Cybersecurity and me!

 2022 is here and so is the need for cybersecurity. Threats come to us from phone, text, emails and even snail mail. The more we can recognize threats, the more we can protect ourselves. This year I started a new series on YouTube where I use a virtual machine to examine the links in scam/spam emails.

For more videos, visit the email scam playlist

Keep safe in the cyber-universe!

Phishing, Vishing and Smishing

 According to FTC (n.d.), phishing is when a scammer sends an email that imitates a reputable brand but includes a link or attachment whose purpose is to steal your personal information. Personal information could include logon credentials. A couple weeks ago, I received an email with ‘thank you’ for your order from ebay but my spam filter caught it. There was a link involved but I didn’t research further.

 

More at Detecting Email Scams here at YouTube

Next is vishing scams.  Basically, Vishing is voice + phishing. The scammer can directly call you or send you an email or snail mail and direct you to call them.  According to Osborn (2021), an email is sent to you about an order and directs you to call a number. It is very similar to phishing but unlike sending you to a website to harvest your credentials, you are directed to a number. Osborn (2021) provided an example of a scammer sending an email that purports to be from Amazon and then when you call in, the scammer would request “the order number, customer name, and credit card details before cutting the call and blocking the number.”

Vishing scams can also arrive by snail mail. Take for example, the “Experian” mail about data breach that I received back in March. It directed me to call a number (which I did not call). You can read more about it on my blog at https://suzzettedawes.blogspot.com/2021/03/experian-and-infinity-insurance-scam.html

More discussion on vishing at https://youtu.be/nbORYwYLPHY

Finally, there are smishing scams. Smishing = SMS + phishing. SMS is text messaging.

Smishing may appear to be prevalent than other forms of phishing due to email spam filters filter out most phishing attacks and also people tend to check text messages more than email. According to Koetsier (2019), people prioritize texts over emails.  Since people check their texts more frequently, smishing may seem more prevalent than phishing. 

Recently, I have received scam texts and discussed it at https://youtu.be/24b8LmS3FF8.

Also, the United States Postal Inspection Service (n.d.) provides some great tips in dealing with smishing at https://www.uspis.gov/news/scam-article/smishing-package-tracking-text-scams

Scams seems to increase frequently and we need to be able to recognize scams so we can protect ourselves. I hope you find this information helpful.

References

FTC (n.d.). How to recognize and avoid phishing scams. Retrieved from https://www.consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams

Koetsier, John (2019). Consumers 35X More Likely To See Brands’ Texts vs Emails. Retrieved from https://www.forbes.com/sites/johnkoetsier/2019/11/14/consumers-35x-more-likely-to-see-brands-texts-vs-emails/?sh=12f2df3b445a

Osborn, C. (2021). Fraudsters employ Amazon ‘vishing’ attacks in fake order scams. Retrieved from https://www.zdnet.com/article/fraudsters-employ-amazon-vishing-attacks-in-fake-order-scams/

United States Postal Inspection Service (n.d.). Smishing: Package Tracking Text Scams. Retrieved from https://www.uspis.gov/news/scam-article/smishing-package-tracking-text-scams.

So, you want to buy my house?! But it is NOT for sale!

 

Have you been bombarded with mail, phone calls, and text with people wanting to buy your house? Also, you do NOT have a “For Sale” in front of your house?   My main issue is the constant mail, text, email and phone calls. Why don't these people think that I need to live somewhere too!

The calls are the worst. I was waiting for a callback for something else and not sure what number would be calling me so I answered the phone. It was a bit creepy because they did their research and addressed me by name. Further, they even knew where I lived then they try to tell you that they will give you cash for your house as-is. However, beware as they want to offer below market price… well below market price. This person insisted that everyone has a price so I gave them mine: $10M. Then there were the questions like “how big is the property?” etc. That’s not my point! My point is that if you insist on a price, I will give you one. I don’t care if it not based in reality! If you insist on me moving, then you need to pay me to move, pay the movers, pay for the new place (which needs to have adequate space) and pay for a vacation because moving is an ordeal and unpacking is a beast!  Further, I am not interested in selling.  I've heard that by registering my phone number with the "do not call" list should reduce the calls and I can report spam text messages to the FTC.

Mailers, I usually just toss but I received one where they included a picture of my house.

This feels like some next level stalking - notice how they stated that the image was obtained from a public online website!  I understand that the housing market is hot as a co-worker put his house up for sale on Friday and received multiple offers the very next day, Saturday. At least, the co-worker already had purchased another house before putting up the current house for sale. I have heard stories of people selling and not able to buy another house or can’t afford to buy another house. 

It’s a seller’s market according to multiple articles. In an article in the Sun-Sentinel, home buyers “are swarming open houses and sparking bidding wars that drive prices out of sight.” Therefore, houses are hard to come by at a reasonable price. Why would I sell? Especially to these people who are offering below market value. I know they are trying to get a house cheap so they can flip it at a higher price but not my home! When I am ready to sell my home, I plan to use a realtor so I can get the top dollar!

Also, why would I sell to move back to a rental. I left a rental to buy a house. I used to share walls, ceiling and floor. I could hear whenever my neighbor and her boyfriend would argue. I stayed in the same neighborhood but moved to a standalone house. I currently don’t share walls with anyone so that nightmare is gone. If I were to rent again, I would have to move from my neighborhood and I am pretty certain that rental would cost more than my mortgage (including escrow amount for property tax and property insurance), light bill, water bill, cable bill and lawn maintenance combined.  

A perusal of rent.com in a desirable neighborhood shows rent price to be $2100-$2400. It doesn’t say if water and cable are included but still very pricey. My mortgage (including escrow amount for property tax and property insurance), light bill, water bill, cable bill and lawn maintenance combined is less than $2000 plus I have 3 bedrooms and not sharing walls!  Therefore, that's a NO to going back to rentals!

There are several articles that state to stop unsolicited offers is to ignore them. I am tired off ignoring and I feel insulted when they tack on the "as-is" as if my house is not in decent condition. I am on the defense with these unsolicited offers to buy my house because it is not just a house, it is my home!

Florida Public Service Commission states:

The Federal Trade Commission  (FTC) assures us that telemarketing to cell phone numbers has always been illegal and will continue to be so.*  The FTC does, however, maintain a National Do Not Call Registry which will prevent most telemarketers from calling any number  on the list.  Customers can add their telephone numbers to the National Do Not Call Registry at https://www.donotcall.gov/.

The State of Florida's Department of Agriculture and Consumer Services also maintains a statewide Do Not Call list.  Information about the state's program and Florida Statutes concerning telemarketing can be found at http://www.800helpfla.com/nosales.html or by calling 1-800-HELP FLA (1-800-435-7352).

What are your tips for dealing with these unsolicited offers?

References

Lyons, D. (07 Mar 2021). If you’ve hit a wall in the search for a home, consider these ideas. Sun-Sentinel. Retrieved from https://www.sun-sentinel.com/business/fl-bz-homebuyer-questions-ss-prem-20210307-vdbat5mjxzfdrn2wbmtprbsvbi-story.html

 

Lyons, D. (28 Dec 2020). Renters face rising prices in most South Florida cities. But not everywhere. Retrieved from https://www.sun-sentinel.com/coronavirus/fl-ne-rents-escalate-ss-prem-20201228-5ff2b5q6bjaunlzs6hcjkwimsa-story.html

Florida Public Service Commission. (2006) Consumer Tip. Retrieved from http://www.psc.state.fl.us/ConsumerAssistance/TipoftheWeek?TipDate=July%2009,%202006#:~:text=The%20State%20of%20Florida's%20Department,800%2D435%2D7352).

Recognizing Email Scam

My email normally filters out spam but sometimes those scam emails get through.  When the scam emails appear to come from vendors that I use, it can be hard to recognize. I recently received an email and here's how I figured it was a scam:

Although the sender looked like CVSPharmacyNEWS, the email address was from onliinecvseses@althmedication.info

A lot of cybersecurity expert would also inform of spelling errors and there were a few that I picked up on immediately: "onliine" for "online" and "recieve" for "receive"

Finally, I hovered over the button "Check it out now" and the address that appeared also was not from cvs.

What strange emails have landed in your inbox and how did you determine it was a scam?

Experian and Infinity Insurance scam

 Since I have been Security+ exam, I have been reading up on the latest cybersecurity threats. Lately, one came to me in the mail!

I received a letter regarding a data breach and that my information may have been comprised.

However, several things concerned me:

1. The insurance company: I have never done business with Infinity Insurance Company nor (knock on wood) been in any incident with any of their drivers.
2. The stamped envelope and return address had different locations.

   

   from the first page of the letter

   
   

   

   from the envelope

   also some other people who stated that this a scam noted the lack of company letterhead on the letter.
   
   
3. Phone number provide 877-316-0057 does not yield a company name when conducting reverse phone number search on https://www.whitepages.com/reverse-phone
   
   
   
4. Site provided, https://www.experianidworks.com/plus or www.ExperianIDWorks.com/restoration , is not an Experian site. Here is an example of what the other pages on the real Experian site looks like: https://www.experian.com/contact/personal-services-contacts.html#content-04   or https://www.experian.com/consumer-products/identity-theft-and-credit-protection.html which all start with https://www/experian.com not a wholly different domain name.

Also, the letter received has very few typographical errors as the scammer probably copied the actual letter located at https://oag.ca.gov/ecrime/databreach/reports/sb24-539174

If you get a letter like this, please let Experian know:

Email: support@experiandirect.com

Twitter: @Experian_US

Facebook: https://www.facebook.com/experian

Instagram: https://www.instagram.com/experian/

Language is Changing!

 I have often heard that language is changing. I found it to be true when studying for the CompTIA Security + examination. Every industry has its own terminology or jargon. In 2017, I had taken CompTIA Security+ SY0-501 exam and in the process, learned IT security jargon. Or so I thought! 

Currently, I am preparing for the CompTIA Security+ SY0-601 and decided to freshen up with some LinkedIn Learning courses, CompTIA CertMaster Practice and practice tests.  It was refreshing to know that I had retained some information but frightening to feel stumped. What do I mean? When the answer selection includes pineapple, pixie dust and POODLE. It made me laugh and thought those were obvious wrong answers.

Well, I was wrong! Those were also right answers as a POODLE is a downgrade attack, pixie dust is a type of attack on WPS protocol for WIFI and a pineapple is another type of attack on WIFI. 

I am only halfway through my review but those stuck out to remind me that there is more to come.

What industry’s jargon give words other meaning?

To PHP or not to PHP

 I realized that I needed to understand PHP better to create contact forms for websites if not using WordPress or other content manager. I decided to take a course on LinkedIn https://www.linkedin.com/learning/learning-php-4 but to follow along, I was using an online PHP at https://paiza.io/projects/zdJqVjzL2iixbcRu7bZ_SQ.

However, to develop a website with HTML, CSS, JavaScript and PHP, it would be difficult to test the website using online PHP.  Therefore, I downloaded the Eclipse IDE for PHP and Apache Tomcat. (I was familiar with Eclipse IDE for Java which is why I chose the Eclipse IDE).

Downloads:

Eclipse IDE for PHP developers from https://www.eclipse.org/downloads/download.php?file=/technology/epp/downloads/release/2020-06/R/eclipse-php-2020-06-R-win32-x86_64.zip

Apache Tomcat from https://tomcat.apache.org/download-90.cgi

I researched how to link Eclipse to the webserver from https://www.eclipse.org/webtools/jst/components/ws/1.5/tutorials/InstallTomcat/InstallTomcat.html

1. Opened Eclipse

 

2. Windows > Preferences

 

3. Servers, highlighted default and pressed edit, then browsed to location of Apache Tomcat

 

Next, I will follow https://www.eclipse.org/pdt/help/html/creating_php_projects.htm to set up a project so I can practice the exercises of the LinkedIn class.