Be Careful | How I almost got Scammed!!

what's up guys this is josh back with another video and today i want to show you guys how i almost got scammed [Music] so as i stated in the intro to video i want to show you guys how i almost got scammed as well as read you guys an article in order to help you guys be safe online and not get scammed by these hackers that are sending out phishing emails and a lot of these phishing emails look a hundred percent legit and i wanted to show you guys one of the ones i received it actually had my full legal name in the email so i'm sure that this hacker did some research when trying to pull off this scam by sending me a pretty convincing email which i knew was 100 false because once i read what's in the actual text file that they sent me they attached a text file since i knew this wasn't true i didn't fall for the scam and it'll be funny once i read the email to you guys so let's hop over to a website i want to read first before i get into it and before we get started please like share and subscribe to the channel if you can this is your first time here my channel is all about the linux operating system and i also incorporate some cyber news every now and then as well as interviews so if you guys are interested in that go down and stick around by hitting that subscribe button as well as the bell so you get notifications when i upload a video alright so i searched for this website just to show you guys what cyber criminals are actually doing nowadays in order to fish people and try to either attacked or scam the actual victim and so this article was was released november 11 which was a couple days ago and it's interesting how these people are actually doing this so i want to read a little bit about it so you guys can see how these hackers are trying to trick you but the first paragraph says cyber criminals often will research potential victims to help stratas strategize exactly how and where to attack them this tactic applies where the criminal is planning to mount a data breach a phishing campaign or some other type of threat and reports released wednesday data security provider barracuda looked at a particular trick called a bait attack to illustrate how this method is used to pick up useful information about an intended target with the bait attack also known as reconnaissance attack the cyber cyber criminal is looking only to obtain details about a person or organization to help map out a future attack bait attacks usually arrive in the form of emails with very little or even no content the goal is simply to confirm the existence and accessibility of the recipient email which is accomplished if the attacked attacker receives no undeliverable notice or even better gets a response from the person the initial bait email typically skirts past security defenses for a few reasons first the message contains little or no text and certainly no malicious links or file attachments second the attacker often uses use legitimate email accounts such as gmail yahoo or a hotmail third the criminals send out a small number of emails on a random basic basis to thwart any bulk in anomaly based security detection the volume of bat bait emails is still low compared to other types of phishing messages barracuda found that 35 of the 10 500 organizations in analyzed received at least one bait attack in september 2021 on average three different mailboxes per company's got one of these messages but since a bait message seeing innocents with no obvious red flags they're more likely to engage the recipient one big message received by a barracuda customer in august includes a subject line that simply says hi and contains no text in the body as a follow-up someone from barracuda replied to the email with a message that said hi how may i help you as you can see this is kind of what it looks like or whatever and so this typically can go past or bypass your filtering software at on your mail server you know like gmail has this phishing filtering attached to your email that scans the email and blocks potential phishing messages you may receive but it says within 48 hours the original employee was targeted with phishing attacks claiming that person was being charged for his prescription of norton locklife security product in the end the purpose of the original bait email was to confirm the existence of the account and any interest on the port of the recipient to respond to such messages and so that's mainly what they're trying to do they basically send a small email just to see if you respond to it and if you respond to it then they know it's a legit email address and then once you respond to an email i don't know if you guys know that the next response doesn't get blocked at or doesn't get looked at by the artificial intelligence in the back end that filters out phishing emails because it looks at the email as a legitimate sender of the email because you responded to it so that's why you should never respond to any suspicious emails because the real phishing email that they would send in response will not get blocked because it thinks it's a legitimate conversation but right here it gives the organization ways to protect you know users against beta taxes says barracuda offers the following suggestions it says use artificial intelligence to identify stop bait attacks teach employees to spot and report beta tax and don't allow beta tax to sit in a user's inbox and that's very important right there it says you don't want to give the user the opportunity to respond to or even open the bait message which means the emails should be removed from the person's inbox as quickly as possible so this was a dope article and i just wanted to show you guys this is a new thing that they're trying to do it's probably been going on for a while but if you didn't know you didn't know this article right here kind of explains how they actually use these types of attacks now let's hop over to my email so i can show you guys the email that i received okay cool so i have up a cali linux box where i saved all of files uh this system is not this virtual machine is not connected to the internet so whenever i open up the files it won't you know i tested them just to make sure that what they didn't have anything malicious in the actual text file because that's that's this is the actual attachment and it had my full name in the app on the actual file name so it looks like someone took the time to actually create this file and it had my full name on it i just shortened it so you guys wouldn't see my full name and then this is just a pdf kind of screenshot of the original email that was sent to me that included this attachment so let me right click on it and open it which yeah let's open it up the using the document viewer okay cool all right cool so i have my my real email address you know my personal email address blog blotted out but it's not hard to find i don't want people to find it but you know but it's not hard to find it's out there but i just blotted it out just just to be safe but this is the email address that it was sent from and if you remember from the email you know it said they use like legitimate email addresses and basically what he says is shortly you will become a contemptible person inside of your relic relatives go through the file attached and it's funny they use contemptible like i'll be in contempt i'll be a contempt person you know i'm saying after my relatives see this and that's pretty much all they had in the emails like short amount of text and then this attached text file and most of the time text files are not blocked by your email servers they're not looked at as anything malicious but let's go down and close the email and open up the file and i hope this doesn't get my video taken down i'm not gonna read what it says but i'm gonna put it up there and i'll read bits and pieces of it because they're basically saying that they got pictures of me doing something i shouldn't do you know what i'm saying but it says uh well your public standing is very fragile is a very fragile thing i am able to easily destroy it so yeah they putting it out there like they're some like they could easily destroy my life or whatever by what they have but it says when an individual has something to hide at some points it's just basically trying to scare you uh and people file for this type of stuff but let me read a little more so you guys can see but it says your irresponsible attitude to security of your device has led to current to the current situation now i'm not inviting anyone to try to hack me but i think i do a pretty good job on protecting myself i have covers over my cameras on my devices my laptops and my phone is typically not being used that often uh so i do i do a pretty good job of protecting my security but this is one of the ways they try to kind of guilt you into not guilty but they try to scare you with the way they're talking but it says i just always thought that just pimply teenagers wank off so much but you really know how to impress what bro what are you talking about man uh and i laughed when i first read this i died laughing when i first read this but it says uh with this approach to your intimate hobby aren't you scared that you may rip your yeah and then says uh don't you feel filthy about what you do if i was aware of your yeah obsession i stopped communicating with you but you are communicating with me because you want some eventually you want some money but it says using the fragility of your device i connected to it and through your camera i filmed a intriguing video and shave save the contacts list from your email i'm going to share compromising material on you demonstrating your despicable habit with your mates and family members okay and i don't typically use mate that often but whatever uh it says i'm sure that my requisitions are just litecoin and that's basically what that is that's the the sign for a light coin and then they have a litecoin address right there and then they want you to send 1180 in litecoin and it says if if within 46 hours you do not meet my claims within 94 i'll be forced to send your compromising material and you can kind of tell some of this stuff is copied and pasted but it says our force to i'll be forced to send your compromise material to your contact list and to post it on the internet and i employ you to do that whoever you are because i don't do something i don't do stuff like this or whatever it's especially in front of my computer you know i'm saying that's something people need to understand that yes this is possible you know i'm saying i know that i'm not concerned about this because i know i don't do anything like this in front of any of my devices if i was to do it you know what i'm saying but this is a hundred percent possible and that's why i wanted to read that article in the beginning so you guys can see that this is actually being talked about in the media in different ways uh like going you know the tech sites where they talk about cyber news this is 100 possible and i open this up on kali linux because there are tools to generate files that can allow you to set up a rat on someone's computer and you can look through their camera without their knowledge and the light doesn't turn on or anything so it is possible to do this and we've all seen mr robot where the guy hacked uh one of the girls computers or whatever and he was uh sending her images or putting images on the screen that's 100 impossible that's a real hack you can actually do that to people by getting them to open files and compromising their computer and then blackmailing them so you won't put out that information what it says to ensure my own security grounds i have to delete this email address you won't be able to contact me and this is bs okay i appreciate you guys checking out the video i just wanted to show you guys that and let you guys know to be aware that people are trying to do things like this to get your information the holiday season is coming around people are trying to scam more and more these days try to get money out of poor working people out here and i just want you guys to all be safe that's why i wanted to do this video so please like share and subscribe to the channel if you have any questions leave comments down in the comments below and of course keep protecting [Music] you

Channel: KeepItTechie

Views: 310

Keywords: phishing attack, phishing, phishing email, phishing scams, KeepItTechie, learn linux, linux, bait attack, crypto scams, crypto scams are everywhere, be careful online, email scams, email scammer, email scambaiting, email scammer reply

Id: zvfUc1Xj-os

Length: 15min 48sec (948 seconds)

Published: Tue Nov 16 2021