Latest Scams, Viruses, Malware and other nasties

yeah im on it

1 Like

Yikes. That’s very sophisticated.

not only have they hacked his bank account,they have hacked his messenger too! crazy

Sorry, what’s happened in this?

In the screenshot are you the one in purple, and how does texting you, get your mates account hacked?

1 Like

‘hacking’, aka getting phished

2 Likes

the joys of having the same password for everything

2 Likes

Correct, it sounds urgent, get them to transfer the money ASAP.

1 Like

There has been a series of articles over the last few months of people ending up having a “hacker” do an esim swap and then getting hold of peoples bank accts and draining them.

All the articles focus on the telcos lack of security (they have to gain name, address, DOB etc). The “hackers” have that info so are able to do what they like. Recently ACMA have come in and changed the law (all the telcos were following the law btw) so that further verification is required in order to action an esim swap to try and reduce this happening.

Two things, the banks never seem to be in trouble in these articles, despite them allowing someone to change the password on the account with much ease; and the telcos are always at fault for an easy esim swap.

However if you actually pay attention to the articles it is ALWAYS the same thing, the person “hacked” has clicked on a scammers SMS link and given away all their details. They never seem to take responsibility for that, it is always the telcos fault.

Now that’s not to say Telcos shouldn’t do more to stop this, but the person in the articles needs to do more too, like stop clicking links.

3 Likes

On that, the level of sophistication is now such that scammers are able to spoof the ‘sender’ of text messages (eg, AusPost, the AEC, VicPol) in order to look legitimate, but direct people to a fraudulent login site to phish their details.

Here’s an example below - the previous two messages are legitimate updates from AusPost. The third appears to have been sent from AusPost, but directs to a dodgy payment login page.

If you go to the official AusPost site to manually check that number, AusPost notes it has been used to scam people;

1 Like

Always manually go to the website. It is a pretty simple rule to follow.

6 Likes

Just put a bed suite on marketplace to see if I could sell it. Scammer tried to suck me in. Think I handled it pretty well :laughing:

4 Likes

EFC is a scam

2 Likes

Hahaha

I had an email containing a link to an invoice from my medical specialist the other day. It was formatted exactly as previous emails including correct names, contact information, letterhead etc so looked 100% legit.

The only thing that gave me pause for thought was the fact I hadn’t had a recent appointment with this particular doctor, but I wondered if maybe I’d overlooked payment for the last appointment with her 3 months prior.

Suffice to say I was pretty happy I rang her office to check that it was bona fide as I was told it was a scam and definitely don’t open the link.

I was told they’d been hacked by opening a similar link from another medical specialist. Seems they are doing the rounds.

Being a new financial year it seems the annual proliferation of fake ATO refund notices are in vogue again.

Three in the last 24 hours.

1 Like

Surely using the mygov phone apps is the easy way to get past the fake refund stuff.

Yeah, unfortunately not everyone (esp. my parents’ generation) is app savvy.

Unfortunately they’re the ones susceptible to such obvious scams.

Being one of the sysadmins for the corporate mailserver, I get to see first hand the number of scams where emails tell you your mail account password is about to expire and asks you to change it. What an obvious one that is. There are various forms of this, some even come from plausible ( spoofed) URLS like sysadmin.com or email addresses like [email protected] etc etc.
I just wonder how many people fall for this one.

I’m so tempted to have fun with this ■■■■■■ but then they will know the number is active…

Just got a dodgy text from an Eastlink scam wanting me to click the link.