The Web Corner – The “Send me Bitcoin” Scam Continues

We had intended to continue weekly with our web developer checklist. However, this week we’re presenting this post because so many people are receiving these bogus scam messages trying to trick them into paying an extortion.

This scam we mentioned quite a while ago. It has continued to pick up steam – plowing its way through every part of the Internet. It IS a SCAM. Do NOT pay it. We’ve had numerous people contact us that they are receiving such messages.

Here is is below in English and Chinese:

ENGLISH

Hello there!

You may have noticed that I sent an email from your account.
This means I have full access to your device.

I have been watching it for a few months.
The truth is that you are infected with malware through an adult website you have visited.

If you are not familiar with this, I will explain.
I created high quality spyware. It allows me to gain full access and control over your device.
This means I can see everything on the screen, turn on the camera and microphone, but you don’t know.

I can also access all your contacts and all communications.

Why is your antivirus software not detecting malware?
Answer: My malware uses the driver, I update the signature every 4 hours so that your anti-virus software is silent.

I made a video showing how you can satisfy yourself in the left half of the screen, and in the right half you will see the video you watched.
One Key! All of your contacts in email and social networks will receive this video! Your life will change forever!
I can also post access to all email communications and messengers you use.

If you want to stop this ʌ
Transfer the $362 amount to my bitcoin address (if you don’t know how to do this, please write to Google: “Buy Bitcoin”).

My bitcoin address (BTC wallet) is: *********************************

After receiving the payment, I will delete the video and you will never hear my voice again.
I will give you 50 hours (more than 2 days) to pay.
I received a notification from this letter and the timer will work when you see the letter.

It doesn’t make sense to file a complaint somewhere because it can’t be tracked like my Bitcoin address.
I have not made any mistakes.

If I find that you shared this message with others, the video will be distributed immediately.

Good luck, goodbye!

CHINESE

你好!

您可能已经注意到,我从您的帐户发送了一封电子邮件。
这意味着我可以完全访问您的设备。

我已经看了好几个月了。
事实是,您通过您访问过的成人网站感染了恶意软件。

如果您对此不熟悉,我会解释。
我创建了高质量的间谍软件。 它允许我获得对您设备的完全访问权限和控制权。
这意味着我可以在屏幕上看到所有内容,打开相机和麦克风,但您不知道。

我也可以访问您的所有联系人和所有通信。

为什么您的防病毒软件没有检测到恶意软件?
回答::我的恶意软件使用驱动程序,我每4小时更新一次签名,以便您的防病毒软件无声。

我制作了一个视频,展示了你如何在屏幕的左半部分让自己满意,在右半部分,你会看到你观看的视频。
一键! 您在电子邮件和社交网络中的所有联系人都将收到此视频! 你的生活将永远改变!
我还可以发布您使用的所有电子邮件通信和信使的访问权限。

如果你想阻止这个ʌ
将362美元的金额转入我的比特币地址(如果您不知道如何做到这一点,请写信给Google:“购买比特币”)。

我的比特币地址(BTC钱包)是:**********************************

收到付款后,我将删除该视频,您将永远不会再听到我的声音。
我给你50个小时(超过2天)付款。
我收到了这封信的通知,当你看到这封信时,计时器会起作用。

在某处提交投诉没有意义,因为无法像我的比特币地址那样跟踪此电子邮件。
我没有犯任何错误。

如果我发现您与其他人分享了此消息,则视频将立即分发。

祝你好运,再见!

AND IT IS IN MANY OTHER LANGUAGES AS WELL!

The Web Corner – Are they a Registered business?

Our exposure to thousands of web clients has shown us many folks who’ve been exposed to scam artists, fly by nights, and outright crooks over the years. We’ve had clients that had paid money down to previous developers with no work done whatsoever.

Luckily, most legitimate reliable web development businesses have ethics. Part of building confidence in one’s client base is doing what is necessary to be a legitimate business. Fly-by-nights don’t bother with registering their business or any of the other numerous details of doing business that being a legitimate business entails.

It’s very simple to check to see if a business is legitimate – i.e., registered. Here are links to websites where one can check out businesses in several states in and around New England: NH MA ME VT

Doing a little research like this can save you a ton of headaches later. Dealing with a business that is willing to do the initial work of operating legitimately greatly increases the odds they are going to be reliable and honest in their dealings with you.

While there’s never a total guarantee, coupling this with other items in our checklist helps narrow the field to give you the best odds of developing a good business relationship.

The Web Corner – Do YOU own your website?

This is a question that, amazingly enough, not everyone thinks to ask. We have had a number of people who received poor service from their web services providers come to us. Imagine their surprise when they discover that they do not own their website!

Our philosophy is very simple – anything you’ve paid in full for – meaning there is no open balance on your account – is yours. Period. We really have no reason to want your website. We just want to be paid for work done, your domains and services rendered.

Unfortunately there are many unscrupulous people in the web business. They use their ownership of your content as a method to hold you hostage – forcing you to keep paying them. It’s an unfortunate reality on the web. We have never operated that way.

Just about as bad are the large companies that you can build your website at quickly ans easily. However, there is no way to move that website from them. Your site operates ONLY on their proprietary servers so can’t be moved elsewhere. Folks usually discover that after realizing there are insufficient options for website expansion or customization. Then they’ve lost all the time and energy put into a website they don’t own.

We’ll be glad to tell you if you’ve been trapped like this.

The Web Corner – Web Developer Checklist

It’s increasingly difficult sorting good companies from bad ones on the Internet. There are still ways to find the best, reliable web development companies. We’ve compiled this recommended checklist as a starting point. The order these are in isn’t necessarily important since ALL points are important!

Check to see if your web development company:

will ensure that YOU own your website when it’s paid for
is legitimately registered to do business within its State: NH MA ME VT
has been in business for at least 10 years
has several or more people
carries workman’s compensation on its employees
carries liability insurance
maintains a committed presence in networking groups
is accredited and has a good rating with the Better Business Bureau (https://BBB.org)
understands your community and reciprocates by referring business to you
has a phone contact where one can at least leave messages
has an email contact where one can send information
provides automatic site updates at no additional ongoing charge
backs up websites every night for at least a month
provides website encryption (SSL) at no additional ongoing charge
does not require hosting or domain contracts
does not overcharge you by selling sell inflated monthly maintenance plans
provides partial hour web work billing (9 minutes work charged 9/60 of hourly rate)
can respond to most maintenance requests in 3-4 days
has general familiarity with trademark and copyright issues
is proficient with WordPress through experience and training

Over upcoming weeks check here for details about each. Contact us with any questions, we exist to serve you!

The Web Corner – Email Update Scam

Last week I wrote about possible dangers of “FREE” offerings.

While verbiage varies, the end result is the same if you follow their link: headaches of an unimaginable magnitude for you!

Here’s an example of many I see each day in our company emails:
____________________________________________
Dear  charles@charlesworks.com ,

Your mailbox quota is full.
This may cause your mailbox to be disabled or you may no longer be able to receive more emails

to continue using your mailbox. You will need to upgrade your mailbox quota immediately. This service is free.

 Re-update your account 

Note: Failure to update your account might lead to permanent deactivation of your account.

Thanks,
The Security team. 2019

____________________________________________

Clicking lands you on an extremely convincing page. One wanting me to enter my email login information even had “© 2018 CharlesWorks” in it.

These work based on two principles: Offering the FREE “we’ll fix it” service and threat of imminent services loss. Together they convince you to bite. Especially that sense of urgency! Remember the world isn’t going to halt if you don’t act right away – it can wait until you deal with it properly.

Companies don’t have you “verify” your email account this way. If anything seems fishy concerning your email, call your email provider and ask for assistance. That’s what you pay them for!

The Web Corner – Free Counters

It surprises me how many people still fall for anything with “FREE” attached to it. We shockingly still see “free counters” on many websites. They’ve been around as long as the web. Newbie web users still get fascinated by counters showing site visitor numbers.

There are problems with some freebies. If you visit a website and see that 3 people have visited it, that doesn’t exactly instill confidence in the site.

An aesthetic issue is that really nice, elegant looking websites don’t usually have counters. So site visitors aren’t distracted by traffic to the site. In fact, site counters are simply not that much in fashion these days.

Another problem is that many free counters are actually security risks. For an example, I recently read about a “Free SuperCounter Widget” that many have been using. It redirects site visitors to other sites (like dating and gambling and so on). So folks installing this counter were unwittingly sending site visitors away from their site.

Even more insidious is where the counter loads malware/viruses into the website – infecting site visitors as well.

The bottom line here: Yet another simple lesson about getting what you pay for. If your site has been infected, contact us or your developer for help.

 

The Web Corner – Email Extortions

With 20+ years in the web business, scams and schemes to steal from people still amaze me.

Several web clients have made me aware of a scam to frighten them into making a bitcoin payment.

They’re from addresses like “Anonymous Hacker” or even your own email. Subjects are “You have been hacked” or similar. They gloat they’ve infected you through some (usually unsavory) site you visited. They explain how they did it in terms most folks don’t understand – making you think they are really an expert – and frighten you into believing they’re monitoring your computer.

They threaten to send very personal items and even videos of you to everyone you know unless you comply with the demand within some short time period. They warn if you report them, they’ll distribute the “dirt” on you immediately.

We try to force these messages to spam on our servers. Sometimes they get through. We reassure several people each week they are a scam because they usually are.

However, devices DO get hacked. If you truly believe you’ve been hacked, you should see your IT person or someone who specializes in “cleaning” computers ASAP. We can recommend folks who can help.

The Web Corner – Spam

We get many questions about spam (Junk E-mail). Spam clutters up your email. It’s also used to deliver online scams and malware/viruses.

A common question is “Any idea of why I’m seeing spam emails in my Inbox?” Spammers most likely got your email address from your friends or acquaintances – people you know and correspond with – whose computers or phones were compromised. Their contact lists get added to the spammers lists. Spammers also get emails from when we purchase online and from finding email addresses on websites.

Spam is difficult to avoid. One way to handle it is to hit the delete key. That’s much the same as just throwing junk mail away that’s delivered by the mail carrier.

However, spam email can be filtered. The good news is that better than 98% can be filtered into a junk email folder.

One filtering problem is determining which are actually spam – Home Depot, Lowe’s, Staples or other vendors are spam to many and not spam to others. Good mail servers allow users to “mark” items as not spam in that case.

There are numerous email servers that behave in just as many ways handling spam. If spam is an issue, check with your email provider about your options for handling it.

Charles Oropallo (Charles@CharlesWorks.com) started CharlesWorks in Peterborough NH in 1998. His team does website design, hosting, search engine optimization (SEO) and related web services.

The Web Corner – WordPress

Websites don’t just appear out of thin air. They must be built. There are numerous products to assist with this. Many are what are called Content Management Systems (CMS). The most popular today is called WordPress. Nearly 1/3 of all websites use it.

WordPress Logo
A somewhat typical
WordPress logo

WordPress started as a blog software. It’s capabilities evolved over time to include pages, navigation and all the components needed for a web presence.

Just as anyone can build a home or paint a house or even perform their own dental work – anyone can make a website. All you need are the right tools and lots of time to spend learning how to do it, right? That’s why we hire contractors and painters and go to a dentist. WordPress developers save folks the time of developing the website – so they can be busy doing what they are best at.

WordPress software is free. However, website development takes time and is best done by professionals familiar with it.

Be wary of the promise of a website “anyone can build”. Those result in trapping you to a particular vendor – meaning you do not own your website. With WordPress you can go anywhere and most importantly you own the work you paid for.

Charles Oropallo (Charles@CharlesWorks.com) started CharlesWorks in Peterborough NH in 1998. His team does website design, hosting, search engine optimization (SEO) and related web services.

The Web Corner – Domain Directory Listing Scams

Here’s another scam designed to get you to share your credit card information: the Internet Domain Listing Service. It’s been around many years.

The Domain Listing Service usually involves an invoice you receive either via email or in postal mail. It’s deceptively designed to look like a bill you owe regarding your domain name. There is generally a sense of urgency expressed in it. The invoice coincidentally arrives roughly about the time your domain is due for annual renewal. That’s key to folks falling for it.

What the “service” purportedly offers is listing your domain in places on the web to get your website found – for several hundred dollars or more. We have found little or no evidence of any tangible results for most of these. We’ve actually seen web sites banned in search engines as a result of some “listing” services.

There ARE valid directories on the web that help sites increase search engine ranking. At CharlesWorks we provide this for no additional ongoing inclusion fees.

Carefully read the text in these offerings! It usually reveals that they are just a solicitation and not a required service.

Charles Oropallo (Charles@CharlesWorks.com) started CharlesWorks in Peterborough NH in 1998. His team does website design, hosting, search engine optimization (SEO) and related web services.