Phone Scams and Computer Security

I have encountered numerous instances where I had to assess compromised computers after their owners fell victim to phone scammers. These scams often involve a caller pretending to be from trusted organizations like Telstra or NBN, claiming to have identified suspicious activity on the victim’s computer. They then coax the victim into downloading and installing potentially harmful software, granting the scammers remote access to their computer. It is important to note that neither Telstra nor the NBN would ever ask you to do this. The scammers then proceed to solicit the victim’s bank details, posing a significant threat to their financial security. While many of us would recognize this as a blatant red flag and promptly end the conversation, unfortunately, not everyone does, resulting in devastating consequences. I have witnessed individuals having their accounts completely drained as a result.

Allow me to share a remarkable incident that transpired recently, which had a fortunate outcome despite the user granting unauthorized access to the scammers and divulging their bank details. Following this breach, a substantial sum of money was about to be transferred to the scammers’ account; however, thanks to the Bank of Queensland’s robust security protocols, the transfer was intercepted. It is my speculation that the transfer to an account in India raised suspicion, both due to its destination and the remarkable amount involved in the transaction.

To protect yourself from falling victim to such scams, always exercise caution when approached by suspicious callers, claiming to represent reputable organizations. Be mindful that legitimate entities will never ask you to download software or share sensitive information like your bank details over the phone. Stay vigilant and prioritize your online security. If you ever encounter a similar situation, promptly report it to the appropriate authorities.

We are here to help! Reach out to us if you have any concerns or questions regarding computer security or any related matters.

The bank got in touch with my client about the blocked transaction and once the bank became acquainted with what had occurred they insisted that they must follow strict procedures , see box below, before their Internet Banking would be reinstated

Bank Security Requirements

Banks are adopting a whole new approach by implementing stringent security requirements for users’ computers before granting access to Internet Banking. And in my humble opinion, this is a commendable move. Allow me to share the four requirements outlined by the bank.

Firstly, it is imperative to identify and eliminate any malicious or suspicious software, along with remote access vulnerabilities. Fulfilling this requirement is relatively straightforward. I ensured the removal of any remote access tools and meticulously scanned the client’s computer using reliable cybersecurity solutions like NORTON POWER ERASER, KASPERSKY VIRUS REMOVAL TOOL, TDSKILLER, and MALWAREBYTES.

However, the second requirement, known as the ‘Point of Compromise,’ puzzled me as no clear examples were provided. As a seasoned computer professional, I felt the need to delve deeper into this concept. Here are a few crucial points that I considered relevant:

Firstly, it is essential to have the latest, fully updated operating system. Windows 7 or XP simply wouldn’t suffice. Secondly, a robust internet security program with a strong focus on safeguarding your online activities is paramount. Personally, I opted for Kaspersky, although there are other equally suitable options available.

Additionally, I contemplated the scenario where the client might require remote desktop access to their computer. In such cases, I would recommend modifying the default port for Remote Desktop Protocol (RDP) to a more obscure number, ensuring an extra layer of security. Furthermore, establishing complex passwords adhering to industry standards becomes imperative.

As I went deeper into this process, it became evident that the term ‘Point of Compromise’ was far too vague, necessitating the delineation of a minimum standard for ensuring a sufficiently secure environment.

In conclusion, this fresh perspective employed by banks highlights their commitment to safeguarding your financial transactions. By adhering to these comprehensive security measures, you can rest assured that your online banking experience will be more secure than ever before.

The third requirement Steps taken to remove any of the above that is found and rectify any security compromises  is fine and all bugs/malaware were checked for and removed and as stated Kaspersky Internet Security installed.  A threat or compromise changes depending on who uses the computer and what it is used for eg A residential computer used at home by one person is easier to secure the a business PC or a server which has multiple users.

 

If you have been the victim of a Phone Scam you report this WA Scamnet at this link

For more info about our Windows Services see attached link