #999999;\">&#8220;Hello!<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">As you may have noticed, I sent you an email from your account.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">This means that I have full access to your account.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">I&#8217;ve been watching you for a few months now.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">The fact is that you were infected with malware through an adult site that you visited.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">If you are not familiar with this, I will explain.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">Trojan Virus gives me full access and control over a computer or other device.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">I also have access to all your contacts and all your correspondence.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">Why your antivirus did not detect malware?<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">With one click of the mouse, I can send this video to all your emails and contacts on social networks. I can also post access to all your e-mail correspondence and messengers that you use.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">If you want to prevent this, transfer the amount of $547 to my bitcoin address (if you do not know how to do this, write to Google: \u201cBuy Bitcoin\u201d).<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">My bitcoin address (BTC Wallet) is: *DELETED WHEN PASTED*<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">After receiving the payment, I will delete the video and you will never hear me again.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">I give you 48 hours to pay.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">I have a notice reading this letter, and the timer will work when you see this letter.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">I do not make any mistakes.<\/span><\/em><br \/>\n<em><span style=\"color: #999999;\">If I find that you have shared this message with someone else, the video will be immediately distributed.<\/span><\/em><\/p>\n<p><em><span style=\"color: #999999;\">Best wishes!&#8221;<\/span><\/em><\/p>\n<p>While this guy may seem nice, to add a little guide of how to add bitcoins to your account, and wishes you the best, he truly doesn&#8217;t have a clue. &#8220;Fun&#8221; fact: I have seen several attempts of this specific email type, and the BTC wallet is never the same.<\/p>\n<h1>How do they have my email though?<\/h1>\n<p>Unfortunately, there&#8217;s a chance that your email has been compromised on some other website, we&#8217;ll get back to that. This still doesn&#8217;t necessarily mean that they have access to your email account. This is why we never use the same password for several accounts, guys!! Imagine how many places you have used your email, typed it in a box and pressed submit + every email you&#8217;ve ever sent. For each time, there&#8217;s a risk that the email will fall into the hands of the wrong person.<\/p>\n<h1>Can never be too safe!<\/h1>\n<p>Just like you should wear safety glasses for New Years, you should also have an anti-virus installed along with anti-malware. I can highly recommend <a href=\"https:\/\/www.bitdefender.com\/solutions\/free.html\">Bitdefender free<\/a> and\u00a0<a href=\"https:\/\/www.malwarebytes.com\/\">Malwarebytes Anti-Malware<\/a>.<\/p>\n<p>Sometimes you&#8217;ll need a bit more than just software to help you, as the software might not notice the breach, and won&#8217;t alarm until the malicious file is already in effect. Therefore you should also, always use 2-factor authentication (2FA)!<\/p>\n<h1>Is there a way to check if my credentials have been breached?<\/h1>\n<p>Glad you asked, yes indeed there is.<\/p>\n<p>A huge shout out to\u00a0<a href=\"https:\/\/haveibeenpwned.com\/\">https:\/\/haveibeenpwned.com\/<\/a> ! If you go to their website, type in your email address, the website will look up your email and see if it has been breached\/leaked. I, for one, had an account that got leaked due to the data breach on Dropbox, back in 2012.<\/p>\n<p>Again, change your passwords, and enable 2FA!<\/p>\n<p>I hope it shed some light on a scary situation \ud83d\ude42<\/p>\n<p>&nbsp;<\/p>\n<p>Good luck and take care out there!<\/p>\n<p>Brian Lykke<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What the scam?! Email scams! We&#8217;ve most likely all tried it and while most of the scams are easy to spot, there will be some<\/p>\n","protected":false},"author":1,"featured_media":179,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","footnotes":""},"categories":[1,2,11],"tags":[],"class_list":["post-176","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-securiscam","category-security","category-software"],"_links":{"self":[{"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/posts\/176","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=176"}],"version-history":[{"count":4,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/posts\/176\/revisions"}],"predecessor-version":[{"id":183,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/posts\/176\/revisions\/183"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=\/wp\/v2\/media\/179"}],"wp:attachment":[{"href":"https:\/\/binaryvikings.io\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=176"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=176"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/binaryvikings.io\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=176"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}