Ignore That Email: Nobody is Spying On You

November 18, 2018 by doctordave

We posted this on Facebook a few weeks ago, but it’s worth mentioning here again. An email has been going around the past few months. It takes some different forms but generally follows the same pattern:

Someone “hacked” you and has your password
They’ve been monitoring you
They’ll send your information to all your contacts
To prevent this send them bitcoin

I even got that email. I gotta say when you see your password in an email right there it’s scary.

“Subject: dave@calldrdave.com has password (my password). Password must be changed

Hello!

I’m a programmer who cracked your email account and device about half year ago.

You entered a password on one of the insecure site you visited, and I catched it.

Your password from dave@calldrdave.com on moment of crack: (my password)

Of course you can will change your password, or already made it.”

As well as

“Subject: dave – (my password)

It seems that, (mypassword), is your password. You may not know me and you are probably wondering why you are getting this e-mail, right?

actually, I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean). While you were watching videos, your internet browser started out functioning as a RDP (Remote Desktop) having a keylogger which gave me accessibility to your screen and web cam. after that, my software program obtained all of your contacts from your Messenger, FB, as well as email.

“

How Did They Get Your Password?

It seems like every day I listen to the news, I hear about another hack. From Applebee’s to Yahoo, there’s a company for every letter of the alphabet that’s been breached. A hacker stole your password from one of these companies. If you use your password more than one place, that’s how they got it.

Fortunately, I use a password manager called 1Password. Although I avoid reusing passwords for important stuff, I’ll be lazy and do it for some websites. In my case, I could trace it to Angie’s List. I had to sign up for my business and I didn’t’ think I’d use it much. That’s why I used a throw-away password.

What Can You Do to Prevent This?

You can’t prevent someone from hacking another system. I mean when Equifax gets hacked, that just shows you how vulnerable we all are. The best you can do is mitigate the damage.

Stop Reusing Passwords

I get it. Passwords are hard to keep track off. As I said, I use 1Password. We can help you set that up. We also have a more manual option: A password book. We sell these for $7.50, although you can get one free by joining our Wellness Program. That lets you use a unique password and keep track of them.

Get a Reliable Antivirus

If you’re on a Mac, you probably don’t have an antivirus. If you’re on a PC you might be using the free one that comes with Windows.

We used to take the approach good enough is, well, good enough. If you haven’t had any problems with your computer, stick with what you got. With so many threats out there, we’re finding basic protection isn’t enough. A professional paid antivirus provides not just added security but peace of mind. We recommend Malwarebytes. Fortunately, we’re able to sell it at a discount. Normally it’s $40, but we can sell it for $35 to existing clients.

When you get an email like this, just run a scan to get that peace of mind.

Don’t Pay Scammers/Let Them Keep the Money

We deal with tech support scams all the time. Some clients are so embarrassed they decide to let the criminals keep the money. These criminals then use the money to attack other victims. If we cut off the stream of money and don’t make this profitable, they’ll stop doing it. Okay maybe not stop, but at least make them work harder!

As a reminder, clients who are part of our wellness program get unlimited phone and email support for questions like these. When they get any suspicious emails, they just call us rather than give money to a scammer.

Full text of the emails:

“It seems that, (my password), is your password. You may not know me and you are probably wondering why you are getting this e-mail, right?

What did I do?

I backuped phone. All photo, video and contacts.

I created a double-screen video. 1st part shows the video you were watching (you’ve got a good taste haha . . .), and 2nd part shows the recording of your web cam.

Exactly what should you do?

Well, in my opinion, $500 is a fair price for our little secret. You’ll make the payment by Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).

BTC Address:

(It is cAsE sensitive, so copy and paste it)

Important:

You have one day in order to make a payment. (I’ve a unique pixel in this e mail, and at this moment I know that you have read through this email message). If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on. Having said that, if I receive the payment – I’ll destroy the video immediately. If you need evidence, reply with “Yes!” and I will certainly send out your video recording to your 6 contacts. It is a non-negotiable offer, that being said don’t waste my personal time and yours by responding to this message.”

And

“Hello!

I’m a programmer who cracked your email account and device about half year ago.

You entered a password on one of the insecure site you visited, and I catched it.

Your password from dave@calldrdave.com on moment of crack: (mypassword)

Of course you can will change your password, or already made it.

But it doesn’t matter, my rat software update it every time.

Please don’t try to contact me or find me, it is impossible, since I sent you an email from your email account.

Through your e-mail, I uploaded malicious code to your Operation System.

I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources.

Also I installed a rat software on your device and long tome spying for you.

You are not my only victim, I usually lock devices and ask for a ransom.

But I was struck by the sites of intimate content that you very often visit.

I am in shock of your reach fantasies! Wow! I’ve never seen anything like this!

I did not even know that SUCH content could be so exciting!

So, when you had fun on intime sites (you know what I mean!)

I made screenshot with using my program from your camera of yours device.

After that, I jointed them to the content of the currently viewed site.

Will be funny when I send these photos to your contacts! And if your relatives see it?

BUT I’m sure you don’t want it. I definitely would not want to …

I will not do this if you pay me a little amount.

I think $855 is a nice price for it!

I accept only Bitcoins.

My BTC wallet:

If you have difficulty with this – Ask Google “how to make a payment on a bitcoin wallet”. It’s easy.

After receiving the above amount, all your data will be immediately removed automatically.

My virus will also will be destroy itself from your operating system.

My Trojan have auto alert, after this email is looked, I will be know it!

You have 2 days (48 hours) for make a payment.

If this does not happen – all your contacts will get crazy shots with your dirty life!

And so that you do not obstruct me, your device will be locked (also after 48 hours)

Do not take this frivolously! This is the last warning!

Various security services or antiviruses won’t help you for sure (I have already collected all your data).

Here are the recommendations of a professional:

Antiviruses do not help against modern malicious code. Just do not enter your passwords on unsafe sites!

I hope you will be prudent.

Bye.

“

Has Your Password Been Stolen?

November 4, 2018 by doctordave

With all the recent and continuing breaches, one thing we learned is you can’t rely on a company to tell you. Breaches are reported months and sometimes years later.

If you’d like to check if yours was stolen, the website “Have I been pwned” helps. All you do is put in your username or email address (no passwords!) It then tells you what hacks you’ve been a victim of. I was only the victim of seven on one email address. I consider that lucky.

Fortunately, I use a password manager. All those passwords on those sites were unique, so I was safe. We help clients all the time setup password managers. It’s easy and saves you time and hassle. All you do is remember the password to your password manager and it takes care of everything else.

Photo by liako

Which is More Secure? Your Phone or Laptop

October 21, 2018 by doctordave

With many people having both a smartphone and laptop synced, you’d think people would secure them equally. In reality, it seems people are more worried about their phone rather than their laptop (or desktop). That’s a big mistake.

This article has some interesting facts! The ones that stood out to me are related to leaving the laptop unattended. I see this in coffeeshops all the time. Someone will take their phone in the restroom with them or up to the counter, but otherwise just leave their laptop there. It also makes sense it’s easier to carry a phone in your pocket compared to a laptop.

Nonetheless, both devices should be protected equally. That includes proper password, encryption, and other security methods. This is a much bigger deal if you’re bound by professional codes of conduct like HIPAA, FINRA, or PCI. We’re here to help with that and have lots of clients in these situations.

Photo by Kevin Johnston

Police Using Fitbit Data Against You?

September 22, 2018 by doctordave

I’m not talking the fat police either. I’m talking about someone going to jail based on what a fitness tracker told police.

The details are explained here . It should give everyone pause for concern. The obvious thing is “don’t do anything wrong,” but the problems go deeper than that. For example, given that people know how these trackers are used, what could stop someone from switching yours out and framing you. I know I’ve accidentally picked up my spouse’s tracker before. The Supreme Court is already grappling with issues of cell phone towers and privacy. Their decision might impact cases like this as well.

Photo by Bekathwia

Don’t You Wish You Could Block Fake Emails?

July 15, 2018 by doctordave

Ever since I got email back in the early 90s, fake emails were a problem. Sadly it’s only gotten worse over time.

You’d think as technology got better and Artificial Intelligence improved (I’m looking at you Siri and Alexa), we’d have figured out how to know if an email message is legit. We’ve had some neat innovations, but the vast majority of us suffer from email overload.

I loved this article in Techcrunch as it summarized my pain. It had some techie-ideas of how to solve it. My prediction is they never will. After all, we’ve had postal mail for hundreds of years, but I still get junk mail!

Photo by card karma

Could Your Business Suffer an Equifax-Type Hack?

July 8, 2018 by doctordave

It’s been close to a year since the most significant hack in cyber-history that we know of. The last thing you want for your business is to inform customer their information has been taken. You can avoid some common mistakes to reduce your chances.

This article on Inc.com goes over some common mistakes businesses make. The overall theme though is keeping up with technology is required in business. Just because something is working doesn’t mean it shouldn’t be looked at. Older software that isn’t getting security updates is the prime target (the Equifax hack as of this writing was determined to be a missed update).

Probably the most common problem we see is malware (viruses, trojan horses, rootkits, etc,). These are systems that take credit cards, and those internet nasties are stealing your customer information. You don’t even realize it as a business owner.

Although much less common, a disgruntled employee can cause you a world of hurt. They know your systems and where vulnerabilities are. Even if they aren’t technical, they might report your lack of security to others.

If you’re not familiar with updated security software and firmware on things like Point of Sale (POS) systems and routers, it’s time to contact us before you have to contact your customers about a preventable breach.

Photo by Got Credit

Phones are Highly Personal

May 27, 2018 by doctordave

This statement may seem obvious, but still need to be proven by science.

I don’t know about you (well, actually I do according to this study), but when I’m without my phone I panic. Where is it? I’d be much more upset about misplacing my phone than my wallet. That dreaded 1% battery sign means I’m cut off from the rest of the world.

I’ll admit it; it’s an extension of myself! What about you? Do you agree with that statement? Or do you just see it as a method of communication?

Wasn’t life simpler when all phones did is make phone calls?

Photo by Incase

Locked Out of Your Google Account?

May 20, 2018 by doctordave

That question should strike fear into your heart. I know it does mine. That’s why I freaked when I read this article about one tech writer unable to access his account.

The worst part of his story? He had no idea how he got locked out or how he got back in. It all started with a forgotten password. Once he tried to reset it, he was locked out for over a week.

Of course, a password manager would have helped him. We recommend 1Password. If your Google account is critical, there are some safety measure that can be added so you can get back in once you’re locked out.

We do this all the time for clients, so if you rely on Google and Gmail, give us a call, send us a text, or write us an email. Most appointments are less than an hour. The safety and security is worth its weight in gold according to our clients.

Photo by Dudley Carr

Have You Set Up Facebook Trusted Contacts?

April 1, 2018 by doctordave

With all the hacks out there, including stolen passwords, getting locked out of Facebook is almost inevitable. Fortunately Facebook has a way to get back in through trusted contacts.

Some people think it’s needlessly complex, but this guide as well as this one are excellent walk-through. Even if it isn’t 100% effective, every Facebook user should set it up.

To prevent getting locked out in the first place, always set up a unique password for Facebook. It’s hard to create and track all these passwords, that’s why we recommend password managers. One password to track them all. We also suggest setting up two-factor authentication. That means if someone has your password, they can’t get into your account without your mobile phone. Give us a call, send us a text, or drop us an email. We can help you with all of that!

Photo by Lars Plougmann

Smart Locks and Safety

March 25, 2018 by doctordave

One hot gift for the 2017 holiday season was internet-enabled locks, often referred to as Smart Locks. I have these both in my home or office. When I tell clients I have one, they often express security concerns. They’re legitimate but easily minimized.

This blog post does a good job of explaining the security while this post is in my mind a bit alarmist. Security on a smart lock is just like security on any device. Sure, there are risks, but the rewards usually outweigh them. What do I like best about our smart lock? I never worry if I locked the door before I left the house. I can check my locks remotely anytime I want. That includes in the middle of the night when I’m in bed.

While you’ll need a locksmith to install one of these, we can help you secure it. That includes not just the lock, but making sure when your phone is stolen, someone can’t use your phone to get into your home.

Photo by pestoverde