Quote from: TimothyEllis on Today at 01:50:07 AM

Quote from: Post-Crisis D on Today at 01:41:46 AM

Also, I am tempted (again) to put up a fake WordPress login page on my site (which does not use WordPress) just to keep the less sophisticated would-be hackers busy trying to login to a page that wouldn't actually log them into anything.

Why not let them log in, and redirect them to a porn site.

They might enjoy that?

Maybe I could redirect them to a phishing site.    Let the scammers scam each other for a bit.

 

Also, I am tempted (again) to put up a fake WordPress login page on my site (which does not use WordPress) just to keep the less sophisticated would-be hackers busy trying to login to a page that wouldn't actually log them into anything.

Why not let them log in, and redirect them to a porn site.

And someone or "somebot" keeps trying to get into my Facebook account, too.

Someone tried to use the reset password feature on my Facebook account the other day.  There was a link in the eMail from Facebook where you can report that you didn't request the reset, so I did that.

But, it probably wouldn't matter anyway since I can't even get into Facebook with my current password.  A while back, Facebook forced me into two-factor authentication and demanded my phone number.  I'm not giving Facebook my phone number, so my Facebook account is pretty much dead to me now.

And, yes, there are plenty of attempts at getting into my websites.  On the plus side, most of my websites don't use WordPress so that tends to stymie most attempts since the majority of attempts seem to be targeted at the wp-login.php page which does not exist.

I'm seeing the same pattern with Microsoft. And a lot of bots try to breach my author site every single day.

With proper precautions, these threats can probably be kept at bay.

After a data breach some time ago, I followed Lifelock's instructions on how to make life difficult for identity thieves. Specifically, I got all three credit bureaus to lock my info, so no one can request it. There are also two agencies (can't remember the names) that locked the ability to open a bank account or a utility account in my name. Hackers can still attempt to breach existing accounts, but no one can open new ones.

I'd have to go through a tedious process to temporarily unlock if I needed to open a bank account, get a credit card, move, or take out a loan. All of those are at best unlikely. I would have thought twice if any of those were things I needed to do frequently, but that isn't the case.

Recently my identity theft company--the one I have a free sub to because of prior data breaches--told me my name has been found on the Dark Web. Well, okay. My name is public. I asked them about it and they said no biggie. Really?

Of late, there has been an uptick in efforts to get into my Microsoft account--two yesterday alone. What I don't understand is, why bother? Microsoft is not my best buddy. I don't hang out with Microsoft or give it money every month, and I don't believe I have ever bought anything from Microsoft directly, either. I have registered software with Microsoft because I had to in order to use the software, but no credit card info was involved. I'm scratching my head over this one.

And the usual "I saw you..." extortion emails continue, listing so far three legit passwords from things I signed up for years ago. Passwords I never used for anything else, and not involving money, most of which were for sites that now are moribund. So, where's the threat in that? I did scurry around and change one banking password because that bank doesn't have two-factor authentication. (And it's a very big bank, too. Weird.) I'd changed my user name on that a long time ago and now I have such a long, complicated, and nonsensical password that woe betide me should I ever have to get into that account and don't have my cheat sheet handy.

Beyond activating two-factor and changing passwords now and then, I don't think there's anything else I can do. A recent article about someone being hacked said his online password manager had been hacked. Yikes. 

And someone or "somebot" keeps trying to get into my Facebook account, too.

On balance, yes, I do feel under attack, presumably because my name is being sold and resold on the Dark Web. But the bad guys aren't winning so far.