Hacker’s brief

Information for this week’s Hacker’s Brief is provided by CyberWyoming Alliance, a 501c3 nonprofit affiliate of CyberWyoming. 

Not Amazon: If you receive a call supposedly from Amazon saying something like “Our servers have detected that your account has been logged in from multiple ID addresses,” it’s a scam. It goes on to ask you to press a key “if this order was not placed by you.” CyberWyoming Note: This scam was brought to you by scambusters.org, but it has been spotted in Wyoming. Do not press the key because it signals your number is active and opens you up to more calls. Just hang up.

Norton Renewal Invoice Scam: If you receive an email with the subject line of “Your Order Has Been Placed” from “Norton Billing” at jonborlandv571@gmail.com, be assured it is fake. Norton would never use a Gmail address to send an invoice. Reported by a Sheridan citizen. CyberWyoming Note: If you receive a notification like this for a product you use, go directly to the software provider’s website to check your renewal. Never click on a link in an email.

Windows Defender is Free with Operating System: A Sheridan citizen reported impersonating Microsoft saying Windows Defender (the built in Windows antivirus and firewall software) was updated and you need to pay $290. Do not call the customer care number in the email. It isn’t Microsoft. The email was from “Windows Defender Store #8524576” orgenemchalex500@gmail.com and the subject line was “Order Has Been Placed.” CyberWyoming Note: A study by AV-TEST last month named Microsoft’s Windows Defender the best free antivirus, detecting all recent malware attacks.

He’s a ‘Deplomatic’ Agent! Most reputable agencies will check their correspondence for grammar and misspellings. An email was reported by a Sheridan citizen from Mr. Bobby Phillip who claims to be DHL’s Diplomatic Agent (but yes, it was spelled deplomatic) in charge of distributing compensation funds from the High Court of Commissioners in West Africa. To try to add legitimacy, this email even includes a fake DHL shipment code. The email was from nelsonezea@gmail.com or bobbyphillip.net@gmail.com and the subject line was “Attention please.”

-- Advertisement – Story Continues Below --

United Nations Fund Beneficiary Scam: If you receive an email from Mr. Anthony Walker, supposedly from the United Nations, asking you for your full name, address, country/state, occupation, passport/driver’s license, and phone number so you can receive an inheritance fund, just delete it. The email is from diplomatanthonywalker04@gmail.com or unitednationinternational202@gmail.com and it was reported by a Sheridan citizen.

Mattress Invoice Scam Alert: A Sheridan citizen reported an email scam with a subject line of “Thanks for Your Order” from msmtkbefplby@oldiesrising.com. The email is very realistic and says that you have purchased a Lull Luxe Hybrid Mattress for $899. CyberWyoming Note: the domain “oldiesrising.com” is in French, which is a great clue that this email is fake.

TSA Precheck Scam Alert: If you see an email from the TSA that encourages you to renew your Precheck or sign up for the Precheck service, be wary. The link in the email takes you to a very believable fake TSA registration site that copies the exact questions on the actual TSA Precheck application. Reported by KnowBe4.

MS-ISAC Patch Now Alert: The Multi-State Information Sharing and Analysis Center (MS-ISAC) has published a patch now (update your software) alert for Google’s Chrome browser, Microsoft products, Adobe products, and Apple products. If you use these products, make sure the software (or firmware) is updated.

-- Advertisement – Story Continues Below --

Please report scams you may experience to phishing@cyberwyoming.org to alert your friends and neighbors.

Please report scams to alert your friends and neighbors.

Other ways to report a scam:

Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by scam or fraud, called ReST. Visit aarp.org/fraudsupport to learn more about the free program and register.