Royal Air Force Club
I don't own this space under my name. I should have leased it while I still could
GE. SD' s post preceded mine but was delayed due to the wait for moderator approval.
Join Date: Dec 2005
Location: UK
Posts: 330
Likes: 0
Received 0 Likes
on
0 Posts
It is extremely easy to identify people who belong to various MOD organisations or have links to them from the past.....many people put details of past and current careers on the likes of LinkedIn or Facebook and a simple organisation search reveals that, and most importantly their email address...
Scammers will also gather phone numbers from these sites or CV's that people have previously listed on jobsites and will check them against sites such as www.truecaller.com (check your own number) it will list your phone network provider and in some cases your personal details which makes spam texting even easier to spoof.
I dont have any connection with the club but this would appear that ex military and members of the club are being targeted as part of an organised effort to get you all to "click a link" and enter your login details or install ransomware, just be extra cautious of suspicious emails.
I would urge you all to report all suspicious emails to Action Fraud (the right hand link) so that a true picture can be established or simply forward them to
[email protected]
I would doubt the club has been hacked but someone has done some harvesting of email addresses.
you can also read up more in the little book of cyber scams published on the Met Police website here
http://www.met.police.uk/docs/little...yber-scams.pdf
Scammers will also gather phone numbers from these sites or CV's that people have previously listed on jobsites and will check them against sites such as www.truecaller.com (check your own number) it will list your phone network provider and in some cases your personal details which makes spam texting even easier to spoof.
I dont have any connection with the club but this would appear that ex military and members of the club are being targeted as part of an organised effort to get you all to "click a link" and enter your login details or install ransomware, just be extra cautious of suspicious emails.
I would urge you all to report all suspicious emails to Action Fraud (the right hand link) so that a true picture can be established or simply forward them to
[email protected]
I would doubt the club has been hacked but someone has done some harvesting of email addresses.
you can also read up more in the little book of cyber scams published on the Met Police website here
http://www.met.police.uk/docs/little...yber-scams.pdf
Last edited by Colonal Mustard; 1st Dec 2016 at 18:27. Reason: updated links
Join Date: Dec 2005
Location: UK
Posts: 330
Likes: 0
Received 0 Likes
on
0 Posts
Just as an example i searched "People who work (or used to work) at Royal Air Force" on linkedin and it came up with 32,465 examples...many of those have emails, simple scraping software will easily create a database to email from
This is one example https://www.atompark.com/web-email-e...form-linkedin/
This is one example https://www.atompark.com/web-email-e...form-linkedin/
Join Date: Nov 2016
Location: Maun
Posts: 20
Likes: 0
Received 0 Likes
on
0 Posts
Thank you PN.
FYI Geordie I spent some time searching for the best thread to post on
Linkedin: what can you do? You want searchers to know your background and also be able to contact you.
FYI Geordie I spent some time searching for the best thread to post on
Linkedin: what can you do? You want searchers to know your background and also be able to contact you.
Join Date: Dec 2005
Location: UK
Posts: 330
Likes: 0
Received 0 Likes
on
0 Posts
I am concious that this is thread drift so may be suited in the computer section however the club incident serves as a timely reminder to raise awareness for cyber security...
firstly i must stress that i am in no way saying LinkedIn was the source or otherwise, just that many people use this and other social media sites to great advantage however there are many things we post online that in a number of cases can be fantastic inners for scammers who want to "socially engineer" you....
In cases such as LinkedIn i personally keep my information limited to a broad outline of what i do, (aviation specialist, aviation engineering, security professional, education manager) i do not include anything that relates to my past and keep my connections to only those i know & also have spoken to them and confirmed they are active on linkedin.
I had one work colleague who attempted to connect with me but he wasn't on the site, turned out someone had created a profile for him and was using it to fleece my friends contacts...(many people just accept connections on the basis they may be of use in the future, the reality is far from it)
With regards to my CV i only include an email address (non personal i.e [email protected]....) i also only include my geographical area as (south west UK, south UK, North UK etc) i do not include a mobile number, no personal details are listed but my key skills are, if a recruiter wants me they make an effort to get me and if i am comfortable releasing after a couple of emails then i provide a mobile number they can speak to me on.
i have had a number of emails from recruiters that claimed to have read my "excellent background skills" and suggest i am "perfect for this role" however they neglected to remove my post nominals as my surname (again another basic error).
I don't use FB and to be fair my closest friends know exactly what i do and what i can bring to an organisation, networking and recommendations from trusted people go further than what you can post online...
As for Wifi... a treat below on the dangers next time you accept the free coffee....
CM
https://www.youtube.com/watch?v=_YRs28yBYuI
firstly i must stress that i am in no way saying LinkedIn was the source or otherwise, just that many people use this and other social media sites to great advantage however there are many things we post online that in a number of cases can be fantastic inners for scammers who want to "socially engineer" you....
In cases such as LinkedIn i personally keep my information limited to a broad outline of what i do, (aviation specialist, aviation engineering, security professional, education manager) i do not include anything that relates to my past and keep my connections to only those i know & also have spoken to them and confirmed they are active on linkedin.
I had one work colleague who attempted to connect with me but he wasn't on the site, turned out someone had created a profile for him and was using it to fleece my friends contacts...(many people just accept connections on the basis they may be of use in the future, the reality is far from it)
With regards to my CV i only include an email address (non personal i.e [email protected]....) i also only include my geographical area as (south west UK, south UK, North UK etc) i do not include a mobile number, no personal details are listed but my key skills are, if a recruiter wants me they make an effort to get me and if i am comfortable releasing after a couple of emails then i provide a mobile number they can speak to me on.
i have had a number of emails from recruiters that claimed to have read my "excellent background skills" and suggest i am "perfect for this role" however they neglected to remove my post nominals as my surname (again another basic error).
I don't use FB and to be fair my closest friends know exactly what i do and what i can bring to an organisation, networking and recommendations from trusted people go further than what you can post online...
As for Wifi... a treat below on the dangers next time you accept the free coffee....
CM
https://www.youtube.com/watch?v=_YRs28yBYuI
Last edited by Colonal Mustard; 2nd Dec 2016 at 17:47. Reason: I'm pretty tech savvy but cant embed the darn video...
