Tagged: malware Toggle Comment Threads | Keyboard Shortcuts

  • Geebo 8:00 am on September 20, 2024 Permalink | Reply
    Tags: , , malware, ,   

    The Evolving QR Code Scam 

    The Evolving QR Code Scam

    By Greg Collier

    Across the United States, a new scam is making waves, capitalizing on modern technology and targeting unsuspecting victims in their homes. This scam, which revolves around unsolicited packages and QR codes, has been reported in multiple regions, from Ohio to Mississippi, and is showing no signs of slowing down.

    The scam starts innocently enough as an unexpected package arrives at your door, often containing an item like jewelry, gadgets, or other small electronics. There’s no return address or clear indication of who sent it. Inside, a small QR code invites you to scan it for more information about the ‘gift’ or to register the item. But beneath this seemingly harmless gesture lies a potentially dangerous ploy.

    When scanned, the QR code can deliver malicious software directly to your smartphone or computer. The goal is often to steal sensitive data, such as banking information, personal details, or passwords, allowing scammers to access your financial accounts or even your identity. The damage can be swift and severe, with victims reporting emptied bank accounts and compromised personal data.

    This scam is a more dangerous variation of the traditional brushing scam. In the original version, companies would send unsolicited packages to generate fake positive reviews. However, this new version takes it a step further, using technology to infiltrate personal devices and steal valuable information. The unsolicited items may now come with the hidden threat of malware or identity theft, making this a serious issue nationwide.

    What makes this scam particularly concerning is how easy it is to fall for. QR codes have become increasingly common in everyday life, used for everything from restaurant menus to product registration. Scammers exploit this familiarity by enticing victims to scan the code, unaware of the potential risks.

    Reports of this scam have surfaced in various states, signaling that this is not a localized issue but a national problem. As the scam spreads, its potential to cause widespread harm grows, especially when the holiday season approaches and package deliveries increase. During this time, people are more likely to receive unexpected packages and might be less cautious when interacting with them, which plays right into the scammers’ hands.

    To protect yourself from this scam, there are a few important steps to keep in mind. First and foremost, if you receive a package you didn’t order, resist the temptation to scan any QR codes included with it. Even if the item seems harmless or intriguing, interacting with these codes could lead to severe consequences.

    Reporting these packages is also crucial in alerting authorities and preventing future victims. Whether through online retail platforms or local consumer protection agencies, flagging suspicious packages can help others stay informed and protected.

    As scams like these evolve, the need for public awareness becomes even more critical. With the rise of QR codes as a convenient tool for consumers, scammers are finding new ways to exploit technology and manipulate people into handing over their private information. Educating others, and spreading the word about potential dangers, can make a significant difference in combating this growing national threat.

     
  • Geebo 8:00 am on April 17, 2024 Permalink | Reply
    Tags: , malware, , , ,   

    Another gold scam claims $115,000 from elderly couple 

    Another gold scam claims $115,000 from elderly couple

    By Greg Collier

    An elderly Nebraska couple recently fell victim to a particularly elaborate and harrowing fraud scheme, losing a staggering $115,000 in the process. The couple’s computer abruptly shut down, signaling the beginning of their descent into a web of deceit. Upon rebooting, a distressing message purportedly warning of a malware issue flashed on their screen, accompanied by a phone number. Little did they know, this was the first step in an intricate ploy orchestrated by heartless scammers.

    The voice on the other end of the line spun a tale of theft and false accusations, claiming that the FBI was investigating the couple for heinous crimes they hadn’t committed. Fueled by fear and confusion, the couple was coerced into believing they were facing imminent legal repercussions and that their bank accounts were in jeopardy.

    As the days passed, the manipulative tactics intensified, culminating in the demand to purchase gold bars purportedly for safekeeping. Entrusted with a significant sum of $115,000, the couple obediently complied, only to hand over their life savings to a stranger who promised to safeguard their wealth in a distant bank. Men showed up at their door in official looking vehicles claiming to be government agents.

    Tragically, their trust was misplaced, and the promised security was nothing more than an illusion. Days later, when reality came crashing down, it was too late. The realization that they had been duped dawned upon them, leaving them not only financially devastated but also emotionally shattered.

    This story sheds light on two troubling patterns in the realm of scams. Firstly, scammers are exhibiting a growing audacity by dispatching individuals to the residences of their victims. These individuals may either be complicit in the scam or unwittingly drawn into it. Regardless, such occurrences pose a significant risk to the safety and well-being of many.

    The rationale behind sending scammers to victims’ homes lies in the increasing preference for gold as a form of payment. Unlike gift cards or cryptocurrency, which can be transacted electronically, gold necessitates physical retrieval from the victims. Consequently, scammers exploit this requirement, manipulating victims into surrendering their valuables in person.

    Regrettably, gold, much like other forms of payment demanded by scammers, remains largely untraceable. This exacerbates the difficulty of apprehending and holding perpetrators accountable for their actions.

    Should your computer or any internet-connected device display a virus or malware warning prompting you to call a phone number, refrain from doing so. Most prominent tech companies eschew traditional customer service phone lines, with some even dissuading phone inquiries altogether. Thus, if you encounter such a phone number on your device, avoid calling it, as it’s highly likely to be a scam.

    Transferring your funds from one financial institution to another as a means of safeguarding them from hackers, thieves, or any other threat is not a viable strategy. Legitimate law enforcement agencies never solicit money from individuals over the phone, and reputable banks never advise customers to relocate their funds to a supposedly “protected” account.

     
  • Geebo 8:00 am on August 18, 2022 Permalink | Reply
    Tags: , malware, , Office, ,   

    Free Microsoft Office flash drives are a scam 

    By Greg Collier

    If you use a computer at home or at work, there’s a pretty good chance you’ve used the Microsoft Office suite. It’s the software package that contains Word, Excel, and PowerPoint among others. While you don’t have to pay for Office at your job, you do have to pay for it if you want to use it at home after the limited free trial is over? Currently, Microsoft is charging $100 a year to home users, but what if a free version was shipped to your home? Would you install it on your computer? You may want to think before installing Office if you received it in the mail.

    According to cybersecurity experts, residents in the UK have been receiving USB drives in the mail that appear to be coming from Microsoft. The box that the flash drives come in even looks like an official Microsoft product. However, if you plug the flash drive to your computer, you won’t get Microsoft Office. Instead, you’ll get a virus warning pop up on your computer, along with a phone number to call Microsoft at, so you can resolve your issue. Except, the number doesn’t really go to Microsoft. It goes to a phone bank of scammers instead.

    If someone were to call the phone number, the scammer will ask you to download a program that would give them remote access to your computer. From there, a number of scams can be perpetrated, such as stealing your financial login credentials, among others.

    Just in general, you should never plug strange USB drives into your computer. Whether you find one in a parking lot or get one in the mail, plugging strange drives into your computer can cause any number of problems, from scams to ransomware and more. If you put a strange USB drive into your computer, you’re risking not only compromising your computer, but potentially other computers in your home or business network as well. USB drives that you didn’t buy personally should be seen as suspicious and should be disposed of.

    And while this is currently happening in the UK, it could be only a matter of time before we see these flash drives being sent to US citizens.

     
  • Geebo 9:00 am on January 27, 2022 Permalink | Reply
    Tags: , keylogger, malware, , ,   

    Scammers sending USB drives in the mail 

    Scammers sending USB drives in the mail

    By Greg Collier

    If you own a computer, you’ve probably used a USB drive. Sometimes they’re also referred to as flash drives or thumb drives. They’re a great tool to help you either back up important files, or transfer files from one computer to another. However, they can also be used in cyberattacks.

    The FBI recently issued a warning that USB drives are being sent through the mail. The drives are being attached to fliers that promise you a free gift card to Amazon or some other well-known retailer. The instructions say that in order to redeem the gift cards, you’ll need to put the USB drive into your computer.

    If you do put the drive into your computer, a few things could happen. The FBI is saying that many of these drives contain ransomware. Ransomware locks up your computer and encrypts your files before asking for a ransom payment to get your files back. The drives could also contain key logging software which sends everything you type back to the scammer. This could include sensitive information such as account logins, passwords, and anything else you type.

    These drives are not only being sent to individuals, but businesses as well. One good ransomware target could cripple an entire business.

    The best defense against these attacks is to never put a strange USB drive in your computer. Whether it’s one you found on the ground, or one you receive in the mail, USB drives that you didn’t buy personally should be seen as suspicious. If you put a strange USB into your computer, you’re risking not only compromising your computer, but potentially other computers in your home or business network as well.

    If you receive one of the USB drives promising you a free gift card, you’re asked to contact the FBI at their website.

     
  • Geebo 9:00 am on December 27, 2021 Permalink | Reply
    Tags: , , malware, , , , ,   

    Streaming activation scam lays in wait 

    Streaming activation scam lays in wait

    By Greg Collier

    Welcome back. We hope that our readers had a safe and happy Christmas. Did you happen to get a new streaming device or smart TV for Christmas? Maybe you let your streaming subscriptions expire, but now you want to catch up on all the shows that everyone has been talking about. If that’s the case, please be careful when going online to activate your new device or service. Scammers are quietly lying in wait, hoping to catch you off guard if you’re not paying attention.

    With many streaming devices and services, you need to go to the provider’s website to activate them. Scammers are hoping you just put the name of the platform you need into a web search. You might think that the first search listing is the authentic website you require, but scammers often buy ads on these search engines to manipulate the search results. This way, the scammers can direct you to their phony website either to inject malware into your device or to try to get your personal and financial information.

    When activating a new device or service, make sure you’re on the correct web address. Scammers will often register a web address that is slightly misspelled in hopes that you miss that detail and go to their website instead of the official one. Also be wary of any customer service numbers given out on search engines as once again scammers can manipulate the search results to give their phony number a better search ranking. Lastly, keep in mind that you do not have to pay a subscription fee for your streaming box or smart TV. Those subscription fees are paid to the streaming providers like Netflix and Hulu. You never have to pay a fee to manufacturers like Roku or Samsung. Anybody who is trying to collect a fee like that is scamming you.

     
  • Geebo 9:00 am on December 6, 2021 Permalink | Reply
    Tags: , , DVD in the mail, malware, , , ,   

    Scam Round Up: Don’t put that disc in your computer 

    Scam Round Up: Don't put that disc in your computer

    By Greg Collier

    Once again, it’s time top bring our readers another trio of scams that deserve their attention.

    ***

    Our first scam is kind of a bizarre one. Residents of a town in Maine have reported receiving something strange in the mail. They’ve been receiving handwritten envelopes, addressed only to ‘A friend’. The envelope contains a DVD that has “Please watch, copy, and share with friends” written on it, with no indication of what may actually be on the DVD. More than likely, the DVD contains malware or ransomware. What’s strange about this story is most modern computers don’t even have optical drives installed in them anymore. This scam may have been targeting elderly residents who may have older computers that still have their optical drives. A more modern take on this scam is when scammers will leave USB drives lying around out in public, just hoping that someone will actually plug the drive into their computer.

    ***

    Our next scam is one that you’re probably more familiar with. Residents of New York have reported that they’ve received letters in the mail telling them that they’ve won an $880,000 sweepstakes. The letter even includes a check for $8000. However, you have to pay a $7000 fee to ‘release’ your winnings. This is illegal and known as the advance fee scam. Some victims may think they’ll just deposit the check and use the money to claim their supposed winnings. As you’ve probably surmised, the checks are fake, which would leave the victim paying back the amount of the check to their bank while the scammers make off with $7000. Not that we like to compliment scammers, but this is a pretty clever way of combining two known scams into one to further lure their victims into their trap.

    ***

    Lastly, this is just a warning to people who use mobile banking apps that Zelle scams are still finding victims and draining their bank accounts of thousands of dollars. A woman in Portland recently fell for the scam and lost $23,000. If you receive a text message that is supposedly from your bank asking if you’ve made a large purchase or transaction, do not reply. If you do, you’ll get a call from a scammer posing as your bank and will use the Zelle app to drain your account under the guise of protecting your money. Zelle should only be used when giving or paying money to someone you know personally. If you get a text like the one mentioned, call your bank directly instead, or stop by your local branch.

    ***

    Again, these scams may not be in your area right now, but they could be soon. Hopefully, you now have the knowledge to combat them.

     
  • Geebo 9:00 am on November 19, 2021 Permalink | Reply
    Tags: , malware, , , ,   

    This mortgage scam is more common that you think 

    This mortgage scam is more common that you think

    By Greg Collier

    The mortgage scam we’re about to discuss we’ve posted about before. While it’s not a new scam, what surprised us is how often this scam supposedly happens.

    The scam is known as the business email compromise scam, but that phrase encompasses a number of scams where scammers cam imitate business emails that they’ve hijacked. Often these hijacked accounts are used to target someone else that’s in that business, such as someone in payroll or accounting who can issue checks. However, the BEC scam can also target outside customers as well. In this case, people who are getting ready to close on a home.

    In the mortgage version of this scam, scammers are monitoring the email accounts of title companies. The scammers have gained access to these email accounts through malware attacks. When the process is almost complete, the scammers will send an email to the home buyer that appears to have come from the title company asking for the final closing cost to be wired. In one recent case in North Carolina, that amount came to almost $50,000 that the home buyer lost to scammers. By the time the home buyer realized he’d been scammed, the money he wired had already been wired again to multiple locations.

    What really surprised us about this recent scam was that the FBI has said that this mortgage scam is more common than ransomware attacks. Since we hear about ransomware attacks against companies and hospitals on an almost weekly basis, this scam must happen quite often.

    The best way to protect yourself against this scam is to confirm any transactions with your title company over the phone before sending any money. Other tips include if the money wiring instructions are different from before or if there are grammatical errors in the email.

     
  • Geebo 8:00 am on August 26, 2021 Permalink | Reply
    Tags: , Donda, Kanye West, , malware, , unclaimed reward,   

    Scam Round Up: House Deeds, Kanye, and more 

    Scam Round Up: House Titles, Kanye, and more

    By Greg Collier

    We’re back again with a handful of scams that may require your attention. This week, we’re bringing you four scams that have popped up around the country.

    ***

    If you own a home, and you want a copy of your home’s deed, you shouldn’t have to pay to get it. In most counties, you can get a copy of your deed for free at your county’s Register of Deeds’ office, or your county’s equivalent. If there is any cost attached to obtaining your deed, it should only be for the copier and not cost $95. In Tennessee, residents have been receiving letters saying they can get their deed for a $95 fee. Deeds are public records, and the scammers wait for changes to be made to them before sending out the letters offering their service. While not necessarily illegal, if you get one of these letters, shred it and toss it in the recycling.

    ***

    We’re not sure how many of are readers are fans of Kanye West, but he’s been teasing a new album drop for a while now. Scammers are quite aware of this and are using the new album to their advantage. Scammers are setting up websites where they claim you can download Kanye’s new album entitled ‘Donda’. As you might expect, the files you end up downloading contain malware, which can do any number of malicious things to your device. As with any popular media, if you’re purchasing it online, stick to reputable distributors like Apple and Amazon and avoid the shady bootleg sites.

    ***

    Police in Hillsboro, Texas have reported a significant increase in virtual kidnapping calls. Residents there have been receiving phone calls that tell them a loved one has been kidnapped. They’re then instructed to go to Walmart to await further instructions. The scammers will then have the victim send the ‘ransom’ through a money transfer service like MoneyGram that is untraceable once the scammers have their money. If you ever receive a call like this, try not to panic. Instead, reach out to the supposed kidnap victim, and you’ll probably find that they’re ok. You should also notify your local police as well.

    ***

    Lastly, from North Carolina, we have a scam where a man received a letter in the mail that said he had an ‘unclaimed reward’ that was worth $100. The man called the number in the letter and was asked to confirm his identity. He was then asked for his credit card number to pay to have the reward shipped. Thankfully, the man didn’t fall for the scam, but it only takes a handful of people to fall for the scam before it becomes profitable for the scammer.

    ***

    The more people are aware of scams like these, the better prepared they are to prevent them. Please consider sharing this and any of our posts with your friends and family.

     
  • Geebo 8:09 am on June 23, 2020 Permalink | Reply
    Tags: , malware, ,   

    The real-world effects of the tech support scam 

    The real-world effects of the tech support scam

    The tech support scam can take many forms. One of the more common versions of the scam is when your device will show a warning similar to the one above. It will say that your device has been infected by a virus and you’ll be directed to a phone number to call to have the virus removed. Another common version of the scam is when the scammers call random people up posing as a big tech company like Microsoft, Google, or Facebook and will tell the person they call that their computer has been infected with a virus.

    Both scams will have you grant remote access to your computer or device to remove the virus. In reality, your device does not have a virus and the scammers will not only charge you for a phony virus solution but they could also plant any type of malware on your device.

    This unfortunately happened recently to a man in Wisconsin. The scammers posed as a well-known virus protection company, called told the man he had a virus on his computer. The scammers requested remote access to his computer and $900 in gift cards to ‘fix’ the problem.

    The man made the payment but after doing so he noticed that his bank account had an additional $300 taken out of it. This was done through malware that the scammers had left on his computer while they had remote access.

    If you’re a frequent reader of our blog, you’ll know that anyone asking for payment in gift cards is a giant red flag indicating a scam. No legitimate company or agency will ask for remote payments through gift cards. Due to the fact the cards are virtually untraceable once their serial numbers are given out, they’ve become the de facto currency for scammers. Secondly, no company will ever call or contact you to tell you that you have a virus on your device or computer.

    If you receive one of these calls, you should hang up immediately. If you see a pop up like the one pictured above, close the window and run a malware scan on your device. For Windows PCs and laptops we recommend either using the Windows Security Scan built into Windows 10 or using a commercial malware detection tool like Malwarebytes. There is a free version of Malwarebytes that is available for download.

     
  • Geebo 8:06 am on May 26, 2020 Permalink | Reply
    Tags: , , , malware, ,   

    There is no 2nd stimulus payment 

    There is no 2nd stimulus payment

    With life in the United States currently adapting to the everyday changes brought on by the global pandemic, scammers and con artists have been adapting as well. With every change, they continue to tweak and transform their scams into whatever can best serve them now while disregarding the untold victims they leave in their wake.

    By most reports, the majority of those who were eligible to receive the economic impact payments have received them. That doesn’t mean that there still aren’t those who could use additional stimulus benefits. There has been talk among lawmakers to issue additional payments, but as of the time of this posting (5/26/2020) no additional stimulus payments have been approved by the government.

    That hasn’t stopped scammers from trying to fool their victims into believing that a second stimulus payment is on its way. The reason the scammers are doing this is so they can pull the same scams they tried when the initial stimulus payment was being issued.

    A report from the Georgia Attorney General’s Office is warning residents about one such scam where the scammers are posing as IRS employees. They’re saying they can provide additional funds as long as the consumer installs a certain software on their device. The victims are then asked for a $1,000 gift card to pay for the software.

    So in this particular scam, the scammers are double-dipping their victims. Not only are the scammers trying to steal consumers’ money by asking for payment by gift card but they’re also installing software on consumers’ devices. This software can be anything from malware designed to steal your security credentials or ransomware that can lock you out of your device.

    If the IRS needed to contact you for any reason, they will contact you by postal mail. They will not contact you unwarranted by phone, text, or email.

     
    • Robert Jamison 2:31 pm on May 27, 2020 Permalink

      I’m on SSI and I haven’t received my stimulus check or has been direct deposited into my account and the IRS has all my info on my direct deposit but I got the nice letter from the POS Trump be nice to get the stimulus first before you get the letter

c
Compose new post
j
Next post/Next comment
k
Previous post/Previous comment
r
Reply
e
Edit
o
Show/Hide comments
t
Go to top
l
Go to login
h
Show/Hide help
shift + esc
Cancel