INTERNET OF THINGS- Strangers View Families Through Security Cameras

In the past week there have been press reports of strangers breaking into Ring accounts and viewing the insides of homes. In some cases, the hackers talked to a child and to a couple of dogs.

One story has a video of a young girl in her bedroom being talked to by a male voice through the camera in the room. Another story has video of two dogs lounging on a couch and a voice trying to get them to get up off of it.

Ring cameras have been receiving publicity on social media with videos of porch pirates stealing packages from front porches. Some homeowners have purchased Ring and other cameras for use indoors, in children’s bedrooms or front rooms to allow homeowners and parents to monitor what is going on in their homes. Over the past few years, videos have been posted showing burglars inside homes stealing items.

Having cameras inside can help with security to confirm that someone is in your house if the alarm goes off. They also help to monitor small children when they are in their cribs in their rooms. However, all sense of security is lost if someone breaks into your cameras and can observe your possessions and see your family moving around in your house. And talking to your children gets even creepier yet.   

While press reports have used the term hacked or breaking in, Ring, in its blog, points out that the recent incidents were not due to an intrusion or compromise of Ring’s computer systems. Many of the hackers may have obtained the usernames and passwords of Ring accounts outside of the Ring’s servers such as from databases in the dark web.

Ring recommends that its customers do the following:

·       Enable two-factor authentication to access your account.

·       Add shared users to your account instead of simply giving them your login information.

·       Do not use the same password for more than one account.

·       Create strong passwords that have a mix of letters, numbers, and characters. Some cyber security professionals recommend passwords with 12 characters or longer. A password generator can help create strong passwords.

Internet of Things (IoT) such as cameras and thermostats help us have a more secure and convenient life. In the early years of IoT, manufacturers have not designed good security measures into their devices. Both manufacturers and their customers should observe the best and most recent security practices. IoT manufacturers should make security robust and easy for customers and customers should practice good security as they use any IoT device.

The Seattle Times:

https://www.seattletimes.com/nation-world/ring-camera-installed-in-a-childrens-room-for-peace-of-mind-is-hacked-8-year-old-daughter-harassed/

KIRO TV:

https://www.kiro7.com/news/local/stranger-gains-access-familys-ring-camera-tries-talk-familys-dogs/NY2Q7FURH5EYPFNFNWDT632OTA/

Ring:

https://blog.ring.com/2019/12/12/rings-services-have-not-been-compromised-heres-what-you-need-to-know/

GIFT CARDS- A New Technique to Steal

KIRO TV recently reported a new technique used by identity thieves to steal your money at a grocery store. The King County Sheriff’s Office has noted thieves stealing credit cards in parking lots of Kroger stores (QFC or Fred Meyer) then going into the store, picking up some gift cards from the rack and then transferring funds from the stolen credit card to the gift cards at the self-checkout counter.

According to the KIRO report, the thieves have targeted stores with self-checkout counters such as QFC.

The King County Sheriff’s Office is encouraging Kroger to only allow purchase of gift cards at manned checkout counters where an employee can check ID for credit card purchases.

Whether or not Kroger makes this change, you can protect yourself from being victimized by keeping your purse or wallet on your person while in the parking lot, or in the store for that matter. Do not place a purse in a grocery cart then turn away or leave the cart, even for a short distance or a short time. A thief can take your wallet and its contents in a flash.

To view video of this operation in action, checkout this link,



KIRO TV:

https://www.kiro7.com/video/?id=4809297

CALLING 911- Calling for Help in a Domestic Violence Situation

A few weeks ago, a story was going around about an Ohio 911 call taker receiving a call with a pizza order. After a short time, the call taker figured out that the caller was really reporting a domestic violence situation and it was not safe for her to talk openly.

There have been stories that calling 911 to order pizza is a code that signals call takers of a dangerous domestic violence situation. A check with two local 911 agencies reveals that neither uses specific code words as an alert of a domestic violence situation.

Snohomish 911 says that it does not train dispatchers or call takers on specific code words. They did say that dispatchers/call takers do pick up on nuances of calls that do not seem right. Snohomish 911 does recommend calling 911 when it is safe to do so to report what is going on. An alternative, if the it is dangerous to speak freely, is to send a text to 911.   

The King County Sheriff Office 911 Communications Center reports that it has received calls from people in dangerous situations asking for pizza. Also, they have had people act like they are talking to a “friend.” It does not recommend any code words for the public to use. If a caller seems like they may be in a dangerous situation, the call taker will ask if they are free to talk. If the answer is no, then the call taker will ask yes or no questions. King County Sheriff’s 911 also notes that you can text 911 if you are not free to talk.

The important thing to remember is to protect your safety if you need to call for help from 911. The ideal situation is that you separate yourself from any potential for harm or violence then call 911. If you cannot remove yourself, use your best judgement in how you discretely call or text 911.



USA Today:

https://www.usatoday.com/story/news/nation/2019/11/22/ohio-911-dispatcher-recognizes-911-call-pizza-dmestic-violence/4271985002/  

MONEY MULES- Helping Scammers Steal

The FBI recently announced charges against two Russians for a long-lasting cybercrime spree that targeted thousands of computers with malicious computer code that allowed them to steal banking credentials then funnel money out of the victims’ accounts eventually into the criminal’s accounts.

In some cases, the criminals used “money mules” who transferred the stolen money from one account to other accounts in an attempt to launder the money, obscuring the fact that it had been stolen. Eventually the money winds up in the criminals’ accounts. Laundering the money in this way makes it more difficult for the investigators to tie the money in a suspect’s account(s) to crime.

Criminals recruit others to become money mules. They do their recruiting in several places including,

·         Online job websites

·         Online dating websites

·         Social networking websites

·         Online classifieds

·         Email Spam

·         Dark web Forums

Individuals who could be at risk to becoming a mule include:

·         College students

·         People new to the U.S.

·         Small business owners

·         Elderly individuals

·         Recent retirees

·         People looking for a job

·         People looking for a relationship

·         People with memory loss

Many money mules are unaware that they have a criminal laundering role. These unwitting or unknowing individuals are often solicited via an online romance scheme or online job scheme. They may be asked to establish a bank account in their true name to receive money from someone that they have never met in person. Often, they are told to keep a small percentage of the transferred funds as “payment” for their efforts. They are not aware that what they are doing is illegal because they trust that they are in an online romance or a legitimate business relationship.

Money mules launder funds from criminal activities such as wire fraud, business email compromise, romance fraud or human trafficking. Acting as a money mule, an individual is committing a crime and is liable to prosecution and even incarceration.

This is important because, like scammers, criminals who approach you to help them launder their criminally receive funds use emotion to entrap you into their enterprise. The opportunity for romance, be it online and that you may not have met the individual in person or the opportunity to make easy money at home can raise your emotions.

Watch out for anyone, as a business deal or in an online romance, who asks you to use your own bank account to receive and forward money.

For more on this, check out these links,



FBI:

https://www.fbi.gov/news/stories/charges-announced-in-malware-conspiracy-120519


https://www.fbi.gov/news/stories/money-muling-is-illegal-120419

https://www.fbi.gov/file-repository/money-mule-awareness-booklet.pdf/view

GIFT CARDS- They Are for Gifts, Not Paying Scammers

Anyone who has paid attention to the news knows that if you receive a cold call from someone claiming to be from the IRS, the local police claiming you missed jury duty, or from Microsoft tech support offering to help fix a problem with your computer that they say they detected and asking or demanding payment in gift cards is a scammer.

Some other examples of scams using gift cards, that have not received as much publicity include:

·         callers pretending to be from a utility company, telling you to pay your bill by gift card or they’ll cut off your power or water

·         sellers on online auction sites who ask for gift cards to “buy” big items like cars, motorcycles, boats, RVs, tractors and electronics

·         someone posing as a servicemember to get your sympathy, saying he has to sell something quickly before deployment and needs you to pay by gift card

·         callers who say you’ve won a so-called prize, for a sweepstakes you probably never entered – but first, you have to use a gift card to pay fees or other charges

·         someone buying something from you, probably online, who sends a check for more than the purchase price – and asks you to give them the difference on a gift card. (That check, by the way, will turn out to be fake.)

The Federal Trade Commission (FTC) recommends that if you do find that you have paid a scammer with a gift card report it to the company to that issued the card right away. Ask if they can refund the money because you were a victim of a scam. Also, the FTC recommends that you report the incident to the Washington State Attorney General (https://www.atg.wa.gov/file-complaint).

While it may seem obvious to avoid paying scammers with gift cards, it still can happen to you. KIRO TV News has broadcast this report about a local victim of the Social Security scam losing $9,500.



KIRO TV:

 https://www.kiro7.com/news/local/puget-sound-area-man-out-9-500-after-falling-victim-to-social-security-scam/1015862354



For more information about gift cards and scams, check out this link:



Federal Trade Commission:

https://www.consumer.ftc.gov/articles/paying-scammers-gift-cards

ONLINE SHOPPING- Shopping Safely With A Growing Trend

We are now well into the holiday shopping season. Initial reports show robust shopping between Thanksgiving and Cyber Monday. In fact, news reports show a 20% increase in online shopping on Cyber Monday with $9.4 billion spent this year versus $7.9 billion spent last year. Clearly, more people are taking advantage of the convenience of online shopping.

With the publicity over the past few years of data breaches, phishing, malware, and other techniques used by criminals to steal identity and therefore steal funds from their victims, you might wonder if online shopping is safe.

Online shopping can be just as safe as shopping in a store. Or just as risky. Like shopping in a store, you need to take some practical steps to protect your money and property when shopping online. This posting gives a practical view of the risks of online shopping:

Ask Leo! By Leo Notenboom:

https://askleo.com/online_shopping_just_how_safe_is_it/



The lesson is that shopping online can be safe. You just need to get into the habit of acting safely. Here are some more thoughts about how to shop online safely:

Krebs on Security:

https://krebsonsecurity.com/2018/11/how-to-shop-online-like-a-security-pro/



Fraudsters are constantly experimenting with new ways to trick you as a consumer to give away your private personal information and trick businesses to give over your personal information. The reports you see about new techniques may seem overwhelming. Awareness of these techniques, however, is important to protecting yourself from harm. Police encourage us to be aware of our surroundings, on the streets, in stores, and in our neighborhoods. Being aware online is equally important.

With that, here are a couple of articles that talk about some new techniques. CBS talks about fraudulent websites luring online shoppers:  



CBS:

https://www.cbsnews.com/news/black-friday-2019-fraudulent-websites-targeting-holiday-shoppers-looking-for-a-bargain/



Consumer Reports talks about a variety of techniques including phishing, malicious apps, and hackers to legitimate web sites:

Consumer Reports:

https://www.consumerreports.org/digital-security/dont-let-online-shopping-threats-spoil-holiday-season/



This Seattle Times article talks about the initial shopping numbers for Black Friday through Cyber Monday:

The Seattle Times:

https://www.seattletimes.com/business/a-record-190-million-americans-shopped-thanksgiving-weekend-most-of-them-online/

IDENTITY THEFT- Identity Theft Can Happen Here

Over the past few days there has been talk over social media about local residents being victims to identity theft. While there was much speculation on how the identity theft occurred, many people reported that their credit card and bank accounts were illegally tapped for transactions at local retail establishments. Several people mentioned retail stores in the Lake Stevens and Snohomish areas, while others pointed out that many other illegal transactions also occurred in other areas of the county and the Puget Sound region.

So how could this happen? Specifics have yet to be released by local law enforcement or the local press. However, here are some likely scenarios of how this can happen with the current technology:

·         Skimmers. This is the likeliest culprit according to most people on social media. Skimmers have become very popular with locally based ID thieves. A skimmer is a thin piece of plastic with electronic circuitry that is inserted in or over the slot that you insert your credit or debit card into to make a payment. Skimmers have been found at ATM’s, gas pumps, and terminals at cashier stations in stores (yes, right under the nose of clerks. If the ID thieves are good, they can insert a skimmer with a clerk right there.).

·         Someone uses counterfeit credit cards to make transactions. They can buy the account information, from vendors who have obtained the information from data breaches, on the “dark web.” They can also buy the equipment and materials for making the cards on the web. Then they go around to ATM’s, and retail outlets withdrawing money or making purchases. Victims of the ID theft can be from anywhere. So, you can get an alert from your bank about a suspicious transaction that occurred on the Atlantic coast while you have not traveled 20 miles away from your home in Snohomish County.

·         Someone can make online purchases with the stolen account information in breaches. This may not always show up as a transaction from a local store, but it is an easy way for an ID thief to buy something on your dime.

·         RFID chips. RFID (Radio Frequency Identification) imbedded in your credit card, driver’s license, or passport could be read by a reader carried by a passerby.

Preventing Identity Theft is a difficult proposition. Several organizations need to take steps to prevent someone who is not authorized to access your personal information. Banks need to have strong, up to date security measures. Retail outlets, large and small, need to have security measures to protect your information. And you, as an individual, need to take steps to protect your information. If anyone in this chain do not take steps or have weak steps, the system will fail, and ID thieves will gain access to your information.

Here are some things you can do to protect yourself:

·         The most important action you can take is to closely and frequently monitor your bank card statement and then if you find any irregularities to promptly notify your bank card provider. This may be your only defense against ID thieves who have purchased your credit card account information on the dark web from using it with a counterfeit card or online.

·         Always use a credit card for transactions, including at the store and online. You have the most protection from fraud with a credit card. While many institutions who issue debit cards are very good with returning funds that may have been stolen, you still run the risk of a fraudster zeroing out the total amount of your debit account. While you may eventually get it back, you may be stuck without funds until the financial institution completes its investigation.

·         To guard against skimmers, check the terminal for any signs of tampering. At a gas station, some people suggest using a pump closest to the cashier on the theory that an ID thief will more likely add a skimmer to a pump that is farther away so that they will be less likely to be caught in the act.

·         To guard against someone reading your RFID chip you can purchase sleeves and wallets that block radio waves trying to read you chip.

If you are victimized with ID theft report it. Report it to the issuing credit card institution. Also, if the fraudulent transaction occurred in your local area, report it to your local police.

    





Krebs on Security (for information on skimmers, breaches, RFID readers):

https://krebsonsecurity.com/


Wikipedia (on RFID):

https://en.wikipedia.org/wiki/Radio-frequency_identification#Security_concerns













Steve Moller

South Snohomish County Crime Watch

Email: snohomishcrimewatch@outlook.com

Twitter: www.twitter.com/ssnoccrimewatch

Blog: https://ssnoccrimewatch.blogspot.com/



Crime Mapping for Snohomish County: http://communitycrimemap.com/



You can also report suspicious activity or information about past criminal activity by calling:



The Sheriff’s Tip Line at (425) 388-3845.



Or going to the Sheriff’s Office web page at:

http://www.snohomishcountywa.gov/303/Anonymous-Tips