MFA Push Bombing Can Wear You Down

Cybercriminals are getting smarter about bypassing multi-factor authentication (MFA), and one of their favorite tricks is something called push bombing. It’s a simple tactic, but extremely effective when victims are caught off guard or overwhelmed. It's designed to wear us down. And most of us have probably been overwhelmed by notifications at some point, which is why this type of attack has proven successful time and again for attackers. READ FULL STORY

Verification CAPTCHA Spreads Malware to Windows Users

That familiar CAPTCHA challenge we’re asked to do proving we’re not robots is getting some Windows users in trouble. Hackers are using their own bogus CAPTCHA pages to sneak malware onto Windows devices. It looks like this is one-time that Windows users may pay the price for not being a robot. The good news is, whether you’re clicking a box, choosing frames where an item is showing, or typing-in random letters, there’s a way to tell when you’re being targeted. READ FULL STORY

Quick Social Engineering Refresher

Let's dive into the world of social engineering and its impact on our lives, shall we? Brace yourself for a friendly reminder about this sneaky psychological manipulation technique that can really mess with your day. Picture this: someone cleverly exploits your mind to get you to do their bidding or spill sensitive information. It could never happen to you, right? Well, think again. Sometimes they sneak up on you and don't even know what's going on until it's too late. READ FULL STORY

Is a Criminal Adding Your Card to a Mobile Wallet?

Mobile wallets such as Apple Pay and Google Pay offer a convenient and generally secure way to make purchases. Unfortunately, criminals have found a way to abuse the process used to add payment cards to these services. In this scam, a criminal adds someone else’s debit or credit card to a mobile wallet on a device the criminal controls. Once the card is approved, the criminal can use the phone to make purchases, even though the physical card is still safely in the owner’s possession. READ FULL STORY

While Charity Scams Never Take a Day Off, Giving Tuesday Brings Out the Grinches

The spirit of giving doesn’t depend on the season. However, when Giving Tuesday comes around every year, scammers are quick to jump on that bandwagon. They exploit generosity, posing as legitimate charities or creating entirely fake ones to steal money and personal information. Their tactics change, but the goal never does: To take advantage of your kindness. Before you donate, take a moment, a little caution goes a long way toward protecting both your wallet and your identity. READ FULL STORY

MyChart Has an Epic New Problem: Scammers Want Your Medical Information

If you use MyChart to check lab results, schedule appointments, message your doctor, or pay a medical bill, there's a new scam you need to know about. Cybercriminals are sending emails and text messages that use the familiar MyChart name and logo to make them look legitimate. Some promise some freebies, while others claim you have important medical results waiting. The goal is to get you to click, hand over personal information, or even install malware. READ FULL STORY

Apple’s Spyware Warning-Should You Panic?

Apple’s mercenary spyware warnings have been making headlines, and understandably, that can sound like a digital five-alarm fire. The good news is that most people will never be targeted by this type of attack. These warnings are generally aimed at a small group of individuals who may be targeted because of their work, access to sensitive information, or public profile. But if Apple does warn you, don’t brush it off. Learn how to tell a real Apple notification from a phishing scam, what steps to take, and how to strengthen your iPhone’s defenses before trouble comes knocking. READ FULL STORY

A Check on P2P Scams

There are so many payment apps out there; PayPal, Venmo, and Zelle, for instance and perhaps you’ve probably wondered: Are these apps actually safe? The short answer—yes, if you’re careful. While most P2P apps use encryption to protect your data, scammers are constantly looking for new ways to trick users into giving up their money. And because these apps are often linked directly to your bank account, one mistake can be very costly. But just knowing how to spot potential scams and fraud can help you use them safely. READ FULL STORY

Unpaid Toll Scam Drives Us All Crazy

Have you taken a toll road recently? Well, even if you haven’t, this story is for you. There is a text message going around that anyone who drives on highways or freeways should be on the lookout for and it’s just annoying enough to drive anyone mad. As you can guess, it involves driving (or perhaps not driving) toll roads and the supposed accompanying fees related to them, as well as fake websites, the attempted collection of information, and other phishing flags. READ FULL STORY

Protect Yourself From Phishing Scams: 8 Steps To Better Security

Since the mid 1990’s, email phishing scams have been on the rise. Like most cybercrimes, hackers have improved and refined their phishing methods over time. Now, there’s been a massive increase in targets due to the continuing coronavirus epidemic. Email phishing continues to be the method of choice for many cybercriminals to enter your device, steal your data, identity, finances, and more. A study by Tessian finds that 96% of phishing attacks arrive via email, showing the threat is very real. READ FULL STORY

Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

Did Your Browser Crash? A Helpful Hacker Will Help You Fix It

Your computer suddenly freezes. The browser crashes, and a warning message pops up saying your system has been compromised. Before you can even figure out what’s happening, the phone rings and someone claiming to be from tech support offers to help fix the problem. It sounds convenient, even reassuring. Unfortunately, that helpful voice on the line could be part of a growing scam where hackers intentionally crash a user’s browser and then swoop in pretending to save the day. Knowing how the trick works can help you avoid handing over your company’s information to a criminal. READ FULL STORY