Identity Theft - A Very Personal Hacking Attack

Recently, a US woman was hacked and her personal data held to ransom. She contacted us to tell her story and has kindly agreed that we can tell it to you here. It's a grave warning about the dangers of identity theft and how vulnerable we can be when digital communications platforms are so easily exploited by online criminals.  Everyone needs to be aware of these dangers. 

This is her experience of trying to get help from social media companies and the police. 

“My Apple ID and Facebook were hacked from within an app. The hacker is from the Ukraine. He targeted me for a high profile game which, according to Apple, is the source of the breach. He changed all of my information so I can't verify my account. All of my personal information is now in their hands to include Social Security, ID's, mortgage application, bank accounts, credit cards, Google saved passwords to 87 accounts, my emails, messages, photo's." 

“I was contacted today by another person claiming to be a police officer from the Ukraine. He said he bought an iPhone on the Internet with a Lords Mobile game on it and now the game disappeared. The game disappeared because I disputed charges and they locked it. He now wants me to pay him the $1000 he paid for to get my accounts back. The phone isn't mine. The apple ID on it is mine. Both the hacker and the buyer of the phone now have access to all of my data."

“I had searched the Ukraine police and clicked a link that said it was their cyber security team but no responses. I have also contacted both Apple and Facebook multiple times but can’t get a positive response. 

“Apple can’t help me because the hacker changed everything that verifies me as me within 1 hour on July 21. In that same hour he did the same to Facebook. And Facebook doesn’t respond to my multiple attempts to send my photo ID, reports of my stolen acct, and you can’t contact a real person."

“I contacted my local police but they laughed because the hacker is in Ukraine. Nothing they can do. Also called the FBI since its identity theft and my money was accessed. They can’t really help either. "

“The hacker changed 5 things for Apple. 1. To change my password. 2. To change my recovery email. 3. To add his phone number. 4 to remove my phone number and 5. To change my Apple ID to his email. The next day he removed my iPhone and erased all in my device. Apple sees all his info, but they can’t compromise his privacy!"

" I think people should know that the company that constantly touts themselves as the most secure operating system was the easiest and fastest for the hacker to get. He entered through an app on my phone, a game and on which I have a high profile player account and he sold it for $1000 along with some one’s stolen phone."

“He contacted me on my personal and work email trying to get me to pay the $1000 he paid to the hacker in return for my accounts. Is he really the hacker? Or are there really 2 different low life trying to rob me. My phone contains everything!  This is identity theft, theft of money, theft of a $10-12k digital game, fraud, theft of data, privacy and data breach, impersonation of a police officer since his email said he is a police officer of the Ukraine." 

"Maybe you can use this information, maybe you can’t. Either way, turn off your iCloud, your Google cloud, don’t back up your smart phone anywhere but an external hard drive." 

“Don’t upload documents to your phone, keep email and chats clear, keep your contacts somewhere safe, don’t pay bills or keep apps to them on your smart phone and don’t connect your credit cards or bank info to any smart phone or digital wallet. Don’t keep identification, emailed attachments like W2’s or mortgage info on a digital device or digital storage”.  

If you have any advice or suggestions for the victim of this crime please contact Cyber Security Intelligence.

You Might Also Read: 

Identity Management Fundamentals:   

 

« Cyber Crime Is Growing Very Fast Due To Coronavirus
Remote Working Has Real Cyber Security Risks »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Grid32

Grid32

Grid32 provides independent computer system and physical security audit services to government and corporate clients of all sizes.

Dome9

Dome9

Dome9 is a cloud firewall management service that stops vulnerabilities, secures remote access, and centralizes policy management.

Bricata

Bricata

Bricata offers industry-leading IPS solutions for enterprise-wide threat prevention and unparalleled situational awareness.

Massive Alliance

Massive Alliance

Massive is a global service agency providing internet monitoring, data & security threat surveillance and reputation management.

CYSEC NG

CYSEC NG

Cyber Security Challenge Nigeria Initiative (CYSEC NG) is the first, and largest offensive premier Cyber Conference and Hacking event in Africa.

CETIC

CETIC

CETIC is an applied research centre in the field of ICT. Key technologies include Big Data, Cloud Computing, the Internet of Things, software quality, and trust and security of IT systems.

Gradcracker

Gradcracker

Gradcracker is THE careers website for Science, Technology (including Cybersecurity), Engineering and Maths university students in the UK.

CyberSaint Security

CyberSaint Security

CyberSaint’s CyberStrong Platform empowers organizations to implement automated, intelligent cybersecurity compliance and risk management.

ditno

ditno

ditno uses machine learning to help you build a fully governed and micro-segmented network. Dramatically mitigate risk and prevent lateral movement across your organisation – all from one centralised

Foundries.io

Foundries.io

Foundries.io have built a secure, open source platform for the world's connected devices, and a cloud service to configure this to any hardware and any cloud.

Digital Pathways

Digital Pathways

Digital Pathways is an award-winning data security provider that helps businesses protect their digital assets.

Cyber Insurance Academy

Cyber Insurance Academy

Cyber Insurance Academy was founded to provide insurance professionals with the knowledge needed to work in cyber-insurance and cyber-related insurance fields.

C3.ai Digital Transformation Institute

C3.ai Digital Transformation Institute

The C3.ai Digital Transformation Institute is a research consortium dedicated to accelerating the benefits of artificial intelligence for business, government, and society.

OpenZiti

OpenZiti

OpenZiti is the world’s most used and widely integrated open source secure networking platform. OpenZiti provides both zero trust security and overlay networking as pure open source software.

Forthright Technology Partners

Forthright Technology Partners

Forthright Technology Partners (Forthright) is a next-generation cloud and managed IT services provider serving a global clientele.

National Cyber Force (NCF)

National Cyber Force (NCF)

The National Cyber Force (NCF) is a partnership between defence and intelligence.