A $500 iPhone? That Sounds Phishy. And It Is!

A $500 voucher for a brand-new iPhone sounds like the kind of deal worth jumping on. Unfortunately, that is exactly what scammers are counting on. AARP is warning about a phony Apple website promoting a $500 voucher tied to the new foldable iPhone Duo. The offer looks convincing, but the real prize for criminals is not your money. It is access to your phone, passwords, photos, messages, and potentially financial information. And in this case, simply visiting the wrong website could be enough to put an older iPhone at risk. READ FULL STORY

Overlays For Androids For Criminal Convenience

Android Overlays are a powerful feature in the Android operating system. Theses allow apps to display content over other apps or over the system user interfaces. Ultimately this results in the user experience being more, well, user-friendly. So why is it important? This is useful in many ways, such as for displaying persistent notifications, those cheeky Android chat heads that float around the screen, or for using accessibility features. But those handy capabilities can also be misused by cybercriminals to create deceptive interfaces, tricking you. READ FULL STORY

Convincing Fake Election Messages

Think you can spot a fake election message? Cybercriminals are getting help from artificial intelligence to make scams more convincing than ever. The FBI and CISA are warning Americans about phishing emails, fraudulent text messages, AI-generated voices, and realistic videos that can be used to steal passwords, personal information, and money ahead of the 2026 midterm elections. From fake voter registration notices to bogus campaign donation requests, these schemes can fool even careful people. Learn the warning signs and the simple steps you can take to keep scammers from getting your vote, your data, or your cash. READ FULL STORY

What Everyday Internet Users Need to Know About the PHP Alert

A recently disclosed internet security flaw has cybersecurity experts on high alert, and it could put personal information at risk if website owners fail to act. The problem involves PHP, behind-the-scenes software used to run a huge portion of the internet’s websites. Researchers warn that criminals could exploit the weaknesses to break into vulnerable websites, potentially exposing sensitive information or taking control of affected systems. While the issue sounds technical, protecting yourself doesn’t have to be complicated. READ FULL STORY

Money Mule Scams Are More Common Than You Would Expect

A money mule scam is when someone sends money to you and asks you to send a portion of it to someone else. They often ask you to use gift cards or wire transfers. The money they are providing you is likely stolen. Drug trafficking and human tracking are also common sources of the money, and they're lying about the reason they need you to send it. The relationship, job, prize or other reason they use is not real and they are only using you to launder money.  READ FULL STORY

Ways To See If Your Data Has Been Stolen

With all the data breaches, whether by intrusion or accident lately, it’s likely your information was exposed somehow to someone you didn’t intend. After all, the marketing company Exactis, exposed hundreds of traits on us in 350 million records. Yahoo let out email addresses and passwords on billions of people, and of course who can forget the massive breach of Equifax just last year. There is a lot of information that gets leaked on us and the more the bad actors have on us, the more targeted their phishing campaigns can be. Checking on whether or not your data is available in the underground can help you mitigate any fraud or identity theft. READ FULL STORY

What's Behind Man-In-The-Middle Attacks and How to Avoid Them

It’s not the game many of us played as kids, but it is a distorted take on the same idea. Man-in-the-middle (MitM) cyberattacks do put someone in the middle of two sides, but that someone is a cybercriminal. And those on either side are clueless victims. In reality, MitM attacks are anything but a game. A typical MitM attack can disrupt operations, intercept usernames and passwords, emails, banking, and other financial details. Read on about how MitM attacks play out, including ways to avoid being caught up in these crimes. READ FULL STORY

Your Hotel's Wi-Fi May Be Working Against You

Hotel Wi-Fi has always come with a little baggage. Now there is another reason to be careful. ReliaQuest has uncovered a campaign in which attackers are taking control of Wi-Fi equipment at hotels, conference centers, and other public venues, then quietly redirecting guests to fake Microsoft 365 login pages. The scary part? You may not click a phishing email, download an attachment, or do anything obviously wrong. Simply connecting to the Wi-Fi could put your work account in the crosshairs. READ FULL STORY

Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more. Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware “RedLine Stealer” can hijack those stored passwords in a heartbeat. READ FULL STORY

Keep Track Of Common UPS Scams

With the popularity of online shopping, we all are getting packages delivered to our doors. While perusing the UPS website for important tracking information on a package I was expecting, I noticed there is an entire web page devoted to combatting fraud with regard to the shipment of UPS packages. We're sharing them with you too, as these types of scams are happening more and more these days, and with the impending holiday shopping season nearly upon us, they will most definitely increase in volume. READ FULL STORY

How To Protect Yourself After A Data Breach

Data breaches seem to happen like clockwork. None of them are your fault, but the responsibility to protect yourself and your personal information rests square on your shoulders. It can seem like a daunting task, but there are some fundamental actions that can be taken right now that can make you a significantly safer from falling victim to a cyberattack. In this video, Jim Stickley will cover a wide range of types of data that can be exposed and how you can protect yourself. Credit Card, SSN, personal information, and other types of data are in the wild, so you need to be prepared. READ FULL STORY

Meerkats Shapeshift to Steal Logins

Morphing Meerkat is a recently identified phishing-as-a-service (PhaaS) platform that employs advanced techniques to deceive users and steal credentials. Discovered by cybersecurity firm Infoblox, this platform exploits Domain Name System (DNS) mail exchange (MX) records to dynamically generate fake login pages, impersonating over 100 brands, including Gmail, Outlook, AOL, Office 365, and Yahoo. The attack initiates when a victim clicks on a malicious link embedded in a phishing email. READ FULL STORY