Technical

6 Topics

Some info on email spam
I've seen a lot of discussion recently regarding an influx of spam seemingly originating from *.wemystic.com, pnc.si, tenova.com, and now waveapps.com. All of these are from valid domains with valid websites, mostly behind the Cloudflare content delivery network and their emails are mostly backed by GoogleUser email servers. But that doesn't necessarily mean they are real, it just means that the spammers have done a good job of hiding themselves. Many spammers use malicious software to infiltrate an email server. It uses valid email addresses that pass certain validation tests on the email server they've targeted to send their spam, including SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) - these fool the email server into allowing a spammer to appear like a valid email user. On the receiving side it also fools spam detection software into thinking it's valid, making it difficult to trap and filter out. There are other tells involving rDNS (Reverse-Domain Name System) (and others), but I don't want to over-complicate this. Making matters worse, the email servers provided by Google (aka googleuser) to third party users (such as those listed above) have been more or less overrun by Chinese 'spambots' over the past year and Google isn't doing much if anything about it. These are essentially robots that are flooding the internet with an immense amount of spam, consisting of mostly of fake phishing emails designed to get your login credentials to a specific site or attempt to sell you something as a third party partner. How those spambots get installed is another story, since these guys have gotten really good at hiding malicious code and 'plugins' that are used by various websites (as well as phone apps). They've also gotten real good at scanning the entire internet looking for websites with poor security protocols and taking advantage of any security vulnerabilities that aren't patched. They're also getting good at using AI to create spam that appears like normal email to the commonly used spam filtering software, such as SpamAssassin. To say this is a huge problem would actually be an understatement. I received 37 spam emails yesterday on my private, non-HughesNet email server, originating from various sources, mostly from googleuser and Asian domains, as well as normal user ISPs. The key was that a lot of it was similar-looking stuff, indicating that it was all botnet-generated spam from malware-infested websites and people's phone apps. So enough of the mind-numbing background of how it gets there, here's what you can do to protect yourself: 1. Stop using your email address as a UserID: Many of these operate off of bulk lists of email addresses that were either found on the dark web or purchased from a company that you've used that address as your userid. I can tell you that HughesNet did not sell their email list, otherwise I'd be inundated like the rest of you, and I'm not. I have my own website-based email server and rarely use my HughesNet address except for the occasional discussion with HughesNet personnel. So what's happening here is the former. Chances are you have a Facebook account or some other social media account that your userid is your HughesNet email address, and it's been sold to nefarious people by that company. Once it's out there, it's out there and there's nothing more you can do about that. But, you can ensure it doesn't get worse by using something other than your HughesNet email address when signing up for things. 2. Block whole domains, not email addresses: Amanda has already provided a process by which you can block email from a specific domain - not the whole email address, just the part to the right of the '@'. Spammers usually rotate what they use on the left side of the '@' so entering the whole email address will be fruitless. To enter the whole domain is usually done by simply entering something like `@*.wemystic.com` or `@wemystic.com`. The asterisk in the first one can indicate that anything ('sm', 'e', 'email') will fit the pattern for email domains that have two dots. Doing this should filter everything coming from that domain. 3. Don't open unsolicited email: If you get any of these emails - don't open it. Just adjust your filtering if necessary, then delete it, and forget about it. If you happen to open it by mistake, don't click on any embedded links or open any attachments. Nine times out of ten those links will either validate you as a real email address, or worse, much worse, bring you to a site that will install a keylogger on your computer. A keylogger records every userID and password you use and sends it to someone that can hack your credit cards, bank accounts, or other financial institutions. Don't click anything in an email! Segue to... 4. Use 2FA (2-factor authentication) for added protection: As an additional precaution, it is highly recommended that you use some form of 2FA to access these kinds of sites. A good example is using Google Authenticator, which is the software equivalent of an RSA keyfob that generates a six-digit code every minute. If the six-digit code doesn't match, they're not getting in. Last week I got repeated emails telling me someone was trying to hack and change the password to my Instagram account (which I rarely use anymore). I added 2FA to the account and the emails suddenly stopped. Again, segue to... 5. Delete all unused or dormant accounts: As I previously mentioned, unscrupulous companies sell user information for added revenue. Social media companies are notorious for this. If there's something you're not using or don't plan to use, delete the account. The next time they cull their user list for sale you won't be on it. And lastly... 6. Remember to change your passwords regularly and try not to reuse them: Look, I stink at this too. We all do. But once your userid/password pair is on the dark web there will be a ton of misanthropes trying to hack your accounts. You just make it that much easier for them if all of them use the same password. At least don't use the same pair you use for your bank login that you use for Facebook - that would be inviting disaster.
MarkJFine
16 days ago Place Community Knowledge Center
133Views
3likes
0Comments
Reschedule Your Technician Visit
If you have an upcoming appointment with a HughesNet technician, you will be able to view, and make changes to your appointment online by visiting MyHughesNet.com or through the HughesNet Mobile App. To make changes online, select “Account” from the options at the top of your page, then select “My Appointments”. Your current appointment information, including your preferred contact phone number, will be displayed here. If you would like to reschedule your appointment for any reason, simply click “RESCHEDULE” To reschedule your appointment, select your preferred date from the calendar and time from the available slots displayed below. After selecting the new date and time, a message will appear confirming your new appointment time:
Amanda
1 year ago Place Community Knowledge Center
1.5KViews
1like
0Comments
How can I see daily usage by device?
How can I see daily usage by device? HughesNet customers with a HT2000W modem can view device-level usage for 24 hour and previous 14 day periods on the ‘Connected Devices’ page found on myHughesNet.com under the ‘Usage’ category. First locate the “SEE ALL CONNECTED DEVICES” button on the bottom of the page. The following page displays the devices connected to your HughesNet system along with other helpful information such as, “Status, Signal Quality, Connection time, and 24 hour usage”. For further device-level information and to change the data usage period from 24 hours to last 14 days click on the “>” arrow next to the device on the expanded Network menu. It may take several minutes to load your data usage over the previous 14 day period.
Amanda
2 years ago Place Community Knowledge Center
2.5KViews
0likes
0Comments
Is It Time To Upgrade My Device?
When is it time to upgrade your favorite device? It’s a question that can only be answered by you! However, we would like to provide some tips that may help you decide when is the best time to upgrade.
Amanda
3 years ago Place Community Knowledge Center
1.9KViews
0likes
0Comments
Can I run a VPN over HughesNet?
Yes you can use a VPN, but speeds will be significantly reduced. Using a virtual private network (VPN) impacts the way your modem receives data. Learn more about using a VPN with HughesNet. A Virtual Private Network (VPN) is an added layer of protection. This layer of protection is only typically used when sensitive data is transmitted over the internet. To achieve this added layer of protection, data is encrypted or converted into a code that only the receiver can read. This encryption process requires the data to be encrypted and un-encrypted on both sides of the transfer. The encryption and un-encryption process can add time to the delivery. For typical cloud based applications a VPN is not required. Examples of VPN clients are Check Point Remote, FortiGate, FortiClient, and Cisco AnyConnect. VPNs can work with HughesNet. For many of your business activities, you may not need to be connected to your Corporate network. If you do need to use a VPN, we recommend you try to limit your activities while connected. If you remain in the VPN for internet activities which do not require VPN access, it can potentially slow the network and will also use more of your service plan data. Consult with your company’s IT department to learn if Split Tunneling is an option. This feature is recommended because it can improve performance while connected to your VPN. Note: HughesNet Technical Support does not provide help with configuring or troubleshooting problems associated with VPN clients.
Liz
3 years ago Place Community Knowledge Center
1.6KViews
0likes
0Comments
How do I find/change my Wi-Fi password?
If you have a Hughes HT200W Wi-Fi modem, you’ll find your wireless (Wi-Fi) password printed on the sticker on the back of the device. Changing your Wi-Fi password First you must access the System Control Center. The System Control Center provides access to system status, configuration information, and online documentation. To open the System Control Center, follow these steps: 1. Open a web browser such as Chrome, Firefox, or Internet Explorer. 2. Type www.systemcontrolcenter.com in the address bar and hit Enter. (Alternately, you can click that link to open it in a new window.) 3. Click the Wi-Fi Settings link on the left side of your screen. 4. The default password is “admin.” Enter this password in the dialog box and click Login. 5. Once you have logged in, you will see the Wi-Fi Settings home screen. 6. You will see your existing password written in the Password field. To change your password, clear what is written there and type your own. Choose something that is easy to remember but cannot be easily guessed. Then click Save Settings and exit the System Control Center. For more information about your HT2000W modem, view the User Guide here.
Liz
3 years ago Place Community Knowledge Center
18KViews
1like
0Comments