Stay Safe Online: Protecting Your Digital Life from Hackers

Online hackers are everywhere! It's their full-time job, and nobody is safe from the threat. Please update your passwords, add Two-Factor Authentication where possible, and NEVER click on fear-provoking emails or messages that claim you've lost access to your account!

I know, it sounds dramatic, but it's all too real. I have been supporting several friends, clients, and family members whose security has been threatened. Here's what I've learnt and some recommendations.

Hacking Story 1

I recently interacted with someone who had multiple linked Facebook and Instagram business pages. Without apparent warnings, their account was hacked. They first noticed they had lost access to their Facebook pages. Soon after, passwords were changed, and they were locked out of their accounts. Over months, hackers gained access to many email accounts, as well as Microsoft and Apple profiles.

It culminated in hackers sending a link requesting they verify their identity to regain access to missing accounts. Understandably, they clicked the link, which installed malware on their iPhone. They then entered their Face ID from various angles, as prompted, to verify they were the account holder. The hackers now had external access to their phone and face identity using hacking technologies unknown to most of us!

Their phone suddenly had a green light on it. The phone then went black and was unable to be turned on or off. Let’s just say, it was a terrifying ordeal!

Phishing Story 2

I once received an email from a "family member" claiming they had shingles, had fallen, and smashed their phone, seeking assistance through email correspondence. The email seemed suspicious, so I contacted them. They were completely fine, and their phone was in perfect working order!

I started investigating and found that hackers had accessed my relative's Bigpond/Telstra account and set up a forwarding address to a fake email account. The fake email was almost identical—just differing by one digit—which could easily have gone unnoticed.

After this incident, they managed to send emails to all their contacts, phishing for more victims. They had the ability to use that email account to reset passwords and access personal details, including bank accounts. It was traumatic, but we reacted immediately and successfully stopped them.

These are just two of many stories out there. I urge everyone to stay alert to scams and protect themselves where possible. If you suspect you have been hacked, reacting promptly is key. Remember, most international hackers work while we sleep! Don’t hesitate to report it to the police and keep screenshots of evidence—this may come in handy later.

Understanding Online Threats

Being equipped with knowledge is the first line of defense against cybercrime. Here are some important terms to understand:

Phishing versus Spam

Spam generally refers to unwanted or unsolicited messages in your inbox. However, spam can also originate from attackers who aim to gain access to your computer or personal information.

Mark all unwanted messages as spam!

Phishing is more sinister. It appears as though it comes from a reputable source and attempts to manipulate the recipient into disclosing personal details, transferring money, or clicking links that may install spyware onto your device. Such messages can come from trusted contacts whose accounts have been hacked, so it's critical to remain vigilant.

If you're unsure, don't click it!

Phishing and spam are predominantly executed via email but are becoming more common through phone notifications, WhatsApp messages, as well as Facebook Messenger and Instagram Direct Messages (DMs).

Report and Block

Mark emails as SPAM/PHISHING directly from the email and block the accounts.

Report any incidents at Scamwatch and ReportCyber

Test your scam sense at Scamwatch.

Check out the latest Australian Government recommendations.

Stay Alert to Scams

NEVER CLICK AN EMAIL REQUESTING FACE VERIFICATION. This is an attempt by hackers to install malware on your device and then utilize your Face ID to remotely access your protected apps and accounts.

BE CAUTIOUS when providing personal details over the phone. Are you 100% sure the caller is legitimate? If there’s any uncertainty, hang up and call your bank or account provider directly.

VERIFY SENDER EMAIL ADDRESSES. Legitimate email addresses will share the same URL extension as the official website. For instance, emails from Wix should come from accounts@wix.com, not pay@wixaccounts.com.

CONFIRM BANKING DETAILS. Hackers often intercept invoices to change banking information. It's vital to verify banking details when making first-time payments to a new supplier or updating details for an existing account.

Signs of Phone Hacking

Sometimes, technology gives you warnings. If you notice that the orange and green dots on your phone are lit when you're NOT using the camera or microphone, it could indicate your phone has spyware installed.

iPhone Settings to Prevent Malware Attacks

Search SETTINGS for CALL RECORDING and turn the toggle OFF.

SETTINGS > APP PRIVACY REPORT, make sure to turn this ON.

SETTINGS > your name > ICLOUD, then turn off messages for added security.

Use Encrypted Password Software (i.e., 1Password)

In light of growing security risks, I firmly recommend using 1Password to manage your passwords. This application functions as your virtual filing system for passwords and sensitive information.

1Password features an encrypted login and password storage mechanism to keep you secure. With its ability to store unique passwords and the option to set up Two-Factor Authentication (2FA) within the app, it simplifies online protection.

I have used the 1Password application for over ten years. It has been a transformational tool for both business and personal life management. Starting at approximately AUD 50 per year, it's a valuable investment in peace of mind. You can carry your virtual filing system wherever you go.

Passwords

Avoid using Google, Apple, or social media accounts for logins, as this poses significant risks. Instead, utilise unique passwords for each login. This is crucial because if one account is accessed, hackers can try the same credentials for others. Use a combination of characters, uppercase and lowercase letters, and numbers.

Consider Changing Email Providers / Upgrading Your Plan

How many email accounts do you own? Have you checked your security settings? Have you added 2FA or Passkeys to your email accounts? Is it time to consider a new email provider?

Beware of Bigpond!

If you're still using a @bigpond.com email address, I recommend exploring alternatives. Telstra and Bigpond no longer maintain adequate security. Thankfully, you can forward existing emails to a new email account. Don't forget to use the MyTelstra app to add 2FA and adjust your email notification settings.

Is Gmail Safe?

I'm a huge fan of Gmail! It is reliable and secure when your Google settings are optimized with 2FA activated.

Despite my appreciation, I have opted for paid Gmail accounts for myself and my children to enhance the experience. You might find that upgrading provides access to the full Google Workspace Suite, including increased storage.

If you are a Gmail user, I strongly recommend logging in directly through your browser at www.gmail.com.

Delete redundant email accounts!

High Target Accounts for Hackers

Some accounts are higher risk, so prioritize changing passwords and adding 2FA to:

• META / FACEBOOK / INSTAGRAM

• Social Accounts (i.e., SNAPCHAT, TIKTOK, X (formerly Twitter))

• Microsoft Accounts (same login for all)

• Email Providers

• TELSTRA / BIGPOND

• GOOGLE / GMAIL / YOUTUBE

• AMAZON / AUDIBLE

• eBay

• Accounting Software (e.g., XERO, MYOB)

• Online Banking

• PAYPAL

• AFTERPAY

Protecting Facebook & Instagram Accounts

RESET PASSWORDS and create unique logins for all accounts.

Enable 2FA for all accounts.

DO NOT LINK LOGINS. Disable the ability to log in from one account to another.

Take the SECURITY CHECKUP in the Accounts Centre here.

CHECK SECURITY on Facebook here link.

The best way to protect yourself from hackers is to undertake your own security audit BEFORE the need arises. It's often too late after losing access to your account or after your bank account is drained. 

Companies like Facebook make it almost impossible to be contacted and rarely provide resolution for fraud and hacked accounts. Always check settings thoroughly!

🔗 For additional information, visit these links:

• Google Security Recommendations

• 1Password Security Blog ~ for the technically proficient types!

• Keeping Families Safe Online