Total Identity Protection

iTunes users all over the world are being hooked in a possible phishing scam that siphons cash out of their PayPal accounts. Phishing scams, of course, consist of emails that appear to be coming from a legitimate, trusted business. These emails are often designed to trick the victim into revealing login credentials. Once the phishers have access to the account, they begin withdrawing funds.

In this case, scammers used victims’ iTunes accounts to purchase gift cards, which were paid for by the victims’ linked PayPal accounts. Some victims of this particular scam have has just a few dollars stolen, while others have had their accounts emptied.

Gift cards are a form of currency created by the issuer. Their value is in the products or services available when cashed in. A scammer can purchase a $100 gift card and sell it online for $50. Pure profit.

There are many variations of iTunes gift card scams:

1.

Read more…

The Federal Deposit Insurance Corporation is not calling consumers to collect on their loans.  According to an FDIC alert, there have been phone calls from individuals pretending to be the FDIC.

The FDIC inherits most of the bad loans in bank failures, said it does not call consumers about making loan payments.

Its warning said “suspicious telephone calls” are seeking payment on a delinquent loan or personal information under the guise of the FDIC.

“The caller attempts to authenticate the claim by providing sensitive personal information such as name, Social Security number and date of birth, supposedly taken from the loan application,” the FDIC alert said. “The recipient is then strongly urged to make a payment over the phone to ‘avoid a lawsuit and possible arrest.’?”

If the calls aren’t outright attempts to rake in money, they are at least evidence of attempted identity theft.

Read more…

I was watching Back to the Future II with a little person in my life and thought how funny it was that every time McFly was called a chicken he would accept the challenge and throw up his dukes. Maybe it’s funny to me because I’m kind of like McFly. When someone tosses out an insult or a challenge or baits me, my teeth come out and I’m ready for battle. I can’t help myself; I’m half Italian American and half German shepherd (and I’m not sure which half is worse).  Constructive feedback is one thing, but insults and attacking me is another.

I think most people at some level have a hard time with being mocked or personally castigated online or on the ground.  My mom used to say if you ignore them they will eventually go away. There is truth to that but it is easier said than done. Today’s advice might be to R.I.D yourself of the perp. That’s Report-Ignore-Delete.

Social networks are a minefield of messy comments and accusations that can invade your personal security.

Read more…

Welcome to what is normally the Monday Morning News Kick Off post on a post-holiday weekend Tuesday. We hope everyone is rested up and ready for another work week. As always, we have compiled all the key identity theft, data breach and cyber security stories you need to jump start the week. And, we urge our readers to stay tuned for more of our “Best Person” and “Worst Person” posts — where we aim to enlighten and entertain all in one. Happy Tuesday!

Investigators Reveal ‘Massive’ World Cup Data Breach It should come as no surprise to any football fan with even a passing contempt for the game’s governing body that FIFA have yet again dropped a sizeable bollock, a bollock that stands a very good chance of ruining many innocent supporters’ lives. News has broken this morning that a database containing the personal details of hundreds-of-thousands of football fans that purchased World Cup tickets through official FIFA-sanctioned outlets has been stolen and incrementally sold on.

Read more…

In 2009, there were a reported 140 million records compromised, compared to 360 million in 2008. In 2010 there have been almost 13 million records stolen. But don’t have a party just yet. Criminals are fine-tuning their craft and getting better. The industry just isn’t making it as easy. 97% of those records were stolen using malware – malicious software designed to attack the target’s existing systems and software in place.

A reported 50% of the malware was installed remotely. Almost 20% came from visiting infected websites and almost 10% was installed when employees clicked infected links that conned or “socially engineered” them.

A recent Verizon report stated, “Over the last two years, custom-created code was more prevalent and far more damaging than lesser forms of customization, the attackers seem to be improving in all areas: getting it on the system, making it do what they want, remaining undetected, continually adapting and evolving, and scoring big for all the above.”

This may be also attributed to an inside job.

Read more…

In the latest aftershock to a massive data breach that took place in 2008, card payment processor Heartland Payment Systems yesterday announced a settlement agreement with Discover Financial Services in which Heartland will pay Discover $5 million.

The drama began Jan. 20, 2009 (coincidentally, the day of President Obama’s inauguration), when Heartland announced that malicious software had compromised its data the year before. Visa and MasterCard had alerted the payment processor of suspicious activity on some of its card transactions. Data exposed through the breach included card numbers, expiration dates, and in some cases, the names of customers who used debit or credit cards at Heartland’s network of 250,000 businesses.

In August 2009, the hackers who perpetrated the data breach, American Albert Gonzalez and two Russian accomplices, were indicted in federal district court in New Jersey on charges that they carried out the largest hacking and identity-theft caper in U.S.

Read more…