The Hackers Brief from Cyber Wyoming is sponsored by First Federal Bank & Trust. Be aware of the latest scams in Sheridan, Wyoming and the rest of the nation.
Takeover of home computer
A Wyoming citizen reported a computer takeover attack.
When she opened her computer, a large window appeared with a support number. She couldn’t figure out a way to get past that screen, so she called the number. It was a scam to try to steal her personal information and gain access to her computer. If this happens to you, press the power button to shut off your computer and have it ‘cleaned’ by a professional you trust.
SAM registration scam alert
SAM stands for System for Award Management and is used by the federal government for grants. If you receive an email from SamSupport.net, it is a scam. The email has an official-looking seal and lists your legal business information, including your DUNS number. The links go to samsupport.net and not the correct website, which is sam.gov. Reported by a Wyoming citizen.
MS-ISAC patch now alert
The Multi-States Information Sharing and Analysis Center (MS-ISAC) issued a patch now (update your software) alert for Microsoft products, the Google Chrome browser, and multiple Apple products. If you use these products, make sure the software updated.
Fake COVID news alert from Scambusters.org:
Suspected state-backed agencies from China, Russia and Turkey are reported to be targeting the West with misinformation about the COVID-19 outbreak, with the goal of undermining trust in public institutions. Things to ask yourself as you read: Where is it from? What is it missing? And does the message go for a divisive or emotional response? Also, use a fact checking website like Snopes or others. Several are listed at https://research.ewu.edu/journalism/factcheck.
Identity Theft Resource Center CashApp scam alert
Social media users and recipients of emails/texts may be targets of a scam that offers would-be victims free money via CashApp to help them through this difficult COVID-19 time. Victims click on a link to participate, but the link is fraudulent.
Identity Theft Resource Center COVID-19 grandparents scam alert
If you receive a phone call or email from someone claiming to be a family member in trouble and in need of money to pay their COVID-19 hospital bills, it is most likely a scam, even if they know many personal details about your family member. Never make a payment over the phone. Hang up and call your family member directly.
Fraud.org warns of utility scams
With many Americans out of work, some are wondering how to keep the lights on and this has become the subject for scammers. If you receive a call from the electric utility company saying your power will be shut off over an unpaid bill, hang up and call the electric company directly. If they ask for immediate payment via a wire transfer or gift card, then you know it is a scam. Remember that all 50 states have placed moratoriums on disconnections because of COVID-19 and take a deep breath.
Data breaches in the news
Square Panda & Playground Sessions; VPN services: UFO VPN, FAST VPN, Free VPN, Super VPN, Flash VPN, Secure VPN, and Rabbit VPN; Twitter; MyCastingFile.com; DataViper; Wattpad; eToro (social trading platform); MGM Resorts (breach reported in 2019; but recently found to be bigger); Benefit Recovery Specialists Inc (Houston); Collabera (IT consultants); LiveAuctioneers; Trinity Metro (Texas); MongoDB; Xerox Corporation; Clubillion (casino app); Fort Worth’s bicycle sharing service (credit card info only); Cooke County (Texas) Sheriff’s office; Click2Gov (used by a lot of US city governments); dating apps including: CatholicSingles, YESTIKI, Blurry, Congadaq/Kongdaq, Charin, and Kyuun; and V Shred (fitness app that includes photos). If you use any of these online services, be sure to change your password and check the company’s website for additional instructions.
Other ways to report a scam:
• Better Business Bureau Scam Tracker: www.bbb.org/scamtracker/us/reportscam
• File a complaint with the Federal Trade Commission at ftc.gov/complaint
• Report your scam to the FBI at https://www.ic3.gov/complaint
• Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration.
• Online at https://complaints.donotcall.gov/complaint/complaintcheck.aspx or call 1-888-382-1222, option 3
• Office of the Inspector General: www.oig.ssa.gov