Hacking special issue Part 2 : Internet Scambusters #1,106
Your home network and your online accounts are under attack - from hackers bent on ruining your digital life.
But in this week's issue - Part 2 of our special report - we'll give you the warning signs of a hack, what to do if you've been caught out, and the steps you can take to safeguard against future attacks.
We also have new alerts about the latest scams, including a fake password manager you might have installed on your iPhone.
Let's get started…
Shields Up! How To Spot and Avoid Hack Attacks
Have you been hacked? Has your computer, home network, or online account been "possessed" by outside forces intent on mischief? Sadly, if it has, you may not even know.
But there are ways to tell. And we're here to help.
In this, the second part of our hacking special issue, we'll also explain how to oust the hackers and the actions you can take to protect yourself in the future.
How To Tell If You've Been Hacked
If an online social media, shopping, or financial account has been taken over, the first thing you'll likely know is when you discover someone is pretending to be you, spending your money, or posting on your Facebook or other account.
As we explained last week, you may be the victim of a data breach or have been tricked into giving away your sign-on details.
But if someone hacks your home network or mobile device, it may not immediately be so obvious. However, good security software can run deep scans of your entire system. Running this manually and regularly is good practice and may be the quickest way to identify trouble.
Here are some other signs that might suggest you're the victim of a digital break-in:
- Your system or device is running way slower than it used to.
- Your devices seem to be overheating and even shutting down.
- The battery on your mobile device drains a lot faster than it used to.
- On a computer, the hard drive activity light is constantly on.
- You keep getting unexpected screen pop-ups.
- People say they received messages from you that you didn't send.
- Your browser home page unexpectedly changes.
- You have toolbars you didn't install or agree to.
- Programs open or shut without you doing anything.
- Your electric bill soars (due to "botnet" or cyber currency mining activity).
- Your Wi-Fi network suddenly becomes sluggish and unreliable.
- Some of your files inexplicably disappear.
- Passwords don't work because someone has changed them.
These signs don't prove you've been hacked but they should raise enough concern for you to thoroughly check things out.
In particular, frequently monitor your credit records and financial and shopping accounts for early warning signs that crooks are at work in your digital backyard.
You might also consider subscribing to online monitoring services that constantly check your accounts and the dark web for threats to your internet security.
What To Do If You Get Hacked
If one of your accounts has been taken over, notify credit reporting agencies and freeze your credit so crooks can't take out loans in your name. Immediately change passwords.
Also, tell the organization holding the affected account - banks, retailers, social media, etc. - and law enforcement. On social media, tell your friends and followers.
If your home network has been hacked, disconnect it from the internet and seek professional help. It may not be enough just to wipe everything clear and reinstate a backup. Hackers are experts at concealing their code in difficult-to-reach places on your system.
In a worst-case scenario, you may have to replace devices or even a complete system. It's expensive but not as costly as the alternative.
Protect Yourself Against Hackers
No computer or system network is totally hack-proof - as frequent data breaches bear witness.
But you can significantly reduce the risks by:
- Installing and continuously updating strong internet security apps and programs.
- Likewise, keeping all operating systems and other software on your devices up to date. Newer versions often have security fixes.
- Using strong and unique passwords and frequently changing them.
- Avoiding clicking on links or attachments in messages and online. Obviously, it's impossible to never click, but think before you do.
- Sticking to well-known and reputable sites, especially for downloads.
- Running security scans on downloaded software. Many security apps do this automatically.
- Changing the default password on your router. If you don't know how to do this, check the maker's website.
- Using a virtual private network (VPN) to protect yourself while using public Wi-Fi.
- Avoiding public USB re-charging stations. Buy yourself a power pack if you think you may run out of juice.
- Using two- or multi-factor authentication (2FA or MFA) so hackers can't access your accounts even if they know your password.
- Using available parental controls to stop your kids being tricked. And talk to them about the risks.
- Checking and using security settings on any connected devices and appliances in your home (the Internet of Things, or IoT).
Finally, it's absolutely essential that you regularly back up both your operating system and data. Keep several back copies so, if safe to do so, you can reinstate a pre-hacked version.
We've previously covered many of the issues raised here - such as VPNs, password managers, MFA, and even how to keep your router safe. For more solutions, search our scambusters.org site.
Note also that we've mainly addressed anti-hack measures for home users. But many of our tips also apply to small businesses. The main additional risk is that of human error or a bad employee. Education and security vetting are the key measures to tackle this.
We can't cover all the risks and protections against hacking in a single issue. Educating yourself and keeping up to date on security issues should also be part of your digital armory.
This Week's Alerts
$10 billion stolen: Scams cost American consumers a record $10 billion last year, according to new data from the US Federal Trade Commission. Almost half the losses were due to investment fraud.
Court scam surge: Scammers have started using convincing, fake court documents to scare victims into paying for alleged law-breaking. Victims receive a text or email saying they must pay a fee for what they call a "preemptive bail bond."
Don't Pass: Apple has removed a knock-off of password manager LastPass from its app store after discovering it was allegedly stealing rather than managing users' passwords. The app had the name "Lass Pass" that is, replacing "Last" with "Lass." Although it's been taken down, it may still be on some users' mobile devices. If you're one of them, remove it pronto!
Time to conclude for today -- have a great week!