**One ICQ Con (Literally)** Beware!
Written: Jul 12 '00 (Updated Jul 14 '00)
|
Product Rating:
|
|
|
Pros: Free, Many Features, Universal
Cons: User is vulnerable; Caution Must be taken
|
|
|
| WendyT's Full Review: ICQ |
Several months ago I downloaded and installed the instant chat client ICQ, version 2000a. There are quite a few new features in this version, one of which makes you vulnerable to all ICQ users. Aptly called Web Aware, this features allows your online/offline status to be obtainable by all other users. Since turning this feature on for notification purposes on a bulletin board, I've been bombarded with spam, unsolicited chat requests (usually of a vulgar tone) as well having been 'added' to the contact list of literally hundreds of people I do not know. There is a greater problem at hand, though.
The Scam
Last week someone sent me a message asking if I had more than one account registered. He said he was looking to obtain a low UIN (Unique Identifying Number) account and wanted to know if I had an 'extra' that he could have. The account I have was registered more than three years ago and my UIN is comprised of six digits. I know only one other person with a number that low. Most people I know that use ICQ have numbers that range from 7-9 digits. Apparently, lower numbers are a hot commodity at the moment. When I answered negatively, he thanked me and said good-bye. I thought nothing of the incident until yesterday.
Yesterday while at work, I received an anonymous message which read: Dear User, there is now a filtration of all six-digits UINs. If you want to keep your UIN then just reply with your icq password twice.
Otherwise your UIN will be unregistered!
Faithfully yours, administration ICQ
ICQ's Reaction
There was no identifying information on this person, nothing to indicate that they were indeed from ICQ. Obviously, red flags went up immediately. I forwarded the message to the ICQ technical team with my questions about it. A reply was received last night indicating that they could not help me. However, they did supply another email address to whom I sent my inquiry again.
When I returned home from work today, I had received the following from them (less than 24 hours!). <Please note, I am quoting so that I may be concise>:
>>Dear Wendy,
<snip>
The ICQ Team does not participate in the practice described in your email. The person reported to have contacted you is not acting on behalf of the ICQ Team.
<snip>
The following are some precautions that may assist in protecting your ICQ password and your computer from hazards such as viruses and Trojan Horses:
·Never give out your password to anyone. Please be cautious of people who claim to be associated with us. Remember: The ICQ staff will never ask you for your password.
·Create a password that includes a combination of letters and numbers.
·Never download files (via email attachment, file transfer etc.) from people you do not know. It is good practice over the internet to verify that the person sending you a file is indeed the person you think they are by asking them to provide information known only to the both of you.
·Use an updated anti-virus program to scan all of the files you download.
Furthermore, ICQ enables its users to enhance the privacy and security level of their communications by adding various features that in some cases may remedy various privacy hazards. For privacy concerns, you may wish to review the ICQ Security Tutorial at http://www.icq.com/features/security/
But, Wait!
Most of the above is obvious, of course. But in our race to believe people (even over the internet), we can be duped. The thing that struck me as being most important as I began to write this, is that had I believed this person, I would have hurt not only myself. Not unlike unsafe sex, this problem could be spread easily. If a user name/number and password is compromised on a system such as ICQ, so would the users contact list. Corrupted files, viruses and just plain harassment could be sent to your friends and family if they thought it was the real user. A friend could innocently send a message, which would be intercepted by the evil-doer. This person could in turn, try to send the victim a new picture or funny joke, etc. that is actually a virus.
I really don't care what my UIN is on ICQ. However, I do care that my friends are safe from people such as this. Please be careful!
This ICQ team was fantastic in getting back to me quickly. If you need to contact them, the email address is: pniyot_shonot@icq.com
Recommended:
Yes
|
|
|
|
Epinions.com ID: WendyT
|
|
Member: Wendy Theard
Location: Slidell, LA
Reviews written: 80
Trusted by: 102 members
|
|
|