Search the Community

I am using one great alternative for Gmail and it is called Tutanova email. Today I received one email in my Tutanova account, with this content, asking me to 'update' First thing you should do when you receive email from anyone is DOUBLE CHECK his email address and not just his name. Here we can see that name is fake Tutanova Team, and real email address is rhody.ezekiel.... That is first Red Flag. You should never click any links i your email (example is Resolve Issue Now) and never download any attachments When I hover over that blue field, it can show me short link scammer is using /they often use this tactics to steal your data and crypto) You should NEVER visit this links. This is where links is directing next FAKE Tutanova website, asking you to enter your details, email and passoword. Always double check Address bar, and you can see some random web address. NEVER enter any details. They are using same tactics for Gmail, and all crypto Phishing websites, like fake Ethereum and other coins Airdrops. If you learned this now, you can apply to any similar situation in future. Stay Safe, HEX

Phishing consists of the impersonation of an authority, company or even someone, in order to trick the victim into revealing their confidential information. In this way, the attacker can access your accounts or wallets and steal the funds. We can distinguish several types of phishing used in the crypto world: Cloned sites This is the most common type. Here the scammers prepare a website identical to the legitimate one, which can be from an exchange house or online wallet to the official page of an Initial Coin Offering (ICO), and spread it through different means, including email, chats and even Google ads that can be mistaken for the original page in search results. It is not unusual that, in the case of email and chats, the link to the fraudulent site is accompanied by some false story about the company requiring the user to log into their account. Thus, when the victim enters their credentials to enter the supposed site, what they are actually doing is giving them to the attacker. The most effective way to avoid this scam is to look closely at the URL of each page where we have funds before entering any credentials. In phishing, the URL always changes in some character, since the domain (name) of the company or project is already taken and it is not possible that there are two exactly alike. In this sense, once we identify the real page, we should save it in Favorites and enter there, instead of using the search results. This was the case with MyEtherWallet last year, while this year among the cloned sites are the popular Blockchain.info domain and the Token Bee ICO, where cybercriminals managed to steal up to $ 700,000. Fake support teams Sometimes scammers save themselves the trouble of creating the fake site by simply posing as the support team of some legitimate platform, including exchanges and wallets. In this way, the only thing they imitate are the logos and the email address of the company within the message they send to their victims to announce any alleged inconvenience and request their private information with the false purpose of helping them. As the FBI's Internet Crime Complaint Center explains: "The fraudulent support requests access to the victim's virtual wallet and transfers the victim's virtual currency to another wallet for a temporary hold during maintenance. The virtual currency it is never returned to the victim, and the criminal ceases all communication. Criminals who have access to the victim's electronic device use the victim's personal information and credit card to purchase and transfer virtual money to an account controlled by the criminal ". It is important to remember in these cases that both traditional financial companies and cryptocurrency platforms never ask for your credentials, under any circumstances. Simply because they already have them. Phone scams or vishing (voice phishing) In this case, the scammers do not contact you directly, but rather your phone company. After finding out your phone number and even your identification number and address thanks to a stolen invoice or because you simply published that information at some point, the attacker contacts the company to transfer your line to a new SIM card under his control. Since the security of several telephone companies is usually quite weak in these cases, the operator will ask the attacker very little information to confirm his identity. If successful, the criminal will be able to reset all the passwords of the legitimate user using two-step authentication, that is, the code that reaches the phone and that usually serves as an extra layer of security. In this way, online wallets could be emptied in a matter of minutes, long before the rightful owner can do anything. This happened to Cody Brown, who had to see his 8 thousand dollars in cryptocurrencies disappear in fifteen minutes. A similar case was that of Jered Kenna, who lost up to $ 40,000 for each day that he failed to resolve the problem with the phone company. A similar scenario It may also happen that the phone scam targets you. In this way, someone could contact you posing as a company, tell you a false story and not only ask for your credentials, but also urge you to deposit funds in a portfolio. This is what happened to an elderly woman in Canada: a scammer contacted her by phone, assuring her that she was a member of the local police and that she owed a large sum in taxes, so she had to go to bitcoin ATMs to solve them . Before the fraud was discovered, the woman deposited 17 thousand dollars See you in my next post