Cyber crime / security help

935 Views | 10 Replies | Last: 19 days ago by satexas
aggiebrad94
How long do you want to ignore this user?
AG
Had a family member fall prey to a scammer. I have several email addresses / phone numbers / whatsapp number that the scammer dropped in getting FM to send screenshots of gift cards.

I've registered the incident with the online FBI portal and talked with the local Sheriff's. I'd really like an online hacker to find out if the person who did this is in the US or if I'm wasting my time and should just chalk this up to an expensive lesson.

Any guidance is greatly appreciated.
akaggie05
How long do you want to ignore this user?
AG
You are likely wasting your time unless the $$ loss is in the 6-7 figure range. Most all of these ****heads are overseas.
Lathspell
How long do you want to ignore this user?
AG
You're wasting your time, unfortunately.
aggiebrad94
How long do you want to ignore this user?
AG
That's what I figured.
eric76
How long do you want to ignore this user?
AG
It is really difficult to try to get people to not respond to scammers.

They can come at them with telephone calls, e-mail, and text messages. They used to use the US postal service, back in the mid 1990s.

Here are the first steps you should have already done:

1) Unplug the computer. Scammers will get their victims to download software like anydesk which they can then use to give them continued access to the computer. Even if the scammers got every penny, don't imagine that they are magically gone. They aren't.

2) Take care of the banking breach immediately. With their access to the computer, the will have watched the victims enter their bank's url, their on-line banking username, and their password. They have this information already and you need to block it as soon as humanly possible. They can and will keep coming back for more.

Contact the bank and have them disable the on-line banking access to this account.

My recommendation is to open a new bank account and move everything left to it. Close the old bank account. Of course, they will have to notify their direct deposits and automatic withdrawals, but that is a whole lot better than the scammers keeping taking the money out.

And don't use the same password again.

Also, never use zelle. Once you send something with zelle, the bank does not have to refund the money. Your money can be gone even faster than with the gift cards.

3) At a minimum, change the e-mail password if it is not too late. The scammers will know the current e-mail address and password. It is a simple matter for them to change the pasword so that they can continue to read through the e-mail.

They have probably already gone through every bit of e-mail that was available to look for other things. The best thing would be to change the e-mail address, too.

Don't do this from their computer.

4) Plug the computer back in and reinstall the operating system. You don't have any idea what they may have already installed on the computer while they had access to it.

If you can't do this, take it to someone who can. Whatever they charge will be a hell of a lot less than what the scammers can do if they stay on there.

Better yet, install Linux. It can probably do everything they need to do and is somewhat safer. The scammers often don't want to deal with Linux, but that could change.

5) Get them a new phone number. The scammers already know they have an easy mark and they aren't going to forget it. You don't want them calling back over and over again. Sooner or later, they will likely succeed.

Until you have done at least steps, 2, 3, and 4, they are still there and they are watching. You absolutely have to keep the scammers from continuing their scam.
eric76
How long do you want to ignore this user?
AG
I sent my response to a hacker and asked if I had forgotten anything. He pointed out that when reinstalling windows, you need to reformat the drive first. He said that it isn't difficult to install something that will persist through a reinstall if the entire drive is not first wiped.

So wipe the drive before reinstalling Windows.

I always delete partitions and create new ones.

He also suggested using a password manager and never using the same password twice.
aggiebrad94
How long do you want to ignore this user?
AG
Thank you. All the communication was done with an iPhone. Does that change much of what they should do?
eric76
How long do you want to ignore this user?
AG
aggiebrad94 said:

Thank you. All the communication was done with an iPhone. Does that change much of what they should do?
Did they have any access to the computer or ask any details about the bank account?

Did they have the family member download anything at all to their computer?

Did they ask for any passwords?

If not, then you might be safe there. I'd still change the phone number, though.
aggiebrad94
How long do you want to ignore this user?
AG
eric76 said:

aggiebrad94 said:

Thank you. All the communication was done with an iPhone. Does that change much of what they should do?
Did they have any access to the computer or ask any details about the bank account?

Did they have the family member download anything at all to their computer?

Did they ask for any passwords?

If not, then you might be safe there. I'd still change the phone number, though.
Communication was only done via text & through apps (instagram & snapchat). Those will be deleted once the Sheriff tells them its okay.
eric76
How long do you want to ignore this user?
AG
That sounds good.

However, some of the most convincing scams involve text messages.

For example, one security researcher said that he received a text message from his bank about his suspicious activity on his bank account. The text asked if it was legitimate or not. When he indicated that it wasn't, he got a call almost immediately from bank security.

They asked him his security questions which he answered and then provided information from his bank account. It turned out that there were a pair of scammers involved. One scammer portrayed himself as security while talking to him while the other scammer portrayed himself as the researcher when talking to the bank. To verify that the scammer was him, they asked one or more of those "security" questions. The scammer talking to him asked him and he replied and passed it on back to the other scammer who provided those answers to the bank.

After a while, he got suspicious and contacted the bank and got the scammer shut out of his account. He had to create new security questions and change passwords.

So one obvious question about those interactions was whether he provided them with any answers to security questions or any pin numbers he received?

I used to regularly get similar text messages from credit card companies for "card not present" when I would order something on-line. They did a good job of conditioning me to the idea that those were always legitimate questions. In reality, they just made it much easier for the scammers. Some credit card companies have quit the practice of sending such text messages.
satexas
How long do you want to ignore this user?
AG
aggiebrad94 said:

Had a family member fall prey to a scammer.

What others said, it's a loss. There's no recourse. It's called "paying the stupid tax" (a general phrase used, don't be offended). It's how you learn sometimes, unfortunately.

Eric 76 gave you good advice above.
Refresh
Page 1 of 1
 
×
subscribe Verify your student status
See Subscription Benefits
Trial only available to users who have never subscribed or participated in a previous trial.