1 00:00:00,360 --> 00:00:05,100 According to the consumer fraud report these are the top scams at the moment that you should be aware 2 00:00:05,100 --> 00:00:05,540 of. 3 00:00:05,580 --> 00:00:08,600 These are also known as social engineering attacks. 4 00:00:08,640 --> 00:00:15,000 Social engineering is a term used in the security industry to refer to attacks that central weaknesses 5 00:00:15,360 --> 00:00:16,970 in the human being. 6 00:00:16,980 --> 00:00:20,980 So the first is this one which is Internet merchants scams. 7 00:00:21,090 --> 00:00:27,360 You can see here you purchased something online but it is either never delivered or it is not what it 8 00:00:27,360 --> 00:00:30,170 claimed it was or it's simply defective. 9 00:00:30,210 --> 00:00:31,110 Very common. 10 00:00:31,110 --> 00:00:38,820 The most common phishing and spoofed e-mails we have discussed these already e-mails and messages that 11 00:00:38,820 --> 00:00:45,750 pretend to be from a company organization government agency or something like that trying to get you 12 00:00:45,750 --> 00:00:54,270 to perform an action click on a link and provide personal details or download a file and the file turns 13 00:00:54,270 --> 00:01:01,860 out to be malware as top on the list of social engineering attacks attempted fraud or attempted Combs. 14 00:01:02,100 --> 00:01:10,620 And then you have fake prizes sweepstakes free gifts lottery scams you receive an e-mail claiming you 15 00:01:10,620 --> 00:01:13,650 have won a prize lottery or gift. 16 00:01:13,830 --> 00:01:20,760 And you only have to pay a small fee to claim it or cover handling costs. 17 00:01:20,850 --> 00:01:29,910 No genuine lottery asks for money to pay fees or notifies its winners via email paying upfront fees 18 00:01:29,910 --> 00:01:33,810 for anything is a sign that something is wrong. 19 00:01:33,810 --> 00:01:39,930 This is a classic scam and it's called the advance fee fraud you got fake check payments. 20 00:01:39,930 --> 00:01:45,810 So you sell something online or through Craigslist or something like that and you're paid with some 21 00:01:45,810 --> 00:01:54,360 sort of phony check recovery and refund companies a scammer contact you and claims you owe money on 22 00:01:54,360 --> 00:02:00,310 a debt or the scammer offers to recover the money that you've lost in a previous scam. 23 00:02:00,330 --> 00:02:01,450 Don't believe it. 24 00:02:01,650 --> 00:02:08,940 Computer performance scams like equipment and software scammers claim to offer technical support for 25 00:02:08,940 --> 00:02:17,070 computer problems and charge a fee to fix non-existent problems like the ad where we went through the 26 00:02:17,070 --> 00:02:20,810 claims that there was nonexistent malware on the machine. 27 00:02:20,940 --> 00:02:24,940 But if you buy their product by magic it will be gone. 28 00:02:24,980 --> 00:02:30,610 Another scam scholarship student loan and financial aid scams. 29 00:02:30,750 --> 00:02:38,820 For a fee a research company offers to conduct a customized search for scholarships for grants for students 30 00:02:38,820 --> 00:02:39,870 to apply for. 31 00:02:40,030 --> 00:02:45,140 Scammers take the money and run or provide just to worthless. 32 00:02:45,180 --> 00:02:52,890 This and the online dating scams fake profiles of scammers posing as attractive men and women. 33 00:02:52,890 --> 00:02:57,180 They then claim they need money to help in an emergency. 34 00:02:57,180 --> 00:03:04,560 Typically when they claim to be out of the country on a business trip I mean I know at least one person 35 00:03:04,560 --> 00:03:09,900 that this has happened to personally and they fell for in fact I think I know two people that have fallen 36 00:03:09,900 --> 00:03:12,590 for this trick and they're actually both women. 37 00:03:12,660 --> 00:03:15,420 Facebook fake friends scam. 38 00:03:15,420 --> 00:03:22,410 Did you ever get a friend request from Facebook from someone that you already thought that you had friended. 39 00:03:22,410 --> 00:03:31,650 If you accept you may have friended a scammer con artist nurtures a relationship online builds trust 40 00:03:31,680 --> 00:03:37,950 and tries to then come binge you to send them money because they're a victim of some sort of crisis. 41 00:03:38,190 --> 00:03:46,140 EBay an auction seller scams scammers posing as buyers convince sellers into shipping goods prior to 42 00:03:46,140 --> 00:03:47,750 receiving payment. 43 00:03:47,790 --> 00:03:54,780 Usually the fake buyer claims it's an emergency like a child's birthday and asks the seller to ship 44 00:03:54,810 --> 00:04:01,980 the same day the seller receives an email that appears as though it came from Paypal or whoever the 45 00:04:02,220 --> 00:04:04,610 payment company is for the payment. 46 00:04:04,730 --> 00:04:09,840 But emails like that are easy for the scammer to fake. 47 00:04:09,840 --> 00:04:16,380 You should always check with your payment company on their website to make sure the payment is actually 48 00:04:16,380 --> 00:04:17,100 there. 49 00:04:17,100 --> 00:04:23,400 My mother actually had a couple of people contact her when she tried to sell something on a local listings 50 00:04:23,400 --> 00:04:30,090 site that because she is well wised to these sorts of scams because of me. 51 00:04:30,090 --> 00:04:36,600 She told them where to go but she said she could see how people could be easily fooled and that they 52 00:04:36,600 --> 00:04:41,650 were really pushy and aggressive to get to send the goods before payment. 53 00:04:41,670 --> 00:04:48,810 They were somewhere not in the country where the item was being sold which is always a warning sign. 54 00:04:48,810 --> 00:04:52,210 They also ask for lots of personal information up front. 55 00:04:52,230 --> 00:04:53,350 Don't give it. 56 00:04:53,400 --> 00:04:58,640 They will try to use this information don't even provide your full name. 57 00:04:58,640 --> 00:05:02,460 Use your first name fine or even a fake name. 58 00:05:02,460 --> 00:05:09,690 A great Web site for keeping up to date with the latest scams is this one the consumer fraud reporting 59 00:05:09,690 --> 00:05:10,650 Web site. 60 00:05:10,890 --> 00:05:20,460 And there's also a UK one which is very good which is action fraud and which is from the UK police. 61 00:05:20,640 --> 00:05:26,820 We discuss ways to avoid these sorts of social engineering scams both through changing our behavior 62 00:05:27,150 --> 00:05:31,640 and also through technical security controls throughout the course.