The Hackers Brief from Cyber Wyoming is sponsored by First Federal Bank & Trust. Be aware of the latest scams in Sheridan, Wyoming and the rest of the nation.
Four Credential Scamming “PayPal” Emails Reported
Two Wyoming citizens reported four credential scamming emails claiming to be from PayPal asking you to log-in and confirm information about your PayPal account. None of the links actually forwarded to PayPal.
• The first one had a subject line of Reminder: [Action Required] Someone just signed in using your account to make an unexpected payment. - Identity Ticket: [#90144094]. The sender was from "serviсe@intl.payρaI.сom" email@example.com. This email claims that your access has been limited and asks you to verify your PayPal information but the link is not to PayPal and instead is to http://trk.klclick3.com/// with a long string of letters.
• The second email’s subject line was Reminder : [Daily Report Alert] Statement update login with Google Chrome From Guinea on 19 June, 2020. The email stated that “You are in violation of PayPal’s Acceptable Use Policy,” was from the email address of "service@intI.Iimited.com" firstname.lastname@example.org.
• The third email’s subject line was Your account has been suspended (Ref - 09189042696) and the sender’s email address was service@paypaI.com <email@example.com and it claimed to find suspicious activity on your credit card and you should log-in to confirm.
• The final email’s subject line was [New access detected] [Statements Update] [Daily Report] Statement Update New Login: Monday, June 15, 2020 from "service@intI.Iimited.com" firstname.lastname@example.org and it also claimed that you were in violation of PayPal’s Acceptable Use Policy.
Business Networking Equipment Scam
CyberNite LLC of Cheyenne reported a business purchasing scam propagated by a company called Jinigram LLC. The business purchased firewalls, maintenance contracts, and other licensed software from Jinigram LLC, yet Jinigram is not an authorized retailer. Upon further investigation by CyberNite it was found that Jinigram LLC had a Better Business Bureau (BBB) rating of an F with 17 complaints against them. It is suspected that Jinigram LLC may be a front for stealing identities, according to CyberNite’s research. Be sure to research any vendor you choose to use and get a written statement of work and contract from them.
New Grandparents Scam
The Cybercrime Support Network has reported a new grandparent’s scam that involves obituaries published online. Be careful of the detail submitted in an obituary. A victim’s grandfather passed away and the obituary published the name of her son and the place where the grandfather lived. A scammer called the grandmother saying the grandson was in a car accident, need money, and named the location in the obituary. (fraudsupport.org)
College Student Stimulus Check Scam
Students have been receiving messages pretending to come from their school or college. It claims they have to access a portal for information on stimulus payments using their college log-in details. The link leads to a phony college sign-on page, enabling the crooks to steal usernames and passwords. (scambusters.org)
Think you should have received a stimulus payment but didn't? It might have been stolen. First, check on your payment status at https://www.irs.gov/coronavirus/economic-impact-payments. If your payment has been issued but didn't arrive, file a complaint at www.identitytheft.gov -- that will start the ball rolling and create an affidavit that can be submitted to the IRS. (scambusters.org)
MS-ISAC Patch Now Alert
The Multi States Information Sharing and Analysis Center (MS-ISAC) has issued a patch now (update your software) alert for Google’s Chrome browser. If you use this browser, make sure it updates.
Report a scam
If you want to report a phone, email or text scam and let your friends and neighbors know, forward it or send a description to email@example.com.
Other ways to report a scam:
• Better Business Bureau Scam Tracker: www.bbb.org/scamtracker/us/reportscam
• File a complaint with the Federal Trade Commission at ftc.gov/complaint
• Report your scam to the FBI at https://www.ic3.gov/complaint
• Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration.
• Online at https://complaints.donotcall.gov/complaint/complaintcheck.aspx or call 1-888-382-1222, option 3
• Office of the Inspector General: www.oig.ssa.gov