LockBit Threatening to Leak U.S. Bank Customer Data. U.S. Bank Claims They Don’t Have Any

U.S. Bank is caught in an unusual ransomware situation, and it is a good reminder that your bank doesn't necessarily have to be hacked for your information to be at risk. The ransomware group LockBit recently claimed it breached U.S. Bank and stole data, threatening to publish the information on September 3 unless the bank pays a ransom. U.S. Bank says its own systems, networks and data repositories were not compromised and that the incident appears to involve a "fourth party" outside the bank's environment. For customers, however, the distinction may not provide much comfort. READ FULL STORY

Who Needs the Key If You’re Just Going to Open the Door for Attackers

Cybercriminals are finding a clever way around one of our favorite security defenses: passwords and multi-factor authentication. The FBI’s Internet Crime Complaint Center is warning about a rise in OAuth consent phishing attacks, where criminals trick victims into granting a malicious app access to their email, files or other account information. The frightening part? You may never give the attacker your password at all. We have been told for years to protect our passwords and turn on multi-factor authentication. Good advice that is still valid, but the FBI is warning about a phishing trick that can sometimes sidestep both. READ FULL STORY

Your Home Is Safe. Your Information Might Not Be

Brinks Home is supposed to help keep criminals out of your house. Unfortunately, the company itself recently became a target. Cybercriminal group ShinyHunters claims it stole millions of records from Brinks Home and, after the company refused to pay a ransom, published roughly 41 GB of stolen data. The good news is that the company's alarm monitoring systems were not compromised. The bad news? Personal information potentially exposed in the attack could give scammers another way to target customers with convincing phishing emails, texts and phone calls. READ FULL STORY

Watch Out for Passport Renewal Scams Before Your International Getaway

While summer travel season is in full swing, any time is a good time to travel internationally. That’s unless your passport has expired or is expiring soon. Many Americans are discovering their passports are indeed in that predicament. Unfortunately, scammers know travelers are often in a hurry and use that urgency to their advantage. Fake passport renewal websites, fraudulent expedited processing services, phishing emails, and identity theft schemes are all targeting people trying to prepare for international trips. Before entering personal information or paying renewal fees online, travelers should understand the warning signs of passport fraud and the steps they can take to protect their money, personal data, and travel plans. READ FULL STORY

Avoiding Insurance Fraud And Fraudsters

Insurance fraud is a problem everywhere and it makes things more expensive for those of us playing by the rules. With this fraud in particular, whether it’s for our health, car, or home, fraudsters are scamming like never before. Suspecting a sketchy seller and policy in an open marketplace can help prevent a potential nightmare. Knowing tell-tale signs of insurance fraud when we see it is smart shopping, and the information below will help. READ FULL STORY

Your Financial Institution Is Calling. Or Is It?

A phone call that looks like it’s coming from your financial institution could be the opening move in a fast-moving chess game the FBI is warning about. Using spoofed numbers and convincing scripts, criminals create a sense of urgency, claiming your account is under attack. The next move includes a carefully guided attempt to extract passwords, verification codes, or even push you to move your own money straight into their hands. Knowing when to hang up could be the difference between staying secure and watching your account drained in a flash. READ FULL STORY

Hackers Are Targeting AI to Infect the Apps You Trust

Artificial intelligence is helping developers write software faster than ever before. Unfortunately, cybercriminals have noticed. Security researchers recently uncovered a growing wave of attacks that target AI coding assistants and software developers with poisoned code designed to quietly slip malware into legitimate applications. While the attacks aren't aimed directly at everyday consumers, the software you download, the apps you use, and even future updates could be affected if malicious code makes its way into trusted products. Here's what you need to know. READ FULL STORY

Simple Habits That Make You a Tougher Target for Cybercrooks

It’s already well into the new year and a fresh year usually brings fresh goals—exercise more, spend less, maybe try a new hobby. But one resolution that deserves a permanent spot on everyone’s list is tightening up your personal cybersecurity. Cyberthreats don’t take holidays, and scammers aren’t slowing down. In fact, they’re getting bolder, trickier, and faster at finding new ways to get into your accounts and steal your money or data. READ FULL STORY

Are You A Money Mule? What You Need To Know

Criminals of all kinds traffic in stolen money and need middlemen to relocate the funds. From romance scams to phishing attacks and more, there’s plenty of fraudsters with hijacked money needing laundering—and that’s where money mules come in handy. Unfortunately, sometimes those people are unaware of what they are doing, but that doesn’t mean they can’t be punished for it. Check out the red flags of avoiding becoming a money mule—and a criminal. READ FULL STORY

Social Media Brings Out The Worst Scammers

Social media attacks are a favorite of those pesky cybercriminals. One might wonder why. Well, it’s because it’s easy pickin's going for those accounts. Researchers at Arkose Labs found that of 1.2 billion social media interactions, 53% of the logins were fraudulent and 25% of new accounts were phony. Millions of people use one form of social media or another, whether it’s Facebook, Instagram, Snapchat, LinkedIn, or something else. That leaves a barrel full of phish used for targets for hackers and scammers. READ FULL STORY

Social Media Free Giveaway Scams Come With Hefty Costs

That $1,000 Amazon gift card you were promised for filling out a survey was never intended to be paid but is in fact a giveaway scam you just fell for. You may think there’s no real harm in filling out a bogus survey, but the real thing about these scams is that it’s stealing your PII (personally identifiable information). The enduring and timeless nature of scam giveaways show that, people don’t change much when it comes to getting something for nothing. READ FULL STORY

Are You Playing a Scammer’s Favorite Tune

Just when you thought you’d heard it all, there’s always another song to be played. This one is big, very big. It’s called a “Piano Scam”, and countless victims around the globe are getting played. Even those doing everything right to avoid this scam don’t escape it. A Piano Scam casts a wide net, targeting music schools and music stores, healthcare, and other industries. It also includes individuals searching online for a used piano. A scammer makes an offer that’s hard to refuse—a free piano and a story about why they can’t take it with them to wherever they are going. READ FULL STORY