Windows 10: How can I investigate fraud and cyber security hacking on my device and home internet

BirgitHutchings · Oct 15, 2021

This is a public community. To protect your privacy, please do not post any personal information such as your email address, phone number, product key, password, or credit card number.Beware of scammers posting fake support numbers in the Microsoft Answers Community. Check our FAQ to see who's who in the community and help you identify Microsoft staff and trusted community members.

:)

Brink · Oct 15, 2021

FBI warns hacked IoT devices used for malicious cyber activities

Cyber actors actively search for and compromise vulnerable Internet of Things (IoT) devices for use as proxies or intermediaries for Internet requests to route malicious traffic for cyber-attacks and computer network exploitation. IoT devices, sometimes referred to as “smart” devices, are devices that communicate with the Internet to send or receive data. Examples of targeted IoT devices include: routers, wireless radios links, time clocks, audio/video streaming devices, Raspberry Pis, IP cameras, DVRs, satellite antenna equipment, smart garage door openers, and network attached storage devices.

IoT proxy servers are attractive to malicious cyber actors because they provide a layer of anonymity by transmitting all Internet requests through the victim device’s IP address. Devices in developed nations are particularly attractive targets because they allow access to many business websites that block traffic from suspicious or foreign IP addresses. Cyber actors use the compromised device’s IP address to engage in intrusion activities, making it difficult to filter regular traffic from malicious traffic.

Cyber actors are using compromised IoT devices as proxies to:

Send spam e-mails;

Maintain anonymity;

Obfuscate network traffic;

Mask Internet browsing;

Generate click-fraud activities;

Buy, sell, and trade illegal images and goods;

Conduct credential stuffing attacks, which occurs when cyber actors use an automated script to test stolen passwords from other data breach incidents on unrelated web-sites; AND

Sell or lease IoT botnets to other cyber actors for financial gain.

Cyber actors typically compromise devices with weak authentication, unpatched firmware or other software vulnerabilities, or employ brute force attacks on devices with default usernames and passwords.

Compromised devices may be difficult to detect but some potential indicators include:

A major spike in monthly Internet usage;

A larger than usual Internet bill;

Devices become slow or inoperable;

Unusual outgoing Domain Name Service queries and outgoing traffic; or

Home or business Internet connections running slow.

Protection and Defense

Reboot devices regularly, as most malware is stored in memory and removed upon a device reboot. It is important to do this regularly as many actors compete for the same pool of devices and use automated scripts to identify vulnerabilities and infect devices.

Change default usernames and passwords.

Use anti-virus regularly and ensure it is up to date.

Ensure all IoT devices are up to date and security patches are incorporated.

Configure network firewalls to block traffic from unauthorized IP addresses and disable port forwarding.

Isolate IoT devices from other network connections.

Additional Resources

For additional information on cyber threats to IoT devices, please refer to “Common Internet of Things Devices May Expose Consumers to Cyber Exploitation,” available at Internet Crime Complaint Center (IC3) | Common Internet of Things Devices May Expose Consumers to Cyber Exploitation.

Victim Reporting

If you suspect your IoT device(s) may have been compromised, contact your local FBI office and/or file a complaint with the Internet Crime Complaint Center at www.ic3.gov.
Click to expand...

Source: Internet Crime Complaint Center (IC3) | Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities

Brink · Oct 15, 2021

FBI warns hacked IoT devices used for malicious cyber activities

Cyber actors actively search for and compromise vulnerable Internet of Things (IoT) devices for use as proxies or intermediaries for Internet requests to route malicious traffic for cyber-attacks and computer network exploitation. IoT devices, sometimes referred to as “smart” devices, are devices that communicate with the Internet to send or receive data. Examples of targeted IoT devices include: routers, wireless radios links, time clocks, audio/video streaming devices, Raspberry Pis, IP cameras, DVRs, satellite antenna equipment, smart garage door openers, and network attached storage devices.

IoT proxy servers are attractive to malicious cyber actors because they provide a layer of anonymity by transmitting all Internet requests through the victim device’s IP address. Devices in developed nations are particularly attractive targets because they allow access to many business websites that block traffic from suspicious or foreign IP addresses. Cyber actors use the compromised device’s IP address to engage in intrusion activities, making it difficult to filter regular traffic from malicious traffic.

Cyber actors are using compromised IoT devices as proxies to:

Send spam e-mails;

Maintain anonymity;

Obfuscate network traffic;

Mask Internet browsing;

Generate click-fraud activities;

Buy, sell, and trade illegal images and goods;

Conduct credential stuffing attacks, which occurs when cyber actors use an automated script to test stolen passwords from other data breach incidents on unrelated web-sites; AND

Sell or lease IoT botnets to other cyber actors for financial gain.

Cyber actors typically compromise devices with weak authentication, unpatched firmware or other software vulnerabilities, or employ brute force attacks on devices with default usernames and passwords.

Compromised devices may be difficult to detect but some potential indicators include:

A major spike in monthly Internet usage;

A larger than usual Internet bill;

Devices become slow or inoperable;

Unusual outgoing Domain Name Service queries and outgoing traffic; or

Home or business Internet connections running slow.

Protection and Defense

Reboot devices regularly, as most malware is stored in memory and removed upon a device reboot. It is important to do this regularly as many actors compete for the same pool of devices and use automated scripts to identify vulnerabilities and infect devices.

Change default usernames and passwords.

Use anti-virus regularly and ensure it is up to date.

Ensure all IoT devices are up to date and security patches are incorporated.

Configure network firewalls to block traffic from unauthorized IP addresses and disable port forwarding.

Isolate IoT devices from other network connections.

Additional Resources

For additional information on cyber threats to IoT devices, please refer to “Common Internet of Things Devices May Expose Consumers to Cyber Exploitation,” available at Internet Crime Complaint Center (IC3) | Common Internet of Things Devices May Expose Consumers to Cyber Exploitation.

Victim Reporting

If you suspect your IoT device(s) may have been compromised, contact your local FBI office and/or file a complaint with the Internet Crime Complaint Center at www.ic3.gov.
Click to expand...

Source: Internet Crime Complaint Center (IC3) | Cyber Actors Use Internet of Things Devices as Proxies for Anonymity and Pursuit of Malicious Cyber Activities

btarunr · Oct 15, 2021

Leading Technology Companies Announce Creation of Cyber Security Research Alliance

Today, leading technology companies announced the creation of the Cyber Security Research Alliance (CSRA). The CSRA is a private, non-profit research consortium formed in response to the growing need for increased public-private collaboration to address complex problems in cyber security. The founding members of the CSRI are Advanced Micro Devices (AMD), Honeywell, Intel Corporation, Lockheed Martin, and RSA/EMC.

President Obama has prioritized cyber threats as one of the most serious economic and national security challenges we face as a nation and a dependency to America's economic prosperity in the 21st century.

CSRA seeks to achieve coordinated industry participation to address national cyber security research and development (R&D) imperatives and bridge the gap between government funded R&D and commercially available products and solutions in cyber security. CSRA will focus on challenges that are bigger than any one company, consortium, sector or nation and ensure that government, industry and academia collaborate on in-depth problem understanding and definition.

"The CSRA is organized to leverage expertise, from member companies and partners in government and academia," said Lee Holcomb, president of the CSRA and vice president of strategic initiatives, Lockheed Martin Information Systems & Global Solutions. "Together we hope to create viable, game changing cyber security solutions."

The CSRA is discussing with the National Institute of Standards and Technology (NIST) the arrangement for a joint cyber security research symposium in early 2013 to connect researchers and early adopters from across the private, academic, and government sectors.

"Putting into practice the exciting cyber security innovations that emerge from research requires active partnerships between government and industry and also among private sector stakeholders," said Chuck Romine, Director of NIST's Information Technology Laboratory. "The emergence of CSRA can strengthen both kinds of partnerships and we look forward to working with this new organization to promote a trustworthy cyberspace for our nation and its citizens."

Initially, CSRA will focus on building the organization and developing viable collaboration models. Activities and focus areas for the organization will include:

Prioritizing the "grand challenges" in cyber security through the collaboration of all stakeholders

Tracking cyber security R&D activities

Developing viable approaches to technology transfer

Windows 10: How can I investigate fraud and cyber security hacking on my device and home internet

How can I investigate fraud and cyber security hacking on my device and home internet

How can I investigate fraud and cyber security hacking on my device and home internet

How can I investigate fraud and cyber security hacking on my device and home internet

How can I investigate fraud and cyber security hacking on my device and home internet - Similar Threads - investigate fraud cyber

How can I contact the fraud department?

Fraud on my account via hack

Fraud on my account via hack

Fraud on my account via hack

How good is windows cyber security?

security fraud

Computer Fraud - Cyber Crime

Please investigate and Shutdown a Fraud Scammer using a Hotmail account

FBI warns hacked IoT devices used for malicious cyber activities