Vigilance is Key in Avoiding Consumer Fraud

As the internet and computer-based technologies become more and more advanced, the strategies used by criminals evolve to keep up. Where once a criminal had to actively confront their victims to steal money or personal property, many criminals now use the internet to enable them to steal money and personal information from the comfort of their own home. However, it's a common misconception that cybercriminals are highly-skilled hackers who can crack your bank's encryption and empty your account. It's much more common for a criminal to attack through misleading or illegitimate emails that trick the target into giving up personal information.

Consumer fraud is commonly defined as "any instance in which an individual suffers a financial or personal loss because of unfair, deceptive, false, illegitimate or misleading business practices." In recent years, consumer fraud has tended to be focused on identity theft, Social Security fraud, and credit card fraud. Additionally, the targets of such scams tend to be individuals with little financial and life experience, like college students, or those who are not very technically-savvy, like the elderly. However, all demographics of the population have been successfully targeted by fraudsters.

The Federal Trade Commission (FTC) is the main agency that works to protect Americans from being defrauded by these criminals, and in recent years, the Consumer Financial Protection Bureau (CFPB) has also joined the fight, especially regarding mortgage scams, banking/wire fraud, and student loan scams. Their goal is to educate the more vulnerable consumers, to try to prevent the fraud from happening to begin with, but they also step in to help get things back on track for people who have unfortunately been targeted successfully.

There are several common methods of consumer fraud that you should learn to quickly recognize so that you can more easily avoid being defrauded in the future. One strategy is referred to as phishing. Basically, the cybercriminal sends you an email that appears to come from your bank or credit card company. The email will say something about your account being compromised or terms of service being updated, then will provide a link that seems to take you to the website where you can sign into your account. This webpage is actually a clever copy that just looks like the real webpage, so when you input your username and password, the cybercriminal records that information for later uses.

In other situations, the criminal gets ahold of your Social Security number (often through phishing attacks, but they sometimes use other methods), and they open up credit cards using your identity. Millions of Americans every year experience this kind of identity theft, and for the inexperienced or elderly, who don't know enough to keep track online, this attack can leave their credit score trashed for many years to come. Targets of identity theft often don't even find out that it has happened until much later, at which point their banks or credit card companies make them jump through all kinds of hoops to try to clear things up. One thing to note: no matter how careful you are with your cyber security and keeping your personal information private, you could be the target of a cyber attack. Being vigilant and suspicious in your online financial life can save you months of stress and frustration down the road.

***************************************************************************************************
Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

**************************************************************************************************

Tech Companies Aim to Get Rid of Alphanumeric Passwords in the Near Future

As technology continuously becomes more advanced, and new innovations incorporate such technology, devices require more in-depth security measures. With the massive influx of "smart" devices, which collect a ton of personal information from their users, people find themselves forced to come up with new passwords all the time. Companies suggest that users choose different passwords for all of their different accounts, but an average user has dozens of different accounts, which makes having different passwords pretty infeasible. According to Hayley Tsukayama's L.A. Times article, that problem may be well on its way to being solved.

Several companies, but especially Microsoft Inc., have been pushing to get rid of passwords once and for all. While they do support the careful protection of online accounts from being targeted by cyber-criminals, research has found that passwords don't accomplish that goal well enough. Many people use the same password or some similar variation of it for all of their accounts because they simply can't remember dozens of different passwords. There is an inherent difficulty in choosing passwords that most would rather avoid: a password must be complex enough that a criminal can't easily figure it out, but should be simple enough that the user will be able to remember it easily.

Apple, Google, and Microsoft have all been making a push in recent years to rely on alternatives to passwords, such as biometric scans or temporary codes sent to the user's mobile device. Those alternatives make the accounts more secure, as a fingerprint scan is harder to hack than an alphanumeric password. At the same time, they make the process much simpler for the user and don't force the user to have to remember and type in a password every time they want to log in. Already, Apple and other smartphone companies have integrated facial recognition and fingerprint scanning in the unlock feature of their phones: a feature that many users love.

The main issue with changing up the security protocols, says Tsukayama, is that people don't like to adjust to a new routine. Even though having to remember a password all the time is annoying, many users (especially older users) are wary about using fingerprint scanning and other biometric markers to log into their accounts. They worry about sharing that kind of very personal information with a company that they don't necessarily trust to keep the data safe (both from criminals and from the criminal justice system). Getting users to make the switch will likely require slow changes, over a long period of time, to educate users while letting them acclimate to the changes.

***************************************************************************************************
Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

**************************************************************************************************

Sheltered Harbor Program Uses "Buddy System" to Protect Financial Institutions from Cyber-Criminals

Increased prevalence of new technologies in pretty much every industry over the past few decades has led to improved quality and efficiency of service across the board. While technological improvements have, as a whole, provided more benefits than drawbacks in the modern day, one major concern has made its way to the forefront in recent years. With the technological advances has come cyber attacks, which put personal data and financial information at risk. Yalman Onaran's article in the L.A. Times discusses a method that financial institutions have been developing to protect trillions of dollars in funds from hackers.

From checking and savings accounts to retirement and pension funds, there are trillions of dollars being stored through various banks and brokers. Those assets tend to be insured, such as in the case of a bank robbery, the clients of the bank will get their money back. The difference between a physical robbery and theft via cyber attack is that hackers will often delete data from the targeted system, which can lead to great turmoil for a banking institution without sufficient backup data.

Many of the larger companies keep their data backed up on private secure servers, but that doesn't help much if the cyber attack shuts down their entire system. In a situation where the entire system is targeted and taken down, it can take days or even weeks for the company to get everything running properly again. The main issue with that, especially among banks, is that their customers need to access their accounts on a daily basis. The average person can't just wait uncertainly for days on end without access to the money in their checking account.

Financial institutions began to worry that such a hack at any banking entity, no matter how small, could cause significant ripples throughout the entire financial system. For example, if people hear that a bank was hacked (even if the bank is not theirs), and if they see that the customers of that bank can't access their money, they would be less likely to trust their own bank and could possibly go to withdraw their money, to prevent their funds from getting tied up if their bank was hacked. If enough people followed suit, it would become a wave that could crash the entire infrastructure, as banks don't actually have enough money in-house to cover most of their customers, since they lend out the majority of it to other customers.

A project called Sheltered Harbor is aiming to avoid such potential issues by teaming up financial institutions. By pairing them up, if one bank was hacked and had their system shut down for any length of time, the other bank would have a backup of their data and could assist their customers. The same would work in reverse. So, unless a sophisticated cybercriminal could predict and target the exact banking institutions that had been paired, Sheltered Harbor's system should be able to prevent an all-out meltdown of the financial system. That means that trillions of dollars in savings and retirement accounts will remain protected.

***************************************************************************************************
Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

**************************************************************************************************

Key Reinstallation Attacks Can Allow Criminals to Hack Your WPA-2 Wireless Communication

Technological advancement, which can be greatly beneficial in many ways, can also make it more difficult for you to protect your personal information. Years ago, before the advent of the internet, rates of identity theft were far lower than they are today. Identification documents and private data were not nearly as available before the era of the internet. However, now that hacking is so prevalent, we must do what we can to improve our cybersecurity and prevent hackers wherever possible. According to Samantha Masunaga's recent L.A. Times article, the latest vulnerability to address lies in WPA-2 protocol, the current industry standard for Wi-Fi protection.

WPA-2 is the fundamental protection built into most wireless communication available around the world. Until recently, it was considered the best way to protect your online information, but researchers in Belgium found a vulnerability in the WPA-2 protocol that can allow a hacker to use "key reinstallation attacks" to intercept wirelessly transmitted information, even over encrypted networks. The hacking technique, also known as "Krack," is able to target systems powered by operating systems including Windows, Apple, Android, and Linux. From computers to modems to Wi-Fi enabled refrigerators; anything on your network could potentially be hackable.

The researchers found that Kracking is most effective against computers running Linux and devices running the latest version of Android OS. The hack could be used to capture information in sent emails, credit card numbers, browsing data, and even photos and videos sent to contacts. The hacking technique, while powerful, may not be as great a cause for worry as might be expected. According to the analysts, the hacker would have to be highly skilled and in close proximity to the targeted device. Therefore, any hacker looking to use Krack would likely target large corporations, where they might find a better payout.

To protect yourself, you should download any patches released by manufacturers as soon as they are released. For Windows devices, leaving "automatic updates" selected will let your computer take care of the threat for you. Many Apple devices have already received fixes for the vulnerability and others will receive software updates within the next couple of weeks. Google is working on releasing patches for Android devices as quickly as possible. Until that's all wrapped up, you can protect yourself by sending encrypted emails, being careful with online transactions from certain devices, and adding passwords to shared files that contain sensitive information.

***************************************************************************************************
Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

**************************************************************************************************

Deter Hackers by Improving Online Security on Social Media Accounts

As time goes on and technology continuously improves, the ability to hack into the new technology improves with it. So, because hackers are getting smarter and finding ways to attack our internet-enabled devices, we too have to develop and work harder to prevent such attacks. Over the past few years, popular social media platforms like Facebook and Twitter have been targets of hacking and phishing schemes. According to Jessica Roy's article in the L.A. Times, one feature on your Twitter account could be making you more vulnerable to hackers.

Lately, there have been several situations in which Twitter accounts have had their security compromised. From celebrities like Justin Bieber to multi-million-dollar businesses like McDonald's, hackers are taking over. Sometimes they just want to "troll" and post something that they think is funny or that might get a reaction. Other times, the messages are designed to trick other people into clicking a link that will allow the hacker to break into other accounts. 

In at least one case, the cyber attacks were due to third-party tools and applications, such as "Twitter Counter." Years ago, when Twitter was still new, third-party applications like Twitter Counter allowed users to keep track of followers, find new followers, and post their Tweets on a schedule. Nowadays, few people use such tools, because Twitter has since updated their system to be able to offer many of the same abilities. However, even though most users stopped using Twitter Counter, many of them forgot to disconnect the tool from their account, leaving them vulnerable to a cyber attack. 

Because the third-party tool is more easily hacked than Twitter itself, criminals often look to use a program like Twitter Counter as a springboard to get into an account. Once they have hacked the app that has permission to access your account, they will have the ability to post from your account. In order to prevent similar issues on your account, make sure to check the options on your account (under "settings and privacy") and revoke access to any third-party applications that you don't use. To make your account even more secure, Twitter has some built-in security features. 

First, two-step authentication can be enabled on your account. While it seems more annoying to have to put in a password and a special code sent to your cell phone by text message or call, overall it can be worth it to avoid data thieves. Additionally, to make your account even more secure, you can choose a complicated password with a variety of letters, numbers, and symbols. Finally, make sure your password doesn't match that on one of your other accounts. If you use the same password for every platform, then if one account is compromised, they all will be. These quick and easy changes to your behavior online can help to protect you and make it much more difficult for hackers to make you their next target.

***************************************************************************************************
Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

**************************************************************************************************

Banks to Incorporate Biometric Scanning to Help Prevent Hacking on Mobile Platforms

Due to hackers and other cyber criminals, online security has become a major issue around the world. In an attempt to protect their users' information, various websites have enacted different countermeasures to increase security and prevent hacking, but criminals seem to be evolving with technology. Furthermore, many of the extra safety measures, while they do a good job of protecting users, are often viewed as too confusing or time-consuming. James Koren, in his L.A. Times article, describes Wells Fargo's newest security measures: eye scanning and facial/voice recognition.

Banks and credit card companies tend to be the main targets of hackers and scammers looking to steal money and/or identification information. With a relatively small amount of information about you, a cyber criminal can apply for credit cards, open up bank accounts, and rack up thousands of dollars in debt under your name before you are any the wiser. Banks like Bank of America, JP Morgan Chase, and Wells Fargo are constantly looking for better ways to protect their customers without causing more of a hassle. What they have concluded is that the best method, at least for the time being, is the use of biometric markers, which, with current technology, are nearly impossible to forge.

The average consumer wants to be well protected, yet doesn't want to have to put in a lot of effort in order to obtain that protection. For example, Google, among other websites, has a feature called 2-Step Verification. When you make an account with Google, you have the option to save a phone number to your account. Then, every time you try to log in to your account on a computer that you have not saved, Google requires that you input your username, password, and a six digit code that is sent in a text message to the provided phone number. While this system essentially prevents hackers from getting into your account via brute force attacks, it can also be pretty annoying for users who have to log on to multiple computers/devices in any given day.

Besides lengthy, multiple-step encryption, there is also the simple issue of having to remember several different passwords for different websites, each with different formatting requirements. Each website doesn't want you to use the same password on another site, in case one of the websites gets hacked, but how is the average user supposed to remember upward of 5 passwords, and recall which one goes to which website? Biometrics seems to be the best of both worlds for both time-conscious and safety-conscious customers. Currently, fingerprint-scanning is huge in the marketplace, as new phones by Apple and Samsung are coming with built-in fingerprint scanning capabilities. Some banks are already offering fingerprint-based mobile access to non-business customers. However, for commercial customers, who have much larger accounts, and therefore much more to lose to cyber criminals, the banks want to use additional biometric markers to help ensure the security.

Wells Fargo's new service will use a phone's front-facing camera to look at the pattern of blood vessels on a user's retina. This pattern of blood vessels is just as unique as an individual's fingerprint and, therefore, provides just as much security.  Additionally, users could log in to their account using facial/voice recognition. A user holds their phone so that the front-facing camera can see them, and reads a series of numbers that appear on the screen. A combination of recorded voice data and facial structure data will determine if the user is who they claim to be. In all, these new features should provide a much easier and safer experience for all users, especially business customers who need better safety features. As of now, technology has developed to the point where biometric scanning is doable, but not yet hackable. In the future, this may change, but for the moment, biometrics is the safest course.

***************************************************************************************************
Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

***************************************************************************************************

Hackers Gain Access To Anthem Database

2/6/15 - Over the past year, several major retailers, including Target, Home Depot, and Michael's have been victim to the cyber-attacks of hackers. The most recent target on a lengthy list of such data breaches was Anthem Blue Cross, a major health insurance provider. Chad Terhune discusses the consequences of this hack in his article in the Los Angeles Times.

While Anthem states that hackers did not gain access to credit card information and health records, they were able to access much more. From name to date of birth to Social Security number, it appears that these hackers now know most of the personal information belonging to up to 80 million individuals who have health insurance through Blue Cross.

The sheer amount of personal information gathered by the hackers is enough to be quite certain that identity theft is a likely outcome. The personal information could be used by the hackers or others to open new lines of credit, or possibly even to access and empty existing accounts. Anthem warns any who have had coverage in the past and any who are currently covered by Blue Cross to keep a watchful eye on their financial accounts, in case identity theft is the main goal of these hackers.

One of the more upsetting parts of this situation for many is the fact that the stolen information wasn't even encrypted. It's bad enough that the databases got broken into, but a lack of encryption on the stored information means that cyber-criminals have easy access to the data within those databases. In fact, Anthem was even forced to pay a fine of $1.7 million in connection to allegations by the federal government that a weakness in their security left clients' personal information open to attack. Why hasn't Anthem learned its lesson?

Anthem, along with many other companies, need to develop better safeguards and protection mechanisms to make sure that only authorized parties are able to access personal information. For a company as large as Anthem to have left data unprotected multiple times in less than two years is just irresponsible. Sure, there are hackers that can make their way past any defenses, but better protections will at least slow them down, maybe even enough to stop some of them altogether.

This is a crucial time for Anthem, due to the thousands of people trying to enroll in coverage under the Affordable Care Act. They will have to be very careful dealing with this issue, in order to convince their clients not to look elsewhere for a health insurance provider. While Anthem has dealt with the attack through the proper channels, by contacting the FBI immediately, most people would still be more comfortable trusting the large company with their information if Anthem underwent a massive overhaul of their security systems. Such a project could prevent future breaches and make all involved parties much happier.

***************************************************************************************************

Find out more about us at www.sepulvedaescrow.net. Any Questions? Contact our Escrow Expert! Sepulveda Escrow Corporation (818) 838-1831. Follow our company on Facebook, Twitter, LinkedIn, and Google+.

***************************************************************************************************