First page of the Authentication archive.

Netflix “Tech Support” scam

Posted by Common Sense Security on 28. September 2014 with No Commentsas ,

Today I had an unexpected call from Unknown Caller. I get a lot of calls from this person and usually just ignore them. However, this time I decided to respond and was greeted by a nice guy, who  introduced himself as Andy and proceeded to tell me that there was a problem with my Windows computer. The script has not changed much in 2 years since I spoke to Sam from the same caring organization.

It used to be a scam run mostly from India, however these days they seem to diversify and expand the operation. Obviously, they find enough victims to make the swindle profitable.

They also vary the pitch in order to trick those who heard about the original scheme.

For example, a blog from a well-known security vendor Malwarebytes describes a variation that pretends your Netflix account have been suspended because of nefarious activity and conveniently provides a link for regaining access. Of course, the link steers you to a malicious website and providing your credentials there leads to identity theft. Once the Malwarebytes employee Jerome Segura provided random bogus information on website, he was told to contact Netfix member services at a [fraudulent] toll-free number. You can watch and listen to the  interaction of Mr. Segura with the fraudsters who pretend to be Netflix tech support and who ask Jerome for a lot of personal information. They also tell him that his computer is badly infected and try to sell him unnecessary and expensive “computer cleaning” services.

Another variation of the con actually plays on your awareness of tech support scam and offers you a refund. Of course, once fraudsters get your financial information they use it to take money from you, rather than give it to you. Federal Trade Commission posted a warning and details of this “Refund” ploy on their web site.

As is often the case, this scam can be easily averted by using Calling Back authentication technique. For Netfix variation you can either go directly to Netflix web site netflix.com and log into your account or you can call legitimate Netflix tech support phone number 1-866-679-7172 which can be found on their official  website. For other organizations you can use their known contact information instead of links and phone numbers so nicely provided by helpful strangers.

While security professionals and techies who thoroughly understand the technology are having a lot of fun at the expense of these scammers, I suggest that if you are neither, you should immediately hang up or should  start your authentication routine, because you don’t want to let strangers into your computer.

 

 

Talking Turkey

Posted by Common Sense Security on 17. August 2014 with No Commentsas ,

Have your friends or relatives ever asked you for help? Are you a kind of person everybody relies upon? Bravo! Helping people is great as long as they really need help and are not fraudsters trying to scam you.

Recently I received the following email from my friend, “Joe”.
“I really hope you get this fast. I could not inform anyone about our trip, because it was impromptu. we had to be in Turkey for Tour. The program was successful, but our journey has turned sour. we misplaced our wallet and cell phone on our way back to the hotel we lodge in after we went for sight seeing. The wallet contained all the valuables we had. Now, our passport is in custody of the hotel management pending when we make payment.

I am sorry if i am inconveniencing you, but i have only very few people to run to now. i will be indeed very grateful if i can get a short term loan from you ($2,600). this will enable me sort our hotel bills and get my sorry self back home. I will really appreciate whatever you can afford in assisting me with. I promise to refund it in full as soon as I return. let me know if you can be of any assistance. Please, let me know soonest.

Thanks,
Joe”

I heard about a scam when people get a phone call, email or a Facebook plea for help. However, I also have a friend who, in a foreign country, managed to go a restroom, leaving all his possessions on a table in a restaurant. When he returned, his money, his phone, and all his documents were nowhere to be found.

I wanted to be thorough. First thing, just out of curiosity, I hit return and the address to which my reply was supposed to go was different from a “from” address on email. Red flag!

I called “Joe” (I changed the name to protect his privacy). He told me a sad story. Someone broke into his email and sent the message above to all his contacts. They tried to call him, but he was busy and his phone was off. When he switched his phone back on, “Joe” discovered that a lot of his friends had been trying to contact him and find out if he was in trouble. He called them back and let them know that it was a scam. Unfortunately, by then someone already wired the money to the crooks.

My other friend, “Paul”, solved a similar problem beautifully. When he got email from his colleague asking for help, “Paul” responded, “When and where did we meet last time?” Scam dodged!

Next time your friend asks you to come to their rescue, by all means help them, but first make sure it is indeed your friend whom you are bailing out.

Authentication each day keeps the fraudsters away!

Fake Utility Bills

Posted by Common Sense Security on 9. February 2014 with No Commentsas ,

Last time we discussed a phone version of utility payment scam; the email version has not been far behind. It may try to extract money from you or it may try to infect your computer. This scam affects utility customers nationwide. Pepco, MidAmerican Energy and Florida Power and Light warn their customers about this scam. […]

Utility Payment Scam

Posted by Common Sense Security on 9. October 2013 with No Commentsas ,

This is another scam that seeks to use your fear in order to extract money from you. It has been going around recently. You can read an FTC warning here. Your phone rings. You hear that your account is in such a bad shape that your gas, water or electricity will be switched off now […]

Wireless phone scams

Posted by Common Sense Security on 24. September 2012 with No Commentsas ,

This “Hooray, I get free money” scam targets Verizon Wireless customers, but it is easy for fraudsters to adapt it for any other phone company. The crooks call their chosen potential victims and tell them that Verizon is currently doing maintenance, but it will pay their customers $50 for every hour they are deprived of […]

Your computer is infected …

Posted by Common Sense Security on 14. September 2012 with No Commentsas , ,

Have you heard about nice people who call you to let you know that your computer is infected and they can help you to cure it? Maybe one of those people called you or someone you know? Recently my phone rang. When I answered, a voice with a thick Indian accent said, “Ma’am, I am […]

Fake charities

Posted by Common Sense Security on 13. September 2012 with No Commentsas , ,

Do you get calls for charitable contributions? After every big natural disaster fake charities mushroom, but even in pretty quiet times a lot of crooks are ready to take your hard-earned money and spend it on themselves instead of people you intended to help. How do you avoid being scammed? Send money to well-known organizations, […]

Mortgage fraud

Posted by Common Sense Security on 11. June 2012 with No Commentsas ,

Today I would like to tell you about some of the latest mortgage scams, for which the US Treasury Department recently published a fraud alert. If you are having trouble with your mortgage, a call from a sympathetic organization that promises help for a “nominal” fee may sound like a godsend. Fraudsters can even mention […]