Preparing for Theft

Unfortunately, I’ve had several clients who have been robbed. The most recent was when a laptop was stolen from a car. There are some actions that you can take to avoid the worst outcomes if a theft does happen.

  1. Set Up Passwords:
    • Use strong, unique passwords or passcodes for both your device and your accounts.
    • Enable biometric authentication methods like fingerprint or facial recognition if available.
  2. Enable Remote Tracking and Wiping:
    • For smartphones, enable features like Find My iPhone (iOS) or Find My Device (Android). For laptops, use tracking software like Find My Mac (Apple) or Find My Device (Windows).
    • Set up remote wipe options to erase your data if the device is lost or stolen.
  3. Backup Your Data:
    • Regularly back up your device’s data to an external drive or a cloud service. This ensures you can recover your important files even if the device is stolen. Both Apple and Microsoft offer cloud backup services.
  4. Protect your Passwords
    • Especially important today, don’t let people see you type your phone or laptop login password. This “shoulder surfing” is now common before a theft. Once people can log in, they can change your password and actually lock you out of your accounts.

Bogus PCI emails

Anyone who owns websites will get bogus emails about domain name expiration. New to the scam list are these emails about PCI (Payment Card Industry) compliance. This is an email to a website that does not collect any credit card or other user information. So there is no merchant processor to be non-compliant with.

They start by claiming to be your PCI service provider, which they are not. Then they threaten fines, which they guess at.

We appreciate providing your PCI services.

Unfortunately your PCI service has expired, and you are now eligible to receive non-compliant fees from your merchant processor. These fees are between $19.95 and $39.95 per month; potentially from $240 to $480 per year.

This non-compliance fee may show on your merchant statement as “NON-RECEIPT OF PCI-DSS VALIDATION FEE” or “PCI NON-COMPLIANCE FEE”.

We can help you stop paying PCI non-compliance fees by successfully reporting your compliance to your merchant processor.

Call immediately at (800) 557-4684 to continue your PCI compliance program and we will:
– review your PCI compliance requirements
– provide options to simplify your PCI process
– answer any questions or concerns
– help you save on PCI related costs

If you have questions, please call us at (800) 557-4684.

Thank you,
SecurityMetrics
compliance@securitymetrics.com

Spam Scam

This will be my last post. I’m retiring since I won “some huge amount of United States Dollars” in the lotto. How did I win when I’ve never played the lotto? It’s easily explained in this email I got today. I just need to send the Lieutenant General or General all my personal information. I literally can’t believe my luck.

I am Lieutenant General Peter A. Blay (Chief of the Defense Staff (Ghana). I am mailing you in respect, of the present development going on here in my country GHANA.

I decided to contact you, after much investigation which was carried out by the Bureau of National Investigation (BNI) and the Ghana Police Service, to make sure our country is free of these fraudulent activities,which is going on here in Africa and for our country to bear a good name.

The Airport Authority detected some trunk boxes after been scanned the authorities detected that the boxes contains funds on your name and email that has been tempered on, they were been smuggled into the country by foreign Personnel who were on transit from London.

These men were trying to enter the country with the trunk boxes, when the airport authority detected that these boxes contains, some huge amount of United State Dollars. After much investigation we found out that these men were among those men, spoiling the good name of Africa.

They opened up to us that, they actually work with a Lotto company before their dismissal and used the opportunity to perpetuate their crimes, they told us that the funds inside the boxes was won by you, but now they planned to turn back on you and decided to take the money all to themselves out of the country. We later found out on the investigation that was carried that, these men are truly members of a well established organization to act on their criminal activities.

As I write you this mail now, the three(3) men that were caught are now in the custody of the Ghana Police Service over here in our country Ghana,while we are trying to track the others left, because they have proved to us that they belong to one organization.

That is why we have to reach you by your mail address and name that was tagged the boxes, so we can make the arrangement on the transfer of the funds to your designation.

Your urgent response will be very much appreciated as soon as you have received this email.

Thank you for your kind attention, for us to make sure our beloved country Ghana, bears a good name.

Please in your reply include your
A: FULL NAMES
B: ADDRESS
C: DIRECT CONTACT PHONE NUMBER
D: SCANNED COPY OF YOUR INTERNATIONAL PASSPORT OR ANY RELEVANT IDENTIFICATION PASSPORT.

As this information will be required, by the authorities in Ghana to draft the new change of ownership in your name as the rightful owner of the funds in our custody and also to verify the information given to us because the documentations covering the boxes have been tampered on.

Regards,
General Peter A. Blay

Beware Phishing Scams

Wikipedia describes computer phishing scams:

Phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging, and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Phishing is an example of social engineering techniques used to fool users, and exploits the poor usability of current web security technologies.

Remember to avoid these scams by going directly to the site instead of clicking on a link sent to you in an email.

Here’s an email I just got. It’s either a classic phishing email, an attempt to infect your computer with a virus, or both.

From: Paypal <Services@support.com>

Subject: Your account has been temporarily limited

Date: November 12, 2010 1:26:37 PM EST

Dear customer,

Your account has been temporarily limited

Click here to resolve the problem

Thank You.

* Please do not reply to this email, as your reply will not be received. This is an automatic notification of new security messages.

Sincerely,

PayPal Security Department Team.

Digital TV Converter Box Scams

The FCC has ordered all local over-the-air broadcasts be digital by February 17, 2009. Taking advantage of this, scammers are putting up ads and commercials claiming to offer free digital converter boxes. The FTC should shut down these misleading ads. One ad says:

The United States Deptartment of Commerce is preparing everyone for the switch to digital television by authorizing payment coupons for certified brands of these special TV boxes.

But the government process has us all tied up.

That’s why Universal TechTronics is providing these Miracle ClearView TV boxes immediately to the general public for free for everyone who gets the 5yr. warranty.

There are two problems with this. First, the device is only “free” if you don’t consider the mandatory warranty and shipping of $100.

But the main reason this is bogus is that most Americans don’t need to do anything. If you have satellite or cable TV, you are not affected. And if you are one of the rare Americans that uses a rabbit-ear antenna for over-the-air broadcasts, your TV could have a digital tuner built-in if it was purchased recently.

If you do need a digital converter box, it should cost about $60. You can get a $40 coupon from the federal government that lowers your cost to around $20.

For more on the Digital TV Transition, see the FCC site:
http://www.dtv.gov/