Scammers nowadays have learned to manipulate with everything. It’s quit hard to protect from really good hacker, probably even impossible. They know ways to hack accounts (use different programs, viruses, spying worms). What might give a little chance to protect ourselves from them: never to click doubtful references, to think of complex passwords, to have two e-mails (working and personal), two phone numbers (working and personal), additional comp without internet connection (where you can keep in safe all significant information). And, of course, emotions. We need to control them because most of mistakes people make on emotions. I know some stories when traders received suspicious massage on e-mail with suspicious reference and on emotion click that reference and lose their wallets. Such stories sound for me like fantastic but I understand that this is a sad reality.
No need to "wind up" the situation! First, you need to understand that there are, in fact, 2 options to get your data:
- technological "holes" in the OS, browser, ....
- illogical behavior of a user who is aware of the risks or does not spare his assets.
I will repeat once again a simple set of rules that will minimize your risks by almost 99.9%.
1. Physically separate your main workplace (where you have mail, forums), a site with wallets, a site with mining, etc. At the main workplace, never store logins and passwords from accounts associated with cryptocurrencies (exchanges, google accounts, etc. .NS.)
2. Do not use the same logins and passwords on these different systems, and use complex passwords (at least 12-14 characters).
3. For exchanges, get a separate card for your mobile phone, do not use it anywhere, only for 2FA on exchanges.
4. At the workplace Use antivirus, use online access to GMAIL, update the system, antivirus, applications!
5. On the site where there are wallets - do not use ANYTHING other than wallets.
6. Pre-check wallets in a "sandbox" or on an isolated virtual machine (install and let it work for 2-4 weeks, during this time, as a rule, "bookmarks" are detected)
7. No games, porn sites, "click and get $ 100", sites for "adults", "sites with software and key generators", etc. on any of your devices ...
8. Any letter that arouses suspicion at least a little, or without means of authenticity confirmation - it is better to postpone it, send it to antivirus companies, and go on your own to the site from which the message was allegedly sent to you. For example, if a letter arrives from binance but there is no security code, be sure to add it to spam and send it to antivirus companies for research. Follow the direct link to the site - and if you were sent a message, then a copy of it will be in your notifications about some event.
I can add more rules, but these are already enough to minimize risks