Can I Sign Arkansas Banking PDF

Can i industry sign banking arkansas pdf safe

hey everybody Greg here and I wanted to tell you about a scam that's going around right now and I guess I would describe it as a one drive fake document login scam and it comes by email so I'm going to walk you through these screenshots these are from someone who contacted me since I'm in you know I T they asked me questions and and this was one of the questions I had recently so somebody said that they heard from others that that they've been sending out this email that they weren't sending out so that's essentially how you would find out that your account has been hacked and is being used for this nefarious activity so step one is the you know person you let's say you would be receiving an email and I'm gonna bring this to the center here ignore this the top is just a screenshot so what you're looking at is here it would say from and I've you know covered that out for privacy right so but it would say from someone and it's somebody you know somebody that you've heard from before that's in your address book and so you're not going to be concerned when you get this email initially subject is new proposal sounds legitimate Citrix attachments expires April 5th so it seems like it's timely and we scroll down and then we see that there are these two PDF files and download attachments so that sounds legitimate and there are services like Dropbox and box calm and you know Microsoft onedrive etc that used these links that let you download documents so so far so good you wouldn't be too concerned I'm gonna move that out of the way and I I want to show you a practice or technique that is helpful and that is if you have links in an email whether it's a button or any other kind of link it's good to hover your mouse over that and see what the link it'll be revealed there see where that button or link is going to take you so in this case we see HTTPS you know and the address 1d are VMs well that's a legitimate one drive link so up to this point we wouldn't be too concerned so I'm going to move that out of the way and we'll move to the next item so let's say we click on that link we are going to end up at here let me bring this window over there we go we would end up at a web page like this one and you can see the address here at the top it says onedrive live.com so that's a legitimate address all the things that I would tell people to check so far seem ok and then there's a message here which is kind of tiny so I'm going to bring in a zoomed in version of it so essentially here it's saying you have an incoming file in Microsoft onedrive contact in your address book is sent you encrypted file which you already know because you've got this email and up to this point your antivirus software or anti-phishing software might not even detect a problem because all you're doing right now is looking at a PDF file that's in a Microsoft onedrive folder that's been shared with you so this is how people get into trouble there's so many of these things that aren't necessarily a virus or they're not going to look like they're a scan and people just start clicking on stuff and and so anyway so let's assume you go ahead and you clicked on that button it says access file well that's where the troubles are going to begin so I'm going to show you with the mouse hovered over the access file button down here we get the address where that file is and it says hy k dot-com dot PK and then forward slash WP - includes tor as I so it's a wordpress website you might not know that but people that know WordPress would be familiar with that so that should tipoff right there that this claims to be a Microsoft onedrive file and yet the link is taking us to some wordpress file that but but at this point you've already been through several layers of trust building essentially so you're probably not going to have your guard up as much right okay so let's say you click on that access file button now the first page I'm going to show you is what many people would see if their computer was not learning them two possible phishing so basically at this point the last step is it's just saying sign in to Microsoft and there's the Microsoft logo and you've probably seen this many times it's just a standard Microsoft login except for the fact if we go up to the top of the page we're not at onedrive we're not at Microsoft we're at h YK comm PK something so that right there would be your tip-off but like I say the trust has been built up to this point so you're less likely to pay attention now let me show you what some browsers might do they might come up and say with a message are you sure you want to do that the site you know is it this might not be legitimate and they kind of give you a little bit of a warning so hopefully folks that have software or have the smart screen turned on in Windows would see that alert and might think twice about it but if you don't if you just say oh yeah this is I know it's from my friend and everything's fine then you click OK and then you log in well then you've basically given your email address and you're essentially your login for Microsoft and your password to these people and then what they're going to do is immediately log into your email account your Microsoft account and they're going to contact well probably change your password right away so you can't get into your account and then they're going to send an email out to all of your friends that looks exactly like the one that we started out with hear the message talking about you know somebody wants to share a file with you and how your friends are going to get this from your account you know and the cycle starts over and so you know when you've heard about these situations where you know Facebook had accounts compromised or Yahoo I think also had a similarly huge number of accounts compromised this is how that happens so it's not that a computer got hacked into it's not that somebody got into the mainframe you know those things do happen but more likely the easiest thing for the hackers to do is just to send you a little email and essentially get your login information directly from you and have you type it in for them and you can imagine as this grows quickly as they get hundreds and then thousands and then tens of thousands of logins within a few days this can spread like wildfire pretty rapidly and and the thing is most antivirus software is not going to block Microsoft onedrive now I did find I'm gonna bring this up because I think you'll find it of interest I ran a scan of the initial link so from the initial link which was that onedrive 1dr VMS link there were no problems identified and and that's scanning you know 69 different website scanners so that's troubling that means there are a lot of you know services out there that would not have identified that initial link as a problem however there is this result which essentially identifies that the site has been blacklisted by a service called fishtank and the scan here is for website owners so you know if somebody had their own website infected they could scan it they'd see this information and then it would say your site is blacklisted it needs immediate attention because sometimes there can be a legitimate WordPress website or other site regardless of the CMS for HTML used there can be these legitimate websites that have a malicious page that's been injected on the site without the owner being aware of that so that's why there are these scan services for website owners but anyway you'll see it says no malware found there wasn't particularly malware but they're scanning the onedrive and this particular address so somebody has probably reported this to the fishtank service I'm not familiar with that one but there's some of these that are crowd-sourced you know so and that's how they would have found out about it and then if you had the fishtank software presumably then it could alert you and say hey this looks like you know a scam so anyway but how it all begins is an email from somebody you know and Trust with something that looks legitimate they're building trust along the way sending you to Microsoft initially and then hoping to get your account info so as long as you maybe you received an email like that and you just ignored it or put it in trash or maybe it was automatically put into trash for you because it was suspicious then you don't have to worry about that if you clicked in God as far as the Microsoft onedrive page but then you didn't go any further you didn't provide your login and password then you're probably ok there because you were just essentially on a legitimate Microsoft site but if you did go to this login page and you tried to login and then it probably said something like oh there was an error you know but then if that's what happened then you really need to go in there change your Microsoft password check around in your account details make sure that your contact phone number wasn't changed somewhere else in the world and similarly make sure your contact email address is the correct one you might want to go through the questions the security questions make sure those haven't been changed and then if you've done that you should be in pretty good shape and then you'll if this did happen to you you know if your account has been compromised you would want to contact the people in your contacts list and say hey I don't know if you've received something for me or not but it's a scam I hope you didn't you know click on anything if you did you can kind of give them the short version of this video which is essentially to change your password and you know if you clicked on something or you can send them to this video if you want and anyway I hope that this information has been helpful and if you have any questions if you're on YouTube you can just kind of leave comments below and I try to be pretty prompt about answering those if this is on my website you can contact me through there I avoid putting my contact information directly out there just in case you know if a video goes viral I don't want to have to deal with you know a hundred thousand emails tomorrow morning but um anyway I do appreciate all the the views and likes and the follows on YouTube really appreciate that let me know also if you have any other suggestions for new videos or any other questions so thanks again take care