Original subtitles

this simple email will bypass your

this simple email will bypass your

this simple email will bypass your complicated password and your two-factor

complicated password and your two-factor

complicated password and your two-factor authentication no matter how much

authentication no matter how much

authentication no matter how much protection you have hackers can get your

protection you have hackers can get your

protection you have hackers can get your credit card info access your bank

credit card info access your bank

credit card info access your bank account your email and anything else

account your email and anything else

account your email and anything else that you log into and there is nothing

that you log into and there is nothing

that you log into and there is nothing you can do to stop them what is going on

you can do to stop them what is going on

you can do to stop them what is going on this type of attack is called info

this type of attack is called info

this type of attack is called info Stealers and an info stealer as the name

Stealers and an info stealer as the name

Stealers and an info stealer as the name suggests steals information it used to

suggests steals information it used to

suggests steals information it used to be all about stealing your key strokes

be all about stealing your key strokes

be all about stealing your key strokes with a key logger and send all that

with a key logger and send all that

with a key logger and send all that information to the threat actor who

information to the threat actor who

information to the threat actor who would then look for username and

would then look for username and

would then look for username and passwords however with the introduction

passwords however with the introduction

passwords however with the introduction of two Factor authentication this became

of two Factor authentication this became

of two Factor authentication this became kind of useless as they would require

kind of useless as they would require

kind of useless as they would require that second factor to log in so over the

that second factor to log in so over the

that second factor to log in so over the years the info Stealers have evolved

years the info Stealers have evolved

years the info Stealers have evolved into stealing information from your

into stealing information from your

into stealing information from your browser all because of a simple thing

browser all because of a simple thing

browser all because of a simple thing that we all want and we all have

that we all want and we all have

that we all want and we all have convenience imagine having to put in

convenience imagine having to put in

convenience imagine having to put in your username and password and then your

your username and password and then your

your username and password and then your two-factor

two-factor

two-factor authentication every single time you

authentication every single time you

authentication every single time you want to check your email or every single

want to check your email or every single

want to check your email or every single time you want to quickly check your

time you want to quickly check your

time you want to quickly check your calendar or see what's going on on

calendar or see what's going on on

calendar or see what's going on on Facebook or the latest tweets that would

Facebook or the latest tweets that would

Facebook or the latest tweets that would be so irritating so what websites and

be so irritating so what websites and

be so irritating so what websites and online services do is remember you you

online services do is remember you you

online services do is remember you you log in once successfully therefore the

log in once successfully therefore the

log in once successfully therefore the next time you visit that site from the

next time you visit that site from the

next time you visit that site from the same computer and the same browser it

same computer and the same browser it

same computer and the same browser it knows that it's you and you don't have

knows that it's you and you don't have

knows that it's you and you don't have to keep putting in your credential it

to keep putting in your credential it

to keep putting in your credential it does this with a combination of cookies

does this with a combination of cookies

does this with a combination of cookies and authentication tokens now without

and authentication tokens now without

and authentication tokens now without getting into the technical details of

getting into the technical details of

getting into the technical details of each and when one is used over the other

each and when one is used over the other

each and when one is used over the other essentially it's a file that is stored

essentially it's a file that is stored

essentially it's a file that is stored on your computer and confirms that you

on your computer and confirms that you

on your computer and confirms that you have access to that website nice and

have access to that website nice and

have access to that website nice and convenient for us but with this

convenient for us but with this

convenient for us but with this understanding what would happen if I

understanding what would happen if I

understanding what would happen if I could grab this file from your computer

could grab this file from your computer

could grab this file from your computer and put it on mine I would access the

and put it on mine I would access the

and put it on mine I would access the same websites the website would look for

same websites the website would look for

same websites the website would look for that file it will see that it has all

that file it will see that it has all

that file it will see that it has all the right information that matches its

the right information that matches its

the right information that matches its internal system and therefore it will

internal system and therefore it will

internal system and therefore it will grant me access into your account as far

grant me access into your account as far

grant me access into your account as far as the website is concerned I am you so

as the website is concerned I am you so

as the website is concerned I am you so let's get back to that email it comes

let's get back to that email it comes

let's get back to that email it comes from somebody that you typically would

from somebody that you typically would

from somebody that you typically would know that just contains an attachment in

know that just contains an attachment in

know that just contains an attachment in this case it's a video file but the

this case it's a video file but the

this case it's a video file but the attachment could be anything it could be

attachment could be anything it could be

attachment could be anything it could be a PDF an image a word doc but of course

a PDF an image a word doc but of course

a PDF an image a word doc but of course it's none of those actual files what the

it's none of those actual files what the

it's none of those actual files what the threat actors do is create a file that

threat actors do is create a file that

threat actors do is create a file that looks like that video file PDF or any

looks like that video file PDF or any

looks like that video file PDF or any type of file that file even has the

type of file that file even has the

type of file that file even has the right icon for that type of file now

right icon for that type of file now

right icon for that type of file now when you open that attachment even if

when you open that attachment even if

when you open that attachment even if you open it in preview mode the

you open it in preview mode the

you open it in preview mode the malicious code inside that file runs the

malicious code inside that file runs the

malicious code inside that file runs the smart things that these threat actors do

smart things that these threat actors do

smart things that these threat actors do is they make it look like

is they make it look like

is they make it look like nothing happened you may even get a

nothing happened you may even get a

nothing happened you may even get a message on your screen saying something

message on your screen saying something

message on your screen saying something like the file is corrupt and cannot be

like the file is corrupt and cannot be

like the file is corrupt and cannot be run so you just move on with your day

run so you just move on with your day

run so you just move on with your day what you don't realize is that all your

what you don't realize is that all your

what you don't realize is that all your tokens and cookies and all that

tokens and cookies and all that

tokens and cookies and all that information from your browser has just

information from your browser has just

information from your browser has just been stolen and sent to that threat

been stolen and sent to that threat

been stolen and sent to that threat actor for all intents and purposes you

actor for all intents and purposes you

actor for all intents and purposes you are hacked you just don't know it now

are hacked you just don't know it now

are hacked you just don't know it now that they have your info they can load

that they have your info they can load

that they have your info they can load those files on their computer and are

those files on their computer and are

those files on their computer and are able to bypass your complicated password

able to bypass your complicated password

able to bypass your complicated password and your two-factor authentication what

and your two-factor authentication what

and your two-factor authentication what they do next is really anything that

they do next is really anything that

they do next is really anything that they want sometimes they run scams on

they want sometimes they run scams on

they want sometimes they run scams on your social media other times they log

your social media other times they log

your social media other times they log into your bank or your PayPal and try to

into your bank or your PayPal and try to

into your bank or your PayPal and try to transfer money they can even take out

transfer money they can even take out

transfer money they can even take out loans in your name run identity theft

loans in your name run identity theft

loans in your name run identity theft scams and basically ruin your digital

scams and basically ruin your digital

scams and basically ruin your digital life this is serious now John Hammond

life this is serious now John Hammond

life this is serious now John Hammond who is a security researcher actually

who is a security researcher actually

who is a security researcher actually shows how the code works if you want to

shows how the code works if you want to

shows how the code works if you want to check it out I'll have a link in the

check it out I'll have a link in the

check it out I'll have a link in the description below now it looks super

description below now it looks super

description below now it looks super complicated so you would think that in

complicated so you would think that in

complicated so you would think that in order to pull this off hackers will need

order to pull this off hackers will need

order to pull this off hackers will need to be some genius coders but that is not

to be some genius coders but that is not

to be some genius coders but that is not the case just like you can pay a monthly

the case just like you can pay a monthly

the case just like you can pay a monthly fee for Netflix there are maway services

fee for Netflix there are maway services

fee for Netflix there are maway services on the dark web well for a couple of

on the dark web well for a couple of

on the dark web well for a couple of hundred bucks you can get your own maway

hundred bucks you can get your own maway

hundred bucks you can get your own maway ready to go this is one of the reasons

ready to go this is one of the reasons

ready to go this is one of the reasons why we seeing this threat on the rise as

why we seeing this threat on the rise as

why we seeing this threat on the rise as info Steelers can literally be done by

info Steelers can literally be done by

info Steelers can literally be done by anyone in a couple of minutes and in an

anyone in a couple of minutes and in an

anyone in a couple of minutes and in an instant you lose access to your entire

instant you lose access to your entire

instant you lose access to your entire Digital Life so what can you do to

Digital Life so what can you do to

Digital Life so what can you do to protect yourself well firstly you should

protect yourself well firstly you should

protect yourself well firstly you should log out of important websites like your

log out of important websites like your

log out of important websites like your Google your banking website or anything

Google your banking website or anything

Google your banking website or anything else that you deem important then just

else that you deem important then just

else that you deem important then just log back in when you do that it

log back in when you do that it

log back in when you do that it invalidates any previous tokens which

invalidates any previous tokens which

invalidates any previous tokens which means that if anybody has those tokens

means that if anybody has those tokens

means that if anybody has those tokens they just became useless get into the

they just became useless get into the

they just became useless get into the habit of logging out of important

habit of logging out of important

habit of logging out of important websites once a month ideally more often

websites once a month ideally more often

websites once a month ideally more often yes it's a pain but definitely worth it

yes it's a pain but definitely worth it

yes it's a pain but definitely worth it to up your security level next if you

to up your security level next if you

to up your security level next if you typically get attachment in emails I

typically get attachment in emails I

typically get attachment in emails I highly recommend getting into the habit

highly recommend getting into the habit

highly recommend getting into the habit of asking the sender not to send the

of asking the sender not to send the

of asking the sender not to send the actual file as an attachment but to

actual file as an attachment but to

actual file as an attachment but to rather put that file into something like

rather put that file into something like

rather put that file into something like Google drive or Dropbox and then share

Google drive or Dropbox and then share

Google drive or Dropbox and then share the link this is because Google or

the link this is because Google or

the link this is because Google or Dropbox or those cloud storage services

Dropbox or those cloud storage services

Dropbox or those cloud storage services are simply not going to host malware so

are simply not going to host malware so

are simply not going to host malware so if it's legit you will get a link and

if it's legit you will get a link and

if it's legit you will get a link and then you know that it's already been

then you know that it's already been

then you know that it's already been scanned by Google and your antivirus

scanned by Google and your antivirus

scanned by Google and your antivirus will then do another scanned again now

will then do another scanned again now

will then do another scanned again now next if you get a random email from

next if you get a random email from

next if you get a random email from people you don't know and are not

people you don't know and are not

people you don't know and are not expecting and that email contains an

expecting and that email contains an

expecting and that email contains an attachment just delete it do not try to

attachment just delete it do not try to

attachment just delete it do not try to even open it in preview mode that will

even open it in preview mode that will

even open it in preview mode that will execute the code and no matter how

execute the code and no matter how

execute the code and no matter how tempting it is to open an email within

tempting it is to open an email within

tempting it is to open an email within only fans photos or confidential salary

only fans photos or confidential salary

only fans photos or confidential salary list attachment do not fall for it and

list attachment do not fall for it and

list attachment do not fall for it and never ever ever open a zip file that is

never ever ever open a zip file that is

never ever ever open a zip file that is password protected this is a Surefire

password protected this is a Surefire

password protected this is a Surefire way to get infected antivirus doesn't

way to get infected antivirus doesn't

way to get infected antivirus doesn't scan those protected files and this is

scan those protected files and this is

scan those protected files and this is where malware is easily hidden you

where malware is easily hidden you

where malware is easily hidden you should also enable safe browsing if

should also enable safe browsing if

should also enable safe browsing if you're using Chrome go to your Google

you're using Chrome go to your Google

you're using Chrome go to your Google accounts select on security then click

accounts select on security then click

accounts select on security then click on enhance safe browsing for your

on enhance safe browsing for your

on enhance safe browsing for your account and switch that on if any email

account and switch that on if any email

account and switch that on if any email or website says anything like this is a

or website says anything like this is a

or website says anything like this is a new version of the file so your anti

new version of the file so your anti

new version of the file so your anti virus doesn't know about it yet just

virus doesn't know about it yet just

virus doesn't know about it yet just disable it whilst you install the file

disable it whilst you install the file

disable it whilst you install the file if you ever see anything like that never

if you ever see anything like that never

if you ever see anything like that never ever do that the antivirus doesn't need

ever do that the antivirus doesn't need

ever do that the antivirus doesn't need to know about every new version of every

to know about every new version of every

to know about every new version of every file it will look at the file content

file it will look at the file content

file it will look at the file content itself and find out if it is malicious

itself and find out if it is malicious

itself and find out if it is malicious or not malicious this message is

or not malicious this message is

or not malicious this message is nonsense I cannot tell you how many

nonsense I cannot tell you how many

nonsense I cannot tell you how many people will click on a link that they

people will click on a link that they

people will click on a link that they found on Google for the latest update to

found on Google for the latest update to

found on Google for the latest update to a game or the latest Zoom version or

a game or the latest Zoom version or

a game or the latest Zoom version or that pirated software and will disable

that pirated software and will disable

that pirated software and will disable their antivirus just to get that latest

their antivirus just to get that latest

their antivirus just to get that latest update don't do that and to be clear

update don't do that and to be clear

update don't do that and to be clear complicated passwords along with two

complicated passwords along with two

complicated passwords along with two Factor authentication are a must I am

Factor authentication are a must I am

Factor authentication are a must I am not saying that we shouldn't have them

not saying that we shouldn't have them

not saying that we shouldn't have them what I am saying is that we must not be

what I am saying is that we must not be

what I am saying is that we must not be manipulated into clicking on attachment

manipulated into clicking on attachment

manipulated into clicking on attachment and certainly never disable our security

and certainly never disable our security

and certainly never disable our security features this is why so many companies

features this is why so many companies

features this is why so many companies are rolling out pass Keys which is meant

are rolling out pass Keys which is meant

are rolling out pass Keys which is meant to replace passwords and you can see all

to replace passwords and you can see all

to replace passwords and you can see all about them in this video right over here

about them in this video right over here

about them in this video right over here now before you head out don't forget to

now before you head out don't forget to

now before you head out don't forget to hit that subscribe button give the video

hit that subscribe button give the video

hit that subscribe button give the video a thumbs up I will see you in this video

a thumbs up I will see you in this video

a thumbs up I will see you in this video Let's Go oh