Is a Criminal Adding Your Card to a Mobile Wallet?

Mobile wallets such as Apple Pay and Google Pay offer a convenient and generally secure way to make purchases. Unfortunately, criminals have found a way to abuse the process used to add payment cards to these services. In this scam, a criminal adds someone else’s debit or credit card to a mobile wallet on a device the criminal controls. Once the card is approved, the criminal can use the phone to make purchases, even though the physical card is still safely in the owner’s possession. READ FULL STORY

Fidelity Customers Reminded That Stolen Data May Be Used Well Into the Future

If you have a retirement account, brokerage account, or other investment with Fidelity Investments, now is a good time to check your mailbox and email. A proposed class action settlement stemming from a 2024 data breach could provide eligible customers with reimbursement for documented losses, identity theft protection, and a cash payment. While the deadline to file a claim is approaching, many people may not even realize they qualify. Here's what happened, who may be eligible, and what you should do if you received a notification from Fidelity. READ FULL STORY

Oops I Clicked, Now What?

At some point in your life, you may have clicked something you shouldn’t have. Maybe the email looked legitimate. Maybe you were rushing between meetings. Maybe it appeared to come from someone you trust. The truth is that mistakes happen. What determines the impact, however, is not the click itself. It is the actions you take within the first ten minutes afterward. While you’re likely to go into panic mode, you shouldn’t. The most important thing you can do is stay calm. Panic leads to poor decisions and as we’ve learned before, that’s exactly what cybercriminals want you to do READ FULL STORY

A Scammer Can Wreak Havoc With Your Online Banking Account Number

Most people know to protect their Social Security number, debit card PIN, or online banking password. But many don’t realize that something far more ordinary—your bank account number—can also be a goldmine for scammers. It may not seem sensitive at first glance (after all, it’s printed on every check), but in the wrong hands, it can lead to serious financial trouble. While banks often catch suspicious activity, scammers know that many people don’t check their accounts daily, giving them time to slip transactions through. READ FULL STORY

Unpaid Toll Scam Drives Us All Crazy

Have you taken a toll road recently? Well, even if you haven’t, this story is for you. There is a text message going around that anyone who drives on highways or freeways should be on the lookout for and it’s just annoying enough to drive anyone mad. As you can guess, it involves driving (or perhaps not driving) toll roads and the supposed accompanying fees related to them, as well as fake websites, the attempted collection of information, and other phishing flags. READ FULL STORY

Protect Yourself From Phishing Scams: 8 Steps To Better Security

Since the mid 1990’s, email phishing scams have been on the rise. Like most cybercrimes, hackers have improved and refined their phishing methods over time. Now, there’s been a massive increase in targets due to the continuing coronavirus epidemic. Email phishing continues to be the method of choice for many cybercriminals to enter your device, steal your data, identity, finances, and more. A study by Tessian finds that 96% of phishing attacks arrive via email, showing the threat is very real. READ FULL STORY

Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

Think Your Business Is Too Small For Hackers? It’s Time To Think Again

There’s a false sense of security when SMB owners believe hackers aren’t interested in a small company. The assumption is that bad actors will just move on to bigger and better targets with much more to steal. Unfortunately, that really couldn't be more wrong. There’s plenty of valuable data worth stealing from small businesses. Hijacked information like credit card details, passwords, and other PII is equally as useful and destructive, and if stolen can also lead to supply chain attacks, where info stolen from smaller businesses can be used to catch bigger fish. READ FULL STORY

Phishing Scams Exploit Pricey Auto-Subscription Fears

With email among the top productivity tools in our everyday lives, we know cybercriminals have adopted it for their benefit, too. And now, according to an alert by the National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA), there’s a new and highly lucrative email phishing campaign making the rounds. Both agencies are sounding the alarm about a particular version of this phish, wanting the public to know how it works. READ FULL STORY

The Deepfake Boss Boom: Criminals Are Renting AI-Powered Deception

Deepfake technology is becoming cheaper, easier to use, and increasingly available through criminal marketplaces. Security researchers are now reporting a 39% increase in online discussions related to "deepfake-as-a-service" offerings, where cybercriminals can purchase AI-generated voices, videos, and identities on demand. The trend is fueling a new wave of business fraud, impersonation scams, and social engineering attacks that can fool even experienced professionals. As deepfake tools become more sophisticated, organizations and individuals must rethink how they verify identities and protect themselves from increasingly convincing digital deception. READ FULL STORY

Cyber Thieves Stuff Some Chiken With Your Credentials

Thousands of Chick-fil-A customers are being reminded why reusing passwords can be risky after cybercriminals targeted customer loyalty accounts in a credential stuffing attack. Instead of breaking into Chick-fil-A's systems, attackers used usernames and passwords stolen from previous data breaches at other companies to try logging into customer accounts. The incident serves as another reminder that one reused password can put multiple online accounts at risk, even when the company itself has not been hacked. READ FULL STORY

Ransomware Attacks on FIs Are Rising-Here's Why Every Customer Should Pay Attention

When hackers target a bank, they're not just after the bank's money. They may be trying to steal customer information, disrupt online services, or pressure financial institutions into paying enormous ransoms. Security researchers say ransomware attacks against banks, credit unions, and financial technology companies continue to climb, fueled by increasingly organized cybercriminal groups. While your deposits remain protected in most cases, these attacks can still lead to service outages, delayed transactions, and a greater risk of scams targeting customers. Here's what you need to know. READ FULL STORY