ANY message telling you your computer, tablet, or phone
is infected is a Blatant LIE. No one can tell that from
outside your computer, tablet or phone.
Phishers (Bad guys) will (and do):
1. Send you an email message, pretending to be...
2. Send you a text message, pretending to be...
3. Popup a window while using your web browser, pretending to be...
4. Call you on your phone, pretending to be...
5. Send you a letter (USPS Mail), pretending to be...
6. Knock on your door, pretending to be...
Phishers (Bad guys) try to convince you:
1. Your computer (or phone) is infected and...
2. Your package cannot be delivered...
3. Your account or credit card has been charged...
4. Your computer is sending out spam, pornography, etc.
5. Your account has been blocked, suspended, or deleted
6. You ordered something, or you've been charged...
7. Your friend is stranded...
8. And so on...
Phishers (Bad guys) pretend to be:
1. From your bank...
2. From your investment company...
3. From UPS, Apple, Google, Microsoft, etc.
4. From FBI (or other law enforcement or government agency)
Phishers (Bad guys) try to get you to:
1. Click on this link
2. Call this phone number
3. Download (install) something to your computer
4. Let them get onto your computer
5. Give them money (or your credit card number)
6. Give them account information, passwords, etc.
7. Respond with any information about you
WHAT YOU SHOULD DO
WEBSITE PHISH - Popup a window in your browser
You are using your web browser (Safari, Firefox, etc.) and
a window pops up with some message saying as your computer
or mobile device is infected...
1. Don't Respond in any way!
2. On mobile devices, delete all tabs
3. On computeres Quit or force quit your browser
4. Restart your computer without reopening any Apps
Your browser should start up in your home page and you can
get on with your life. Clear History and Website Data.
Doing so should clear any data and cookies from the infected
website that popped up the phishing window.
If you need help from Microsoft
Phone: 800-642-7676
If you need help from Apple
Phone: 800-MY-APPLE (800-692-7753)
Make sure your devices are up2date
http://edu-observatory.org/olli/Manage/Updates.html
There is a lot of malware out there that has been mitigated
by recent updates. If you haven't installed the latest
updates, you may wind up in a world of hurt!
EMAIL PHISHES
1. Don't Respond
2. Mark the email message as junk (or spam). Training your
email system to recognize phishes, spam, and junk will
help reduce those distressing emails.
TEXT MESSAGE PHISHES
1. Don't Respond
2. Be vigilant and delete phishing messages. Ignore, delete
and get on with your life.
WHEN YOU NEED TO CANCEL, VERIFY, or REPORT
Never respond to the Phish! If warranted:
1. Call your bank directly to verify an account.
2. Call your Credit Card Provider (number is on the card) to
check or report suspicious activity.
3. Freeze your Credit (all of us should freeze our credit)
https://www.aprfinder.com/credit-bureau-phone-numbers
Equifax: 888-548-7878 https://www.equifax.com/
TransUnion: 800-916-8800 https://www.transunion.com/
Experian: 800-493-1058 https://www.experian.com/
4. Report major problems to the
Iowa Attorney General's Office
https://www.iowaattorneygeneral.gov/contact-us
515-281-5164
5. Report major problems to the
Federal Trade Commission (FTC)
https://www.ftc.gov
202-326-2222
RESOURCES FROM ELECTRONIC FRONTEER FOUNDATION (EFF)
How to: Avoid Phishing Attacks | Surveillance Self-Defense
https://ssd.eff.org/en/module/how-avoid-phishing-attacks
Protecting Yourself on Social Networks
https://ssd.eff.org/en/module/protecting-yourself-social-networks
Protecting Your Device From Hackers
https://ssd.eff.org/en/module/animated-overview-protecting-your-device-hackers
Tips, Tools And How-Tos For Safer Online Communications
https://ssd.eff.org/en
From CISA, NSA, FBI, and MS-ISAC
Phishing Guidance: Stopping The Attack Cycle At Phase One
http://edu-observatory.org/olli/Apple_Resources/PDFs/Phishing_Guidance.pdf
The Cybersecurity and Infrastructure Security Agency (CISA),
National Security Agency (NSA), Federal Bureau of
Investigation (FBI), and Multi-State Information Sharing and
Analysis Center (MS-ISAC) are releasing this joint guide to
outline phishing techniques malicious actors commonly use
and to provide guidance for both network defenders and
software manufacturers. This will help to reduce the impact
of phishing attacks in obtaining credentials and deploying
malware.
sam.wormley@gmail.com