Cyber Crooks Infiltrate FBI Computers
In one of the most infamous hacks of recent years, cyber criminals recently broke into an FBI job portal and obtained a vast trove of personal information that potentially puts federal agents at risk of identity theft or worse. Highly personal data affecting “tens of thousands” present and former FBI employees was captured, reportedly involving names, Social Security numbers, home addresses, work-related details – including clandestine job assignments – health care data, family information, and more. The full scope of the breach remains unclear, but it is considered exceptionally broad.
A gang of hackers known as “ShinyHunters” has claimed credit for the cyberattack. The New York Times describes ShinyHunters as “a loose collective of relatively young hackers who have been responsible for dozens of data breaches since about 2019.” The group is known for selling people’s personal information online, as well as demanding payment in return for not leaking such data – a scam known as “ransom or release.” While many questions remain about the recent hack, it appears that ShinyHunters may have been motivated to infiltrate the FBI in response to an FBI advisory earlier this year, warning about the hackers’ nefarious activities. In an email to the New York Times, ShinyHunters demanded that the FBI remove its advisory.
Brett Leatherman, assistant director of the FBI’s cyber division, warned the hackers to turn themselves in quickly and that consequences would rise with the passage of time. “You know how to find us, and we know how to find you,” Leatherman said. “I suggest you reach out first while the choice is still yours.”
ShinyHunters has claimed a long list of breaches of well-known organizations in recent years including the European Commission, AT&T, Quantas airlines, Harvard and Princeton universities, and Grubhub.
Beware of the Modern Pick-Pocketer
Can you be pick-pocketed without anyone grabbing your wallet?
In today’s digital world, the scary answer is yes. Scam experts are seeing an uptick in what’s known as “ghost tapping.” Fraudsters who get close enough to you in a crowd or on the street are using tech tools that give them access to the tap-to-pay cards in your wallet and even the payment apps on your phone, the Better Business Bureau warns. The tap-to-pay systems use Near Field Communication (NFC), a technology that allows data transfer at very close distances. That’s why it works when you tap your phone against a pad in the grocery store. Subway turnstiles, hotel key cards, and various smart-home functions may also rely on NFC technology. The wireless interception of your data has become an “emerging threat” to consumers, and “attempts are steadily on the rise, especially in high-density, fast-paced environments like street markets, festivals, and public transit,” according to an article published by the Atlantic Federal Credit Union.
These transactions are often swift, and many people don’t ask for receipts. “You might purchase a souvenir from a street vendor for forty-five dollars and tap your phone to pay. If the vendor fails to provide a receipt and discreetly enters a higher amount into their system, you may only discover hours later that you were charged double,” the credit union article notes. The Better Business Bureau said it has received reports of scammers pretending to sell inexpensive candy for charity by exploiting tap-to-pay systems. The thief charged victims hundreds of dollars when they thought they were paying a few dollars for chocolate. “He got my mother for $537,” one victim in Fort Wayne, Indiana reported.
To guard against ghost tapping scams, experts suggest the following:
- Ask for receipts and inspect screens for the total dollar figure before walking away. Better yet, avoid tap-to-pay in unfamiliar places and swipe your credit card instead.
- Keep your phone locked and turn off NFC when you’re not using it.
- Set up alerts from your credit card company or bank so you are notified if your card has been altered. EverSafe alerts, sent to members and designated contacts, will routinely alert you to suspicious charges that are not in line with usual purchases (e.g. hundreds of dollars for candy).
- Buy specialized sleeves or wallet protectors that can block radio frequency identification (RFID) hackers. Read reviews beforehand so you can see which ones really work.
Scammers Masquerade as FTC Officials
The mission of the Federal Trade Commission is “to vigorously enforce the law to protect Americans” from an array of wrongful business practices. Consumer scams are high up on the list. So, it is little surprise that scammers may pretend to be FTC officials when they try to win the trust of their intended victims. All too often, these impersonation scams are successful.
In one recent case, a widow in Maryland sent $11,000 to a man who falsely claimed to be FTC Chairman Andrew N. Ferguson. She thought she was getting the government to help protect her savings from a hacker. She packed the money in a metal lockbox secured with duct tape as instructed and shipped it via UPS. Investigators have not released all pertinent details, including the widow’s name. But all agree that her $11,000 is gone. “I am a senior and they know who’s vulnerable,” the woman told WMAR Channel 2 in Baltimore. “They know the ones that they can get, and unfortunately I happened to be one of them.” She is hardly alone. “Scammers are impersonating the FTC,” the agency warns on its website. “Know that the FTC will never threaten you, say that you must transfer your money to “protect it,” or tell you to withdraw cash or buy gold and give it to someone.”
In an earlier web posting, FTC officials explained that imposter scams typically begin with a seemingly innocuous communication that is designed to get victims to lower their guard. “The scam often starts with an unexpected call or message about a routine problem – like a suspicious purchase on your Amazon account, a virus on your computer, or an account breach. Then the scammer transfers you to someone they claim is with the government and can help with the problem.” The supposed “help” invariably entails urging victims to protect their money by moving it to platforms where criminals can seize it without exposing themselves. These may include financial accounts that the scammers will empty immediately or cryptocurrency ATMs, where the victims’ money is not recoverable. “The problem is the scammer controls those accounts and quickly steals your money,” according to the FTC.
For further information about imposter scams and how to avoid them, go to: ftc.gov/impersonators.
