On Ransom-Ware, Black-Hat Hackers, the Gullible, Guilty … and Personal Cyber Security
A-Special ME-P Report
***
By Dr. David E. Marcinko MBA MBBS [Hon]
[Publisher-in-Chief]
Your Ashley Madison Account
[Paul recommends to read this email]
But … don’t fall for it!
I just received this email message from sharingservices@aol.com: In this time of medical information and financial advisory data cyber security breaches, here is a warning about personal security, too!
If it can happen to me, it can happen to anyone!
*********************************************************************************************************
Unfortunately your data was leaked in the recent hacking of Ashley Madison and I know have your information. I have also used your user profile to find your Facebook page, using this I can now message all of your friends and family members.
If you would like to prevent me from sharing this dirt info with all of your friends and family members (and perhaps even your employers too?) then you need to send 1 bitcoin to the following BTC address.
Bitcoin Address:
1AEJiZFnELwRZVjmVSvDSwUaXNZy4X9bQN
You may be wondering why should you and what will prevent other people from doing the same, in short you now know to change your privacy settings in Facebook so no one can view your friends/family list. So go ahead and update that now (I have a copy if you don’t pay) to stop any future emails like this.
You can buy bitcoin using online exchanges easily. If the bitcoin is not paid within 3 days of 23 Sep 2015 then my system will automatically message all of your friends and family members. The bitcoin address is unique to you.
Consider how expensive a divorce lawyer is. If you are no longer in a committed relationship then think about how this will affect your social standing amongst family and friends. What will your friends and family think about you?
Sincerely,
Paul
***
*******************************************************************************************************************
An Object lesson to all ME-P readers and subscribers
After review, I noted the following faults with this blast message:
* No sender last name.
* Sender blast email service
* Multiple email addresses
* Poor grammar
* I do not have – or ever had – a Facebook account
* I do not have – or ever had – an AM account
Assessment
Note any other “give-aways“? Don’t fall for this ploy. And, don’t be Gullible or Guilty. Forewarned is forearmed.
More:
- Some Dental Consultants Say the Most Incredible Things
- “The ADA Practical Guide to HIPAA Compliance”
- In Defense of the eDR Industry
- Understanding HIT Security Risks – The Ugly Truth!
- Over 1,100 Health Data Breaches, but Few Fines
- Has your medical privacy been compromised? Help ProPublica Investigate
- How Expensive are Healthcare Data Breaches?
- Protected Health Information Data Breaches
- Don’t Hide a Security Breach if You Can’t Do the Time
Conclusion
Your thoughts and comments on this ME-P are appreciated. Feel free to review our top-left column, and top-right sidebar materials, links, URLs and related websites, too. Then, subscribe to the ME-P. It is fast, free and secure.
Speaker: If you need a moderator or speaker for an upcoming event, Dr. David E. Marcinko; MBA – Publisher-in-Chief of the Medical Executive-Post – is available for seminar or speaking engagements. Contact: MarcinkoAdvisors@msn.com
OUR OTHER PRINT BOOKS AND RELATED INFORMATION SOURCES:
- PRACTICES: www.BusinessofMedicalPractice.com
- HOSPITALS: http://www.crcpress.com/product/isbn/9781466558731
- CLINICS: http://www.crcpress.com/product/isbn/9781439879900
- ADVISORS: www.CertifiedMedicalPlanner.org
- FINANCE: Financial Planning for Physicians and Advisors
- INSURANCE: Risk Management and Insurance Strategies for Physicians and Advisors
- Dictionary of Health Economics and Finance
- Dictionary of Health Information Technology and Security
- Dictionary of Health Insurance and Managed Care
***
***
Filed under: Information Technology, Risk Management | Tagged: Ashley Madison, Black Hat Hackers, Cyber Security, Data breaches, Facebook, RansomWare |

















Bizarre
The most bizarre ME-P, ever!
Gemma
LikeLike
You are EXPOSED
Hey!
I would like to tell you that Ashley Madison was recently hacked, and now I have all the information about your online affairs and even the cheatings you did ;) I have located all your social networking and dating website profiles, and using this I am going to send message to all of your friends and family members about this.
Well, for sure, you would feel ashamed if I tell your family members and friends about this, and it would be even more worse, when you meet them face to face. Wondering how to prevent me from doing this? Its simple, you need to send just 2 Bitcoin (i.e Two BTC) to the following Bitcoin address:
1BXgGTQdNfPp9LtUr895VFqu8WVTtkmNvh
You may be wondering why should you and what will prevent other people from doing the same, in short you can now delete your social and dating accounts. So go ahead and give it a try. Do you think, you can get away so easily? I have already saved a copy of your profiles, pics, chat logs, and even the contact details of your relatives and friends.
To send a Bitcoin, you can use sites like CoinBase. If I do not receive the Bitcoin in the next 48 hours, I am going to contact all of your friends and relatives and post your profiles, pics, etc all ONLINE. Oh! I didnt tell you, that I know where you live and hangout, did I?
Just think if you are in committed relationship how this will affect your social standing amongst your friends, family members and others. Your countdown is started.
Good Luck!
Dominic Hodgson
LikeLike
[Medical] Ransomware: Extortion uninhibited
“Booming crypto ransomware industry employs new tricks to befuddle victims – High-pressure tactics try to extort more people into paying to recover their data.” By Dan Goodin for ars technical, November 5, 2015.
http://arstechnica.com/security/2015/11/booming-crypto-ransomware-industry-employs-new-tricks-to-befuddle-victims/
Goodin: “Ransomware that uses strong cryptography to hold entire hard drives’ worth of data hostage keeps getting nastier, as criminals attempt to find new ways to extort more people into paying increasingly hefty ransoms to recover their files.” Goodin continues, “The notification the malware sends to deliver the news that victims’ data has been encrypted congratulates them on becoming a part of the ‘large community CryptoWall.’ Besides the snarky tone, the notice is also notable for its almost pristine grammar and spelling and its clarity in explaining how strong crypto works.”
Joseph Bonavolonta, Assistant Special Agent in Charge of the FBI’s CYBER and Counterintelligence Program. recently suggested that victims of ransomware should pay the ransom of “a few hundred dollars” to regain access to criminally encrypted EHRs. Bonavolonta: “The ransomware is that good.”
https://securityledger.com/2015/10/fbis-advice-on-cryptolocker-just-pay-the-ransom/
Since profits from ransomware are ominously beyond the reach of the most powerful law enforcement agency in the nation, would you say the crime is more likely to shrink, or explosively expand into healthcare – where stolen digital health records fetch ten times more than social security numbers?
For the unfortunate HIPAA-covered provider whose staff is fooled into opening an infected attachment, the ransom of a few hundred dollars is nothing compared to the disincentive of lawfully reporting the breach to HHS. According to the Ponemon Institute’s 2015 “Global Cost of Data Breach Study,” the healthcare industry has emerged as having the highest cost: $363 per record. Most of the cost is attributed to predictable loss of business resulting from notifications. Patients are already fed up with breach notifications.
What’s a few hundred dollars, when reporting the ransomware could lead to bankruptcy?
As befuddled victims are officially advised to pay the ransom (perhaps again and again), you can bet angry patients will become further inflamed when someone reveals that even before ransomware, doctors were unlikely to report breaches of patients’ privacy.
D. Kellus Pruitt DDS
LikeLike
Affair site Ashley Madison settles charges over data breach
Ruby, the owner of the site, has agreed to pay $1.6 million to settle a Federal Trade Commission investigation and state charges tied to last year’s breach, which enabled cyber thieves to steal the personal information of more than 36 million customers.
As part of the settlement, the site must now implement more secure security practices. (USA Today).
Sheldon
LikeLike