{"id":15455,"date":"2022-04-20T08:00:00","date_gmt":"2022-04-20T12:00:00","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=15455"},"modified":"2022-04-28T12:06:17","modified_gmt":"2022-04-28T16:06:17","slug":"a-600000-reminder-to-not-save-your-passwords-on-post-it-notes","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/a-600000-reminder-to-not-save-your-passwords-on-post-it-notes\/","title":{"rendered":"A $600,000 Reminder to Not Save Your Passwords on Post-It Notes"},"content":{"rendered":"\n

Data from Chainanalysis<\/a> shows that $14 billion in cryptocurrency was stolen in 2021 \u2014 some of which were due to sophisticated attacks. Here\u2019s one story that\u2019s a pricey reminder to never forget the most basic security rules<\/h2>\n\n\n\n

A security analyst in Pinellas Park, Florida (about a 15-minute drive from our office in downtown St. Petersburg) was arrested for stealing well over half a million dollars in cryptocurrency from a client. But unlike many other crypto theft cases, this incident isn\u2019t the result of a complex cyber attack or even a phishing scam. The way this cybercriminal carried out this theft is far simpler to explain and even easier to prevent\u2026<\/p>\n\n\n\n

Let\u2019s hash it out.<\/span><\/p>\n\n\n\n

An Overview of What Occurred and How Nearly $600,000 in Crypto Was Stolen<\/h2>\n\n\n\n

Aaron Motta, the 27-year-old owner of Motta Management and Mitigation Services (according to his LinkedIn profile<\/a>), is accused of stealing $575,910.61 in cryptocurrency from a client\u2019s Trezor crypto hardware wallet. FOX 13 reports<\/a> the victim invited Motta into their home to install a security system. Once there, Motta found the victim\u2019s hardware storage device, which stores cryptocurrency offline, and stole it.<\/p>\n\n\n\n

Of course, simply finding the hardware wasn\u2019t the only contributing factor here; what makes matters worse for the victim is that they\u2019d decided to store their account passwords in the home insecurely as well. In this case, the Tampa Bay Times<\/em> reports<\/a> that Motta used the password to gain access to the elderly victim\u2019s cryptocurrency on the stolen device. He then transferred the digital currency to multiple wallets he controlled.<\/p>\n\n\n\n

According to Pinellas County Sheriff\u2019s Office (PCSO) Who\u2019s In Jail booking records<\/a>, Motta has been charged with two felonies: 1) grand theft, and 2) offenses against computer users. He\u2019s now out of jail on a $60,000 bond.<\/p>\n\n\n\n

Motta\u2019s LinkedIn profile has him listed as a \u201cCertified Ethical Hacker & CyberSec Analyst\u201d who is \u201cstriving to be the change [he wishes] to see in the world.\u201d However, looking at PCSO\u2019s arrest records for Motta, it looks like the Georgia native has some questionable decision-making skills. <\/p>\n\n\n\n

Suffice it to say, it looks like Motta\u2019s falling a bit short of the mark if his intention is to have a positive influence on the world. This goes to show that you can\u2019t just assume anyone claiming to be an expert is a legitimate expert. Carefully vet anyone you hire, particularly those who will have access to your sensitive data, network and systems.<\/p>\n\n\n<\/span>\n\n\n\n

Victim Made an Easy Target by Storing Crypto Wallet and Account Passwords Insecurely<\/h2>\n\n\n\n
\"A
A stock image of a poor password that’s stored insecurely on a sticky note that’s left in plain view.<\/figcaption><\/figure>\n\n\n\n

The title of the article may leave you asking: did the victim really<\/em> store their passwords on Post-It notes? We don\u2019t know what the victim\u2019s passwords were written on specifically and, frankly, it doesn\u2019t matter. Whether you\u2019re storing your passwords on a sticky note or in a password book, we want to make here that you need to lock up those secrets to keep them safe.<\/p>\n\n\n\n

We know that trying to remember a slew of passwords for dozens of accounts is virtually impossible. But storing your passwords insecurely \u2014 especially in the same area as your device \u2014 is akin to placing all of your valuables in a safe and then taping the safe\u2019s security combination on the door. Sure, your belongings are locked up, but all a criminal has to do is enter the combination you\u2019ve provided to gain access to them.<\/p>\n\n\n\n

Before anyone gets upset by thinking we\u2019re attacking the victim: no, we\u2019re not blaming the victim here. Clearly, Motta was at the victim\u2019s home in a professional capacity as a security expert and never should have taken the device in the first place. If anything, he should have educated the homeowner about the security issues. But as we all know, bad guys are going to do what they\u2019re going to do regardless of what\u2019s right or wrong \u2014 there\u2019s no need to make their criminal endeavors any easier.<\/p>\n\n\n\n

We want our readers to realize that something like this can happen to them as well; this is why you should take steps to protect your accounts. Some of the ways to do this include:<\/p>\n\n\n\n