TIPS : Protect Yourself from Cyber Frauds

Tips you can use to avoid becoming a victim of cyber fraud:

• Do not respond to unsolicited (spam) e-mail.
• Do not click on links contained within an unsolicited e-mail.
• Be cautious of e-mail claiming to contain pictures in attached files, as the files may contain viruses. Only open attachments from known senders. Scan the attachments for viruses if possible.
• Avoid filling out forms contained in e-mail messages that ask for personal information.
• Always compare the link in the e-mail with the link to which you are directed and determine if they match and will lead you to a legitimate site.
• Log directly onto the official website for the business identified in the e-mail, instead of “linking” to it from an unsolicited e-mail. If the e-mail appears to be from your bank, credit card issuer, or other company you deal with frequently, your statements or official correspondence from the business will provide the proper contact information.
• Contact the actual business that supposedly sent the e-mail to verify if the e-mail is genuine.
• If you are asked to act quickly, or there is an emergency, it may be a scam. Fraudsters create a sense of urgency to get you to act quickly.
• Verify any requests for personal information from any business or financial institution by contacting them using the main contact information.
• Remember if it looks too good to be true, it probably is.

E-Mails Containing Malware Sent to Businesses Concerning Their Online Job Postings

Recent FBI analysis reveals that cyber criminals engaging in ACH/wire transfer fraud have targeted businesses by responding via e-mail to employment opportunities posted online.

Recently, more than $150,000 was stolen from a U.S. business via unauthorized wire transfer as a result of an e-mail the business received that contained malware. The malware was embedded in an e-mail response to a job posting the business placed on an employment website and allowed the attacker to obtain the online banking credentials of the person who was authorized to conduct financial transactions within the company. The malicious actor changed the account settings to allow the sending of wire transfers, one to the Ukraine and two to domestic accounts. The malware was identified as a Bredolab variant, svrwsc.exe. This malware was connected to the ZeuS/Zbot Trojan, which is commonly used by cyber criminals to defraud U.S. businesses.

The FBI recommends that potential employers remain vigilant in opening the e-mails of prospective employees. Running a virus scan prior to opening any e-mail attachments may provide an added layer of security against this type of attack. The FBI also recommends that businesses use separate computer systems to conduct financial transactions.

For more information on this type of fraud and prevention tips, please refer to previous public service announcements at the links below:

    * http://www.ic3.gov/media/2010/CorporateAccountTakeOver.pdf
    * http://www.ic3.gov/media/2010/WorkAtHome.pdf
    * http://www.ic3.gov/media/2009/091103.aspx

Anyone who believes they have been a target this type of attack should immediately contact their financial institutions and local FBI office and promptly report it to the IC3’s website at www.ic3.gov. The IC3’s complaint database links complaints together to refer them to the appropriate law enforcement agency for case consideration. The IC3 also uses complaint information to identify emerging trends and patterns.

Source : http://www.fbi.gov/scams-safety

iYogi - Scammers now devising iYogi Scam to get access to your personal data: Beware

From booking airline tickets to doing research, from academics to music, you name it, and the Internet is the go-to source for everything. The beauty of the Internet is that you get access to a vast pool of resources which the pre-Internet generation might never have even dreamed of. However, the downside of an all-powerful and omnipresent Internet is that it is now playing into the hands of unscrupulous elements who device malicious scams to dupe you, a prime example being the iYogi scam.

If you are yet to come across the iYogi scam, don’t get misled by the mention of iyogi in the scam. For, it is the scammers exploiting the name of the company to fulfill their perverse needs without the consent and knowledge of the company. Also, iYogi is just one of the many establishments exploited by these scammers; you must by now be familiar with the charity scam where the perpetrators impersonate themselves as some reputed charity organizations and solicit money and other help. One reason why scams like the iYogi scam flourishes is that users sometimes don’t bother to do the background check of the organization mentioned in the e-mail, especially when it bears all the designs of a well-established company. The iYogi scam has been thriving on the ignorance of users and if you are well informed you can avoid it. Let me share my mother-in-law’s horrible encounter with these scammers.

My mother-in-law is a retired school teacher, and is very active on the Internet. For her, the Internet means the world and something that keeps her going. An active member of many online forums like forums for the elderly people, for animal rights, human rights violation and a couple others, she also has a close group of friends that she communicates on the Internet. So, if the Internet is down even for a day, it is enough to make her go crazy. It so happened that this guy, calling himself a technician, and representing himself as a representative of iyogi, one day called my mother-in-law and started claiming that her system is infected and that if it is not fixed immediately, it will be permanently damaged. It was sufficient to make her panic. Seizing the opportunity, the guy said that he can fix the problem but that he needs to have remote access to the system. And for that he needs her to go to a certain site and download and install specific software on the system. By this time, the guy was having a firm hold over her senses and convinced her to do as he wanted. Actually, she had no prior experience of such a situation and since the guy was also claiming to be a representative of iyogi, she thought that there were few reasons to suspect his bona fides. But, after the remote connection was established, and the technicians worked on her system, she had a lot of heart burn and tragedy. Many files on her system were missing and the computer became almost inoperable. Even some of her profiles were compromised. For, as we found out later, the guy was not associated with iYogi and remote tech support was the last thing on his mind. It was a case of iyogi scam, which is increasingly targeting unsuspecting and elderly people.

When we approached iYogi, they categorically denied having anything to do with the iyogi scam saying that they follow strict moral and ethical policies. We too found no evidence to prove otherwise. They though showed genuine concern that malicious elements are using the company’s name to harass and rip off people. Making it clear that they don’t make cold calls, it has urged people not to entertain remote tech support from people identifying themselves as iyogi technicians until and unless their credentials are verified.

In fact, to raise awareness among Internet users about the perils of Internet scams and to provide users tips on how to avoid these scams, iyogi has been publishing iYogi scam alerts and iYogi fraud alerts for quite some time now. You can get to know a great deal about the latest and most malicious scams out there like online software scam, iyogi scam, online video scam, online dating scams, and inheritance scams through these alerts. It can be a good way to understanding the modus operandi of the scammers that will help users like you and I stand in good stead.

If you have any questions or doubts about the services offered by iyogi or about the iYogi scam, sharing them on the iYogi complaints form (the company has its own complaints form) would be a good idea.  This way you can seek a direct clarification from the company regarding any activity that you feel suspicious about and that involves the company’s name.

Dos and don’ts when an imposter lends at your door representing himself as an iYogi technician:

• Before going too far into the discussion, figure out who you are dealing with. Don’t hesitate to ask as many questions you want to be sure. 
• Don’t let him control the conversation. It is the most conducive scenario for him to manipulate you. If he is too smart for you, take help of a responsible and intelligent friend. 
• Where did he find your number and how did he know that there is problem with your system? Let him explain.
• Study his offer, whether he is offering too much for too little. If yes, it is sure sign of danger. Immediately shut shop!
• If he is asking you to download programs from unheard of sites, or sites that are not dependable. Stop. First check his bona fides.

Remember, the premise ‘Prevention is better than cure’ equally applies to iYogi scam!

Top Five Online Scams

Here's a list of the Top 5 scams and schemes you're most likely to find on internet.

1. Auction Fraud
The setup: Online auction fraud accounts for three-quarters of all complaints registered with the FBI's Internet Crime Complaint Center (formerly the Internet Fraud Complaint Center). There are many types of eBay chicanery, but the most common one is where you send in your money and get nothing but grief in return.

2. Phishing Scams
The setup: You receive an e-mail that looks like it came from your bank, warning you about identity theft and asking that you log in and verify your account information. The message says that if you don't take action immediately, your account will be terminated.

The risk: Your account information will be sold to criminals, who'll use it to ruin your credit and drain your account. According to Gartner, phishing scammers took consumers (and their banks, who had to cover the charges) for $1.2 billion in 2003.

3. Nigerian 419 Letter
The setup: You receive an e-mail, usually written in screaming capital letters that starts out like this:
"DEAR SIR/MADAM: I REPRESENT THE RECENTLY DEPOSED MINISTER OF AGRICULTURE FOR NODAMBIZIA, WHO HAS EMBEZZLED 30 MILLION DOLLARS FROM HIS STARVING COUNTRYMEN AND NOW NEEDS TO GET IT OUT OF THE COUNTRY..."

4. Postal Forwarding/Reshipping Scam
The setup: You answer an online ad looking for a "correspondence manager." An offshore corporation that lacks a U.S. address or bank account needs someone to take goods sent to their address and reship them overseas. You may also be asked to accept wire transfers into your bank account, then transfer the money to your new boss's account. In each case, you collect a percentage of the goods or amount transferred.

5. "Congratulations, You've Won an Xbox (IPod, plasma TV, etc.)"
The setup: You get an e-mail telling you that you've won something cool--usually the hot gadget du jour, such as an Xbox or an IPod. All you need to do is visit a Web site and provide your debit card number and PIN to cover "shipping and handling" costs.

Source: pcworld.com

Stay Safe from Identity Theft

Here are some tips to protect yourself against identity theft:

1.    Protect your personal information. It's a valuable commodity.
2.    Only share your credit card or other personal information when you're buying from a company you know and trust.
3.    Know who you're dealing with.
4.    Walk away from any company that doesn't clearly state its name, physical address, and telephone number. A Web site alone or a mail box drop should raise suspicions.
5.    Don't rely on verbal promises. Get all promises in writing and evaluate them carefully before you make any payments or sign any contracts.
6.    Read and understand the fine print in any written agreement.
7.    Don't pay "up-front" for a loan or credit. Remember that legitimate lenders never "guarantee" a loan or a credit card before you apply, especially if you have bad credit, no credit, or a bankruptcy.

Phishing Email Safety Tips

Phishing e-mails, websites and phone calls are designed to steal money. Cyber ​​criminals can do this by installing malicious software on your computer or steal personal data from your computer.

Cyber criminals also use social engineering to convince you to malicious software or hand over your personal information under false pretenses to install. They can e-mail, call you on the phone, or convince you to something like a website download.

We all have received phishing messages. They are mixed with the hundreds of emails many of our daily process. Processing time email takes time and it's a job that we can rush through, but it is essential that we rather think that responding to email and be absolutely sure that the sender of the email are legitimate.

As you process your email, remember…

   1. Never click through to a website that claims it needs you to verify your password.
   2. Be suspicious of any email requesting your password or sensitive information. Reputable companies will not randomly email you asking for sensitive information.
   3. If you receive an email from a company and you’re not sure if it’s legitimate, do not follow the link in the website, instead go directly to the website you know to be real or call the company to inquire about the request.