HACKED! A True Story

The past few days have not been very good ones. Someone out there - more than likely a total stranger - tried to wreak as much havoc on me as he possibly could. He hacked into my computer and took over my personal email accounts as well as my Facebook account and pretended to be me online. As a result, I've decided to post about it to help others avoid this from happening to them or to fall for such a scam. I had no idea what to do initially since my online security had never been compromised before. But I quickly figured out what I needed to do, even though finding the information about how to go about it wasn't really that easy.

I actually had made it easy for The Hacker to do his dirty deeds - I went the lazy and careless route and hadn't changed my passwords for quite a while and actually used the same password for many of my accounts, just to make it easier for myself - which actually made it a lot easier for The Hacker. So recommendation #1 is change your passwords frequently and don't use the same password for your accounts. And don't make it something easy that a Hacker can figure out from any personal information you have posted online. Also the longer the password, the better, and mix it up with numbers and letters. And for heavens sake, don't store any of your passwords on your computer!

The Hacker sent out bogus emails to everyone on my contact list, making up an absurd hifalootin' story about how I was stranded in London, had been robbed at GUNPOINT, and needed money to get back home. Lucky for me, I have smart friends who didn't buy into this ridiculous tale; and if they had a thought that it might in any way be true, they asked The Hacker questions to verify my identity. Questions like: Where or when did we meet? What is my father's middle name? At what company did we used to work together? These are questions that only I would have known and that isn't information that I had put out there online somewhere. If you are contacted like this, protect yourself by verifying the identity of the person who has contacted you to ensure that it is the person you think it is. A true friend would only appreciate this and not at all be insulted by being asked questions to confirm their identity. Once I regained control of my accounts, I removed a lot of the personal information I had stored online, like my children's names, my phone numbers, etc. I have ensured that my security questions are up to date and that the questions are something that only I would know and that there is only one possible answer for, in case - heaven forbid - one day I really am in a tough situation and I am upset and can't really think straight.

Now think about this for a moment: think about all the private information you have in saved emails or out there on Facebook that a stranger could use to pretend to be you if he had the chance! I am trying to go through old emails now that I really don't need anymore and delete them, and at the same time, I am trying to regain my email address book, one by one because The Hacker deleted all my email contacts! Once I regained control of my account, I realized that The Hacker was also having any new emails forwarded to another email address - I didn't even know I could do that! He also tried to delete all email messages between himself and the people on my list that he contacted, so I couldn't see what he had done. Another thing he did on Facebook was to change my birthday - I don't know why, but he did.

If you receive an email like this from someone on your email list, just stop and think to yourself... If this story were true, would this person really be contacting me, of all people, like this? In truth, I would have turned to my family personally and not in a generic sounding email. I think most of us would. Honestly, there are some people on my email list that I have never actually even met in person - I have many cyber-friends that I have befriended online - and I wouldn't approach them about sending me money if I were in a situation like this. So an important thing to remember is to use your common sense and don't immediately think a story is true just because it appears to have come from a friend.

Another tip-off that someone is trying to rip you off is in the grammar and spelling of the emails or chats that you receive. When I read through some of the chats and emails that The Hacker had written, it was obvious to anyone who knows me that it was not me just by the way he wrote. I am a native speaker of English and The Hacker obviously isn't. Sure I make mistakes here and there when I am typing fast, but a typo is far different from bad grammar and improper sentence formation. Would I sign off an email to my mother with "Regards - Susie"? And wouldn't my relatives and friends know ahead of time if I were taking a trip to London? The Hacker also stupidly told people to send the money to "me" via Western Union and to send it using my "exact name" on my passport. He provided my name but he assumed incorrectly that this is how my name appears on my passport, and anyone who really knows me would have known that this was wrong. Again, using your common sense is key.

Current anti-virus software is a must, although it didn't help me this time. Run virus scans frequently. I was online myself when I got hacked and was immediately called on the phone by a friend - Thanks, Veeds! - who had just received this strange email from me. So I found out about it pretty quickly. But in all honesty, previously I often would carelessly leave my computer unattended and online for extended periods. Now I make sure that I disconnect my computer from the internet when I am not using it, so there is no chance of penetration by a Hacker. I am also limiting my online time.

I'm sorry I had to write this post at all. I hate the thought that the rest of us have to share this beautiful world of ours with scumbags like Hackers. But in today's world, it is reality, and if this post will help anyone from falling victim to an online scam or getting hacked, then I will be happy. If any of you have any more good advice on how to protect yourself online, please feel free to add it in comments.

For more information about protecting yourself online, here are a few good websites I found with some sound advice:

Top Ten Passwords You Should Never Use

UNC Information Technology Services

How To Protect Yourself Against Hackers