Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity

More what happened at Marriott.  Listen to find out how it actually went down.

Does the news about the Partnership with 23 and Me worry you?  We'll discuss how you can remove your information if you choose to and why you might not want to.

I know we have talked about Zero-Day Exploits before. Today we will talk about a new one

More on the stupidity of the Equifax hack.  Listen in and I will explain why it really was irresponsible and avoidable.

Australian lawmakers think they are Security Professionals. You know I like encryption and think it is a good thing.  Australia is passing laws that will have horrible global implications. 

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/15/2018

Encryption Busting Laws In Australia

Craig Peterson: 0:00
Hey, Welcome to Tech Talk with Craig Peterson we have a few things to talk about, as we always do. We've got a little bit more news on what happened with the Marriott hack, 23AndMe I didn't really get to this last week I had this article up on my website I wanted to cover this I talked about a little bit on the air this week it's a big deal for a lot of people there's a new flash zero-day exploit out there in the while wild another reason not to use flash we'll be talking about that and how that is frankly, going to impact you. It's scary. I don't know why flash is still out there at all. Frankly, this is it's a travesty the Equifax breach we got we got some new info on this just how dumb this silly thing was, and what happened there. And of course, that expose the personal data of hundreds of millions of Americans, the encryption has passed encryption, the Australians have passed and encryption law. So we'll be talking a little bit about that that's going to have some global privacy implications. And there was a bug that was left wide open to your Microsoft account that's going to maybe have some ramifications for you. This was kind of a crazy thing, again, something fairly obvious in retrospect, right? But you don't always notice these things in advance. And I had a great meeting this week, I want to do a quick shout out to john he is a CEO, oh, some multi location business and trying to get his security under control. And it made me think about this webinar did this week for the FBI on how do you sell security? How do you let the sea levels the managers, the directors know why they should? Now there's obviously there's the whole you got to be scared of this side of things, right? which I think makes some sense because you do have to be afraid of these things. But the other side is there are major business benefits to making sure your systems are safe. Do they go with all the way from, hey, listen, we're not going to be down because we have ransomware, right? And so how much would it cost us per hour to not be able to stay in business and, and we have a client, a multinational client who had to shut down worldwide manufacturing, worldwide sales, distribution, everything for a week or more, how much you think that cost them. So there's a benefit there, there are other benefits, including you can now use it as a marketing plus we have a number of Accountants is that we're working with an accounting firm, small firms, we're working with them to help them understand and what their footprint is, what their liability is. And I think that's a really big deal to Franklin, when you get right down to it, that that, hey, if you come to me, I have a differentiating factor, right? Which every business needs, right? We all need our own unique selling proposition. Well, if you can tell your customers that their data is safe on your systems. Do you think that's a big selling point? I absolutely do. I think it's a huge selling point. And we went through a whole bunch of things. And gentleman's name is Dominic gorillas.

He's a managing partner over to impress draw. Now, you might want to look them up by MP St. ra.com. He has been very busy over the years in large public companies doing things King consulting, he was over Capgemini and many others. And he did a lot of stuff over in Europe, helping to transform all of these businesses. So thank again to him to Dominic

because that was a fantastic FBI infra guard webinar that I put on with him here this last week, we're going to we be re-airing it looks like next week. I'm not sure if it's going to be Tuesday or Thursday, because there are there were some snap photos right there isn't that isn't that always happen where our clocks got messed up. And it was my fault

Because my clock got messed up I was thinking 4 pm because that's when I hold my webinars, right. I hold mine at four. And then I hold the webinars for the FBI infra guard program at 3 pm. So I I kind of got messed up and telling myself, so I'm going to run it next week. If you're in regard member, make sure you keep an eye out in your email for that announcement. Because this is a really good thing. I think, you know, of all of the webinars I've done this year, for the infra guard program. This may be the most important because it's helping businesses understand the higher level management understand what they should do, and how you can help them understand it as well. Okay, so let's get down to the business at hand here today. And that, of course, has to

do with all of our

friends who are over Microsoft and what they've been doing to us or for us.

Well, there was a bug that was left wide open, and it allowed complete takeover of Microsoft account. So there's a bounty hunter out there, some of these guys and gals can make some decent money just looking for bugs, I called bug bounties and they can range all the way up to 100,000 bucks. But it's usually not that much even for huge bugs in it. It's shameful what some businesses pay to find out about bugs in their software. Sometimes, you know, the pay my I use $2,000, wait a minute, he just spent what, 510 years learning the craft to try and find bugs. And then they spent what six months finding this bug in your offering them two grand. But anyway, so he was working as a security work researcher here with a cybersecurity site called safety detective and discovered that he was able to take over Microsoft subdomain success dot office calm because it wasn't properly configured. So this lot, the bug hunter set up an Azure web app that pointed to this gets kind of technical, but pointed to the don't main see record.

So it's used to map domains and stuff moving around. So

bottom line, Microsoft Office, Outlook store and sway app sent

authenticated login tokens to him kind of a big deal here. So the issues were reported on Microsoft in June. And they finally fix them in November. Okay, so hopefully, again, this isn't an example of a good guy doing the right thing where he founded, he reported it Microsoft fixed at 10. And then, you know, we're all going to be relatively safe because of this. So, you know, hopefully, right isn't that kind of the bottom line here, we got to keep an eye out. If you are running a business and you have a software, you have a service, remember, you have an obligation to try and keep that safe. And that gets very difficult. That's why you should hire ethical hackers and hire these teams. And we have certified ethical hackers who are on our team if you want some help. But you need to not only make sure your software is pretty much safe, right. But you have to also make sure that your people are safe, that your systems

are safe. I guess I kind of goes back to whatever just talking about right with Dominic here this week on

that on that info guard webinar. But you got to make sure and another thing a lot

of people really aren't aware of. And, and I want to make this very clear, too.

And that is, if you're using Microsoft Office 365, or you're using salesforce.com, or you're using various other vendors, the liability for a hack still rests on you. So you need to make sure that you have an agreement in place with them, your agreement with him, not their agreement with you your agreement with them that says I am pushing liability for this on you my provider because you're supposed to provide me with security. We went into a restaurant two weeks ago to have a look at their security. We're doing a paid cyber health assessment. And we had a look at their other tablets

that they have hooked up, now they're on hardwired so you know, the thinking as well. Okay, well, they're relatively safe, because we've got, wow, a sonic wall firewall. And of course, we know we have a look at it. And it was disastrous. What was on there

is anybody could have put a logger on those. And they may have, right because we didn't go into that level of detail yet. But a keylogger on that, that grabs all of the credit cards that are run through that tablet. Think about that for a minute What a pain that would be. And because of the payment card industry standards, not only are his consumers hurt, because now they have to argue with the credit card company, which young not such a big deal, but he would get fined. And in this case, in the tune of about $8 million dollars, potentially based on the number of cards that go through his machines. Now, this is real, if you take credit cards, you have to live up to these PCI DSS the data security standards that they have in place, you signed it, we had another client that again, we just started doing security for the Payment Card Industry guys FedEx them a package that said, you know, we need you to go through this and sign it, it was 150 pages, printed pages, they wouldn't let them sign it online, they wouldn't let them do digital signal, say a signature should say they had to take and ship that package of paper, right. And they open it up. And of course, it's all legal ease. And it's 150 pages. And they're trying to figure it out. And so they sign it anyway. Right? Who hasn't, who hasn't just clicked on, I accept on a website. And now they are liable because the PCI, the payment card industry is going after vendors that have their data stolen.

So in this case,

they were relying on a back to the restaurant, they were relying on the cloud service that was doing all the credit card clearing and, and tracking all of the orders and doing everything for them. Right. So we're all set. But that vendor wasn't keeping any of their data save, which means when it's stolen, they're out of business. And we just had that happen in my hometown, it was one of these chain restaurants. And the people in that restaurant weren't taking credit cards. And we're keeping copies of the credit cards. And so the whole thing had to shut down the whole chain that the guy owned multiple of these of these restaurants, right name brand restaurant, and he had to shut down completely because of the liability. And people just don't pay attention to that now. And I get it right. I sat down there just this week and went through all of the different things that I have to worry about. And believe me, there's, there's a lot of things, right.

One of the things was security, but I have about two dozen, what I call silos of responsibility. A lot of those have to do without reach. But they have also to do with maintaining customers, employees think about everything,

I know it right, you're a business person, you know what this is like. And just putting one more thing on to that pile just pushes it over the edge, right, it's just too much to do well,

in this day and age, it's not anymore.

Because if those cards have been stolen, this restaurant chain would also have been out of business, this other chain, we had a quick look at,

they would have been out of business as well, because they had this data. And this data was a place where wasn't being kept safe. So that's a pretty big deal, frankly,

and I just want everyone to think about it. If you need help, let me know or go to anybody out there. Please go to anybody. We have certified white hat hackers, these are guys that know how to hack in, they have been certified, but they work for us. And they we have bonds, right. And insurance and everything case something happens. But you got to do it in this day and age. It's unfortunate. But it's absolutely the case that you have to take care of this.

So I've got an encryption busting law we've got to talk about

because this is going to happen all over the place. This is from our friends over Digital Trends. You'll find this article as well as all the other articles I talked about today up on my website at http://CraigPeterson.com. But they've got some new legislation

in Australia

that could have some global consequences for security and privacy on the internet. Now, we know that various law enforcement agencies have been pushing to have a backdoor in for encryption. And this isn't, you know, this isn't a Trump era thing. People, okay, don't get all about set with President Trump about this, this goes way back. This goes back to

the beginning of time, really. But do you remember during the Clinton administration, this whole thing over the Clipper chip, and we're going to have encryption and this is the best standard in the world? And they pushed it out to the world and it turned out it had a backdoor and it had a way for the federal government to get in. Now, I kind of understand this right to in many degrees of if you're a victim of a crime, obviously, you want the crime solved. If you're trying to investigate a crime, you want the right evidence and as much of it as you can get, you don't just want to have a phone that you can't get into. And you don't want to have just hearsay. You want physical evidence. You don't want somebody to say Yeah, well, I heard so and so say the lesson such here. All right. I remember one case, I was sitting in a restaurant. And I overheard a discussion between two waitresses and they were talking about the commission of a murder that had occurred and who they knew was involved with this murder,

local-ish murder, right? My, I don't think my hometown kind of murder and very, very long time, but you know, very local, the next town over next big town over and they were standing there talking about it. So I called up the detectives that I knew and said, Hey, guys,

for what it's worth,

I heard so and so and so on. So talking about the murder of this other person. And they said, they are confident that this person committed the murder. And here's kind

of the background on at what I heard. And of course, the detectors have, thank you very much. And I have no idea what they did with that information. At the time. They said, yeah, this is this is useful, but they said, it's stuff we have, we already knew. But it's just, you know, another the checkpoint, it's another data point on this, that we know now that, okay, there has been some involvement in it. So I

understand you can't use as talking about here, say, right, fifth hand, who knows how far out this was, this is just rumors, a couple of people chatting right over something that they might not have really known anything about. So getting into that phone or getting into a computer can be very important. And the same things true when we're talking about things like snapshot chat, or we're talking about FaceTime, or we're talking about some of these others, it can be really important for the police for their investigation to know what was said, or know what is being said. So there might be a crime, they're watching somebody right now. And there, they're listening in, right, kind

of like the Pfizer warrants and, and major major general right, but General Flynn who was kind

caught up in all of this and you know, how can he divides a whole another story. But when something like that happens, and they want to listen in, it's one thing to be able to listen into a regular phone call, it's almost impossible for them to listen in to one of these encrypted calls that you can use just, you know, as I said, FaceTime, you can use WhatsApp, there's,

there's just a ton of them out there.

So Australia has come out now with this law.

And it's saying that the apps like I message from Apple like WhatsApp, or what app telegram SIG signal

that is used to keep messages private between people. And we already know that some of the Federal investigations that have gone on, they did not have access to this.

It's not like Peter struck in the FBI sending Texas deletes a page because every text is kept Okay, that doesn't matter if you deleted off of your phone, it went through the phone company. And they keep those things for a period of time. Well, that private conversation is something they'd like to listen in. And frankly, some of these are pretty high-level privacy. And the Australian Government now has decided that they want to compel technology companies to help them access the information.

Now, we're going to have to see what happens here in practice it what's really going to happen in practice is still being debated. But there are critics in the tech industry that made it clear they're not on board, the government's having this kind of power to snoop. Many of them say the bill of blind just tech companies to put backdoors into their security systems so the government can get in. But of course, that gives now the opportunity for bad guys to get into it for fraud to occur, right? Because if there's a door, somebody is going to find that door and they said, the bill does have a safeguard this has companies are not required to build systematic weaknesses into the software. But systematic was not defined, meaning that the actual legal requirements are unclear. There are other concerns with this bill, which is the lack of judicial oversight in the process. Look at all of the problems we've had recently with the fines a warrant

Right, essentially a star chamber it the judges see in here, it is completely private, there's nothing public about it, and you can easily have someone that does something they shouldn't do, right. So law enforcement agencies in this case, will still need a warrant. But you know, how do they go ahead and break the encryption and once the warrants issued? There's no further oversight now because most tech companies are global. We're talking about a very wide net here, are you going to design a system that has a back door so that you meet these Australian requirements? And, frankly, the Chinese requirements? So are you going to put a back Dorian and then somehow keep that door closed for the rest of the world that that's the problem out there. There's a human rights lawyer down in Australia, Lizzie O'Shea, she says The truth is that there's simply no way to create tools to undermine encryption without jeopardizing digital security and eroding individual rights and freedoms hackers with bad intentions will do their utmost to take advantage of any such tools that companies are forced to provide government

so there you go it I think a bad

idea and a good idea all at the same time I can absolutely see both sides of that argument It drives me crazy I'm not sure what the right way to go is entirely but I gotta say I'm not sure that the government having essentially unfettered access to our papers is what we want you to know, they used to be a constitution and a constitutional amendment about being secure right in your papers. You used to have privacy but that that seems to be kind of going by the wayside but if there's a warrant required I guess that is a check and balance it should be public there should be oversight but you know, as they said an enemy of the state so who's going to oversee the overseers, overseers.

right but that's not a direct quote pipe away but that's kind of where we're going

so let's talk about Equifax

here and there's some dumb hack we had the House Republicans investigating this Equifax breach because they really cared that this was a very very big deal and it needed some oversight and how the justice department they did some investigating into this not a whole ton but the House Republican spent 14 months now investigating it and they reach the same conclusions that everybody else that looked at this came to and that I came to about a week after the hack and that is the breach was entirely preventable and that the credit reporting agencies management didn't anything to shield can consumers from this mass. Now the article I posted from Gizmodo up on http://CraigPeterson.com has some colorful language in it. So if you're not into the colorful language, you might not want to read it because I'm skipping over that part here. But there are no new laws in place about this. There's no new accountability. And I'm not sure we need new laws about this. But I do think the regulations need to get a little bit more in the line of teeth. If you are a small company like these people we deal with every day, you know, you're under 20 million in revenue, it's hard to justify a major investment in security. It's, I get it, it's very hard, although you should be sent spending one to 3% of your budget if you're a large corporation of your IT budget on security. Okay, the little guys, that's the wrong number. It's a very high number, unfortunately, but they there have not really been any changes. private organizations, as I mentioned earlier, like the payment card industry is enforcing new rules. And they are legitimate rules. They are very tough rules, but the rest not so much. Okay. So they found in the info here that it was entirely preventable, that Equifax failed to take a to fully appreciate and mitigate its cybersecurity risks they found that had been the company taken action to address its observable security issues, the data breach could have been prevented lack of accountability and management structure, Equifax failed to implement clear lines of authority between their internal IT management leading to an execution gap. That's something else. We covered this last week

In my FBI infraguard webinar.

They had complex and outdated IT systems that you know, because of their aggressive growth. They had all kinds of problems because of acquisitions, not moving stuff in Does that sound familiar? Like the Marriott hack that just happened, right? Well happened started in 2014. And it's not entirely Marriott's fault but they've been on an acquisition spree and Starwood had been hacked. So there are some problems there right so they were out just out of date there were way too complex custom-built legacy systems IT security very, very challenging for implement responsible security members, they allowed over 300 securities certificates to expire including 79 certificates from monitoring business-critical domains they failed to renew an expired digital certificate for 19 months and that one it's expired certificate left Equifax without visibility on the X filtration of data during the time of the cyber attack. And we see that all the time you get an attack, there are indications that compromising yet the businesses have no idea what data was stolen, unprepared to support affected customers. It goes on and on. And there's a link in this article again on my website to get a full copy of the report and it's well worth reviewing. It might be something that I'm going to have to do a master class on,

you know what lessons learned basically from the Equifax breach. So I'm going to set this article aside because I do want to follow up on that one. And wow,

okay,

all wrapping it up here. We only have a couple of minutes left if

that we've got fresh

zero-day exploit that's been spotted in the wild. So if you have flash on your computer updated, and I strongly advise that you remove flash. Now if you're using iOS devices, iPads, iPhones, you don't have flash, they've never had flash, Steve Jobs, Apple have never allowed flash to be placed on iOS. Okay, so

you're safe.

If you have a Mac. It is not enabled by default. But many people install it particularly a few years ago because many websites required it and in this day and age, there's no reason to have flash anymore period. Goodbye. So Personally, I'd say delete it because it has had so many security problems if you need flash for some particular reason, and make sure you update it because this one's another huge Okay, this is a zero-day flaw it's exploited in the wild already. And if you've given your DNA to 23 and me I've got a great article from Business Insider up on http://CraigPeterson.com DNA testing company, 23AndMe signed a $300 million deal and that's kind of a big deal because it's Glaxo Smith Klein. They're using the data to do research for developing medications that are a personal medication that you can use. And you know, I think that's a good thing frankly, because that's the future but let me your personal information your DNA is going to be out there and it's going to be shared so you got to make that decision visit 23andme.com make changes as you want to make sure you subscribe to my email list. I'm still getting that Christmas present together for everybody about how to keep your personal information safe the things you can do to stop the bad guys from opening credit cards and stuff in your name http:CraigPeterson.com/subscribe. Have a great week. We'll be back next week. We will take care bye bye.

---

Related articles:

Encryption-Busting Law Passed In Australia Will Have Global Privacy Implications

Equifax Breach Was Just As Infuriating And Dumb As You Thought, New House Report Finds

Flash Zero-Day Exploit Spotted – Patch Now!

A Bug Left Your Microsoft Account Wide Open To Complete Takeover
---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

More what happened at Marriott.  Listen to find out how it actually went down.

Does the news about the Partnership with 23 and Me worry you?  We'll discuss how you can remove your information if you choose to and why you might not want to.

I know we have talked about Zero-Day Exploits before. Today we will talk about a new one

More on the stupidity of the Equifax hack.  Listen in and I will explain why it really was irresponsible and avoidable.

Australian lawmakers think they are Security Professionals. You know I like encryption and think it is a good thing.  Australia is passing laws that will have horrible global implications. 

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/15/2018

Encryption Busting Laws In Australia

Craig Peterson: 0:00
Hey, Welcome to Tech Talk with Craig Peterson we have a few things to talk about, as we always do. We've got a little bit more news on what happened with the Marriott hack, 23AndMe I didn't really get to this last week I had this article up on my website I wanted to cover this I talked about a little bit on the air this week it's a big deal for a lot of people there's a new flash zero-day exploit out there in the while wild another reason not to use flash we'll be talking about that and how that is frankly, going to impact you. It's scary. I don't know why flash is still out there at all. Frankly, this is it's a travesty the Equifax breach we got we got some new info on this just how dumb this silly thing was, and what happened there. And of course, that expose the personal data of hundreds of millions of Americans, the encryption has passed encryption, the Australians have passed and encryption law. So we'll be talking a little bit about that that's going to have some global privacy implications. And there was a bug that was left wide open to your Microsoft account that's going to maybe have some ramifications for you. This was kind of a crazy thing, again, something fairly obvious in retrospect, right? But you don't always notice these things in advance. And I had a great meeting this week, I want to do a quick shout out to john he is a CEO, oh, some multi location business and trying to get his security under control. And it made me think about this webinar did this week for the FBI on how do you sell security? How do you let the sea levels the managers, the directors know why they should? Now there's obviously there's the whole you got to be scared of this side of things, right? which I think makes some sense because you do have to be afraid of these things. But the other side is there are major business benefits to making sure your systems are safe. Do they go with all the way from, hey, listen, we're not going to be down because we have ransomware, right? And so how much would it cost us per hour to not be able to stay in business and, and we have a client, a multinational client who had to shut down worldwide manufacturing, worldwide sales, distribution, everything for a week or more, how much you think that cost them. So there's a benefit there, there are other benefits, including you can now use it as a marketing plus we have a number of Accountants is that we're working with an accounting firm, small firms, we're working with them to help them understand and what their footprint is, what their liability is. And I think that's a really big deal to Franklin, when you get right down to it, that that, hey, if you come to me, I have a differentiating factor, right? Which every business needs, right? We all need our own unique selling proposition. Well, if you can tell your customers that their data is safe on your systems. Do you think that's a big selling point? I absolutely do. I think it's a huge selling point. And we went through a whole bunch of things. And gentleman's name is Dominic gorillas.

He's a managing partner over to impress draw. Now, you might want to look them up by MP St. ra.com. He has been very busy over the years in large public companies doing things King consulting, he was over Capgemini and many others. And he did a lot of stuff over in Europe, helping to transform all of these businesses. So thank again to him to Dominic

because that was a fantastic FBI infra guard webinar that I put on with him here this last week, we're going to we be re-airing it looks like next week. I'm not sure if it's going to be Tuesday or Thursday, because there are there were some snap photos right there isn't that isn't that always happen where our clocks got messed up. And it was my fault

Because my clock got messed up I was thinking 4 pm because that's when I hold my webinars, right. I hold mine at four. And then I hold the webinars for the FBI infra guard program at 3 pm. So I I kind of got messed up and telling myself, so I'm going to run it next week. If you're in regard member, make sure you keep an eye out in your email for that announcement. Because this is a really good thing. I think, you know, of all of the webinars I've done this year, for the infra guard program. This may be the most important because it's helping businesses understand the higher level management understand what they should do, and how you can help them understand it as well. Okay, so let's get down to the business at hand here today. And that, of course, has to

do with all of our

friends who are over Microsoft and what they've been doing to us or for us.

Well, there was a bug that was left wide open, and it allowed complete takeover of Microsoft account. So there's a bounty hunter out there, some of these guys and gals can make some decent money just looking for bugs, I called bug bounties and they can range all the way up to 100,000 bucks. But it's usually not that much even for huge bugs in it. It's shameful what some businesses pay to find out about bugs in their software. Sometimes, you know, the pay my I use $2,000, wait a minute, he just spent what, 510 years learning the craft to try and find bugs. And then they spent what six months finding this bug in your offering them two grand. But anyway, so he was working as a security work researcher here with a cybersecurity site called safety detective and discovered that he was able to take over Microsoft subdomain success dot office calm because it wasn't properly configured. So this lot, the bug hunter set up an Azure web app that pointed to this gets kind of technical, but pointed to the don't main see record.

So it's used to map domains and stuff moving around. So

bottom line, Microsoft Office, Outlook store and sway app sent

authenticated login tokens to him kind of a big deal here. So the issues were reported on Microsoft in June. And they finally fix them in November. Okay, so hopefully, again, this isn't an example of a good guy doing the right thing where he founded, he reported it Microsoft fixed at 10. And then, you know, we're all going to be relatively safe because of this. So, you know, hopefully, right isn't that kind of the bottom line here, we got to keep an eye out. If you are running a business and you have a software, you have a service, remember, you have an obligation to try and keep that safe. And that gets very difficult. That's why you should hire ethical hackers and hire these teams. And we have certified ethical hackers who are on our team if you want some help. But you need to not only make sure your software is pretty much safe, right. But you have to also make sure that your people are safe, that your systems

are safe. I guess I kind of goes back to whatever just talking about right with Dominic here this week on

that on that info guard webinar. But you got to make sure and another thing a lot

of people really aren't aware of. And, and I want to make this very clear, too.

And that is, if you're using Microsoft Office 365, or you're using salesforce.com, or you're using various other vendors, the liability for a hack still rests on you. So you need to make sure that you have an agreement in place with them, your agreement with him, not their agreement with you your agreement with them that says I am pushing liability for this on you my provider because you're supposed to provide me with security. We went into a restaurant two weeks ago to have a look at their security. We're doing a paid cyber health assessment. And we had a look at their other tablets

that they have hooked up, now they're on hardwired so you know, the thinking as well. Okay, well, they're relatively safe, because we've got, wow, a sonic wall firewall. And of course, we know we have a look at it. And it was disastrous. What was on there

is anybody could have put a logger on those. And they may have, right because we didn't go into that level of detail yet. But a keylogger on that, that grabs all of the credit cards that are run through that tablet. Think about that for a minute What a pain that would be. And because of the payment card industry standards, not only are his consumers hurt, because now they have to argue with the credit card company, which young not such a big deal, but he would get fined. And in this case, in the tune of about $8 million dollars, potentially based on the number of cards that go through his machines. Now, this is real, if you take credit cards, you have to live up to these PCI DSS the data security standards that they have in place, you signed it, we had another client that again, we just started doing security for the Payment Card Industry guys FedEx them a package that said, you know, we need you to go through this and sign it, it was 150 pages, printed pages, they wouldn't let them sign it online, they wouldn't let them do digital signal, say a signature should say they had to take and ship that package of paper, right. And they open it up. And of course, it's all legal ease. And it's 150 pages. And they're trying to figure it out. And so they sign it anyway. Right? Who hasn't, who hasn't just clicked on, I accept on a website. And now they are liable because the PCI, the payment card industry is going after vendors that have their data stolen.

So in this case,

they were relying on a back to the restaurant, they were relying on the cloud service that was doing all the credit card clearing and, and tracking all of the orders and doing everything for them. Right. So we're all set. But that vendor wasn't keeping any of their data save, which means when it's stolen, they're out of business. And we just had that happen in my hometown, it was one of these chain restaurants. And the people in that restaurant weren't taking credit cards. And we're keeping copies of the credit cards. And so the whole thing had to shut down the whole chain that the guy owned multiple of these of these restaurants, right name brand restaurant, and he had to shut down completely because of the liability. And people just don't pay attention to that now. And I get it right. I sat down there just this week and went through all of the different things that I have to worry about. And believe me, there's, there's a lot of things, right.

One of the things was security, but I have about two dozen, what I call silos of responsibility. A lot of those have to do without reach. But they have also to do with maintaining customers, employees think about everything,

I know it right, you're a business person, you know what this is like. And just putting one more thing on to that pile just pushes it over the edge, right, it's just too much to do well,

in this day and age, it's not anymore.

Because if those cards have been stolen, this restaurant chain would also have been out of business, this other chain, we had a quick look at,

they would have been out of business as well, because they had this data. And this data was a place where wasn't being kept safe. So that's a pretty big deal, frankly,

and I just want everyone to think about it. If you need help, let me know or go to anybody out there. Please go to anybody. We have certified white hat hackers, these are guys that know how to hack in, they have been certified, but they work for us. And they we have bonds, right. And insurance and everything case something happens. But you got to do it in this day and age. It's unfortunate. But it's absolutely the case that you have to take care of this.

So I've got an encryption busting law we've got to talk about

because this is going to happen all over the place. This is from our friends over Digital Trends. You'll find this article as well as all the other articles I talked about today up on my website at http://CraigPeterson.com. But they've got some new legislation

in Australia

that could have some global consequences for security and privacy on the internet. Now, we know that various law enforcement agencies have been pushing to have a backdoor in for encryption. And this isn't, you know, this isn't a Trump era thing. People, okay, don't get all about set with President Trump about this, this goes way back. This goes back to

the beginning of time, really. But do you remember during the Clinton administration, this whole thing over the Clipper chip, and we're going to have encryption and this is the best standard in the world? And they pushed it out to the world and it turned out it had a backdoor and it had a way for the federal government to get in. Now, I kind of understand this right to in many degrees of if you're a victim of a crime, obviously, you want the crime solved. If you're trying to investigate a crime, you want the right evidence and as much of it as you can get, you don't just want to have a phone that you can't get into. And you don't want to have just hearsay. You want physical evidence. You don't want somebody to say Yeah, well, I heard so and so say the lesson such here. All right. I remember one case, I was sitting in a restaurant. And I overheard a discussion between two waitresses and they were talking about the commission of a murder that had occurred and who they knew was involved with this murder,

local-ish murder, right? My, I don't think my hometown kind of murder and very, very long time, but you know, very local, the next town over next big town over and they were standing there talking about it. So I called up the detectives that I knew and said, Hey, guys,

for what it's worth,

I heard so and so and so on. So talking about the murder of this other person. And they said, they are confident that this person committed the murder. And here's kind

of the background on at what I heard. And of course, the detectors have, thank you very much. And I have no idea what they did with that information. At the time. They said, yeah, this is this is useful, but they said, it's stuff we have, we already knew. But it's just, you know, another the checkpoint, it's another data point on this, that we know now that, okay, there has been some involvement in it. So I

understand you can't use as talking about here, say, right, fifth hand, who knows how far out this was, this is just rumors, a couple of people chatting right over something that they might not have really known anything about. So getting into that phone or getting into a computer can be very important. And the same things true when we're talking about things like snapshot chat, or we're talking about FaceTime, or we're talking about some of these others, it can be really important for the police for their investigation to know what was said, or know what is being said. So there might be a crime, they're watching somebody right now. And there, they're listening in, right, kind

of like the Pfizer warrants and, and major major general right, but General Flynn who was kind

caught up in all of this and you know, how can he divides a whole another story. But when something like that happens, and they want to listen in, it's one thing to be able to listen into a regular phone call, it's almost impossible for them to listen in to one of these encrypted calls that you can use just, you know, as I said, FaceTime, you can use WhatsApp, there's,

there's just a ton of them out there.

So Australia has come out now with this law.

And it's saying that the apps like I message from Apple like WhatsApp, or what app telegram SIG signal

that is used to keep messages private between people. And we already know that some of the Federal investigations that have gone on, they did not have access to this.

It's not like Peter struck in the FBI sending Texas deletes a page because every text is kept Okay, that doesn't matter if you deleted off of your phone, it went through the phone company. And they keep those things for a period of time. Well, that private conversation is something they'd like to listen in. And frankly, some of these are pretty high-level privacy. And the Australian Government now has decided that they want to compel technology companies to help them access the information.

Now, we're going to have to see what happens here in practice it what's really going to happen in practice is still being debated. But there are critics in the tech industry that made it clear they're not on board, the government's having this kind of power to snoop. Many of them say the bill of blind just tech companies to put backdoors into their security systems so the government can get in. But of course, that gives now the opportunity for bad guys to get into it for fraud to occur, right? Because if there's a door, somebody is going to find that door and they said, the bill does have a safeguard this has companies are not required to build systematic weaknesses into the software. But systematic was not defined, meaning that the actual legal requirements are unclear. There are other concerns with this bill, which is the lack of judicial oversight in the process. Look at all of the problems we've had recently with the fines a warrant

Right, essentially a star chamber it the judges see in here, it is completely private, there's nothing public about it, and you can easily have someone that does something they shouldn't do, right. So law enforcement agencies in this case, will still need a warrant. But you know, how do they go ahead and break the encryption and once the warrants issued? There's no further oversight now because most tech companies are global. We're talking about a very wide net here, are you going to design a system that has a back door so that you meet these Australian requirements? And, frankly, the Chinese requirements? So are you going to put a back Dorian and then somehow keep that door closed for the rest of the world that that's the problem out there. There's a human rights lawyer down in Australia, Lizzie O'Shea, she says The truth is that there's simply no way to create tools to undermine encryption without jeopardizing digital security and eroding individual rights and freedoms hackers with bad intentions will do their utmost to take advantage of any such tools that companies are forced to provide government

so there you go it I think a bad

idea and a good idea all at the same time I can absolutely see both sides of that argument It drives me crazy I'm not sure what the right way to go is entirely but I gotta say I'm not sure that the government having essentially unfettered access to our papers is what we want you to know, they used to be a constitution and a constitutional amendment about being secure right in your papers. You used to have privacy but that that seems to be kind of going by the wayside but if there's a warrant required I guess that is a check and balance it should be public there should be oversight but you know, as they said an enemy of the state so who's going to oversee the overseers, overseers.

right but that's not a direct quote pipe away but that's kind of where we're going

so let's talk about Equifax

here and there's some dumb hack we had the House Republicans investigating this Equifax breach because they really cared that this was a very very big deal and it needed some oversight and how the justice department they did some investigating into this not a whole ton but the House Republican spent 14 months now investigating it and they reach the same conclusions that everybody else that looked at this came to and that I came to about a week after the hack and that is the breach was entirely preventable and that the credit reporting agencies management didn't anything to shield can consumers from this mass. Now the article I posted from Gizmodo up on http://CraigPeterson.com has some colorful language in it. So if you're not into the colorful language, you might not want to read it because I'm skipping over that part here. But there are no new laws in place about this. There's no new accountability. And I'm not sure we need new laws about this. But I do think the regulations need to get a little bit more in the line of teeth. If you are a small company like these people we deal with every day, you know, you're under 20 million in revenue, it's hard to justify a major investment in security. It's, I get it, it's very hard, although you should be sent spending one to 3% of your budget if you're a large corporation of your IT budget on security. Okay, the little guys, that's the wrong number. It's a very high number, unfortunately, but they there have not really been any changes. private organizations, as I mentioned earlier, like the payment card industry is enforcing new rules. And they are legitimate rules. They are very tough rules, but the rest not so much. Okay. So they found in the info here that it was entirely preventable, that Equifax failed to take a to fully appreciate and mitigate its cybersecurity risks they found that had been the company taken action to address its observable security issues, the data breach could have been prevented lack of accountability and management structure, Equifax failed to implement clear lines of authority between their internal IT management leading to an execution gap. That's something else. We covered this last week

In my FBI infraguard webinar.

They had complex and outdated IT systems that you know, because of their aggressive growth. They had all kinds of problems because of acquisitions, not moving stuff in Does that sound familiar? Like the Marriott hack that just happened, right? Well happened started in 2014. And it's not entirely Marriott's fault but they've been on an acquisition spree and Starwood had been hacked. So there are some problems there right so they were out just out of date there were way too complex custom-built legacy systems IT security very, very challenging for implement responsible security members, they allowed over 300 securities certificates to expire including 79 certificates from monitoring business-critical domains they failed to renew an expired digital certificate for 19 months and that one it's expired certificate left Equifax without visibility on the X filtration of data during the time of the cyber attack. And we see that all the time you get an attack, there are indications that compromising yet the businesses have no idea what data was stolen, unprepared to support affected customers. It goes on and on. And there's a link in this article again on my website to get a full copy of the report and it's well worth reviewing. It might be something that I'm going to have to do a master class on,

you know what lessons learned basically from the Equifax breach. So I'm going to set this article aside because I do want to follow up on that one. And wow,

okay,

all wrapping it up here. We only have a couple of minutes left if

that we've got fresh

zero-day exploit that's been spotted in the wild. So if you have flash on your computer updated, and I strongly advise that you remove flash. Now if you're using iOS devices, iPads, iPhones, you don't have flash, they've never had flash, Steve Jobs, Apple have never allowed flash to be placed on iOS. Okay, so

you're safe.

If you have a Mac. It is not enabled by default. But many people install it particularly a few years ago because many websites required it and in this day and age, there's no reason to have flash anymore period. Goodbye. So Personally, I'd say delete it because it has had so many security problems if you need flash for some particular reason, and make sure you update it because this one's another huge Okay, this is a zero-day flaw it's exploited in the wild already. And if you've given your DNA to 23 and me I've got a great article from Business Insider up on http://CraigPeterson.com DNA testing company, 23AndMe signed a $300 million deal and that's kind of a big deal because it's Glaxo Smith Klein. They're using the data to do research for developing medications that are a personal medication that you can use. And you know, I think that's a good thing frankly, because that's the future but let me your personal information your DNA is going to be out there and it's going to be shared so you got to make that decision visit 23andme.com make changes as you want to make sure you subscribe to my email list. I'm still getting that Christmas present together for everybody about how to keep your personal information safe the things you can do to stop the bad guys from opening credit cards and stuff in your name http:CraigPeterson.com/subscribe. Have a great week. We'll be back next week. We will take care bye bye.

---

Related articles:

Encryption-Busting Law Passed In Australia Will Have Global Privacy Implications

Equifax Breach Was Just As Infuriating And Dumb As You Thought, New House Report Finds

Flash Zero-Day Exploit Spotted – Patch Now!

A Bug Left Your Microsoft Account Wide Open To Complete Takeover
---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

According to recent studies, Apple Watch can add two years to your life. Find out more as Craig is on with Ken and Matt on the WGAN Morning News.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Apple Watch Could Add Two Years To Your Life, Research Suggests

Dna-Testing Company 23andme Has Signed A $300 Million Deal With A Drug Giant. Here’s How To Delete Your Data If That Freaks You Out.
---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/12/2018

Apple Watch Adds Two Years To Your Life - DNA Testing The Why And How

Craig Peterson: 0:00
Alright, good afternoon. Good evening. Good night. Good morning this is Craig Peterson I had some comments come into [email protected] about the the Good morning thing from yesterday, but I think I'm going to stick with good morning anyways. All right. But hey, I got the bases covered for everybody. This morning. I was on with Ken and Matt. We talked about the Apple Watch. Why are they saying that it can add two years to your life just because of one of its features, which is really kind of cool. also talked a little bit about the Salvation Army this morning and what they're doing with their new big drive. Did you know you can now donate just using your smartphone and DNA testing. It's hit the news again. So we talked a little bit about that 23 me and ancestry kind of a busy morning a little less eclectic, though the neutral with getting mad. So here we go.

Unknown 0:57
Graffiti sounds with us because he dialed the phone to

Unknown 1:00
Craig. Hey, good morning. It's a great time with here. I like that sort of thing. You know, the toy drives helping out and Salvation Army you know, they've got a new campaign going on now to with QR codes for those people that just don't carry carry cash anymore as well with the red kettles.

Unknown 1:21
Wow. That would be me. I never, ever, ever, ever carry Ken. you make cash when I didn't have cash?

Unknown 1:26
And that's like the one I didn't I think I said at the time. It was like the one time in the last year I've had cash on Yeah,

Unknown 1:31
so

Unknown 1:33
go ahead. People volunteer, they help out and they definitely need to help this year and their donations. You know, people just again, they don't even think about it so many times. I just don't have cash and they walk on by so having the opportunity now to call in and make donations because a really great thing to just a reminder that time of year have you have the money, it's well worth helping out with people.

Unknown 1:59
I agree with you now on to come to tech stuff. So I of course, I was going to get the I watch for Christmas. And my wife delayed buying it. So I decided to just buy it for myself.

Unknown 2:11
You realize Christmas hasn't occurred yet, right? You could have waited. You don't know what she's gonna do.

Unknown 2:15
She she would not commit to it. And I was not gonna

Unknown 2:18
there hasn't been some holiday there. And right, Ken?

Unknown 2:21
Ken day, 10 days day, we celebrate every day. And so. So do I understand that by getting this watch, I'm going to live longer.

Unknown 2:30
Yeah, all you need to do is buy the watch can and you're guaranteed two more years of life. Wow, that is great news. It's really that simple. Yeah, the Apple Watch is kind of cool. Because we've talked before about the new technology that's going into these watches going into these devices. And one of the things that it is doing is helping us be a little more conscious about our fitness. And and it's not just exclusively the Apple Watch. In this case, we're we're talking about some research that was done on about a half a million adults. And they found that people that had fitness trackers, which of course, are built into Apple watches, but also into many other devices that these fitness trackers that have these reward schemes, so activity levels increased by more than a third. And they did all of the math behind it, then they found of these half a million adults that they would probably add about two more years to their expected lifespan. And it brings up something else interest in, which is the whole idea behind some of these reward type programs. It's called gamification. And the idea is you can take most things and turn it into a bit of a game and you get a lot more participation. So we're not just talking about game like, can I run faster than can or match, which

Unknown 3:55
you almost certainly could,

Unknown 3:58
we're talking about, about games where you're kind of competing against yourself a little bit, and if they try and make it fun. So the more fun it can be, the more interactive it is, the better the odd. So when we're talking about the Apple Watch just the technology behind the gamification and getting you to exercise a little bit more is a huge win way about just the standard fitness trackers. And then that he can, you've got the heart monitor now that's built into the new Apple Watch. Yes, and that's already apparently saved some lives because it's watching that season arrhythmia and informs you about it. And one of the most common arrhythmias that you have in this day and age atrial fibrillation, and you'll see more and more of that as a population continues to age but it detects that and going to help you as well manage various types of irregular heartbeat so you made a good investment on can

Unknown 4:57
see this was this is what I'm saying this was an investment not just a toy, this was

Unknown 5:03
you're saving your own life is what you're doing. Exactly. Yes. You're giving the gift of time

Unknown 5:07
the list of time with cultural every the listener two years. I mean, can you have another hat? Sitting it up? You know, a glass case? No, freaks me out that that's there

Unknown 5:15
was

Unknown 5:16
another time. Yeah,

Unknown 5:18
maybe. Well, correct me, dishonor tech guru joins us telling us about all the things that Apple can do for you.

Unknown 5:26
I would have put it that way.

Unknown 5:28
So interestingly, I believe it was last Christmas, my wife got me a pretty cool present, which was the 23andMe genetic testing thing, which I actually really enjoy it. I thought that was really cool.

Unknown 5:41
They have apparently signed a big deal with a drug company. And I assume some of that genetic material and some of that information, maybe what handed over to them, maybe how's this going to work? And if I'm freaked out about that, what do I do?

Unknown 5:55
Yeah, this is really cool. I did the same thing I signed up for 23AndMe and my kids did it. And my dad did it. My mom's going to do it. In fact, I bought her one of these tips to test her DNA that I'm bringing with us at Christmas time it because right now, you can get these kits for half price, which is pretty cool. And of course, the whole idea here is you spit into a little vial that they that they give you it's part of the package and you close it up the a shake it and you put it in the envelope, and you send it back. Now we're all very well old enough to remember when DNA sequencing cost millions of dollars and took a couple of years to do just for one person. Right? Right. You remember those days, I do

Unknown 6:45
like the good old days,

Unknown 6:48
I remember. Well, now with 23AndMe, and there's some others out there ancestor is doing some kind of similar things, a big difference with ancestry. And 23AndMe is 23 needs, looks at your DNA to look for some and abnormalities as well. So when it has a whole health thing associated with it, and what what's happening here now is that the price has gotten lower the cost of doing it. And the timeframe for doing it is not in the lower it's a few weeks now, instead of a few years. And the show is a few million dollars, we're talking about a 50 to $100, depending on what you want. And as I said, right now, there's even price breaks. But you know, bottom line is it really does actually cost more than they're charging. And the way they're doing this, this this this is reminiscent of Facebook here, Matt, but the way they're doing it is they're selling your data. And in this case, they're selling your data to the major pharmaceutical companies. Now, it's not that they're selling it, and the pharmaceutical companies are going to come back to you. And you know, we give advertising or other things like Facebook or do but in this case, what's happening is they're using it because of the future of our medications and our medical treatments, we are changing everything. This is already true. In some cases, it's going to be true across the board, within 10 years they are going to make medication specifically for Ken Altshuler to fix a very specific problem like his addictions, new Apple watches. And the whole idea is they need a lot of DNA samples to be able to examine and they need you to answer the questions. So Matt, did you get like hundreds of questions that 23 me wanted you to answer? Did you answer any? I did.

Unknown 8:49
Yeah. No, I did. I actually have I have long since given up caring about my privacy whatsoever. So I'm happy to assist the genetic research that they do. So I answered probably one of them. I mean, there was a lot of them.

Unknown 9:02
Yeah, there are a lot of them. I think, last count, there were some 800 questions kind of depended on on what information they wanted. So we've got Glaxo Smith Klein, for instance, who put $300 million out and bought a stake in 23AndMe, 23AndMe has been selling this data. And it's a very, very big deal. Now you can get your information that you might have already given to 23 meter DNA stuff, you can't get that sharing restricted. And you can do that by going on to your 23AndMe account online and you can look for the bio banking consent, and you can withdraw your consent. But I agree with you, Matt, I, you know, I'm at the point where, you know, we've got 500 million records stolen, or people's, it should say, information stolen from Marriott, and everybody else. And it looks like it was the Chinese by the way, and look, the NSA knows everything about me anyway.

Unknown 10:03
I mean, at this point, I don't, you know, besides from what I understand about this, too, I mean, it's not as though 23AndMe and companies like this are handing over a list of names, addresses and phone numbers with your genetic material. It's basically the data, right? I mean, it's they're trying to send over the information that would be of use with I mean, identifying material really doesn't even do anybody any good in the in the kinds of agreements that these are really

Unknown 10:28
Yeah, it really doesn't yet. And, but that's where the concern comes in, because of this data, even though it's somewhat anonymized. In other words, they can't figure out that it was mad about DNA that they're looking at

Unknown 10:43
right Yeah, exactly. They they you can back door your way into it and that's where people start getting concerned we're still a ways away from that but you know any hi I got a quick thing a Christmas present for everybody who's listening your data is helpful here we know it okay. As you just mentioned, if it's not out there it will be shortly it's just because of all of the staffs and three fifths of Americans have never even checked their credit report so here's what I've been working on the last week and a half with my team this we're absolutely free you know I'm not some big marketer This is trying to sell yourself or get your DNA of I'm putting together something that goes through exactly what you need to do to check your credit report understand your credit report be able to read that credit report and how to use the new laws that the federal government just put in place to freeze all of your credit for free and stop the bad guys from opening new accounts in your name and causing you know when the grief so if you send me an email just [email protected] Once this is finished, I will send it out to you I've scheduled interviews with Equifax and you know the three big credit companies out there so I'm going to be talking with them are going to include those interviews are going to have background information, I'm going to have screenshots I really want to help you out. And that's my Christmas present belated Hanukkah, Kwanzaa you name it. That's my present to everybody who wants to just send an email to [email protected] when we're done, I'll send that out to you. Because as Matt said, we're our information's out there, or it's about to be out there. And this is something you can do and you can do for free. And it's going to really it's going to help you out because so many Americans have already been affected by having their data stolen.

Unknown 12:48
Joining us. Our tech guru joins us every Wednesday. Thanks, Craig. We will talk to you next week.

Unknown 12:55
Take care, gentlemen. Thanks. Bye bye.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

According to recent studies, Apple Watch can add two years to your life. Find out more as Craig is on with Ken and Matt on the WGAN Morning News.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Apple Watch Could Add Two Years To Your Life, Research Suggests

Dna-Testing Company 23andme Has Signed A $300 Million Deal With A Drug Giant. Here’s How To Delete Your Data If That Freaks You Out.
---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/12/2018

Apple Watch Adds Two Years To Your Life - DNA Testing The Why And How

Craig Peterson: 0:00
Alright, good afternoon. Good evening. Good night. Good morning this is Craig Peterson I had some comments come into [email protected] about the the Good morning thing from yesterday, but I think I'm going to stick with good morning anyways. All right. But hey, I got the bases covered for everybody. This morning. I was on with Ken and Matt. We talked about the Apple Watch. Why are they saying that it can add two years to your life just because of one of its features, which is really kind of cool. also talked a little bit about the Salvation Army this morning and what they're doing with their new big drive. Did you know you can now donate just using your smartphone and DNA testing. It's hit the news again. So we talked a little bit about that 23 me and ancestry kind of a busy morning a little less eclectic, though the neutral with getting mad. So here we go.

Unknown 0:57
Graffiti sounds with us because he dialed the phone to

Unknown 1:00
Craig. Hey, good morning. It's a great time with here. I like that sort of thing. You know, the toy drives helping out and Salvation Army you know, they've got a new campaign going on now to with QR codes for those people that just don't carry carry cash anymore as well with the red kettles.

Unknown 1:21
Wow. That would be me. I never, ever, ever, ever carry Ken. you make cash when I didn't have cash?

Unknown 1:26
And that's like the one I didn't I think I said at the time. It was like the one time in the last year I've had cash on Yeah,

Unknown 1:31
so

Unknown 1:33
go ahead. People volunteer, they help out and they definitely need to help this year and their donations. You know, people just again, they don't even think about it so many times. I just don't have cash and they walk on by so having the opportunity now to call in and make donations because a really great thing to just a reminder that time of year have you have the money, it's well worth helping out with people.

Unknown 1:59
I agree with you now on to come to tech stuff. So I of course, I was going to get the I watch for Christmas. And my wife delayed buying it. So I decided to just buy it for myself.

Unknown 2:11
You realize Christmas hasn't occurred yet, right? You could have waited. You don't know what she's gonna do.

Unknown 2:15
She she would not commit to it. And I was not gonna

Unknown 2:18
there hasn't been some holiday there. And right, Ken?

Unknown 2:21
Ken day, 10 days day, we celebrate every day. And so. So do I understand that by getting this watch, I'm going to live longer.

Unknown 2:30
Yeah, all you need to do is buy the watch can and you're guaranteed two more years of life. Wow, that is great news. It's really that simple. Yeah, the Apple Watch is kind of cool. Because we've talked before about the new technology that's going into these watches going into these devices. And one of the things that it is doing is helping us be a little more conscious about our fitness. And and it's not just exclusively the Apple Watch. In this case, we're we're talking about some research that was done on about a half a million adults. And they found that people that had fitness trackers, which of course, are built into Apple watches, but also into many other devices that these fitness trackers that have these reward schemes, so activity levels increased by more than a third. And they did all of the math behind it, then they found of these half a million adults that they would probably add about two more years to their expected lifespan. And it brings up something else interest in, which is the whole idea behind some of these reward type programs. It's called gamification. And the idea is you can take most things and turn it into a bit of a game and you get a lot more participation. So we're not just talking about game like, can I run faster than can or match, which

Unknown 3:55
you almost certainly could,

Unknown 3:58
we're talking about, about games where you're kind of competing against yourself a little bit, and if they try and make it fun. So the more fun it can be, the more interactive it is, the better the odd. So when we're talking about the Apple Watch just the technology behind the gamification and getting you to exercise a little bit more is a huge win way about just the standard fitness trackers. And then that he can, you've got the heart monitor now that's built into the new Apple Watch. Yes, and that's already apparently saved some lives because it's watching that season arrhythmia and informs you about it. And one of the most common arrhythmias that you have in this day and age atrial fibrillation, and you'll see more and more of that as a population continues to age but it detects that and going to help you as well manage various types of irregular heartbeat so you made a good investment on can

Unknown 4:57
see this was this is what I'm saying this was an investment not just a toy, this was

Unknown 5:03
you're saving your own life is what you're doing. Exactly. Yes. You're giving the gift of time

Unknown 5:07
the list of time with cultural every the listener two years. I mean, can you have another hat? Sitting it up? You know, a glass case? No, freaks me out that that's there

Unknown 5:15
was

Unknown 5:16
another time. Yeah,

Unknown 5:18
maybe. Well, correct me, dishonor tech guru joins us telling us about all the things that Apple can do for you.

Unknown 5:26
I would have put it that way.

Unknown 5:28
So interestingly, I believe it was last Christmas, my wife got me a pretty cool present, which was the 23andMe genetic testing thing, which I actually really enjoy it. I thought that was really cool.

Unknown 5:41
They have apparently signed a big deal with a drug company. And I assume some of that genetic material and some of that information, maybe what handed over to them, maybe how's this going to work? And if I'm freaked out about that, what do I do?

Unknown 5:55
Yeah, this is really cool. I did the same thing I signed up for 23AndMe and my kids did it. And my dad did it. My mom's going to do it. In fact, I bought her one of these tips to test her DNA that I'm bringing with us at Christmas time it because right now, you can get these kits for half price, which is pretty cool. And of course, the whole idea here is you spit into a little vial that they that they give you it's part of the package and you close it up the a shake it and you put it in the envelope, and you send it back. Now we're all very well old enough to remember when DNA sequencing cost millions of dollars and took a couple of years to do just for one person. Right? Right. You remember those days, I do

Unknown 6:45
like the good old days,

Unknown 6:48
I remember. Well, now with 23AndMe, and there's some others out there ancestor is doing some kind of similar things, a big difference with ancestry. And 23AndMe is 23 needs, looks at your DNA to look for some and abnormalities as well. So when it has a whole health thing associated with it, and what what's happening here now is that the price has gotten lower the cost of doing it. And the timeframe for doing it is not in the lower it's a few weeks now, instead of a few years. And the show is a few million dollars, we're talking about a 50 to $100, depending on what you want. And as I said, right now, there's even price breaks. But you know, bottom line is it really does actually cost more than they're charging. And the way they're doing this, this this this is reminiscent of Facebook here, Matt, but the way they're doing it is they're selling your data. And in this case, they're selling your data to the major pharmaceutical companies. Now, it's not that they're selling it, and the pharmaceutical companies are going to come back to you. And you know, we give advertising or other things like Facebook or do but in this case, what's happening is they're using it because of the future of our medications and our medical treatments, we are changing everything. This is already true. In some cases, it's going to be true across the board, within 10 years they are going to make medication specifically for Ken Altshuler to fix a very specific problem like his addictions, new Apple watches. And the whole idea is they need a lot of DNA samples to be able to examine and they need you to answer the questions. So Matt, did you get like hundreds of questions that 23 me wanted you to answer? Did you answer any? I did.

Unknown 8:49
Yeah. No, I did. I actually have I have long since given up caring about my privacy whatsoever. So I'm happy to assist the genetic research that they do. So I answered probably one of them. I mean, there was a lot of them.

Unknown 9:02
Yeah, there are a lot of them. I think, last count, there were some 800 questions kind of depended on on what information they wanted. So we've got Glaxo Smith Klein, for instance, who put $300 million out and bought a stake in 23AndMe, 23AndMe has been selling this data. And it's a very, very big deal. Now you can get your information that you might have already given to 23 meter DNA stuff, you can't get that sharing restricted. And you can do that by going on to your 23AndMe account online and you can look for the bio banking consent, and you can withdraw your consent. But I agree with you, Matt, I, you know, I'm at the point where, you know, we've got 500 million records stolen, or people's, it should say, information stolen from Marriott, and everybody else. And it looks like it was the Chinese by the way, and look, the NSA knows everything about me anyway.

Unknown 10:03
I mean, at this point, I don't, you know, besides from what I understand about this, too, I mean, it's not as though 23AndMe and companies like this are handing over a list of names, addresses and phone numbers with your genetic material. It's basically the data, right? I mean, it's they're trying to send over the information that would be of use with I mean, identifying material really doesn't even do anybody any good in the in the kinds of agreements that these are really

Unknown 10:28
Yeah, it really doesn't yet. And, but that's where the concern comes in, because of this data, even though it's somewhat anonymized. In other words, they can't figure out that it was mad about DNA that they're looking at

Unknown 10:43
right Yeah, exactly. They they you can back door your way into it and that's where people start getting concerned we're still a ways away from that but you know any hi I got a quick thing a Christmas present for everybody who's listening your data is helpful here we know it okay. As you just mentioned, if it's not out there it will be shortly it's just because of all of the staffs and three fifths of Americans have never even checked their credit report so here's what I've been working on the last week and a half with my team this we're absolutely free you know I'm not some big marketer This is trying to sell yourself or get your DNA of I'm putting together something that goes through exactly what you need to do to check your credit report understand your credit report be able to read that credit report and how to use the new laws that the federal government just put in place to freeze all of your credit for free and stop the bad guys from opening new accounts in your name and causing you know when the grief so if you send me an email just [email protected] Once this is finished, I will send it out to you I've scheduled interviews with Equifax and you know the three big credit companies out there so I'm going to be talking with them are going to include those interviews are going to have background information, I'm going to have screenshots I really want to help you out. And that's my Christmas present belated Hanukkah, Kwanzaa you name it. That's my present to everybody who wants to just send an email to [email protected] when we're done, I'll send that out to you. Because as Matt said, we're our information's out there, or it's about to be out there. And this is something you can do and you can do for free. And it's going to really it's going to help you out because so many Americans have already been affected by having their data stolen.

Unknown 12:48
Joining us. Our tech guru joins us every Wednesday. Thanks, Craig. We will talk to you next week.

Unknown 12:55
Take care, gentlemen. Thanks. Bye bye.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Danny Farrantino sits in for Jim on the Jim Polito show. Craig and Danny discusses how scams are affecting businesses and consumers as well as Craig's Christmas present for the listeners.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Attackers Are Landing Email Inboxes Without The Need To Phish

Criminals Hacked Into My Phone, Email And Drained My Checking Account. How You Can Avoid Being A Victim.
---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/11/2018

Scams Affecting Businesses And Consumers - My Christmas Present To You

Craig Peterson: 0:00

Hey, good morning, everybody. Craig Peterson here. Somebody asked me why I say good morning on these podcasts. It's it's just such a great greeting, isn't it? It doesn't matter if it's the middle of the night. Good morning. It's just, it's like sunshine and puppy dogs, is it. So good morning, everybody. I was on the Jim Polito show this morning. But Danny Farrantino who was sitting in for Jim, they asked me if I could sit in and host during the Christmas vacation. But unfortunately, I am going to be out of town and won't be able to do it so well. And that's what happens sometimes this morning. If you want to know about what's going on what the hackers are doing the latest stuff for consumers. That's what I talked about this morning with Danny, I wanted a quite a bit of detail on that the the details of things you need to do what the scammers are doing. How did they get $12 billion? That's a number from the FBI out of businesses so what are they doing with the business scams What are they doing with the personal scams and I've got a special Christmas present or or late Hanukkah present or whatever you might want to call it here and have your present for people when I talk a little bit about that as well. So here we go with Danny.

Unknown 1:21
That sound means talk to our Tech Talk guru Craig Peterson and Craig apparently the Cape Cod Community College could have used your services buddy

Unknown 1:33
yeah

Unknown 1:34
I guess by clicking on an email it led to a six figure loss one employee clicked on an email turns out it was a virus cost him over $800,000

Unknown 1:46
that you see that for two hops and don't you we we had now did you see that article from a few weeks ago that I sent to German you about how one employee in the federal government one just this one department he was spending a little bit of time in porn turns out and had been downloading thousands of pictures. But he did the same trick and ended up infecting the whole department is it you got to be careful, everybody. And now it's Christmas time we're going to be clicking on links, aren't we

Unknown 2:20
unfortunately. So at this point, they don't even really need to phish it just attackers are getting your email inbox is nothing really trying, aren't they?

Unknown 2:29
Yeah, this is getting bad, you know, continually worse. And I just sat down yesterday with another company. This is an investment firm, small, firm family owned and operated and they have had some of these problems as well. We have, you know, we've talked a little bit before with Jim about the FBI and what they've been saying about something called business email compromise. And the business email compromise is where you get an email, and the bad guys are trying to trick you into cooking on something just like we just talked about here. But now we're seeing a become a very easy and I would have thought it would get a little harder, but very easy for the bad guys. They're using social engineering, they're posing as colleagues are business partners, they get on to LinkedIn, they get onto Facebook, they find out a little bit about you, they don't even need viruses anymore. They don't need any of that sort of stuff. Because they can take over your account. And I put a video up on my website a few months ago, showing what they're doing. And this one woman who was in Eastern Europe, she spent a total of about three hours researching this guy. He was a CEO of a small manufacturing firm, well, not small, I guess technically a larger one, they had about 100 million dollars in revenues to make some medium to large business. And she did some research on this guy found out where he had gone to school, found that more information about him found out just from the website, who was the CFO who were the people in finance, because they hadn't read on the website. And she then did a little bit more research and calls and pretended that she was his wife that he had a job offer. And hey, AOL wasn't tool was but AOL Do I need you to get me his password because he's expecting this email and it's for a new job. And in the background, she's playing audio have a baby crying and screaming and the company gave her his email address. Okay, yeah. And so now she had access to his email account because they gave her the password, they did a password reset, no problem, they took care of it all. She then send an email to the CFO saying, Hey,

Unknown 5:02
I'm not account to she knew from his Facebook page that he was down in the Caribbean. I'm out of town, we've got this new vendor would be dealing with some some last three months. We haven't paid the single invoice and if we don't pay them, things are just going to completely fall apart. Now, she had already gone through his email, figured out a little bit about the business. We were talking a few hours with the work she got $45 million

Unknown 5:29
from this company. They transferred it they CFO wired it to this bank account over and Eastern Europe and it was gone once that money's gone. It takes 90 seconds is all it takes. And that money Danny can never be recovered once it's wired out after 90 seconds. So it's this is real. It's happening. It's a $12 billion industry so far and things are just getting worse. We got to be more careful

Unknown 6:00
we're speaking with Tech Talk guru Craig Peterson. Nick Craig and I know you've kind of said it in the past and hinted at it at this point my feeling is it's an if not when is that is that true

Unknown 6:10
it is a win yeah it's a one not yet okay it's already happened or it's going to happen now Danny I've got some really good news my Christmas present to everybody we've been working for the last week and a half on a special report for available for anybody for free and we I mentioned it briefly last week we haven't got it finished yet because I'm going to do some interviews and scheduling interviews right now with Equifax with with a big companies that do credit reports and I'm going to include this but three out of five Americans have never even looked at their credit report and if you buy these various types of insurance like you know that these life hacking companies I'm not going to say the name but they will tell you after the fact that your your credit has been hijacked. Okay. So here's what I'm doing this is going to be a package of information that you cannot get anywhere else and it's how you can for free and I'm not charging for this for any of any of the Polito listeners here. Well you know Polito and you our listeners for this thing and it's going to take you through exactly what to do how to read your credit report what it means and then what you can do to stop the bad guys from opening accounts in your main K and that's the biggest problem most people have because if you have a credit card and the number stolen and then convenience If however your information is out there and it probably is out there you know look at the Marriott hack 500 million people here just a couple of weeks ago it's all your information is probably out there you're absolutely right

Unknown 8:01
what do you do how you do that so it's going to be step by step by staff and if you want it I'll send it to you but you have to be on my email list or on my SMS list you can get on my email list by just going to http://CraigPeterson.com/subscribe. It's http://CraigPeterson.com/subscribe and I will let you know when it's done. It's going to be my Christmas present to all of the listeners of the Danny show. How's that? The Danny Farrantino show.

Unknown 8:29
and we might even let some Jim listeners in on it. But yeah, you're right. Danny, every one of us has either had our data stolen, or it's going to be stolen. There's no question that means it's going to be misused the social security guys, they will not give you a new social security. Number one, it's stolen. So what do you do, and that's exactly what I'm working on. And it drives me batty, these bad guys there. It's getting so easy for them. They're causing so much harm. You know, already, I'm trying to help small businesses out. But in this case, we're talking about consumers. That's everything you need to do. You can do for free. It's step by step. It's only going to take care of half an hour to do all of this stuff. And you're going to be way more protected than you are right now.

Unknown 9:19
That's the voice of Craig Peterson, our tech expert and put together a great list for you this holiday season. At some point, Craig will get that out to us. But Craig, in this packet of information you send us on a weekly basis. Criminals hacked into my phone email, drain my checking account how you can avoid being a victim in the story here. Number one thing I see that they did wrong, they use the unsecured Wi Fi. Is that the biggest problem?

Unknown 9:44
Yeah, well, number one, he was using that secured Wi-Fi and number two, it was just an Android. Okay, so yeah, in this particular case, what happened is he's in this can happen to you sitting in an airport at a coffee shop onto his device over the Wi-Fi they were able to fake him out. And that happens whether you're on iOS or not if you're not using a special secure VPN and they were able to use a similar trick that I just described here where they have access your email accounts think about how you reset your password lead let's say you've got a bank account with with TD Bank or Bank of America and you forgot your password and now you're on their website Danny. What did they do if you put an email address you could forget my password what's the next thing they do they they send you a text message or they might send an email to another email account well if you have access to that that that email account and now they send you a message there's one more thing that they're doing today to and that is if you don't answer your phone they will leave you a a voicemail with the reset password

Unknown 11:05
we have voicemail it's called Visual Voicemail. Do you have that on your phone, I don't know Visual Voicemail it what it does is they leave a voicemail, it turns it into text and email that to you. Which means if they have access to your email account, they know who your bank is. Because it's in your email. Yeah, they go to that bank's website they say I forgot my password because they know what your email address is it leaves a voicemail I am that voicemail then goes into your email box and now have your reset for your your bank account now they have access to your bank account and everything else. Okay. So this gets very complicated in but it's simple to do right for these bad guys. And they do it in math and it destroys people's finances every day. So I'm I'm bound and determined to stop this guy is Fanny. We got to educate the consumers better

Unknown 12:02
drag thank goodness for people like you. And then the good guys, you know, who tried to keep all of us safe. Unfortunately, that was there was so much stuff on this list. We didn't get to everything today. If people want to hear more. What's the best way to get hold the

Unknown 12:14
it's 855-385-5553. You can send me a text any time I'll answer your questions. Of course, normal data and text rates apply 855-385-5553 and I'll let you know when I've got that Christmas present. Ready for everybody. 

Unknown 12:33
Craig as always great stuff looking forward to that Christmas present. And then we'll talk again next week.

Unknown 12:37
Hey thanks, Danny. Bye bye.

Unknown 12:38
Craig Peterson. As always great stuff. They're just trying to help keep us all safe. As you kind of said it's unfortunately a when not if but there's ways that Craig can help keep us safe. And if you follow those maybe it'll be a little bit longer. Anyways, 851 here on a Tuesday morning. We'll take a break. Then we'll wrap things up you listening to the Jim...

---

Don't miss any episode from Craig. Visit http://CraigPeterson.com/itunes. Subscribe and give us a rating!

Thanks, everyone, for listening and sharing our podcasts. We're really hitting it out of the park. This will be a great year! 

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Danny Farrantino sits in for Jim on the Jim Polito show. Craig and Danny discusses how scams are affecting businesses and consumers as well as Craig's Christmas present for the listeners.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Attackers Are Landing Email Inboxes Without The Need To Phish

Criminals Hacked Into My Phone, Email And Drained My Checking Account. How You Can Avoid Being A Victim.
---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/11/2018

Scams Affecting Businesses And Consumers - My Christmas Present To You

Craig Peterson: 0:00

Hey, good morning, everybody. Craig Peterson here. Somebody asked me why I say good morning on these podcasts. It's it's just such a great greeting, isn't it? It doesn't matter if it's the middle of the night. Good morning. It's just, it's like sunshine and puppy dogs, is it. So good morning, everybody. I was on the Jim Polito show this morning. But Danny Farrantino who was sitting in for Jim, they asked me if I could sit in and host during the Christmas vacation. But unfortunately, I am going to be out of town and won't be able to do it so well. And that's what happens sometimes this morning. If you want to know about what's going on what the hackers are doing the latest stuff for consumers. That's what I talked about this morning with Danny, I wanted a quite a bit of detail on that the the details of things you need to do what the scammers are doing. How did they get $12 billion? That's a number from the FBI out of businesses so what are they doing with the business scams What are they doing with the personal scams and I've got a special Christmas present or or late Hanukkah present or whatever you might want to call it here and have your present for people when I talk a little bit about that as well. So here we go with Danny.

Unknown 1:21
That sound means talk to our Tech Talk guru Craig Peterson and Craig apparently the Cape Cod Community College could have used your services buddy

Unknown 1:33
yeah

Unknown 1:34
I guess by clicking on an email it led to a six figure loss one employee clicked on an email turns out it was a virus cost him over $800,000

Unknown 1:46
that you see that for two hops and don't you we we had now did you see that article from a few weeks ago that I sent to German you about how one employee in the federal government one just this one department he was spending a little bit of time in porn turns out and had been downloading thousands of pictures. But he did the same trick and ended up infecting the whole department is it you got to be careful, everybody. And now it's Christmas time we're going to be clicking on links, aren't we

Unknown 2:20
unfortunately. So at this point, they don't even really need to phish it just attackers are getting your email inbox is nothing really trying, aren't they?

Unknown 2:29
Yeah, this is getting bad, you know, continually worse. And I just sat down yesterday with another company. This is an investment firm, small, firm family owned and operated and they have had some of these problems as well. We have, you know, we've talked a little bit before with Jim about the FBI and what they've been saying about something called business email compromise. And the business email compromise is where you get an email, and the bad guys are trying to trick you into cooking on something just like we just talked about here. But now we're seeing a become a very easy and I would have thought it would get a little harder, but very easy for the bad guys. They're using social engineering, they're posing as colleagues are business partners, they get on to LinkedIn, they get onto Facebook, they find out a little bit about you, they don't even need viruses anymore. They don't need any of that sort of stuff. Because they can take over your account. And I put a video up on my website a few months ago, showing what they're doing. And this one woman who was in Eastern Europe, she spent a total of about three hours researching this guy. He was a CEO of a small manufacturing firm, well, not small, I guess technically a larger one, they had about 100 million dollars in revenues to make some medium to large business. And she did some research on this guy found out where he had gone to school, found that more information about him found out just from the website, who was the CFO who were the people in finance, because they hadn't read on the website. And she then did a little bit more research and calls and pretended that she was his wife that he had a job offer. And hey, AOL wasn't tool was but AOL Do I need you to get me his password because he's expecting this email and it's for a new job. And in the background, she's playing audio have a baby crying and screaming and the company gave her his email address. Okay, yeah. And so now she had access to his email account because they gave her the password, they did a password reset, no problem, they took care of it all. She then send an email to the CFO saying, Hey,

Unknown 5:02
I'm not account to she knew from his Facebook page that he was down in the Caribbean. I'm out of town, we've got this new vendor would be dealing with some some last three months. We haven't paid the single invoice and if we don't pay them, things are just going to completely fall apart. Now, she had already gone through his email, figured out a little bit about the business. We were talking a few hours with the work she got $45 million

Unknown 5:29
from this company. They transferred it they CFO wired it to this bank account over and Eastern Europe and it was gone once that money's gone. It takes 90 seconds is all it takes. And that money Danny can never be recovered once it's wired out after 90 seconds. So it's this is real. It's happening. It's a $12 billion industry so far and things are just getting worse. We got to be more careful

Unknown 6:00
we're speaking with Tech Talk guru Craig Peterson. Nick Craig and I know you've kind of said it in the past and hinted at it at this point my feeling is it's an if not when is that is that true

Unknown 6:10
it is a win yeah it's a one not yet okay it's already happened or it's going to happen now Danny I've got some really good news my Christmas present to everybody we've been working for the last week and a half on a special report for available for anybody for free and we I mentioned it briefly last week we haven't got it finished yet because I'm going to do some interviews and scheduling interviews right now with Equifax with with a big companies that do credit reports and I'm going to include this but three out of five Americans have never even looked at their credit report and if you buy these various types of insurance like you know that these life hacking companies I'm not going to say the name but they will tell you after the fact that your your credit has been hijacked. Okay. So here's what I'm doing this is going to be a package of information that you cannot get anywhere else and it's how you can for free and I'm not charging for this for any of any of the Polito listeners here. Well you know Polito and you our listeners for this thing and it's going to take you through exactly what to do how to read your credit report what it means and then what you can do to stop the bad guys from opening accounts in your main K and that's the biggest problem most people have because if you have a credit card and the number stolen and then convenience If however your information is out there and it probably is out there you know look at the Marriott hack 500 million people here just a couple of weeks ago it's all your information is probably out there you're absolutely right

Unknown 8:01
what do you do how you do that so it's going to be step by step by staff and if you want it I'll send it to you but you have to be on my email list or on my SMS list you can get on my email list by just going to http://CraigPeterson.com/subscribe. It's http://CraigPeterson.com/subscribe and I will let you know when it's done. It's going to be my Christmas present to all of the listeners of the Danny show. How's that? The Danny Farrantino show.

Unknown 8:29
and we might even let some Jim listeners in on it. But yeah, you're right. Danny, every one of us has either had our data stolen, or it's going to be stolen. There's no question that means it's going to be misused the social security guys, they will not give you a new social security. Number one, it's stolen. So what do you do, and that's exactly what I'm working on. And it drives me batty, these bad guys there. It's getting so easy for them. They're causing so much harm. You know, already, I'm trying to help small businesses out. But in this case, we're talking about consumers. That's everything you need to do. You can do for free. It's step by step. It's only going to take care of half an hour to do all of this stuff. And you're going to be way more protected than you are right now.

Unknown 9:19
That's the voice of Craig Peterson, our tech expert and put together a great list for you this holiday season. At some point, Craig will get that out to us. But Craig, in this packet of information you send us on a weekly basis. Criminals hacked into my phone email, drain my checking account how you can avoid being a victim in the story here. Number one thing I see that they did wrong, they use the unsecured Wi Fi. Is that the biggest problem?

Unknown 9:44
Yeah, well, number one, he was using that secured Wi-Fi and number two, it was just an Android. Okay, so yeah, in this particular case, what happened is he's in this can happen to you sitting in an airport at a coffee shop onto his device over the Wi-Fi they were able to fake him out. And that happens whether you're on iOS or not if you're not using a special secure VPN and they were able to use a similar trick that I just described here where they have access your email accounts think about how you reset your password lead let's say you've got a bank account with with TD Bank or Bank of America and you forgot your password and now you're on their website Danny. What did they do if you put an email address you could forget my password what's the next thing they do they they send you a text message or they might send an email to another email account well if you have access to that that that email account and now they send you a message there's one more thing that they're doing today to and that is if you don't answer your phone they will leave you a a voicemail with the reset password

Unknown 11:05
we have voicemail it's called Visual Voicemail. Do you have that on your phone, I don't know Visual Voicemail it what it does is they leave a voicemail, it turns it into text and email that to you. Which means if they have access to your email account, they know who your bank is. Because it's in your email. Yeah, they go to that bank's website they say I forgot my password because they know what your email address is it leaves a voicemail I am that voicemail then goes into your email box and now have your reset for your your bank account now they have access to your bank account and everything else. Okay. So this gets very complicated in but it's simple to do right for these bad guys. And they do it in math and it destroys people's finances every day. So I'm I'm bound and determined to stop this guy is Fanny. We got to educate the consumers better

Unknown 12:02
drag thank goodness for people like you. And then the good guys, you know, who tried to keep all of us safe. Unfortunately, that was there was so much stuff on this list. We didn't get to everything today. If people want to hear more. What's the best way to get hold the

Unknown 12:14
it's 855-385-5553. You can send me a text any time I'll answer your questions. Of course, normal data and text rates apply 855-385-5553 and I'll let you know when I've got that Christmas present. Ready for everybody. 

Unknown 12:33
Craig as always great stuff looking forward to that Christmas present. And then we'll talk again next week.

Unknown 12:37
Hey thanks, Danny. Bye bye.

Unknown 12:38
Craig Peterson. As always great stuff. They're just trying to help keep us all safe. As you kind of said it's unfortunately a when not if but there's ways that Craig can help keep us safe. And if you follow those maybe it'll be a little bit longer. Anyways, 851 here on a Tuesday morning. We'll take a break. Then we'll wrap things up you listening to the Jim...

---

Don't miss any episode from Craig. Visit http://CraigPeterson.com/itunes. Subscribe and give us a rating!

Thanks, everyone, for listening and sharing our podcasts. We're really hitting it out of the park. This will be a great year! 

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Jack is on with Jack Heath discussing the stock market drop, the most recent hacks and how to stay safe online.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/10/2018

Stock Market Drop - Staying Safe Online

Craig Peterson 0:00

Good morning everybody. Craig Peterson here. This morning I was on with Mr. Jack Heath covering big chunks of northern New England. And we talked about how to keep your data safe online. whole new thing I've got a product coming out it's going to be free. Make sure you go to http://CraigPeterson.com/subscribe, and I'll send it to you soon as it's done. We're working on it. Some of this stuff just takes too long as far as I'm concerned. Anyhow, we also talked about the big guys why the stock markets falling. It was actually kind of a pretty good conversation this morning. And hopefully I'll have my voice back by the end of the day today. I've got a couple of meetings, going out meeting with some companies see if I can help them a little bit, too. So here we go with Mr. Heath

Unknown 0:49
is now on the NFL Western allies. Our Tech Talk guy Craig Peterson. A couple things caught my eye, Craig, and you can tell us what you have on your docket. But I know you're not the stock market guy. But markets have been going down. And some of the big tech high tech giants aren't doing so well. And performance. But it's an interesting time of year because so many people are shopping both online and at stores. But Good morning, Craig, what's catching your eye?

Unknown 1:12
Yeah, a couple of really good points right there. These massive giants are starting to kind of make you fall a little bit to their knees. We've got Apple and Facebook and of course, some others who are really facing some hard times. Right now Facebook seems to have kind of an internal rebellion going on where a number of their employees have gotten pretty upset with the way things are going over there with people's privacy and other things. We've got Apple now who has made some great deals if you want one of these new Apple iPhones like the XR now's the time to buy it, you can be getting a few hundred dollars off with the trading of an old phone is it it's really again, this cycle is that the business cycle, got to remember that back in the 70s of course idea on the King of the Hill, Microsoft kind of still is the king of a number of hills with Vollmer gone, they're improving, but it's a cycle and like everything else, although there are a lot of people find things this season these companies that are currently at the top of the heap Jack, they're just not going to stay there forever.

Unknown 2:25
Yeah, interesting. And a lot of you know ongoing concern about shopping aware protecting your online purpose purchases, some porch thieves It's a whole new industry when you know and you see people so many deliveries now package sits on the porch of someone's home or apartment, a condo for the day. And people are just literally driving around snatching gifts and boxes right off a porch.

Unknown 2:50
The Amazon has a new feature people might have noticed, if you are buying stuff online with Amazon, they now allow you to put a code in with your so what they'll do is if you have one of these little lock boxes on your porch, or maybe even a code to your front door. One time use code is the way to do this. By the way, people they will deliver your package but they'll open your door, put it right inside or open the little lock box, put it right inside. Because you're right. A lot of people are stealing these things. Be careful. You also have the ability with Amazon to say here's our launcher to put it so you can give them a code for the garage for instance, they'll put it inside your garage door or stick it in the shed. It's a problem people are spending a lot of money and they aren't getting stolen. And you know you talk about the online shopping I you know I do a lot of stuff with the FBI in there in regard program which I really advise business people to look into. If you're involved with security Look at him for guard.org but the FBI has been wanting asked about the more than $12 billion that has been stolen from businesses out there this time of year so watch your emails everybody if you're shopping online whether your home user whether your business they are trying to commit fraud in the online world to criminals are hacking into folders a big article in USA Today that I have up on my website talking about this one guy who again he was using an Android phone and I people against that but when he was at an airport his phone got hacked right into the criminals ended up draining their he's checking account and make us to email in order to do some of this stuff so there's a great article on how Google Voice being a victim of this latest whole series of cyber crime

Unknown 4:49
yeah I don't know how you totally avoided Craig I don't think you know i mean really it's it's it's it seems that every every month every week there's a different scam a different way and

Unknown 4:58
I got got to tell you Jack. Sorry to interrupt you real quickly. But I'm excited about this one. We've been working for the last week on what you do about it because there are new hacks. The Marriott hack, the Quora hack over the last couple of weeks, but announced so I'm putting together something right now jack again free to anybody who asks And what it is is what to do about it. Because now thanks to the new tax law that President Trump signed into effect there are ways for you to freeze your credit unfreeze your credit at the three out of five Americans have never even checked their credit report so how do you do that? What does it mean and it's beautiful because it lets you stop the bad guys before they do anything to you so you can just send an email to me@CraigPeterson .com more than glad to send this to you when it's ready this is going to really help you out and help you sleep at night because once you've done these things you cannot have your money stolen out of your accounts that it's going to be really good when it comes to your credit your credit card to everything you track so just [email protected]

Unknown 6:09
and there's still think it's worth getting in. Is it a good preventative? Even if it's not complete? You know, some some of the security or the

Unknown 6:16
you know, you're the credit score folks, but like I know one was hacked, but what about Lifelock for example, that's that's name has been around. It's not too expensive. We stay alert you if there's some activity be on your credit card, you think that's worth having?

Unknown 6:28
Well, they do and they can be they do alert you but the problem with those Jack is it's after the fact the bad guys already did something with your identity. They already open new accounts with your identity, etc. So there are ways to stop them from even doing that. And now it's free for the first time ever. So that's why I'm so excited about

Unknown 6:49
Thanks Craig. You know, all right. Take care guys.

Unknown 6:55
By the way, you can also just text me anytime. 855-385-5553. 855-385-5553.

Have a great day. Bye bye.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Jack is on with Jack Heath discussing the stock market drop, the most recent hacks and how to stay safe online.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/10/2018

Stock Market Drop - Staying Safe Online

Craig Peterson 0:00

Good morning everybody. Craig Peterson here. This morning I was on with Mr. Jack Heath covering big chunks of northern New England. And we talked about how to keep your data safe online. whole new thing I've got a product coming out it's going to be free. Make sure you go to http://CraigPeterson.com/subscribe, and I'll send it to you soon as it's done. We're working on it. Some of this stuff just takes too long as far as I'm concerned. Anyhow, we also talked about the big guys why the stock markets falling. It was actually kind of a pretty good conversation this morning. And hopefully I'll have my voice back by the end of the day today. I've got a couple of meetings, going out meeting with some companies see if I can help them a little bit, too. So here we go with Mr. Heath

Unknown 0:49
is now on the NFL Western allies. Our Tech Talk guy Craig Peterson. A couple things caught my eye, Craig, and you can tell us what you have on your docket. But I know you're not the stock market guy. But markets have been going down. And some of the big tech high tech giants aren't doing so well. And performance. But it's an interesting time of year because so many people are shopping both online and at stores. But Good morning, Craig, what's catching your eye?

Unknown 1:12
Yeah, a couple of really good points right there. These massive giants are starting to kind of make you fall a little bit to their knees. We've got Apple and Facebook and of course, some others who are really facing some hard times. Right now Facebook seems to have kind of an internal rebellion going on where a number of their employees have gotten pretty upset with the way things are going over there with people's privacy and other things. We've got Apple now who has made some great deals if you want one of these new Apple iPhones like the XR now's the time to buy it, you can be getting a few hundred dollars off with the trading of an old phone is it it's really again, this cycle is that the business cycle, got to remember that back in the 70s of course idea on the King of the Hill, Microsoft kind of still is the king of a number of hills with Vollmer gone, they're improving, but it's a cycle and like everything else, although there are a lot of people find things this season these companies that are currently at the top of the heap Jack, they're just not going to stay there forever.

Unknown 2:25
Yeah, interesting. And a lot of you know ongoing concern about shopping aware protecting your online purpose purchases, some porch thieves It's a whole new industry when you know and you see people so many deliveries now package sits on the porch of someone's home or apartment, a condo for the day. And people are just literally driving around snatching gifts and boxes right off a porch.

Unknown 2:50
The Amazon has a new feature people might have noticed, if you are buying stuff online with Amazon, they now allow you to put a code in with your so what they'll do is if you have one of these little lock boxes on your porch, or maybe even a code to your front door. One time use code is the way to do this. By the way, people they will deliver your package but they'll open your door, put it right inside or open the little lock box, put it right inside. Because you're right. A lot of people are stealing these things. Be careful. You also have the ability with Amazon to say here's our launcher to put it so you can give them a code for the garage for instance, they'll put it inside your garage door or stick it in the shed. It's a problem people are spending a lot of money and they aren't getting stolen. And you know you talk about the online shopping I you know I do a lot of stuff with the FBI in there in regard program which I really advise business people to look into. If you're involved with security Look at him for guard.org but the FBI has been wanting asked about the more than $12 billion that has been stolen from businesses out there this time of year so watch your emails everybody if you're shopping online whether your home user whether your business they are trying to commit fraud in the online world to criminals are hacking into folders a big article in USA Today that I have up on my website talking about this one guy who again he was using an Android phone and I people against that but when he was at an airport his phone got hacked right into the criminals ended up draining their he's checking account and make us to email in order to do some of this stuff so there's a great article on how Google Voice being a victim of this latest whole series of cyber crime

Unknown 4:49
yeah I don't know how you totally avoided Craig I don't think you know i mean really it's it's it's it seems that every every month every week there's a different scam a different way and

Unknown 4:58
I got got to tell you Jack. Sorry to interrupt you real quickly. But I'm excited about this one. We've been working for the last week on what you do about it because there are new hacks. The Marriott hack, the Quora hack over the last couple of weeks, but announced so I'm putting together something right now jack again free to anybody who asks And what it is is what to do about it. Because now thanks to the new tax law that President Trump signed into effect there are ways for you to freeze your credit unfreeze your credit at the three out of five Americans have never even checked their credit report so how do you do that? What does it mean and it's beautiful because it lets you stop the bad guys before they do anything to you so you can just send an email to me@CraigPeterson .com more than glad to send this to you when it's ready this is going to really help you out and help you sleep at night because once you've done these things you cannot have your money stolen out of your accounts that it's going to be really good when it comes to your credit your credit card to everything you track so just [email protected]

Unknown 6:09
and there's still think it's worth getting in. Is it a good preventative? Even if it's not complete? You know, some some of the security or the

Unknown 6:16
you know, you're the credit score folks, but like I know one was hacked, but what about Lifelock for example, that's that's name has been around. It's not too expensive. We stay alert you if there's some activity be on your credit card, you think that's worth having?

Unknown 6:28
Well, they do and they can be they do alert you but the problem with those Jack is it's after the fact the bad guys already did something with your identity. They already open new accounts with your identity, etc. So there are ways to stop them from even doing that. And now it's free for the first time ever. So that's why I'm so excited about

Unknown 6:49
Thanks Craig. You know, all right. Take care guys.

Unknown 6:55
By the way, you can also just text me anytime. 855-385-5553. 855-385-5553.

Have a great day. Bye bye.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Want to add two years to your life?  Wear an Apple watch. Yes indeed researchers found that just that extra day and a half of physical activity a month increases your expected lifespan by about two years.

Marriott, Marriott, Marriott, Marriott. They are a hotelier, they've got restaurants, etc. And they have some entertainment complexes. So, that's the business they are in, they are not in the IT business and they are not in the security business. Marriott bought Starwood resorts wanted to move them off of this crazy PC system that they had and move them over to a mainframe system. Bad guys had been in their systems and able to access them since 2014.

Do you know how much it takes how much time and effort and money it takes to become a data protection officer? It's incredible. It's absolutely incredible. 90 minutes is what it takes to take the course to pass the exam to call yourself a GDPR compliant data protection officer, 90 minutes. Amazing

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/08/2018

Hackers Using New Email Attack

Craig Peterson: 0:00

Hi everybody. Craig Peterson here. Welcome to show number 984. Wow. We've been busy. And that's a weekly show. 994 By the way, we have been on the air for many, many years. And those people who've been listening on to podcasts you know I've been podcasting for narrow on 20 years of course before it was even called podcasting. But today we are doing both on the air in podcasting if you want to listen to the podcast just sign up go to http://CraigPeterson.com/iTunes. You can also while you are there, leave a comment hopefully a little five-star review. I've appreciated those people that have taken the time to leave their comments or send an email to [email protected] and let me know what they appreciate about the show. What are the things they got the most from and the most of just [email protected]. I really appreciate your feedback. And the show, as you might imagine, is a lot of work to put together. And you know, it is a labor of love. And I really hope I'm helping you out Well, today, of course, we are going to be covering some of the technology topics that are going to impact us the most. And typically, that means security stuff, doesn't it? So we're going to talk a little bit about 23andMe. And this ties into a bit of a theme this week. How much information do people have about you? What are they doing with it and should you worry about it because there's another one Delta Yeah, Delta Airlines in Atlanta they've got the US is first biometric terminal. We'll talk about that and see if that's something that maybe, maybe you want to avoid. We got a Marriott hack. Of course, we're going to talk a little bit about that this week as well. Because that's a very, very big deal. And in fact, I am going to this coming week make another free offer. We've been working on it this week, a special report not going to cost anybody a dime with some really cool free upgrades as well. I really want to get more information to you. So we'll be talking about that but all about how to keep your credit safe. What is a credit report mean? I saw a stat last week that really kind of surprised me. And that is that three out of five Americans have never gotten their free credit report or any free or paid right to look at three out of five. So we're gonna have a special report on that that's going to be coming out, we're gonna have a special report on how to absolutely protect your credit, don't send the money off to Lifelock or some of these other guys out there, you can do better in fact, than Lifelock is Lifelock is going to notice after the fact hopefully that someone has tried to open an account in your name, and then you have to deal with it. Or hopefully, they'll notice that someone just stole money from your checking account because of your debit card miss being misused. Hopefully, it's going to get all squared away. But it's going to take your time, your money, and it can be just a total disaster for you. So there is a way to make sure it doesn't happen in the first place. And we're guaranteed in this day and age that if we haven't been hacked, we are about to be hacked, right. Just think of all of the major hacks over the last couple of years. So I've got a solution we've been working on it we're putting it all together and we're going to offer to you our listeners anybody on my insider's email list, so make sure you are subscribed. We've worked hard on it this week. It's not quite done yet I had hoped it would be done before the show today so make sure you are signed up for my email you can go to http://CraigPeterson.com/subscribe and give me your name and email address. I don't harass you I don't sell my mailing list to anybody use it to get my weekly show notes out to you. And if we have these free special report to let you know or the free master classes or master courses that's what we use it for. It's for getting information out so http://CraigPeterson.com/subscribe if you've already done it. Hey, thanks to you. I really appreciate it. We are down below 4000 subscribers. I think right now because we've been cleaning up the list. So if you haven't been opening my emails or you haven't been clicking on them in the last six months we've deleted you from our list and you might have to re-sign up so again http://CraigPeterson.com/subscribe, I'm going to immediately small You know, my system is going to immediately send you an email to verify it was you have to click on that link. So it'll show up in your mailbox a minute to two minutes later, click on that link to confirm it. You and then you be on you'll be able to get these special reports that are free you're going to be able to get these master classes that at least information about them that are free and the master courses, as well as they, are released. And, and special alerts about some of the worst things that are happening out there. And by the way, if you are podcast listener, and you are not subscribed, you can get it at http://CraigPeterson.com/iTunes. But that's another great way to find out what's happening in advance of everybody else. Because Monday, Tuesdays, and Wednesdays I typically release a podcast and it's me on some of the major radio stations throughout the northeast and the interviews that I do I'm a guest on those shows and I will be talking in no-shows I always talk about the latest and greatest and technology sometimes on other stations but usually it's it's iHeart. It's the old Clear Channel media guys thanks to them as well.

Craig Peterson 6:07
So in addition to the bad news this week there's a very cool story and that's how I want to start out today you'll see it up on my website at http://CraigPeterson.com and this is out of the UK but it's talking about some new research. Did you know that having an Apple Watch could add two years to your life? Yes indeed researchers that wanted an Apple Watch for Christmas

Craig Peterson 6:34
kidding although hey maybe this is a good, good excuse right? Researchers have found that and looking at 400,000 adults that those that had the Apple Watch or other fitness trackers and use them to track their fitness saw active saw their activity levels increase by more than a third that's pretty much now if you add all of that up and you look at the stats here that people would trackers managed four and a half or almost five days really five days activity a month on average. So it's not like these are gym rats, right? These are just regular people you got the tracker it's in your Apple Watch remind you should go walk in right now. So it's five days if you have the tracker versus three days, three and a half days for people who don't have the devices now what's interesting is that just that extra day and a half of physical activity a month increases your expected lifespan by about two years. Isn't that amazing? Now some of the biggest changes we're seeing amongst people who were overweight and the people who were the least active, to begin with and I think that kind of makes sense right that at least it does to me this was commissioned by health insurers over in the UK how second Matt Hancock the National Health Service over there was the forefront in the digital revolution in health so very good technology and a great excuse to start using one of these fitness trackers Of course just having it doesn't do anything you got to use the darn thing okay Marriott. Marriott, Marriott, Marriott, Marriott. Now I don't want to totally blame Marriott for this because Marriott is someone that found the problem, you know Marriott's been on an acquisition spree they have bought some amazing hotel chains. But as is often the case in business, we are involved with our day to day operations. Right, Marriott? It is a hotel business. Right, it's a hotelier, they've got restaurants, etc. And they have some entertainment complexes. So that's the business they are in, they are not in the IT business and they are not in the security business. At least that's the mentality. That's the mentality, I would say, of 99% of the businesses I talked to,

Craig Peterson 9:08
and I get it, Okay, I get it, I get it, I get it. You make widgets, right? Or you have clients that you're servicing. But in this day and age, you have to have competent it people and even more competent security people. Because if you don't have those people on your staff, you're going to be in trouble. And we see it again and again, you saw what happened with TJ access, the TJ Maxx stores where they were hacked. And they were hacked in a crazy big way. We had Home Depot, they were hacked, and in both cases, they should have known better and we can get into a lot of the details about it, Equifax, they should have known better Heck, they are in the technology business, right? They're keeping tabs on all of us and our credit scores. And that makes sense to you. Well, they bought this chain of hotels known as the Starwood. Right. Starwood something group. I can't remember what it stands for. But it's now called Marriott Starwood division and Marriott uses mainframes and I think that's a brilliant idea. By the way, you know, using PC's for most larger companies is just absolutely insane. It just doesn't make any sense. So Marriott bought Starwood resorts wanted to move them off of this crazy PC system that they had and move them over to a mainframe system. Now, don't get me wrong, right? There are places where PCs make sense. In those cases, you might want to look at Apple or even a Linux terminal desktop depending on what you're doing. It may or may not work for you or even better in this day and age iPads with something really powerful and strong behind them but anyways, Marriott is using these mainframe computers so they had to take the system that Starwood was using and port all of the data over to the mainframe and they've been working on it they got it completed this summer sometime well as they were going through this their security people over at Marriott. Notice something now something weird, and

Craig Peterson 11:22
I gotta stop for a second and say something weird is usually a sign people don't put on blinders. Don't ignore it. You know, I complain about my kids just walking past the trash cans, right? Trash days. Wednesday, what day is it today, kids Monday, Tuesday,
what are those down by the street because every day I see the trash cans out there. And now you're trying to remember to remind the kids to take care of it. And most of the time I grabbed the trash cans or my wife grabs a trash can, right and brings them up to the house because they're just not noticing that detail. And it's a pretty prominent detail. We have some big trash cans, right? I got a big family. There's a lot of trash every week. And they still manage not to notice it. And we see this in a business where something weird has been going on. It's been going on for a while. But you know, we were still able to do our business. But in many cases, it's an email thing. But you know, can you come and have a look at this. Our emails just acting weird, it's slow. We're not sure what's happening are some of our customers or vendors and been getting emails from us that we didn't think we sent and what's going on.

Craig Peterson 12:41
So we see this all the time, we brought the FBI in on one of these investigations that started just with weirdness in the email that was ignored for a long, long time. And it ended up we found Chinese active Chinese backdoors right into their systems. Okay, so so don't ignore weird stuff. Well, in this case, Marriott security guys noticed some weird stuff because the computer systems that were running brands you've heard of, and you may have stayed in like W. Hotels, Sheraton, who has a state in the Sheraton limit ran and Four Points by Sheraton and some others, right. Just think of all of the Starwood properties.

Craig Peterson 13:26
I stayed in the Le Meridien when I was in Paris. Last and I've stayed in Sheraton's and I stayed in a W, we had a conference in the W. And I've stayed up for points. I stayed at all of those hotels. So they're going through the data, the going through the databases, the monitoring the systems as they're integrated into their new mainframe, and they notice some weirdness. Well, it turns out that what has been happening, just like with this client that we picked up just a few months back looks like what's been happening is bad guys

Craig Peterson 14:01
had been in their systems and able to access them since 2014. So let me see it is right now as we are talking, in fact, it's almost 2019. And that means they went in for what almost give or take for years. And apparently, they discovered that this unauthorized party had copied and encrypted information on their systems. Now, encrypting your information that kind of sounds like it might have been one of these ransomware type things, hard to say. Where they tried to hold stuff ransom, did the Starwood group not even notice the rent some emails, I'm going to come in? I, I don't know. Right? I'm kind of only half joking here. But the databases that apparently were stolen they were copied contained records of 500 million customers think about that number. What would happen with you and your business how many customer records Do you have what would happen if your competitors got a hold of that data right what would happen if it was personally identifiable information like it was here with Starwood apparently about 327 million guests records included some combination of name, address, phone number, email address, passport number account information date of birth, sex, arrival and departure information so that's everything a scam artist needs to scam someone and we're going to talk about that here that's going to be next got another article we'll get to about how those scams are perpetrated right now but wow.

Craig Peterson 15:57
Now some records also occluded according to Marriott included encrypted payment card information, but could not rule out the possibility that the encryption keys had also been stolen. So not entirely Marriott's fault it was Starwood, they weren't in like it or security business know they are in the hotel, your business right now everybody's in the high tea business nowadays, pounding the table here drives me crazy. You've got to have competent security people in that does not mean the guy that spent an hour and a half or maybe six weeks in some security course they don't know enough, they can't do enough. You have to have experience. We're working with a client right now over in Europe. And this client has to comply with the new GDPR regulations in Europe as you do too. Bye. Either way, if you have a single customer in Europe, okay. And he hired a data protection officer. Well,

Craig Peterson 17:08
Do you know how much it takes how much time and effort and money it takes to become a data protection officer? It's incredible. It's absolutely incredible. 90 minutes is what it takes to take the course to pass the exam to call yourself a GDPR compliant data protection officer, 90 minutes. So we did a cyber health assessment
of their network. They have like 40 computers on their network, their smaller business and we found incredible it was it's over 100 million euros worth of liability. So, we gave this new data protection officer the report and we said hey, listen, you know, we talked to them first, and we sent them the report after Hey, listen, there's a lot of data in here. We're more than glad to go through it with you, review it, help you understand it, whatever we need to do to help you out because there's some serious deficiencies here and Okay, great. Yeah, we'll do so we

Craig Peterson 18:09
he sends back a message a few days later because we had detail in there every computer every problem on that computer, the fact that there was no anti-virus, etc. So, he sends a thing back saying, well, Windows Defender was on these computers. Yeah, okay. But Windows Defender is not considered to be a third-party antivirus and does not meet any of the regulations.

Craig Peterson 18:33
If you're regulated industry at all. If you take credit cards, Windows Defender is not enough according to the laws in the contract, you will have signed and you should read that detailed contract. If you collect credit cards as to what that means, okay, pay attention to the details.

Craig Peterson 18:55
And then he says, well, it has McAfee's Malwarebytes on this one machine. Well, Malwarebytes has nothing to do with McAfee Malwarebytes, by the way, is great software, okay, don't get me wrong, we use it. But it's just one piece, you have to have this onion. So I'm sorry, I'm just kind of going crazy here. But Starwood thought they were not in the security or it business obviously every business today that I can think of except maybe Mr. Slate from the Corey on the Flintstones every business I can think of today has it and depends on it and depends on security So please, please, please, please, please please vet your people and we have a special report in the works again another free special report that talks about how to vet these it people, how to vet some of the people that might be trying to handle your security so that you know and if you're on my insiders list I will definitely let you know when that's how that's going to be free as well again http://CraigPeterson.com/subscribe so that you have all of that information. Okay. Alright, so I'm going to go right now into attackers here. What's going on? Why does the email address matter?

Craig Peterson 20:26
I was talking this week with a couple of people about this real problem that we're having right now. No, you know, if you've listened for a while that the FBI says the business email compromise has cost $12 billion in losses. That's pretty dramatic. And that's over the course of some years, a few years, but $12 billion is huge. So, I thought we'd take a couple of minutes right now since we were just talking about the Marriott hack and if you wanted to know more about that by the check out my podcast I talked a lot about it earlier this week, which is just Craig Peterson comm slash iTunes. And there's quite a bit of background information that I gave this week. I'm not going to get into that anymore right now. But here's the problem, right?

Craig Peterson 21:17
Why would you care? Why do you care? The core was attacked this last week, they disclose that they lost personal information and Cora's a website. A lot of us use Quora, I love poking around on Quora, why would you care, that Starwood got hacked? Right? That new Marriott division 327 million people if they don't have your credit card? What does that mean? If they do have your credit card? What does that mean? You know that having your debit card in the hands of the bad guys is very painful because any money they steal by using that debit card number comes where does it come from? You checking account, right? So we already know that. How about your credit card? If you notice that there were fraudulent charges on your credit card, you can report it and no big deal, right? At worst, they're going to issue your new credit card and you're going to have to change your credit card number with a few different people that you have on monthly payments, right? Not a terribly big deal. How about your email address, right? That's even that's even less worthwhile. I can see Craig I can see that having my bank account number stolen is bad debit card numbers. But you know, come on, what am I going to do get some more spam? Yes, you're going to get some more spam but it's a specific type of spam that were really worried about here I mean, really worried and I got a great article up on my website Craig Peterson, calm from security week that I think you might know, want to have a look at. But here's the bottom line. If they get your email address, things become simple for them to try and scam you. And remember, I just said how much was that number from the FBI. $12 billion.

Craig Peterson 23:19
That's huge losses, you know, no matter how well I guess if you're the government, you might not notice 12 billion. But $12 billion is a lot of money to anybody.

Craig Peterson 23:32
What they're doing is the attackers will use social engineering now, because they have your address to pose as a colleague or business partner. So they'll run your email address through some databases, figure out what the business is maybe a couple of other people in the business that they can reach out to, if you're a home user, they'll try a completely different tactic. But they are going to try and trick you and they're going to try and trick you into doing something you shouldn't do. Now, that might be as simple as just clicking on a link. And we know that's been effective for a lot of years. But these guys are getting better and better, the emails can be quite convincing. The attackers now are making a significant effort to identify an appropriate victim register a fake domain. So at first glance, the email appears to belong to a colleague or a supplier. I have personally seen intelligent educated people who have fallen for this and its really, really big account takeover here. Now attackers are using information and they are going after you they have special malware now t loggers that they'll put onto your computer and hijack corporate email account. It can be as simple and I've I've pointed out this video before had it up on my website. It might still it's probably still there. I've got stuff for the last 15 years up there, but of how a hacker from Eastern Europe used social engineering. And what she did was pretend to be somebody's wife. Because she was able to figure out the guy was out of town, and he was on vacation. And that's not hard to figure out. How many of us are posting on Facebook or on Twitter, or announcing here on the radio that we are leaving town? Bad, bad idea. So they now get access to your email box. Where does the change my password link? Go? Think about it. Where's the last time you changed your password? Hopefully recently, where does that link go? Where does it take people? Well, that link goes to your email box. If they now have access to your email box which is relatively easy for the bad guys to do. They now can reset your bank account or other information Okay, that this goes on and on. I should produce some training on all of these individual things. But anyways, keep an eye out. I've got some special reports coming out. Make sure you have subscribed http://CraigPeterson.com/subscribe, get my insiders list. I don't harass you. I'm not some internet marketer. That's just selling stuff all of the time. I really am trying to help. And I was able to talk to quite a few new clients this week. And including a construction firm right here in the state and help them out and gave me some ideas of some other master classes we should have about how to do backups, how to have data protected at rest, how to do encrypted vault, all stuff that's very complicated for the average person, the small business, the Soho, right small office, Home Office, so we got some great ideas from that and I'll be doing those we're gonna be doing master classes on all of those guaranteed not this year. Okay, we don't have much time left. I have a lot of stuff to do before the end of the year. If you have ideas about things you think I should either talk about on the show or maybe I should be posting online or some master classes that you think would be useful to you and your business or your home. Email [email protected]. [email protected] or you can text me anytime 855-385-5553 that goes straight to me. And I usually can get back to you pretty quickly on weekends. Wait till Monday or so 855-385-5553 with any questions or comments that you have right there from your cell phone. Obviously normal data and texting rates will apply. Have a great week and we'll be back next week with more from Craig Peterson. Bye-bye.

---

Related articles:

Apple Watch Could Add Two Years To Your Life, Research Suggests

Criminals Hacked Into My Phone, Email And Drained My Checking Account. How You Can Avoid Being A Victim.

Attackers Are Landing Email Inboxes Without The Need To Phish

Dna-Testing Company 23andme Has Signed A $300 Million Deal With A Drug Giant. Here’s How To Delete Your Data If That Freaks You Out.

Delta Says Usa’s ‘First Biometric Terminal’ Is Ready To Go At Atlanta Airport

Mastercard, Microsoft Team On Digital Id

Handgun Buyers Would Have To Give Cops Social Media Passwords Under New York Proposal

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Want to add two years to your life?  Wear an Apple watch. Yes indeed researchers found that just that extra day and a half of physical activity a month increases your expected lifespan by about two years.

Marriott, Marriott, Marriott, Marriott. They are a hotelier, they've got restaurants, etc. And they have some entertainment complexes. So, that's the business they are in, they are not in the IT business and they are not in the security business. Marriott bought Starwood resorts wanted to move them off of this crazy PC system that they had and move them over to a mainframe system. Bad guys had been in their systems and able to access them since 2014.

Do you know how much it takes how much time and effort and money it takes to become a data protection officer? It's incredible. It's absolutely incredible. 90 minutes is what it takes to take the course to pass the exam to call yourself a GDPR compliant data protection officer, 90 minutes. Amazing

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 12/08/2018

Hackers Using New Email Attack

Craig Peterson: 0:00

Hi everybody. Craig Peterson here. Welcome to show number 984. Wow. We've been busy. And that's a weekly show. 994 By the way, we have been on the air for many, many years. And those people who've been listening on to podcasts you know I've been podcasting for narrow on 20 years of course before it was even called podcasting. But today we are doing both on the air in podcasting if you want to listen to the podcast just sign up go to http://CraigPeterson.com/iTunes. You can also while you are there, leave a comment hopefully a little five-star review. I've appreciated those people that have taken the time to leave their comments or send an email to [email protected] and let me know what they appreciate about the show. What are the things they got the most from and the most of just [email protected]. I really appreciate your feedback. And the show, as you might imagine, is a lot of work to put together. And you know, it is a labor of love. And I really hope I'm helping you out Well, today, of course, we are going to be covering some of the technology topics that are going to impact us the most. And typically, that means security stuff, doesn't it? So we're going to talk a little bit about 23andMe. And this ties into a bit of a theme this week. How much information do people have about you? What are they doing with it and should you worry about it because there's another one Delta Yeah, Delta Airlines in Atlanta they've got the US is first biometric terminal. We'll talk about that and see if that's something that maybe, maybe you want to avoid. We got a Marriott hack. Of course, we're going to talk a little bit about that this week as well. Because that's a very, very big deal. And in fact, I am going to this coming week make another free offer. We've been working on it this week, a special report not going to cost anybody a dime with some really cool free upgrades as well. I really want to get more information to you. So we'll be talking about that but all about how to keep your credit safe. What is a credit report mean? I saw a stat last week that really kind of surprised me. And that is that three out of five Americans have never gotten their free credit report or any free or paid right to look at three out of five. So we're gonna have a special report on that that's going to be coming out, we're gonna have a special report on how to absolutely protect your credit, don't send the money off to Lifelock or some of these other guys out there, you can do better in fact, than Lifelock is Lifelock is going to notice after the fact hopefully that someone has tried to open an account in your name, and then you have to deal with it. Or hopefully, they'll notice that someone just stole money from your checking account because of your debit card miss being misused. Hopefully, it's going to get all squared away. But it's going to take your time, your money, and it can be just a total disaster for you. So there is a way to make sure it doesn't happen in the first place. And we're guaranteed in this day and age that if we haven't been hacked, we are about to be hacked, right. Just think of all of the major hacks over the last couple of years. So I've got a solution we've been working on it we're putting it all together and we're going to offer to you our listeners anybody on my insider's email list, so make sure you are subscribed. We've worked hard on it this week. It's not quite done yet I had hoped it would be done before the show today so make sure you are signed up for my email you can go to http://CraigPeterson.com/subscribe and give me your name and email address. I don't harass you I don't sell my mailing list to anybody use it to get my weekly show notes out to you. And if we have these free special report to let you know or the free master classes or master courses that's what we use it for. It's for getting information out so http://CraigPeterson.com/subscribe if you've already done it. Hey, thanks to you. I really appreciate it. We are down below 4000 subscribers. I think right now because we've been cleaning up the list. So if you haven't been opening my emails or you haven't been clicking on them in the last six months we've deleted you from our list and you might have to re-sign up so again http://CraigPeterson.com/subscribe, I'm going to immediately small You know, my system is going to immediately send you an email to verify it was you have to click on that link. So it'll show up in your mailbox a minute to two minutes later, click on that link to confirm it. You and then you be on you'll be able to get these special reports that are free you're going to be able to get these master classes that at least information about them that are free and the master courses, as well as they, are released. And, and special alerts about some of the worst things that are happening out there. And by the way, if you are podcast listener, and you are not subscribed, you can get it at http://CraigPeterson.com/iTunes. But that's another great way to find out what's happening in advance of everybody else. Because Monday, Tuesdays, and Wednesdays I typically release a podcast and it's me on some of the major radio stations throughout the northeast and the interviews that I do I'm a guest on those shows and I will be talking in no-shows I always talk about the latest and greatest and technology sometimes on other stations but usually it's it's iHeart. It's the old Clear Channel media guys thanks to them as well.

Craig Peterson 6:07
So in addition to the bad news this week there's a very cool story and that's how I want to start out today you'll see it up on my website at http://CraigPeterson.com and this is out of the UK but it's talking about some new research. Did you know that having an Apple Watch could add two years to your life? Yes indeed researchers that wanted an Apple Watch for Christmas

Craig Peterson 6:34
kidding although hey maybe this is a good, good excuse right? Researchers have found that and looking at 400,000 adults that those that had the Apple Watch or other fitness trackers and use them to track their fitness saw active saw their activity levels increase by more than a third that's pretty much now if you add all of that up and you look at the stats here that people would trackers managed four and a half or almost five days really five days activity a month on average. So it's not like these are gym rats, right? These are just regular people you got the tracker it's in your Apple Watch remind you should go walk in right now. So it's five days if you have the tracker versus three days, three and a half days for people who don't have the devices now what's interesting is that just that extra day and a half of physical activity a month increases your expected lifespan by about two years. Isn't that amazing? Now some of the biggest changes we're seeing amongst people who were overweight and the people who were the least active, to begin with and I think that kind of makes sense right that at least it does to me this was commissioned by health insurers over in the UK how second Matt Hancock the National Health Service over there was the forefront in the digital revolution in health so very good technology and a great excuse to start using one of these fitness trackers Of course just having it doesn't do anything you got to use the darn thing okay Marriott. Marriott, Marriott, Marriott, Marriott. Now I don't want to totally blame Marriott for this because Marriott is someone that found the problem, you know Marriott's been on an acquisition spree they have bought some amazing hotel chains. But as is often the case in business, we are involved with our day to day operations. Right, Marriott? It is a hotel business. Right, it's a hotelier, they've got restaurants, etc. And they have some entertainment complexes. So that's the business they are in, they are not in the IT business and they are not in the security business. At least that's the mentality. That's the mentality, I would say, of 99% of the businesses I talked to,

Craig Peterson 9:08
and I get it, Okay, I get it, I get it, I get it. You make widgets, right? Or you have clients that you're servicing. But in this day and age, you have to have competent it people and even more competent security people. Because if you don't have those people on your staff, you're going to be in trouble. And we see it again and again, you saw what happened with TJ access, the TJ Maxx stores where they were hacked. And they were hacked in a crazy big way. We had Home Depot, they were hacked, and in both cases, they should have known better and we can get into a lot of the details about it, Equifax, they should have known better Heck, they are in the technology business, right? They're keeping tabs on all of us and our credit scores. And that makes sense to you. Well, they bought this chain of hotels known as the Starwood. Right. Starwood something group. I can't remember what it stands for. But it's now called Marriott Starwood division and Marriott uses mainframes and I think that's a brilliant idea. By the way, you know, using PC's for most larger companies is just absolutely insane. It just doesn't make any sense. So Marriott bought Starwood resorts wanted to move them off of this crazy PC system that they had and move them over to a mainframe system. Now, don't get me wrong, right? There are places where PCs make sense. In those cases, you might want to look at Apple or even a Linux terminal desktop depending on what you're doing. It may or may not work for you or even better in this day and age iPads with something really powerful and strong behind them but anyways, Marriott is using these mainframe computers so they had to take the system that Starwood was using and port all of the data over to the mainframe and they've been working on it they got it completed this summer sometime well as they were going through this their security people over at Marriott. Notice something now something weird, and

Craig Peterson 11:22
I gotta stop for a second and say something weird is usually a sign people don't put on blinders. Don't ignore it. You know, I complain about my kids just walking past the trash cans, right? Trash days. Wednesday, what day is it today, kids Monday, Tuesday,
what are those down by the street because every day I see the trash cans out there. And now you're trying to remember to remind the kids to take care of it. And most of the time I grabbed the trash cans or my wife grabs a trash can, right and brings them up to the house because they're just not noticing that detail. And it's a pretty prominent detail. We have some big trash cans, right? I got a big family. There's a lot of trash every week. And they still manage not to notice it. And we see this in a business where something weird has been going on. It's been going on for a while. But you know, we were still able to do our business. But in many cases, it's an email thing. But you know, can you come and have a look at this. Our emails just acting weird, it's slow. We're not sure what's happening are some of our customers or vendors and been getting emails from us that we didn't think we sent and what's going on.

Craig Peterson 12:41
So we see this all the time, we brought the FBI in on one of these investigations that started just with weirdness in the email that was ignored for a long, long time. And it ended up we found Chinese active Chinese backdoors right into their systems. Okay, so so don't ignore weird stuff. Well, in this case, Marriott security guys noticed some weird stuff because the computer systems that were running brands you've heard of, and you may have stayed in like W. Hotels, Sheraton, who has a state in the Sheraton limit ran and Four Points by Sheraton and some others, right. Just think of all of the Starwood properties.

Craig Peterson 13:26
I stayed in the Le Meridien when I was in Paris. Last and I've stayed in Sheraton's and I stayed in a W, we had a conference in the W. And I've stayed up for points. I stayed at all of those hotels. So they're going through the data, the going through the databases, the monitoring the systems as they're integrated into their new mainframe, and they notice some weirdness. Well, it turns out that what has been happening, just like with this client that we picked up just a few months back looks like what's been happening is bad guys

Craig Peterson 14:01
had been in their systems and able to access them since 2014. So let me see it is right now as we are talking, in fact, it's almost 2019. And that means they went in for what almost give or take for years. And apparently, they discovered that this unauthorized party had copied and encrypted information on their systems. Now, encrypting your information that kind of sounds like it might have been one of these ransomware type things, hard to say. Where they tried to hold stuff ransom, did the Starwood group not even notice the rent some emails, I'm going to come in? I, I don't know. Right? I'm kind of only half joking here. But the databases that apparently were stolen they were copied contained records of 500 million customers think about that number. What would happen with you and your business how many customer records Do you have what would happen if your competitors got a hold of that data right what would happen if it was personally identifiable information like it was here with Starwood apparently about 327 million guests records included some combination of name, address, phone number, email address, passport number account information date of birth, sex, arrival and departure information so that's everything a scam artist needs to scam someone and we're going to talk about that here that's going to be next got another article we'll get to about how those scams are perpetrated right now but wow.

Craig Peterson 15:57
Now some records also occluded according to Marriott included encrypted payment card information, but could not rule out the possibility that the encryption keys had also been stolen. So not entirely Marriott's fault it was Starwood, they weren't in like it or security business know they are in the hotel, your business right now everybody's in the high tea business nowadays, pounding the table here drives me crazy. You've got to have competent security people in that does not mean the guy that spent an hour and a half or maybe six weeks in some security course they don't know enough, they can't do enough. You have to have experience. We're working with a client right now over in Europe. And this client has to comply with the new GDPR regulations in Europe as you do too. Bye. Either way, if you have a single customer in Europe, okay. And he hired a data protection officer. Well,

Craig Peterson 17:08
Do you know how much it takes how much time and effort and money it takes to become a data protection officer? It's incredible. It's absolutely incredible. 90 minutes is what it takes to take the course to pass the exam to call yourself a GDPR compliant data protection officer, 90 minutes. So we did a cyber health assessment
of their network. They have like 40 computers on their network, their smaller business and we found incredible it was it's over 100 million euros worth of liability. So, we gave this new data protection officer the report and we said hey, listen, you know, we talked to them first, and we sent them the report after Hey, listen, there's a lot of data in here. We're more than glad to go through it with you, review it, help you understand it, whatever we need to do to help you out because there's some serious deficiencies here and Okay, great. Yeah, we'll do so we

Craig Peterson 18:09
he sends back a message a few days later because we had detail in there every computer every problem on that computer, the fact that there was no anti-virus, etc. So, he sends a thing back saying, well, Windows Defender was on these computers. Yeah, okay. But Windows Defender is not considered to be a third-party antivirus and does not meet any of the regulations.

Craig Peterson 18:33
If you're regulated industry at all. If you take credit cards, Windows Defender is not enough according to the laws in the contract, you will have signed and you should read that detailed contract. If you collect credit cards as to what that means, okay, pay attention to the details.

Craig Peterson 18:55
And then he says, well, it has McAfee's Malwarebytes on this one machine. Well, Malwarebytes has nothing to do with McAfee Malwarebytes, by the way, is great software, okay, don't get me wrong, we use it. But it's just one piece, you have to have this onion. So I'm sorry, I'm just kind of going crazy here. But Starwood thought they were not in the security or it business obviously every business today that I can think of except maybe Mr. Slate from the Corey on the Flintstones every business I can think of today has it and depends on it and depends on security So please, please, please, please, please please vet your people and we have a special report in the works again another free special report that talks about how to vet these it people, how to vet some of the people that might be trying to handle your security so that you know and if you're on my insiders list I will definitely let you know when that's how that's going to be free as well again http://CraigPeterson.com/subscribe so that you have all of that information. Okay. Alright, so I'm going to go right now into attackers here. What's going on? Why does the email address matter?

Craig Peterson 20:26
I was talking this week with a couple of people about this real problem that we're having right now. No, you know, if you've listened for a while that the FBI says the business email compromise has cost $12 billion in losses. That's pretty dramatic. And that's over the course of some years, a few years, but $12 billion is huge. So, I thought we'd take a couple of minutes right now since we were just talking about the Marriott hack and if you wanted to know more about that by the check out my podcast I talked a lot about it earlier this week, which is just Craig Peterson comm slash iTunes. And there's quite a bit of background information that I gave this week. I'm not going to get into that anymore right now. But here's the problem, right?

Craig Peterson 21:17
Why would you care? Why do you care? The core was attacked this last week, they disclose that they lost personal information and Cora's a website. A lot of us use Quora, I love poking around on Quora, why would you care, that Starwood got hacked? Right? That new Marriott division 327 million people if they don't have your credit card? What does that mean? If they do have your credit card? What does that mean? You know that having your debit card in the hands of the bad guys is very painful because any money they steal by using that debit card number comes where does it come from? You checking account, right? So we already know that. How about your credit card? If you notice that there were fraudulent charges on your credit card, you can report it and no big deal, right? At worst, they're going to issue your new credit card and you're going to have to change your credit card number with a few different people that you have on monthly payments, right? Not a terribly big deal. How about your email address, right? That's even that's even less worthwhile. I can see Craig I can see that having my bank account number stolen is bad debit card numbers. But you know, come on, what am I going to do get some more spam? Yes, you're going to get some more spam but it's a specific type of spam that were really worried about here I mean, really worried and I got a great article up on my website Craig Peterson, calm from security week that I think you might know, want to have a look at. But here's the bottom line. If they get your email address, things become simple for them to try and scam you. And remember, I just said how much was that number from the FBI. $12 billion.

Craig Peterson 23:19
That's huge losses, you know, no matter how well I guess if you're the government, you might not notice 12 billion. But $12 billion is a lot of money to anybody.

Craig Peterson 23:32
What they're doing is the attackers will use social engineering now, because they have your address to pose as a colleague or business partner. So they'll run your email address through some databases, figure out what the business is maybe a couple of other people in the business that they can reach out to, if you're a home user, they'll try a completely different tactic. But they are going to try and trick you and they're going to try and trick you into doing something you shouldn't do. Now, that might be as simple as just clicking on a link. And we know that's been effective for a lot of years. But these guys are getting better and better, the emails can be quite convincing. The attackers now are making a significant effort to identify an appropriate victim register a fake domain. So at first glance, the email appears to belong to a colleague or a supplier. I have personally seen intelligent educated people who have fallen for this and its really, really big account takeover here. Now attackers are using information and they are going after you they have special malware now t loggers that they'll put onto your computer and hijack corporate email account. It can be as simple and I've I've pointed out this video before had it up on my website. It might still it's probably still there. I've got stuff for the last 15 years up there, but of how a hacker from Eastern Europe used social engineering. And what she did was pretend to be somebody's wife. Because she was able to figure out the guy was out of town, and he was on vacation. And that's not hard to figure out. How many of us are posting on Facebook or on Twitter, or announcing here on the radio that we are leaving town? Bad, bad idea. So they now get access to your email box. Where does the change my password link? Go? Think about it. Where's the last time you changed your password? Hopefully recently, where does that link go? Where does it take people? Well, that link goes to your email box. If they now have access to your email box which is relatively easy for the bad guys to do. They now can reset your bank account or other information Okay, that this goes on and on. I should produce some training on all of these individual things. But anyways, keep an eye out. I've got some special reports coming out. Make sure you have subscribed http://CraigPeterson.com/subscribe, get my insiders list. I don't harass you. I'm not some internet marketer. That's just selling stuff all of the time. I really am trying to help. And I was able to talk to quite a few new clients this week. And including a construction firm right here in the state and help them out and gave me some ideas of some other master classes we should have about how to do backups, how to have data protected at rest, how to do encrypted vault, all stuff that's very complicated for the average person, the small business, the Soho, right small office, Home Office, so we got some great ideas from that and I'll be doing those we're gonna be doing master classes on all of those guaranteed not this year. Okay, we don't have much time left. I have a lot of stuff to do before the end of the year. If you have ideas about things you think I should either talk about on the show or maybe I should be posting online or some master classes that you think would be useful to you and your business or your home. Email [email protected]. [email protected] or you can text me anytime 855-385-5553 that goes straight to me. And I usually can get back to you pretty quickly on weekends. Wait till Monday or so 855-385-5553 with any questions or comments that you have right there from your cell phone. Obviously normal data and texting rates will apply. Have a great week and we'll be back next week with more from Craig Peterson. Bye-bye.

---

Related articles:

Apple Watch Could Add Two Years To Your Life, Research Suggests

Criminals Hacked Into My Phone, Email And Drained My Checking Account. How You Can Avoid Being A Victim.

Attackers Are Landing Email Inboxes Without The Need To Phish

Dna-Testing Company 23andme Has Signed A $300 Million Deal With A Drug Giant. Here’s How To Delete Your Data If That Freaks You Out.

Delta Says Usa’s ‘First Biometric Terminal’ Is Ready To Go At Atlanta Airport

Mastercard, Microsoft Team On Digital Id

Handgun Buyers Would Have To Give Cops Social Media Passwords Under New York Proposal

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553