Ransom Demands

24

Comments

  • dragotxdragotx Posts: 1,147
    Dave230 said:
    marble said:

    According to information available about this particular scam, certain servers have been hacked and lists of usernames/passwords have been published.

    I would think forum passwords are stored as hashes, not plain text passwords, so I would be very surprised if this was true.  Sorry, I don't believe it.

    Multiple sites and companies (hello Sony) have been caught storing passwords in the open.  It's not as common as it used to be, but it has happened before and will happen again.

  • AllenArtAllenArt Posts: 7,175

    I guess the good thing is that I allow only a limited amount of sites to keep my credit card number. I know it can still be hacked and stolen, but at least it narrows it down to which site I lost it on. I don't keep it here or Rendo or any of the smaller sites. No guarantees, but it makes me FEEL safer, even if it's not. LOL. And I use long passwords with symbols, numbers and upper and lower case letters whenever I can. Anyone on the internet can (and does) get hacked. Be prepared to have it happen to you from time to time, because it's only going to get worse.

    Laurie

  • ebergerlyebergerly Posts: 3,255
    Honestly its stuff like this that makes me less and less a fan of the internet. And watching how it destroyed our shopping malls, and requires you manage 156 passwords that you have to keep changing. I think the pendulum will start swinging in the other direction in coming years as people realize maybe the costs arent worth the benefit. A few more major incidents and I think people will start to change their minds.
  • McGyverMcGyver Posts: 7,085
    ebergerly said:
    Honestly its stuff like this that makes me less and less a fan of the internet. And watching how it destroyed our shopping malls, and requires you manage 156 passwords that you have to keep changing. I think the pendulum will start swinging in the other direction in coming years as people realize maybe the costs arent worth the benefit. A few more major incidents and I think people will start to change their minds.

    People are stupid, nothing short of bursting into flames changes most people’s minds... and even then many hold fast to their intentions.

    I fear everything will get way, way, way (add about fifteen more “ways”), worse before it becomes even remotely a tad better.

    I’m already sick of the internet as it just keeps getting more and more annoying day by day, but unfortunately society has made it a required part of our lives in one way or another.

  • Seven193Seven193 Posts: 1,144
    edited April 2019
    dragotx said:

    Multiple sites and companies (hello Sony) have been caught storing passwords in the open.  It's not as common as it used to be, but it has happened before and will happen again.


    True, but I'm just saying if our passwords are hashed, then Daz doesn't have our password, nor is it stored on any server, nor can Daz or anyone else send it to you in an email. So, there are some unanswered questions here.

    Post edited by Seven193 on
  • TheKDTheKD Posts: 2,711

    Just checked my email, no ransom mail there yet, just a bunch of spam from square enix, msi and walmart like usual lol.

  • kyoto kidkyoto kid Posts: 41,934
    edited April 2019
    ebergerly said:
    Honestly its stuff like this that makes me less and less a fan of the internet. And watching how it destroyed our shopping malls, and requires you manage 156 passwords that you have to keep changing. I think the pendulum will start swinging in the other direction in coming years as people realize maybe the costs arent worth the benefit. A few more major incidents and I think people will start to change their minds.

    ...this is part of why I washed out of call centre customer service as I had to remember several long very cryptic passwords to access the various programmes and databases that were used. The passwords had to be changed each month as well and could not be written down.  Not good for someone with memory issues and dyslexia.

    Post edited by kyoto kid on
  • SlimerJSpudSlimerJSpud Posts: 1,456

    Recently, some security experts have voiced the opinion that forcing people to change their passwords on a regular basis drives people toward unsafe password behavior. First, the very act of changing a password exposes you to potential risk if that site is currently under attack, or already hacked. Second, having to change passwords tends to make people use simpler passwords, or a simple sequence of passwords. Given a short sequence of old passwords, white hat hackers demonstrated that they could guess the new one in about ... 5 seconds. It's not so much recovering passwords from the hash that is at risk, it's the fact that brute force attacks are getting easier with faster hardware.

  • SlimerJSpudSlimerJSpud Posts: 1,456

    No ransom demands in my spam folder, but I did find an email from rendo in spam because it had the subject "Make your Sci-Fi dreams come true"! ROFL!

  • Serene NightSerene Night Posts: 17,704
    edited April 2019

    These kind of scams are common. I get reports daily of people who receive fake ransom notes from phishing email where I work. I also have had my data stolen from numerous sites, and companies, where all my data has been compromised. 

    So, the only way to remain secure is to choose a password with complexity and change it and the email in each account with more frequency. 

    Post edited by Serene Night on
  • butterflyfishbutterflyfish Posts: 1,493
    edited April 2019
    namffuak said:

    I've had four (I think) ransom demand emails. No passwords, just the 'explanation' that they have my email and if I don't send them some bitcoin (low request was $50, high - and the first - was $2000) they'll send my porn viewing history to my social media friends. Amateurs! 1) I don't do porn. 2) I don't do social media. And 3) even if I did both, I wouldn't care - my friends know my interests already. I'm actually hoping Russia does close off from the internet, as over 95% of the spam I get is from the .ru domain.

    Yup, that's what I got. A few demands that I send bitcoins to some account, or they would send my (non-existent) porn history to everyone I know. One of the messages said "I know one of your passwords is [DAZ Password]." 

    Post edited by butterflyfish on
  • bluejauntebluejaunte Posts: 1,990

    If it was an actual ransom demand, they would have changed your Daz account email/password and demanded ransom to get the account back. Same as encrypting your data and decrypting it for ransom money. This is peanuts, ignore it. It's only a little bit more elaborate than some Ugandan prince wanting to send you money for the upteenth time.

    Use a free password manager like KeePass and have it generate all your passwords. 128 or 256 bit strings that can easily be copy/pasted and you won't ever have to remember passwords again, so beyond the better security it's also convenient. Just make sure the KeePass database gets backed up too, you don't wanna lose that. Otherwise you're gonna have to go through a lot of "forgot password" procedures. I find it also provides a good overview of all the places I ever registered at. You know, every web shop, forum, news site, sites from all the software you bought online and so on and so forth. I currently have 143 entires in there! What the hell... it's almost like a history of past interests.

    If you think having all these passwords in some local file is insecure, it's not. Someone would have to hack into your actual computer to get to it, and that simply never happens as it's not worth the effort. The biggest risk would be your unlocked computer with KeePass open and some disgruntled family member taking advantage of it. Even for those scenarios, KeePass has security measures like automatic log out after a while, keeping the password in the clip board only for a certain period, yada yada.

  • Silver DolphinSilver Dolphin Posts: 1,638

    There is no safe way to protect yourself and your computers if you are connected to a network PERIOD!!!! Once you connect you are open to hacking! The best you can do is make sure you keep sesitive data off your personal computers and phones and on seperate media (USB sticks)! If people create security >>> people can break it! Nothing is full proof! My advice don't leave anything you don't want to share on your phones or computers!!  ~ my 2 cents

  • mwokeemwokee Posts: 1,275
    You, as a user, need to be careful also. If you're out and about you should be cautious about logging into accounts through wifi hotspots. Don't use public computers such as in a hotel or the library to access important accounts. If you're curious and surf the seedy side of the internet, visiting dubious web sites can cause you to be compromised. And don't click on anything in a spam email or emails that you can't verify or trust. Even when you know it's spam but it's so ridiculous you have to look, clicking on something may get you hacked. Poorly written apps can get you compromised. Third party software that you download and install can have a variety of trojan horses and malware piggy backed along with the software. You and your devices are constantly being probed and attacked, one slip and you're hacked.
  • BendinggrassBendinggrass Posts: 1,380

    I use very long complicated passwords but some sites don't allow passwords longer than 16 or even fewer characters. I know there is no chance any one has ever guessed, dictionary attacked, or cracked my passwords successfully.

    Since in Dec 2016, one of my passwords was stolen and two of my credit cards too, that meant a business on the internent had been broken into. The theives resided in California, Oregon, and Wisconsin. They were likely given or bought my CC information from another person.  At least one of the thieves was a college student at the University of Wisconsin at Madison.

    Also, all my private information I had to give since my birth, which was very extensive and very comprehensive, to obtain my secret security clearence, was stolen directly from the US government servers back before 2015. The USA federal government offered to pay for one year subscription at an identity theft monitoring business that they chose in a pork barrel bit of conflict of interest. I declined their offer. Luckily I had already quit the contracted job with the government that needed me to have that clearance so they weren't exposed by their exposure of me but now I know that some criminal foreign government has essentially my life history. LOL, who would of thought I could make such a contribution to world peace by wasting the valuable limited amount time of hostile foreign agents?! laugh Enjoy, guys & gals! Don't hit your forehead too hard on your desk when you fall asleep.

    I now use different passwords and different email addresses for each internent account I have. 

    Got to be the Russians..... no, it's the Chinese..... no, better yet, it's the Luxomburgians..... they are an evil crowd, alligned with the Venusians......

  • TSasha SmithTSasha Smith Posts: 27,301

    I use very long complicated passwords but some sites don't allow passwords longer than 16 or even fewer characters. I know there is no chance any one has ever guessed, dictionary attacked, or cracked my passwords successfully.

    Since in Dec 2016, one of my passwords was stolen and two of my credit cards too, that meant a business on the internent had been broken into. The theives resided in California, Oregon, and Wisconsin. They were likely given or bought my CC information from another person.  At least one of the thieves was a college student at the University of Wisconsin at Madison.

    Also, all my private information I had to give since my birth, which was very extensive and very comprehensive, to obtain my secret security clearence, was stolen directly from the US government servers back before 2015. The USA federal government offered to pay for one year subscription at an identity theft monitoring business that they chose in a pork barrel bit of conflict of interest. I declined their offer. Luckily I had already quit the contracted job with the government that needed me to have that clearance so they weren't exposed by their exposure of me but now I know that some criminal foreign government has essentially my life history. LOL, who would of thought I could make such a contribution to world peace by wasting the valuable limited amount time of hostile foreign agents?! laugh Enjoy, guys & gals! Don't hit your forehead too hard on your desk when you fall asleep.

    I now use different passwords and different email addresses for each internent account I have. 

    Got to be the Russians..... no, it's the Chinese..... no, better yet, it's the Luxomburgians..... they are an evil crowd, alligned with the Venusians......

    It is a virtual character like in Ralph Breaks the Internet?

  • 3dOutlaw3dOutlaw Posts: 2,481

    Thanks for this, I just checked my Daz Password at https://haveibeenpwned.com/Passwords, and it was in there...5 times!

    Just changed it! ;-)

  • TSasha SmithTSasha Smith Posts: 27,301
    edited April 2019
    3dOutlaw said:

    Thanks for this, I just checked my Daz Password at https://haveibeenpwned.com/Passwords, and it was in there...5 times!

    Just changed it! ;-)

    Checked it out. P3@ch3$ (a fictional password) was not part of the list but P@$$W0rd was.  Wonder if I can use P3@ch3$ since I mentioned it here.  By the way it did not have my real Daz Password, (edit) but it has my Renderosity password which I need to change when I get home.  I could do it now but there is no way to save the password in my password manager and I might forget it, unless I use a form of P3@ch3$?

    Post edited by TSasha Smith on
  • TaozTaoz Posts: 10,270
    edited April 2019
    3dOutlaw said:

    Thanks for this, I just checked my Daz Password at https://haveibeenpwned.com/Passwords, and it was in there...5 times!

    Just changed it! ;-)

    Mine isn't there I can see, I think it's at least 2 years years ago since I changed it.

    ETA: it's incredible how bad passwords people are using. Just try to check "john"...

    Post edited by Taoz on
  • mwokee brought up some good points. Another thing to avoid is public wifi. Never log in to ANYTHING while using wifi (like at Starbucks) unless you don't care who has that username and password.

  • srieschsriesch Posts: 4,243
    edited April 2019

    Also keep in mind that if your PC is compromised, it doesn't matter how good the security of some website vendor is, and a given website/company may have absolutely nothing to do with data stolen from your PC as you type while you happen to visit that or any other website.

    Post edited by sriesch on
  • ArtAngelArtAngel Posts: 1,968
    Chohole said:

    Priceless! ROFL

  • SylvanSylvan Posts: 2,719

    Haha, the number "1" has been used 197.972 times as a password XD

  • marblemarble Posts: 7,500
    namffuak said:

    I've had four (I think) ransom demand emails. No passwords, just the 'explanation' that they have my email and if I don't send them some bitcoin (low request was $50, high - and the first - was $2000) they'll send my porn viewing history to my social media friends. Amateurs! 1) I don't do porn. 2) I don't do social media. And 3) even if I did both, I wouldn't care - my friends know my interests already. I'm actually hoping Russia does close off from the internet, as over 95% of the spam I get is from the .ru domain.

    Yup, that's what I got. A few demands that I send bitcoins to some account, or they would send my (non-existent) porn history to everyone I know. One of the messages said "I know one of your passwords is [DAZ Password]." 

    That's the one I got and yes, they did have my DAZ password too. Like you, I was unconcerned about threats to publish my porn viewing history because I don't view porn. My social media exposure is also minimal. There was something in the email (I've deleted it but I seem to recall) about them having access to my webcam with a threat to publish compromising footage of myself and some partner. I really had to laugh at that - I don't have an active webcam and I have not had a partner for many years.

  • WonderlandWonderland Posts: 7,137

    I’ve been getting weird ransom emails from people saying that they have video of me doing (something guys usually only do) on a webcam to porn. I have my webcam covered on one computer and no webcam at all on my other monitor and I don’t visit porn sites. They had one password, not from here though. An old one that I’m not sure which site I used it for. I cover my iPad cameras too, but not my phone, which I probably should just to avoid any possible ugly no-makeup videos lol. Also, a Russian troll on Twitter (I assume) posted weird random old photos of people on Google that linked to my Twitter account. The Internet is becoming a dangerous place... 

  • TaozTaoz Posts: 10,270
    Sylvan said:

    Haha, the number "1" has been used 197.972 times as a password XD

    Are there really sites out there that allow 1 letter passwords?

  • Subtropic PixelSubtropic Pixel Posts: 2,388
    edited April 2019

    Oh drat, now I can't use "password", "123456", or "monkey" anymore!

    Well, I did change my password just now too.  Just to be sure.  Now I'll have to change my password on all my devices all over again!

    Passwords don't work; I've said this for a long time now.  They're just not working.  We have so many that we have to write them down.  Yes, in a password manager, sure.  But still.  That's not really security.  And to make up for that, we mask them and have to look at dots when we type them in, so we get them wrong and we forget them and have to call the help desk or use the password change feature, sometimes several times each month! 

    Passwords don't work; not really.

    Post edited by Subtropic Pixel on
  • ArtAngelArtAngel Posts: 1,968

    Changed my password to mypassword

  • ArtAngelArtAngel Posts: 1,968
    edited April 2019
    3dOutlaw said:

    Thanks for this, I just checked my Daz Password at https://haveibeenpwned.com/Passwords, and it was in there...5 times!

    Just changed it! ;-)

    I thought I'd check out a common phrase shitonastick (not my password) and here is what I got, so 5 times is not so bad, especially if it is you on various sites but I do have a unique password only used at Daz after my bank alerted me in  2017 that my card was used to buy a pizza in germany and I live in California. And that password I only use at Daz has never been compromised. I used that i2017 card on 2 other sites, both 3d providers, nowhere else and stopped using it on the other sites and have had no issues since.

     

    Also if you get a warning alert the worst thing you can do is click a link. Instead hold down ctrl alt&  delete. Click task manager and select the browser google eg and click end task. It stops the app that activates if you click a link.

     

     

    password.JPG
    1362 x 884 - 122K
    Post edited by ArtAngel on
Sign In or Register to comment.