What a stressful week it's been
Basically I was at work and came home to a rather distressed mother who said the bank rang her to tell her someone's taken £11,000 out of her bank account. They said they was from Lloyds fraud team. They had her downloading apps, setting up new bank accounts.. Told her to transfer money about. well you can probably guess where all this is heading...
Normally she's pretty savvy but this one caugh her out. When i got home she had downloaded "Anydesk" and was logged into her bank account. I thought WTF! I closed the app and her bank page. She told people on the phone her son just come home and to explain it all to him, but the phone went dead. Think the battery went as she must have been on the phone for a long time.
I turned off her laptop and drove her down to the bank in town to figure out what was going on. We spent over 3 hours there talking to fraud team. Long story short, they didn't see anything odd but froze all her accounts and cards to be on the safe side. The fraud team told me not to use the laptop until the been cleaned by a IT company. Thought no thanks, I'll do that myself.
After getting back home I turned off the router and looked closer at the laptop. It doesn't seem like anything else was downloaded other than a small 3MB program of Anydesk. It wasn't installed even. I couldn't find anything wrong but simply didn't know the full extent of what actually happend. So nuked it to be on the safe side.
I had to explain to her they got her to download the app so they could see what she did on the screen. It's unknown if they actually had control over the laptop as I'm not familiar with AnyDesk software. But I'm not sure they did as they could have taken control over her laptop and emptied her accounts. Though they did tell her exactly how much was in her accounts. I think that's why they sounded convincing as how else could they know how much was in her account if they wasn't from the bank? Well now she knows they were looking at exactly what she was on the screen. They now know her bank passwords and account numbers etc.. I don't think they could see her password without a keylogger. But they would have got some info even just visually.
She said security things were popping up but only for a second. So I wonder if the hackers were clicking away all that stuff. Hard to tell what was going on as I wasn't there at the time. But antivirus wouldn't likely have detected AnyDesk as it's a proper app. If I had all the security options on it might have blocked it

But it likely wouldn't have helped as the hackers would either bypass the warnings or tell mother to do it. Bit hard to defend against the "user". All the security in the world doesn't help if the user can bypass it all. It's something I hadn't considered, that less tech savvy people can be caught out. The security weak point is always going to be the user
In Linux it seems to ask for a password each time something "sensitive" happens. So don't tell anyone the password I guess. Windows pops up "do you want to run.." type boxes, but in this case doesn't help.
I have fortified my windows pc as well. Nothing runs at all without asking. Even windows services pop up boxes. So have to confirm them all. There are various other lines of defence. But I'll not mention those as this is a public forum.
Fast forward. I've wiped windows off the laptop and put mx Linux on it. I was going to do it anyway when I got the hang of it more. But things were rushed as she needed the laptop to do her banking etc.That was a mini nightmare all by itself. I'll rant about that in my Linux blog next week.
Also in the mix I've had booting problems with Linux and windows on my pc again

That's another long rant of stuff which drove me to many sleepless nights this week. Got a nice headache aswell.
So I'm totally exhausted now. My hands are killing due to all the urgent pc work this week. So I likey won't be around much for the next few days. Kinda had enough of technology and the internet for the time being.
Anyway, all seems well now. Her passwords are changed and we got her accounts reactivated this afternoon. She's just waiting for her new cards to come now. My pc seems ok again now. I've reinstalled MX about 20 times this week. So had enough of that now as well.
Got van MOT next week. So need to get some sleep for the pending arguments I'm likely going to end up having with them. I've run out of garages to take my van to. So stuck with the local one now. Last time they claimed a bit of rust on the brake pipes, fair enough, they suggested replace the whole lot. Like erm no! My old van was in a right state and only needed a small pipe replacement. My "new" van is like new even though it's 20 years old. It's only done 34k on the clock and was my dad's van where it sat in the garage for 10 years.
They did the same BS to my mum's car. They make it sound like it's falling to bits when I can't even find rust on the parts they claim need replacing. I miss our old MOT guy. Never had all this BS with him. He always used to let me down the pit and show me what's what. Sad times we live in these days
