OT: Target got got (de facto Bad Cyber Stuff thread)

[forty_three]

I am figuring out that Kroger doesn't bother enforcing the Chip Readers in their stores. Therefore, cloned cards are not found out. Check your statements for ANY Kroger Fuel transactions. Scammers have figured out that they don't bother busting cloned cards.

 

[Comeds]

Here is an odd one. My wife got an email from Amazon last night about a $5 watch band she ordered not being on time. She did order the band but it was delivered on time so my wife was confused. When she scrolled down she saw a polite letter "written by her" complaining the band was late. She checked her gmail and the email was sent from her account.So someone accessed her account to send an email about a $5 watch band.

Anybody know the ruse behind this? She changed her gmail password and her Amazon passwords (and let Amazon know it was not her) but we cannot figure out the endgame.

 

[forty_three]

Here is an odd one. My wife got an email from Amazon last night about a $5 watch band she ordered not being on time. She did order the band but it was delivered on time so my wife was confused. When she scrolled down she saw a polite letter "written by her" complaining the band was late. She checked her gmail and the email was sent from her account.So someone accessed her account to send an email about a $5 watch band.

Anybody know the ruse behind this? She changed her gmail password and her Amazon passwords (and let Amazon know it was not her) but we cannot figure out the endgame.

I could see them trying to call as an angry customer, get her account reset and then use any saved payment info to buy other items.

"I ALREADY EMAILED YOU ABOUT THIS! YOU KNOW WHAT, JUST RESET MY PASSWORD SO I CAN CANCEL THE ORDER!"

Changing passwords is good. You can check gmail security to see where people logged in from, and you can also tell it to notify you if there are any failed attempts or logins from strange computers. You can tell it to text you a code to verify you.

And if she uses that same email address/password combo anywhere, change that too.

 

[sabresfaninthesouth]

I could see them trying to call as an angry customer, get her account reset and then use any saved payment info to buy other items.

"I ALREADY EMAILED YOU ABOUT THIS! YOU KNOW WHAT, JUST RESET MY PASSWORD SO I CAN CANCEL THE ORDER!"

Changing passwords is good. You can check gmail security to see where people logged in from, and you can also tell it to notify you if there are any failed attempts or logins from strange computers. You can tell it to text you a code to verify you.

And if she uses that same email address/password combo anywhere, change that too.

Google also has an app (Android for sure, not sure of iPhone) called Authenticator which you can use in place of the text message if you're in an area with no service.

 

[Comeds]

Thanks guys, I'll see if we can check where the email came from with gmail.

 

[jstewismybastardson]

was gonna post this the other day lol

Cryptocurrency startup Prodeum pulls exit scam, leaves a penis behind

 

[jstewismybastardson]

Here is an odd one. My wife got an email from Amazon last night about a $5 watch band she ordered not being on time. She did order the band but it was delivered on time so my wife was confused. When she scrolled down she saw a polite letter "written by her" complaining the band was late. She checked her gmail and the email was sent from her account.So someone accessed her account to send an email about a $5 watch band.

Anybody know the ruse behind this? She changed her gmail password and her Amazon passwords (and let Amazon know it was not her) but we cannot figure out the endgame.

maybe establishing a legitimate rapport/correspondence in order to exploit something bigger in the future ???

where my wife works they do business around the world. They had a vendor in South Korea who got in touch with them saying they had plans to change their bank account location to a bank in Hungary and offered up details to the new bank account. A month later a another email was sent saying they could now send payments to that account going forward. Both emails were sent from the South Korean contact persons legit email address. The first email kinda flew under the radar but the the circumstances drew suspicion when they went to make the changes to their ach payments upon receiving the second email. Turns out hackers were in that south korean companys email system for 6 months and on a national holiday in South Korea late last year, sent all these emails out to many of their customers

 

[gob]

I could see them trying to call as an angry customer, get her account reset and then use any saved payment info to buy other items.

"I ALREADY EMAILED YOU ABOUT THIS! YOU KNOW WHAT, JUST RESET MY PASSWORD SO I CAN CANCEL THE ORDER!"

Changing passwords is good. You can check gmail security to see where people logged in from, and you can also tell it to notify you if there are any failed attempts or logins from strange computers. You can tell it to text you a code to verify you.

And if she uses that same email address/password combo anywhere, change that too.

Tip that I do is use the same basic password backbone, and use the first letter (or two) of site to make it completely unique.

 

[forty_three]

was gonna post this the other day lol

Cryptocurrency startup Prodeum pulls exit scam, leaves a penis behind

I'm going to give my money to nerds for encrypted numbers that I have no concept of how it works. What could possibly go wrong?

 

[Comeds]

maybe establishing a legitimate rapport/correspondence in order to exploit something bigger in the future ???

where my wife works they do business around the world. They had a vendor in South Korea who got in touch with them saying they had plans to change their bank account location to a bank in Hungary and offered up details to the new bank account. A month later a another email was sent saying they could now send payments to that account going forward. Both emails were sent from the South Korean contact persons legit email address. The first email kinda flew under the radar but the the circumstances drew suspicion when they went to make the changes to their ach payments upon receiving the second email. Turns out hackers were in that south korean companys email system for 6 months and on a national holiday in South Korea late last year, sent all these emails out to many of their customers

That's the main part that worried me, when she her email and the fake email was in her sent folder. So somehow they got into her email.

 

[forty_three]

That's the main part that worried me, when she her email and the fake email was in her sent folder. So somehow they got into her email.

Not widely reported, but there is a group that has obtained a massive compiled list of all the known breaches (LinkedIn, etc) and has cross-referenced all the email/password combos that are the same. Then trying those same combos everywhere else. Banks, Netflix, Gmail.

They've since moved on to blasting every email or login / password combo they have at every website with a login page. Some banks see millions of failed login attempts daily.

They are catching a lot of people by dumb luck.

 

[Comeds]

Now another weird thing happened. I called my home phone to check my messages and some guy picked up. When I asked who it was he said he was me.

 

[dash]

Now another weird thing happened. I called my home phone to check my messages and some guy picked up. When I asked who it was he said he was me.

Get your ass to Mars.

 

[forty_three]

Now another weird thing happened. I called my home phone to check my messages and some guy picked up. When I asked who it was he said he was me.

 

[sabresfaninthesouth]

I probably would have gone with

/Hopefully not too obscure

 

[puckhead]

I always knew exercise was a danger

Under Armour says data breach affected about 150 million MyFitnessPal accounts

 

[forty_three]

Exclusive: FBI Seizes Control of Russian Botnet

This is a pretty big one in scale but not overall risk (yet). The owners of the botnet were building an army of compromised routers world wide and had them all sitting idle waiting to tell them to do something. The capabilities were pretty massive. And not many people would have noticed their router doing anything strange like they might on their PCs.

Controlling the head of it means the risk is essentially down to zero.

I advise everyone to reboot your home router and then change the admin password to be safe.


Now if router manufacturers would continue to provide updates to patch vulnerabilities in routers older than a year, that would be great.

 

[forty_three]

Capital One data breach: A hacker gained access to 100 million credit card applications and accounts - CNN

What's in your wallet?

All the same info that is now all over the dark web.

 

[BGDave]

Capital One data breach: A hacker gained access to 100 million credit card applications and accounts - CNN

What's in your wallet?

All the same info that is now all over the dark web.

Normally I would rejoice in my good luck since I have never dealt with Capital One. Alas, the Equifax breach has already outed me.

 

[puckhead]

15 million health records.
that's like 40% of the country.

Privacy breach at medical lab could affect millions in B.C., Ontario