Threats Without Borders - Issue 100
Matt's Newsletter, Week ending October 16, 2022
I've been considering which is more significant, 100 or 2? In four weeks, this newsletter will reach the two-year milestone, but today’s issue is release 100. I have (somehow) managed to push out a Tw/oB newsletter every week for 100 straight weeks. There are few (optional) tasks in my life that I have done for 100 straight weeks. Through sickness, vacation, family, and a full-time job that never provides relief, I have managed to hit the publish button every Tuesday morning. I understand the interpretation of “quality” is left for the reader, but I’m damn proud of my effort regardless.
Please help me continue to grow by sharing the newsletter with others.
I’m always amazed at what garners follow-up interest from my presentations. It’s rarely the information that I think is most interesting or valuable to the audience. This weeks talk was no exception with the inquired about topic being something I mentioned as a complete aside: a Chromebook is the best computer device for an older adult who has little technical ability. Which is funny since my talk was about Google and personal privacy.
The Apple iPad is usually suggested as the easiest solution for those that only need to do web browsing, some simple social media, and access email. I can’t argue against the simplicity of an iPad, but I have found older adults are adherents to the keyboard and a mouse. You can use these with the iPad but they have battery issues and when Bluetooth goes wonky it will really go wonky and non-technical users lose their minds.
Here are some benefits of a Chromebook:
A traditional computer look and feel for a very low cost. It’s nearly impossible to corrupt the system - just turn it off and turn it back on to reset it. ChromeOS auto-updates so the system is always patched and up-to-date with security features and has encryption by default. Everything runs in a sandbox so threats can’t spread to other applications, browser tabs, or the system itself.
If your loved older adult finds themselves at wit’s end, you can remote into the machine through Chrome Remote Desktop and lend a hand. And when everything goes to hell, there is a super easy recovery mode to restore the system to a previous point in time. Windows has this feature also, but try to walk a non-technical person through it.
Of course, users must suspend any expectation of privacy as Google is going to collect ALL the data. Many who provide help-desk support to their older relatives find this a small price to pay for sanity.
More info please.
This press release from the Southern District of Indiana notes that seven individuals have been indicted for access device fraud and aggravated identity theft. It’s a short release but there is a lot to unpack and leaves more questions than answers. From the limited information, the group was using stolen credit cards to purchase cigarettes in bulk from Sam’s Club stores. The financial loss is estimated to be $3 million dollars. The key is this fact: “At least one defendant, Michel Lamah, worked in an Indianapolis credit card processing facility, and provided stolen credit cards to codefendants.” Again - Insider Threat! We spend so much time protecting from outsiders while those on the payroll are killing us. Kudo’s to the U.S. Postal Inspection Service for closing out this case! https://www.justice.gov/usao-sdin/pr/members-multi-state-credit-card-fraud-ring-sentenced-conspiracy-credit-card-fraud-and
Prison phones
Cellular phones in prisons have been a problem since phones became compact enough to easily smuggle into the facilities. Ever wonder who is still buying all those pre-paid flip-phones? Even grandma is moving to smartphones. Originally they were utilized for street gang related business but now they are being to run financial fraud schemes. This prison inmate is accused of using a cellphone to orchestrate an 11 million dollar fraud. However, I don’t know who has more liability, the prisoner, the prison, or the brokerage that was tricked by a guy in prison on a thirty-nine-dollar cell phone? And notice how long it took to indict. https://www.theregister.com/2022/10/13/prison_11m_schwab_fraud/
Windows help desk attack
Threat actors continue to target Microsoft Windows users who are seeking assistance with computer problems - and with Windows - thats a lot of users. The attackers have created numerous websites that appear to be legitimate help-desk sites offering solutions. Interacting with the sites results in tech-support scams. This is a slight variation to the recent reports of attackers abusing the Edge browser to launch similar tech-support scams. https://blog.cyble.com/2022/10/11/massive-tech-support-scam-exposed/
Covid and Fishing
There is a saying among anglers that goes, “Never leave fish to find fish”. That sentiment must hold true in the Phishing community as well since Covid 19 themed attacks continue to be prevalent even as the actual disease subsides. INKY explains how Covid continues to be a main lure used in phishing attacks. https://www.inky.com/en/blog/fresh-phish-small-business-covid-19-grants-designed-for-disaster
The Rest…
iPhone usage among teens hits 87% says a new survey. https://www.macrumors.com/2022/10/11/teen-survey-iphone-ownership/
The details are slim so I’ll walk softly but it seems like something should have triggered a review before the loss hit $180,000. https://www.pennlive.com/news/2022/10/more-than-180k-stolen-from-banking-account-and-transferred-to-cryptocurrency-account-police.html
Educated people can still turn out to be assholes. https://www.local10.com/news/local/2020/10/21/man-41-faces-charges-for-several-bank-robberies-in-miami-dade/
This article is written so poorly that I hesitated including it but the topic is important - mail theft continues. https://6abc.com/mail-theft-check-washing-stolen-mailbox-thefts/12325371/
Cool Job
Director of Security - NASCAR. https://nascar.wd1.myworkdayjobs.com/en-US/NASCAR/job/Daytona-Beach-Florida/Director--Security_JR11781-1
Cool Tool
Search designed for privacy - https://www.qwant.com/
Where is that short link actually taking you? http://urlxray.com/
Irrelevant
Is incarceration an effective method of crime prevention?
“Young men in America failing,” should be rephrased as “America is failing its young men.” We over discipline, over medicate, and overexpose them to drugs, pornography, and gambling, then blame them for their mistakes. The ways we are failing young men are legion, so let’s focus on one problem: We put too many in prison.
https://www.profgalloway.com/incarcerated/
Thank you for opening this weeks email. Please consider subscribing if you just browsed in to the Substack page. I appreciate you no matter how you got here but subscribers help the newsletter rankings.
Don’t forget the Android and IOS applications.
Matt
“The problem with stealing quotes off the internet is you never know if they are genuine.” - Abraham Lincoln.