Defend Yourself
November 28 2011

National Do Not Call List(DNCL) - As of October there are almost 120,000 phone and fax numbers registered and growing steadily. Interestingly enough the number of complaints about telemarketing has gone down (October about 10,800), but this is since the DNCL was implemented. Are you listed?

 
July 15 2011

Thought you'd like this... Rogers Marketing permissions

The Rogers Group of Companies has a long-standing policy of protecting customer privacy. The Rogers Group of Companies uses email, short text messages, telemarketing and direct mail to inform you about products or services we think will interest you. If you do not wish to receive these types of communications you can choose not to be contacted by completing the form below. How to update your Rogers Marketing Permissions. Click here for the page to opt-out...>>

 
June 17 2011

Don’t fall for phony phone tech support

Here’s another form of Internet fraud that combines a variety of other common scams—social engineering, fake security software, and phishing.

Cybercriminals have started calling people on the telephone, claiming to be from Microsoft, and offering to help solve their computer problems. Once cybercriminals have gained a victim’s trust, they can do one or more of the following:
- Trick people into installing malicious software on their computer.
- Take control of a victim’s computer remotely and adjust settings in order to leave the computer vulnerable.
- Request credit card information so that cybercriminals can bill for the phony services.

Microsoft will not make unsolicited phone calls to help you with your computer. If you receive a phone call like this, hang up.

 
December 27 2010

Google's gmail not exempt from gmail being compromised, making steps to protect users
Google introduced a new security feature for Gmail that notifies the user when a suspicious log-in activity is detected on their account. This notification will come in the form of a message saying ""Warning: We believe your account was last accessed from…" along with the geographic region that Google can best associate with the access. Engineering Director Pavni Diwanji explains on the Gmail Blog:
To determine when to display this message, our automated system matches the relevant IP address, logged per the Gmail privacy policy, to a broad geographical location. While we don't have the capability to determine the specific location from which an account is accessed, a login appearing to come from one country and occurring a few hours after a login from another country may trigger an alert. By clicking on the "Details" link next to the message, you'll see the last account activity window that you're used to, along with the most recent access points.

 
December 19 2010

An alternative to contacting ISPs is to contact the registrar of a domain name that has used in spam e-mail. Registrars, as ICANN-accredited administrative organizations, are obliged to uphold certain rules and regulations, and have the resources necessary for dealing with abuse complaints. A useful free tool that may be used in the reporting of spam is also available (Complainterator). The Complainterator will send an automatically-generated complaint to the registrar of the spamming domain and the registrar of its name servers. Consumers may also forward "unwanted or deceptive spam" to an email address ( This e-mail address is being protected from spambots. You need JavaScript enabled to view it ) maintained by the FTC. The database collected is used to prosecute perpetrators of scam or deceptive advertising.

 
December 12 2010

One way to react to spammers is to email back to the domain name with "abuse" in the prefix, or report the spammer to their ISP, or report the spammer to their registrar. If you get it right this could lead to the spammer's service being terminated. Historically, reporting spam in this way has not seriously abated spam, since the spammers simply move their operation to another URL, ISP or network of IP addresses.

Unsubscribing: Be assured some spammers have a reaction to this, as occasionally spammers employ their own netblocks. In this case, the abuse contact for the netblock can be the spammer itself and can confirm your address.

 
December 5 2010

Reducing spam: It used to be that you could reply to the spam email and use words such as "UNSUBSCRIBE". Or there would be a link in the footer to unsubscribe from "junk" email. You'd click on the link and be able to unsubscribe from the usually marketing kinds of emails. For most legeitimate suppliers such as stores that you know you subscribed to inadvertantly, that will work. However if it is a store or email source you don't recognize do not unsubscribe, as sometimes a spammer can use that trick to confirm your email address, then you'll get more spam.

If you go to unsubscribe and they ask you to login, or to create an account to login, or to provide personal information then the hackles on my neck go up and I prefer to just block the email address. You can block an email address using most email programs, so that the email goes into your junk mail or is automatically deleted. If you're suspicious of the sender, then better to take this approach.

 
November 29 2010

Email forging - where did the spam email comes from is an artform. Spammers often forge the headers of their email in an attempt to avoid losing their accounts and to evade email filters. The most important thing is to have a mail reader that can show you the full headers of an email in question. The From line, Reply To, are frequently forged the From line being the easiest to forge. It used to be that the Reply To would be a valid email so that the spammer could say receive mail orders. Received is a list of sites through which the message travelled in order to get to you.

Received: lines are read from bottom to top. That is, the first Received: line is your own system or mail server. The last (non-forged) Received: line is where the mail originated. If the machine name does not match the IP address (check this via a tracert or ping), then you have likely identified the point where the mail was forged.

 

 
November 22 2010

After doing my last posting last week, I got this email in my inbox that was a perfect example of spoofing and phishing. If you fall into their trap and click on the 'billing' icon, a script will run that I didn't try and find out what it would do. If you fill in your information, you will then be giving these criminals your personal information. Here is an extraction:

This e-mail has been sent to you by Bell Canada to inform you that we were unable to process your most recent payment of bill. This might be due to either of the following reasons:

  1. A recent change in your personal information. (eg: billing address, phone)
  2. Submitting incorrect information during bill payment process. Due to this, to ensure that your service is not interrupted, we request you to confirm and update your Bell Profile with the billing information today by clicking Billing

If you have already confirmed your billing information then please disregard this message as we are processing the changes you have made. After you confirm your billing information you can use your account as usual.

Regards,
Bell Canada
Billing Department

© Bell Canada, 2010. All Rights Reserved.

 
<< Start < Prev 1 2 Next > End >>

Page 1 of 2