MoveIT Data Breach
Who are your real facebook friends?
From PCMag.com
https://www.pcmag.com/how-to/how-to-avoid-social-media-scams
As long as social media platforms have been around, there have been hackers attempting to take control of accounts. Remember MySpace? My friends’ page for their band was hacked a number of times, sometimes by malicious strangers, sometimes by overzealous fans. Back then, if a hacker got into your MySpace account, they had access to your friends’ list, private messages, photos, and blog posts. It was a lot, but it’s nothing like the treasure trove of information many of today’s social media accounts contain.
Facebook accounts often contain your real name, email address, birth date, relationship status, and physical address. In addition to storing all your private messages, photos, and feed posts, Facebook is also used to log in to other websites. If a hacker manages to take over your Facebook account, they may have access to some of your other accounts around the web. The same goes for Instagram, which is also owned by Meta.
What Hackers Want
Criminals need all your personally identifiable information (PII) to commit identity fraud or to sell your account to the highest bidder. According to a report from Privacy Affairs(Opens in a new window), the cost of a Facebook account on the dark web is $45. An Instagram account goes for $40.
According to the Identity Theft Resource Center(Opens in a new window) (ITRC), the internet safety organization received nearly 500 social media account takeover reports in the first three months of 2022. That’s up from the 320 the ITRC received in 2021. Experts at the organization say criminals are committing Instagram scams by posing as a “friend” of the victim. The hacker lures in their victim with an email or a private message stating they need help getting back into their Facebook or Instagram account. The hacker sends a malicious link in their message, and when the victim clicks on it they lock themselves out of their account and give access to the hacker.
How to Avoid a Social Media Account Hack
The demand for hacked social media accounts is high. Don’t let yourself be caught off guard by a scammer. Take the following steps to keep your account locked down and secure.
- Never click on any links sent to you until you verify they’re from someone you know. If a friend sends you a message that contains a link, attachment, or file, reach out to the friend via a phone call or video chat to make sure they sent you the message.
- Avoid sharing your personal information with anyone. Scammers build trust with their victims in the hope that they’ll hand over PII. This is especially common in dating scams. You should never share passwords, PINS, codes, or any other type of sensitive information with someone you’ve never met in person.
- Use multi-factor authentication and a strong and unique password on your account. You should also store the password in a password manager. Consider using a hardware security key to protect your accounts that contain the most PII.
- Stop downloading third-party apps within a social media platform. If third-party apps have your information, you may not know where or how it’s being stored. It is another place for hackers to get their hands on your valuable social account credentials. Only download applications from recognized stores, such as the Apple App Store, Google Play, and Microsoft Store.
- Don’t talk to strangers. Isn’t the free exchange of ideas the point of the internet? Maybe it was at one time, but these days, answering a private message from a person who doesn’t have any shared friends with you could be a setup for a phishing scam.
What to Do If Your Instagram Account Gets Hacked
If you believe your Instagram account has been hacked, here are six steps to take.
- Check your email account for a message from Instagram. If you received an email from security@mail.instagram.com that says your email address was changed, you might be able to undo this change by selecting “revert this change” in that message. If additional information was also changed (like your password), and you’re unable to change back your email address, request a security code from Instagram.
- Request a login link from Instagram. To help Instagram confirm that you own the account, you can request that they send a login link to your email address or phone number. To make a request, visit the login screen, and tap Get help logging in (Android) or Forgot password (iPhone).
- Enter the username, email address, or phone number associated with your account, then tap Next. If you don’t know the username, email address, or phone number associated with your account, tap “Need more help?” and follow the on-screen instructions.
- Select either your email address or phone number, then select Send Login Link.
- Click the login link in your email or a text message (SMS) and follow the on-screen instructions.
- Request a security code or support from Instagram. If you’re unable to recover your account with the login link sent to you, you may be able to request support for your hacked Instagram account. For more information on how to do this, visit Instagram’s Help Center for step-by-step instructions.
Scammers Are Interviewing for Remote Jobs Using Deepfake Tech
From PCMag
Scammers have been exploiting deepfake technology to impersonate job candidates during interviews for remote positions, according to the FBI.
The agency has recently seen an increase in the number of complaints about the scam, the FBI said in a public advisory(Opens in a new window) on Tuesday. Fraudsters have been using both deepfakes and personal identifying information stolen from victims to dupe employers into hiring them for remote jobs.
Deepfakes involve using AI-powered programs to create realistic but phony media of a person. In the video realm, the technology can be used to swap in a celebrity’s face onto someone else’s body. On the audio front, the programs can clone a person’s voice, which can then be manipulated to say whatever you’d like.
The technology is already being used in YouTube videos to entertaining effect(Opens in a new window). However, the FBI’s advisory shows deepfakes are also fueling identity theft schemes. “Complaints report the use of voice spoofing, or potentially voice deepfakes, during online interviews of the potential applicants,” the FBI says.
The scammers have been using the technology to apply for remote or work-from-home jobs from IT companies. The FBI didn’t clearly state what the scammers’ end goal. But the agency noted, “some reported positions include access to customer PII (personal identifying information), financial data, corporate IT databases and/or proprietary information.”