Your Security Watch Carefully Where That Click Takes You Clicking a link seems harmless, but cybercriminals are finding new ways to turn ordinary web browsing into a dangerous detour. The FBI's Internet Crime Complaint Center (IC3) is warning that attackers are using sophisticated Traffic Distribution Systems (TDS) to secretly redirect internet users from legitimate-looking websites to fake login pages, malware downloads, and phishing sites designed to steal personal information. The redirection often happens behind the scenes, making it difficult to recognize until it's too late. Understanding how these attacks work and taking a few simple precautions can help keep your information, accounts, and finances out of the hands of cybercriminals. READ FULL STORY
Scams & Phishing New Disturbing and “Deadly” Phishing Attack Targets LastPass Users July 31, 2026 In what may be one of the more twisted phishing campaigns we’ve seen lately, users of the password manager LastPass are being told a “death certificate has been uploaded” in their name. But clearly, they are alive. This attack has been ongoing and is expected to continue. According to some reports, the phishers are even calling victims on the phone, using social engineering techniques and getting the login details. So how can you make sure you're in charge of your password manager account? READ FULL STORY
Your Security Scattered Spider’s Web Of Lies, Deception And Ransomware Warnings from the FBI and CISA came in loud and clear recently…Scattered Spider’s cyberattacks are more hazardous and crippling than ever before. Their high-profile, financially motivated attacks rely on social engineering for data theft, extortion, and ransomware attacks. And when both security agencies release a joint advisory warning to us about this threat group, it’s smart to listen. These threat actors made headlines for crippling financial attacks against several large organizations recently and they've increased the stakes playing their games. READ FULL STORY
Scams & Phishing Just Two Words Can Put You In The Middle Of A Smishing Scam Phishing by text or “smishing” has long been a thorn in the side of smartphone users. With cybercriminals always looking for new ways to lure victims, this latest smishing attack is doing the trick. And now, a Chinese smishing network using just two words in a text are tricking victims into handing over sensitive information. The Federal Trade Commission (FTC) reports that last year, scam texts alone cost consumers a reported $470 million and growing. READ FULL STORY
Your Security Gmail “Protection” Tool Turns Your Browser Against You It looks like a routine security check. It sounds like Google. It even walks you through “protecting” your account step by step. But according to Malwarebytes, this convincing scam is doing the exact opposite—quietly siphoning off your contacts, location, and even login codes. With up to 1.8 billion Gmail users potentially in the crosshairs, here’s how this digital disguise works and why a simple click could open the door to your entire online life. READ FULL STORY
Scams & Phishing Don’t Give Email Permissions To Bogus Upgrade App July 27, 2026 Email phishing campaigns involve a variety of hacker goals, most of which want you to install some type of malware on your device. Now there’s a new phishing campaign making the rounds that involves Microsoft Office 365 users and a bad actor with a fake app called “Upgrade.” The app asks for control over your email account and the authorizations and permissions that go with it. Recently, Microsoft’s Security Intelligence team sent a tweet warning this campaign is now targeting hundreds of organizations. READ FULL STORY
Scams & Phishing Malware Upgrades Attack On Banking Customers A banking malware is making its way through the Americas and North America could be next. BBTok banking malware first discovered in 2020 is back on the scene with significant upgrades. One of the advancements tricks users into supplying sensitive banking information through phishing links and bogus web pages. BBTok's victim list is rapidly growing, with the threat actors suspected of being from Brazil. But you can be sure, it isn't only a threat there. READ FULL STORY
Scams & Phishing Senior Scams—When Elder Fraud Gets Personal Last year in the U.S., nearly two-thirds of scam victims were seniors. Whether family, friend or neighbor, many of us know a senior citizen. But one thing many of us don’t know is how vulnerable they are to cybercrime. The FBI reports those aged 60+ are potential victims of a nearly $3.5 billion criminal scheme to defraud this at-risk group, and it’s only getting worse. The reasons behind the attacks are simple. It's about money and trust. READ FULL STORY
Your Security Gmail Tech Support Exposes New Threats From AI A significant cybersecurity breach involving Gmail raised alarms across the tech community late in 2024. Hackers leveraged advanced AI techniques to create a sophisticated scheme involving account recovery phishing emails that were nearly indistinguishable from legitimate communications. And, to make it even more believable, they were followed up with a phone call from a “Gmail tech support person,” throwing everyone a phishing curveball. READ FULL STORY
Mobile Security The Most Hacked Apps To Get To Your Details We share a lot these days. Some might even say we spout personal details like a water from a fire hydrant, especially when it comes to social media. For hackers, that means they have us all right where they want us. Researchers at TechShielder put in some work and found that there are a number of apps available to us that actually have been repeatedly compromised and share our personal information with plenty of others that we may not want to have our information. READ FULL STORY
Mobile Security Online Banking Smishing Scam Text message scams are on the rise and in this Today Show segment, Jim Stickley demonstrates how easy it is from criminals to perform these attacks. Most people receive legitimate text alerts from their financial institution so a malicious text can be very believable. DON'T CLICK EVER. Simply open your mobile app or open a browser and sign into your account. If there is a real fraud alert, you will be notified once you are logged in. READ FULL STORY
Mobile Security Calling Your FI? You Could Be Calling a Hacker Instead When did calling your financial institution (FI) turn into calling a hacker instead? Well, there’s now an improved Android banking trojan named FakeCall that’s intercepting calls to FIs. FakeCall reportedly has 13 new variations, with all making detection more difficult. It sounds hard to believe, but victims of FakeCall malware along with their financial accounts tell the story—and there’s more to know. One of them is that all versions have one thing in common. READ FULL STORY
Scams & Phishing Invoice Phishing’s Hidden Agenda There’s a not-so-new cybercrime hitting inboxes everywhere and it’s using phishing invoices to install a variety of malware, including an info-stealer. While some of us regularly get invoices in our inbox for this or that, we should all be aware of this invoice-themed phishing attack that’s likely to show up to collect payment in your email soon. This invoice phishing attack, like most others, takes advantage of something we cannot avoid: Being human. READ FULL STORY
Your Security Home Title Theft May Make Your Home No Longer Your Home Imagine waking up to learn your home is no longer your home. No one broke in and held you hostage to get it, no one served you paperwork to get out, but suddenly you discover that the name on the deed to your property is no longer yours and no actual legal transfer took place. No broken windows. No moving trucks in the driveway. However, paperwork appears that says it’s no longer yours. But your home is no longer your home. What may have happened is deed fraud. READ FULL STORY
SUBSCRIBE TO WEEKLY NEWSLETTER
Text Scams Impersonating Financial Institutions
