Just got scammed! Another cybercrime

Another nice gmail security feature is if someone logs into your account and they are not in the same geographic location it will send you a suspicious email alert. Also often if a different browser/OS/computer than usual is used to log in.
 
How did the hacker know about the nature of the business where deposits are made to creditors and this one in new?

How trustworthy is your brother?

You need to consider all possibilities.
 
WaxLyrical said:
How did the hacker know about the nature of the business where deposits are made to creditors and this one in new?

How trustworthy is your brother?

You need to consider all possibilities.
Click to expand...

My thoughts as well.
 
skimread said:
Another nice gmail security feature is if someone logs into your account and they are not in the same geographic location it will send you a suspicious email alert. Also often if a different browser/OS/computer than usual is used to log in.
Click to expand...
Enable 2 step authentication, any new login needs a code sms'd to your phone or theres a special code list that you can use that only you will have prior access to.

I hope FNB helps you out that's a not inconsequential amount of money.
 
airborne said:
Enable 2 step authentication, any new login needs a code sms'd to your phone or theres a special code list that you can use that only you will have prior access to.
Click to expand...

Or don't pay people without the reconciled invoice amount on your accounting system.
 
WaxLyrical said:
How did the hacker know about the nature of the business where deposits are made to creditors and this one in new?

How trustworthy is your brother?

You need to consider all possibilities.
Click to expand...

Thor187 said:
My thoughts as well.
Click to expand...

Lol. Bru is fine.
The manager or admin clerk also know the nature of the business activity.
 
airborne said:
Enable 2 step authentication, any new login needs a code sms'd to your phone or theres a special code list that you can use that only you will have prior access to.

I hope FNB helps you out that's a not inconsequential amount of money.
Click to expand...

koeksGHT said:
Or don't pay people without the reconciled invoice amount on your accounting system.
Click to expand...

Good advice. Thanks.
 
Thor187 said:
Doesn't have to be the manager I can send you an email that appears to be from your brother and you won't know the difference.
Click to expand...

I cannot stress this enough. Use a decent hosting provider that has SPF enabled by default or uses a good 3rd party email filter.

Your spoofed mail will go nowhere if any of the above is enabled. Brings me back to them cheap hosting packages, no proper mail filtering in place. Own loss.
 
Sorry to hear that this has happened to one from our MyBB community. Please listen to all the advice offered here and see where the loopholes are in your current business model wrt account payments. Please also go and see a financial consultant at your bank since that's the person most likely to provide you with the best solution to your problem. :)
 
Sorry to hear this. Since this is most likely a business account, you should also consider upgrading to FNB's Business Online Enterprise. It does cost a bit more but you can implement more security options such as dual authorisations for all payments. You can have multiple operators and specify who can authorise payments and how many authorisers is needed.

I've been using it for a while and it's pretty good. Every transaction has to go through at least 3 people, one operator who loads the payment and two authorisers to authorise the transaction before funds leaves our account.
 
signates said:
Sorry to hear this. Since this is most likely a business account, you should also consider upgrading to FNB's Business Online Enterprise. It does cost a bit more but you can implement more security options such as dual authorisations for all payments. You can have multiple operators and specify who can authorise payments and how many authorisers is needed.

I've been using it for a while and it's pretty good. Every transaction has to go through at least 3 people, one operator who loads the payment and two authorisers to authorise the transaction before funds leaves our account.
Click to expand...

This right here.
 
tRoN said:
Good question. That's what I want to investigate.
How can I track the IP it originated from?
Click to expand...

For every email that you receive, there is some technical stuff that your email client program (for example Outlook) will hide from you by default, that stuff is called email headers and there will be some IP address details in the email headers, however you should be prepared for the possibility that the person who spoofed your brother's email address might have taken measures to hide the IP address and mail server's IP address that they used.

To get to and view the email's email headers, you will need to do some Googling, try Googling for something like this (substitute the name of the email client program you are using for 'x'):

How do I view sender's IP address in x?

SYNERGY said:
It's trivial to spoof an email address.
Click to expand...

That is so very true, even Thor187 knows how to do it:

Thor187 said:
I can send you an email that appears to be from your brother and you won't know the difference.
Click to expand...

Have you had a lot of practice doing this? If you need a challenge, you are welcome to send me a spoofed private message.
 
Last edited:
tRoN said:
Good question. That's what I want to investigate.
How can I track the IP it originated from?
Click to expand...

what email platform?

gmail/outlook.com you can see it by easily viewing extended header.

extended header in outook(part of office), can br viewed, just google the how to for your version of office.
 
I haven't read every reply, so forgive me if I'm repeating :

Did your brother only click his mail was hacked when he got the proof? Had no idea before and couldn't warn you upfront?
Was there a business name that was paid 'Pleaes pay ABC Couriers?

Also, thought even FNB to FNB had delays - especially for that amount - for this reason specifically ?
 
Dolby said:
I haven't read every reply, so forgive me if I'm repeating :

Did your brother only click his mail was hacked when he got the proof? Had no idea before and couldn't warn you upfront?
Was there a business name that was paid 'Pleaes pay ABC Couriers?

Also, thought even FNB to FNB had delays - especially for that amount - for this reason specifically ?
Click to expand...

Thanks for replying.

Exactly where the deception got escalated.
It turns out that his emails on his blackberry were not working and only realized when he logged into the office pc to check mails the following day.
That's where the problems arose as I was having an email conversation with who I thought was him when I asked about the new vendor payment.
 
Breaking news. With the help of a PI and the bank the fraudster has been identified.
Now he will be arrested soon once the warrant is issued.
Apparently the money was partially withdrawn and some was eft'd into another account.

The plot thickens....
 
tRoN said:
Breaking news. With the help of a PI and the bank the fraudster has been identified.
Now he will be arrested soon once the warrant is issued.
Apparently the money was partially withdrawn and some was eft'd into another account.

The plot thickens....
Click to expand...
Great news is the person connected to your business?
 
ok seems this guy changed your brothers password on his email. This is a bit more complicated than just spoofing his email address :(
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X