Free Republic

I just got this email on one of my accounts. It purported, as you will read, to be from that same email. It wasn't. I went to the raw source and, of course, have the original email and the ip address of the person who sent it. This is the body of the email:

A Lithuanian man pleaded guilty last week to bilking Google and Facebook out of more than $100 million in an elaborate scheme involving a fake company, fake emails and fake invoices. In an indictment unsealed by the U.S. Attorney for the Southern District of New York last week, the Department of Justice alleged that Evaldas Rimasauskas and other unnamed co-conspirators impersonated the Taiwan-based hardware manufacturer, Quanta Computer — with which both tech companies do business — by setting up a company in Latvia with the same name. Using myriad forged invoices, contracts, letters, corporate stamps, and general confusion created by...

Ian Kar, a New York-based product manager who was sent the scammy email... said he was pretty sure his password was included in one of the big leaks in the past few years — databases have been stolen from LinkedIn, Yahoo, and eBay, for example. You can check whether your password is in one of these leaked databases over at the website Have I Been Pwned. Basically, the attackers don't actually have video of you or access to your contacts, and they haven't been able to install malicious code on your computer. In reality, they're taking a password from a...

I just got a phone call saying that my Microsoft 10 account has been compromised by any of several foreign sources, and that I should contact the phone number they have to set up a firewall against it being taken down or loss of all information they have on the cloud under this account. I small a rat.

A Chinese-owned company penetrated former Secretary of State Hillary Clinton’s private server, according to sources briefed on the matter. The company inserted code that forwarded copies of Clinton’s emails to the Chinese company in real time. The Intelligence Community Inspector General warned of the problem, but the FBI subsequently failed to act, Texas Republican Rep. Louie Gohmert said during a July hearing. A Chinese-owned company operating in the Washington, D.C., area hacked Hillary Clinton’s private server throughout her term as secretary of state and obtained nearly all her emails, two sources briefed on the matter told The Daily Caller News...

President Donald Trump’s refusal to rehash allegations of Kremlin-backed interference in the 2016 presidential election during a joint press conference with Russian President Vladimir Putin Monday incensed Democrat lawmakers and left wing media pundits. Standing alongside Putin, President Trump steered clear of confrontation with the Russian, while questioning U.S. intelligence and last week’s federal indictments of 12 Russians for hacking into Democratic email accounts to purportedly hurt Hillary Clinton in 2016.“I have great confidence in my intelligence people, but I will tell you that President Putin was extremely strong and powerful in his denial today,” President Trump said following a...

WASHINGTON — The email landed in John Podesta’s crowded inbox around March 19, 2016, during the height of the presidential primaries, and it appeared to be a standard security request from Google for Hillary Clinton’s campaign chairman to change his password. Doing so ultimately led to a political firestorm that is still raging. The email was actually from Aleksey Lukashev, a senior lieutenant in Russian military intelligence, using the account “john356gh” to mask his purpose, U.S. officials say. The email contained an embedded link that secretly opened Podesta’s account to a hacking team at 20 Komsomolskiy Prospekt, near Moscow’s Red...

Another junk indictment? This comes a day before President Trump is to meet with Russian President Vladimir Putin Deputy Attorney General Rod Rosenstein confirmed that the DNC server was never actually hacked. **SNIP** “Secondly, the defendants hacked into computer networks and installed malicious software and allowed them to spy on users,” Rosenstein continued. The computer networks Rosenstein was referring to was a Congressional campaign, not the DNC server. “They also hacked into the networks of a Congressional campaign and a national political committee,” Rosenstein continued.

Hackers using a tool stolen from the United States government conducted extensive cyberattacks on Friday that hit dozens of countries around the world, severely disrupting Britain’s public health system and wreaking havoc on computers elsewhere, including Russia. The tool was leaked by a group calling itself the Shadow Brokers, which has been dumping stolen N.S.A. hacking tools online since last year. Microsoft rolled out a patch for the vulnerability in March, but hackers apparently took advantage of the fact that vulnerable targets — particularly hospitals — had yet to update their systems. The malware was circulated by email. Targets were...

The ever-vigilant folk at the Internet Storm Centre (SANS) have spotted yet another campaign trying to drop the Locky ransomware using compromised Word files.As Internet Storm Center handler Brad Duncan writes, the vector in the Word documents uses Microsoft Dynamic Data Exchange (DDE), a feature that lets Office application load data from another Office file. This is the kind of attack that last week was spotted in a phishing campaign launched at Freddie Mac.Duncan outlines the attack approach in this flowchart:Image: Brad Duncan, SANS The phishing messages carrying this attack come from the Necurs botnet, he writes, and as with...

Let’s start with a caveat from one of the authors of The Intercept’s story, just so we’re clear on what *isn’t* being alleged. very very important: there’s nothing in the NSA report indicating the actual voting machines or vote tabulations were compromised— Sam Biddle (@samfbiddle) June 5, 2017 Was that the goal, though? The piece is long and difficult to excerpt so I’ll try to summarize. According to the NSA (CBS has confirmed that this is indeed a real NSA report), last August Russia’s military intelligence unit — the GRU — hacked into a software company, likely VR Systems...

The latest phishing scam comes in the form of a fraudulent email, claiming to be from the president's daughter, Ivanka Trump. The message claims that the email's recipient is due a large sum of money that was recovered by the U.S. Embassy from the government of Benin Republic. A check in the amount of $50,000,000 is scheduled to be delivered to the recipient's address. To receive the check, you need reply to the email with personal details, including: Full name Residential address Mobile number Fax number Occupation Sex Age Nationality Country

You've probably heard about that treacherous phishing scheme going around the Internet masquerading as a Google Doc invitation. Worse, maybe you've fallen victim to the scam, yourself. For those still unscathed, here are a few tips to keep you nice and safe. As for all you innocent bystanders out there panicking after clicking on one of the links, don't freak out. Take a deep breath and read this carefully. We'll get through this together. First, what is it? People have been reporting getting emails from a known contact seeking to share a Google Doc with them. After clicking the invite...

I got this email today and I couldn't help but laugh... a lot. Their fake [Sing On] page is located at an URL in the UK. But it just reeks of a Chinese accent. My comments are in red. ============================================ Verify Your Account Information For Security Reason.[SP]Errrr...just one reason? Or is it for the reason of security?? Dear Client,[SP]Yea... my real name is "Client". How did they know? I've never told anyone... There is trying from suspicious devices to login your account.[SP]Dang it! Those suspicious devices are trying again...They're always so trying. The lack of articles in simulated sentence makes...

We learned recently that macOS malware grew by 744% last year, though most of it fell into the less-worrying category of adware. However, a newly-discovered piece of malware (via Reddit) falls into the ‘seriously nasty’ category – able to spy on all your Internet usage, including use of secure websites.Security researchers at CheckPoint found something they’ve labelled OSX/Dok, which manages to go undetected by Gatekeeper and stops users doing anything on their Mac until they accept a fake OS X update … OSX/Dok does rely on a phishing attack as its initial way in. Victims are sent an email claiming to...

This is a Wordfence public service security announcement for all users of Chrome and Firefox web browsers: There is a phishing attack that is receiving much attention today in the security community.As a reminder: A phishing attack is when an attacker sends you an email that contains a link to a malicious website. You click on the link because it appears to be trusted. Merely visiting the website may infect your computer or you may be tricked into signing into the malicious site with credentials from a site you trust. The attacker then has access to your username, password and...

A Clinton campaign aide says that a typo in a March 19 email sent to John Podesta is to blame for opening the campaign chairman’s Gmail account up to Russian cyber hackers. The IT aide, Charles Delavan, tells The New York Times that his error — typing the word “legitimate” instead of “illegitimate” to describe a hacker’s email — continues to haunt him. “This is a legitimate email,” Delavan wrote to Clinton campaign aide Sara Latham after she forwarded him an spear phishing email designed to look like official correspondence from Google. “John needs to change his password immediately,” Delavan...

WASHINGTON (AP) -- New evidence appears to show how hackers earlier this year stole more than 50,000 emails of Hillary Clinton's campaign chairman, an audacious electronic attack blamed on Russia's government and one that has resulted in embarrassing political disclosures about Democrats in the final weeks before the U.S. presidential election. The hackers sent John Podesta an official-looking email on Saturday, March 19, that appeared to come from Google. It warned that someone in Ukraine had obtained Podesta's personal Gmail password and tried unsuccessfully to log in, and it directed him to a website where he should "change your password...

Oh dear! About that high-level email hackery that Hillary - and every talking head with a “Democrat analyst” after their name - have been blaming on the Russians? Apparently John Podesta committed his own “high level hack” by falling for the oldest trick in the Internet virtual book: a simple phishing scam. That’s right, he gave the “hackers” his password (h/t: Larwyn’s Linx): According to these reports, Podesta actually clicked the "Change Password" link on "com-securitysettingpage.tk" and gave these scammers his password. This is "grandma's first day on the internet" level idiocy. Imagine how safe we’ll be with Grandma is...

You just can’t make this up… The Smoking Gun reported: The FBI’s Hillary Clinton investigation turned up evidence that her e-mail accounts were targeted in multiple “spear phishing” attacks, one of which may have tricked the then-Secretary of State into clicking a malicious link included in the correspondence. An FBI investigative report released today includes a section on the “cyber targeting” of Clinton’s “personal E-mail and Associated Accounts” during her tenure at the State Department. Though riddled with redactions, the FBI report reveals that Clinton became concerned about the legitimacy of an e-mail purportedly sent to her “from the personal...