You are not immune to being scammed.... - opsec - kbin.social

tj, 2 months ago

You are not immune to being scammed.

Today I was half a second away from tapping a link in an SMS that was informing me I need to renew my credit card details because my CC was expiring.

My CC IS expiring this month. I updated my CC details on two other services yesterday. Through sheer dumb luck the scammer happened to bait their hook correctly.

I must not be complacent.
Complacency is the opsec-killer.
Complacency is the little death that brings identity theft.

#scam #opsec #infosec

reply

report

activity

copy /kbin url

copy original url

open original url

Loading...

+ Pagan_Animist, jake4480, Crazypedia, enthraxxx +14 more

Image

Image alternative text

nf3xn, 2 months ago

@tj Any sort of leak might contain phone number, last four and your expiry month/year - so probably not luck?

reply

report

activity

copy /kbin url

copy original url

open original url

Loading...

Federation

Status:

Instances:

/m/opsec

Thread

tj

@tj@howse.social

Added: 2 months ago
Online: -
Boosts: 18

Magazine

opsec

@opsec@kbin.social

What is OPSEC?

/m/opsec is dedicated to Operations Security (OPSEC), a strategic methodology geared towards minimizing vulnerabilities and reducing risk.

Initially stemming from military practices, OPSEC's scope has widened substantially, now playing a crucial role in a broad spectrum of areas such as law enforcement, digital security, residential safety, travel precautions, and beyond.

Remember, OPSEC is far from a simple checklist or a matter of using a VPN and maintaining discretion.

It encompasses various elements of security: INFOSEC (information security), APPSEC (application security), NETSEC (network security), COMSEC, TRANSEC, SIGSEC, EMSEC (communication, transmission, signals, and emission security), PHYSEC, PERSEC (physical and personal security), and even (CO)INTEL (counterintelligence).

Our objective in this community is to instill the OPSEC mindset: an objective view towards security that can be applied to any mission or plan.

The OPSEC Process

Identify the information you need to protect
Analyze the threats
Analyze your vulnerabilities
Assess the risk
Apply countermeasures

Understand your own risk/threat model: Who is your adversary? What needs protecting?

The OPSEC Two-Step: Know what to protect and know how to protect it.

Rules

Magazine Rules

Don't post without reading the rules thread or your post will be removed, and you may be banned.
Don't give advice without knowing the user's threat model first. If you proceed to give advice when the OP has not explained their threat model, you will be banned.
Don't offer single tool solutions (e.g. VPN, bitcoin, Signal) when the threat model isn't clear
Don't give bad, ridiculous, or misleading advice (e.g. "you can't get arrested if you use Tor")
Don't ask for help or help others in illicit and unlawful activities (e.g. "I want to buy drugs on the internet").
Don't post without mentioning your threat model, unless it's a post about how to threat model.

Created: 11 months ago
Owner: operator
Subscribers: 34
Online: -

Moderators

operator

Active people

Related posts

Please be super careful using public wi-fi, even with a VPN. Zero day in existence for over 20 YEARS was announced impacting VPN use with regards to rogue or compromised DHCP servers on the LAN, which allows redirection of VPN traffic. If you can avoid public network use (i.e. using a cell service/hotspot instead of a public...

Show more

1 month ago to Cybersecurity

#ExpressVPN User #Data Exposed Due to Bug...

Show more

3 months ago to privacy

Many video game anti-cheats act essentially like malware....

Show more

1 month ago to security

"Random Mosaic – Detecting unauthorized physical access with beans, lentils and colored rice"...

Show more

2 months ago to infosec

Support Us