#291 not yet fixed - Need to address and fix issues mentioned by pipe #300

Mr-KayZ · 2024-06-24T01:57:18Z

Work in progress to fix #291

TODO sections are marked for proper fix later. This PR is just to allow others to see my progress and make comments.

…s and allow others to view my current work and comment if necessary Work in progress to fix r-Techsupport#291 TODO sections are marked for proper fix later. This PR is just to allow others to see my progress and make comments.

Updated tech-scams as well, almost done

Mr-KayZ · 2024-07-01T02:13:36Z

Potential remove images in email scams as they might be too obfuscated to be properly utilized

Added session hijack as a supplement to tech-scams. Removed email_scam examples as they are too obfuscated. Updated tech-scams, just one final section left.

Mr-KayZ · 2024-07-01T10:32:02Z

Add "Terminating sessions" in session hijack.md, include the following services for now:

Discord
Steam
Epic Games
Google
Microsoft
Add others as necessary if others have more ideas

PipeItToDevNull · 2024-07-01T14:55:16Z

Another image to add https://discord.com/channels/749314018837135390/749316166878625843/1257348587172528290

PipeItToDevNull · 2024-07-01T14:57:13Z

https://discord.com/channels/749314018837135390/749316166878625843/1257349175885172806

All docs completed, addressed r-Techsupport#291 and ready for merge!

Mr-KayZ · 2024-07-15T08:36:09Z

Feel free to review and edit accordingly, or make comments, scams page complete!

K97i

not a particularly deep proofread

K97i · 2024-07-26T14:56:15Z

docs/safety-security/email-scams.md

+
+Hacked email accounts can serve as effective Trojan horses, a term used to describe deceptive malware attacks and email scams. Here's an example:
+
+- A man received an email from a friend who is a software engineer. The email contained a suspicious link, which turned out to be a virus. The man confirmed with his friend that his email account had been hacked. (See my personal example in [the "Example of a compromized account scam" section](/docs/safety-security/tech-scams.md) where I had fallen for one such scam message. While not email per say, the methodology works the same way.)


Suggested change

- A man received an email from a friend who is a software engineer. The email contained a suspicious link, which turned out to be a virus. The man confirmed with his friend that his email account had been hacked. (See my personal example in [the "Example of a compromized account scam" section](/docs/safety-security/tech-scams.md) where I had fallen for one such scam message. While not email per say, the methodology works the same way.)

- A man received an email from a friend who is a software engineer. The email contained a suspicious link, which turned out to be a virus. The man confirmed with his friend that his email account had been hacked. (See my personal example in [the "Example of a compromised account scam" section](/docs/safety-security/tech-scams.md) where I had fallen for one such scam message. While not email per say, the methodology works the same way.)

K97i · 2024-07-26T14:56:34Z

docs/safety-security/email-scams.md

+The scammer claims a family member is in trouble and asks for money. If unsure, contact your family member through another method.
+
+### Heartstring Scams
+These scams prey on your compassion, asking you to send money to help victims of various causes. Check CharityWatch to verify unfamiliar charities.


Suggested change

These scams prey on your compassion, asking you to send money to help victims of various causes. Check CharityWatch to verify unfamiliar charities.

These scams prey on your compassion, asking you to send money to help victims of various causes. Check [CharityWatch](https://www.charitywatch.org/) to verify unfamiliar charities.

K97i · 2024-07-26T14:57:42Z

docs/safety-security/session-hijack.md

+
+{% include toc.md %}
+
+Session hijacking is a cyber attack where an attacker intercepts and controls a user's session with a web application. This can occur during various online activities, such as checking credit card balances or shopping. The attacker can then perform any action that the legitimate user could, leading to potential consequences like accessing sensitive information, stealing money, or committing identity theft. 


Suggested change

Session hijacking is a cyber attack where an attacker intercepts and controls a user's session with a web application. This can occur during various online activities, such as checking credit card balances or shopping. The attacker can then perform any action that the legitimate user could, leading to potential consequences like accessing sensitive information, stealing money, or committing identity theft.

Session hijacking is a cyberattack where an attacker intercepts and controls a user's session with a web application. This can occur during various online activities, such as checking credit card balances or shopping. The attacker can then perform any action that the legitimate user could, leading to potential consequences, like accessing sensitive information, stealing money, or committing identity theft.

K97i · 2024-07-26T14:59:21Z

docs/safety-security/session-hijack.md

+
+## Passive Session Hijacking
+
+Passive session hijacking occurs when an attacker eavesdrops on network traffic to steal the target’s session ID. This type of attack is easier to execute because all an attacker needs is access to network traffic, which can be easily accomplished if they are on the same network as the target. This is why it is recommended to be extra careful especially when utilizing public wifi for places, such as coffee shops and airports.


Suggested change

Passive session hijacking occurs when an attacker eavesdrops on network traffic to steal the target’s session ID. This type of attack is easier to execute because all an attacker needs is access to network traffic, which can be easily accomplished if they are on the same network as the target. This is why it is recommended to be extra careful especially when utilizing public wifi for places, such as coffee shops and airports.

Passive session hijacking occurs when an attacker eavesdrops on network traffic to steal the target’s session ID. This type of attack is easier to execute because all an attacker needs is access to network traffic, which can be easily accomplished if they are on the same network as the target. This is why it is recommended to be extra careful especially when utilizing public Wi-Fi for places, such as coffee shops and airports.

K97i · 2024-07-26T14:59:54Z

docs/safety-security/session-hijack.md

+
+Cookies serve several purposes. They help inform websites about the user, enabling the websites to personalize the user experience. For example, e-commerce websites use cookies to remember what merchandise users have placed in their shopping carts. Some cookies are necessary for security purposes, such as authentication cookies.
+
+However, cookies can also pose security and privacy concerns. Some viruses and malware may be disguised as cookies. These malicious elements can be used to facilitate session hijacking, a type of cyber attack where an attacker intercepts and takes control of a user’s session with a web application. This can be done actively, where the attacker takes control of the target’s session while it’s active, or passively, where the attacker eavesdrops on network traffic to steal the target’s session ID (Or session token).


Suggested change

However, cookies can also pose security and privacy concerns. Some viruses and malware may be disguised as cookies. These malicious elements can be used to facilitate session hijacking, a type of cyber attack where an attacker intercepts and takes control of a user’s session with a web application. This can be done actively, where the attacker takes control of the target’s session while it’s active, or passively, where the attacker eavesdrops on network traffic to steal the target’s session ID (Or session token).

However, cookies can also pose security and privacy concerns. Some viruses and malware may be disguised as cookies. These malicious elements can be used to facilitate session hijacking, a type of cyberattack where an attacker intercepts and takes control of a user’s session with a web application. This can be done actively, where the attacker takes control of the target’s session while it’s active, or passively, where the attacker eavesdrops on network traffic to steal the target’s session ID (Or session token).

K97i · 2024-07-26T15:06:57Z