This iPhone Exploit Can Slice Right Through Your Device’s Security Defenses

Think your iPhone is safe simply because it's an iPhone? Think again. Security researchers have uncovered a sophisticated attack called "DarkSword" that can silently compromise vulnerable iPhones just by visiting a malicious website. Once installed, it can steal everything from text messages and photos to iCloud data and cryptocurrency wallet information. The good news is Apple has already released a fix. The bad news is millions of people could still be at risk if they haven't updated their devices. READ FULL STORY

Account Takeover Phone Scam

Nobody thinks they will fall victim to a scammer on the phone. Today I am talking with Tanya Holland over at Park View Credit Union and not only are people falling victim, scammers are adding more layers to the basic Vishing attacks. If you find this helpful, please share to warn others! READ FULL STORY

Watch Carefully Where That Click Takes You

Clicking a link seems harmless, but cybercriminals are finding new ways to turn ordinary web browsing into a dangerous detour. The FBI's Internet Crime Complaint Center (IC3) is warning that attackers are using sophisticated Traffic Distribution Systems (TDS) to secretly redirect internet users from legitimate-looking websites to fake login pages, malware downloads, and phishing sites designed to steal personal information. The redirection often happens behind the scenes, making it difficult to recognize until it's too late. Understanding how these attacks work and taking a few simple precautions can help keep your information, accounts, and finances out of the hands of cybercriminals. READ FULL STORY

Why That Local Call Might Be a Scam

Your phone rings and the number looks oddly familiar. Same area code, same first few digits. It could be a neighbor, a nearby business, or someone in your community. So you answer. Instead of a real person, you’re greeted by a robotic voice pitching a prize, warning about suspicious activity, or claiming there’s a problem with your account. Welcome to the world of “neighbor spoofing,” a tactic scammers use to make their calls look local and trustworthy. The trick works more often than you might think, but knowing how it operates can help you avoid getting pulled into the conversation. READ FULL STORY

FBI Warns Your Wi-Fi May Not Be Just Yours Anymore

Your home internet connection might be quietly working a second job, and not for you. The FBI is warning that cybercriminals are hijacking everyday devices like routers, smart TVs, phones, and even digital picture frames to mask illegal activity. Known as residential proxy networks, these schemes can make it look like crimes are coming from your home and could get you into trouble. Here’s what that means, how it happens, and how to shut it down. READ FULL STORY

New Disturbing and “Deadly” Phishing Attack Targets LastPass Users

In what may be one of the more twisted phishing campaigns we’ve seen lately, users of the password manager LastPass are being told a “death certificate has been uploaded” in their name. But clearly, they are alive. This attack has been ongoing and is expected to continue. According to some reports, the phishers are even calling victims on the phone, using social engineering techniques and getting the login details. So how can you make sure you're in charge of your password manager account? READ FULL STORY

Scattered Spider’s Web Of Lies, Deception And Ransomware

Warnings from the FBI and CISA came in loud and clear recently…Scattered Spider’s cyberattacks are more hazardous and crippling than ever before. Their high-profile, financially motivated attacks rely on social engineering for data theft, extortion, and ransomware attacks. And when both security agencies release a joint advisory warning to us about this threat group, it’s smart to listen. These threat actors made headlines for crippling financial attacks against several large organizations recently and they've increased the stakes playing their games. READ FULL STORY

Malware Upgrades Attack On Banking Customers

A banking malware is making its way through the Americas and North America could be next. BBTok banking malware first discovered in 2020 is back on the scene with significant upgrades. One of the advancements tricks users into supplying sensitive banking information through phishing links and bogus web pages. BBTok's victim list is rapidly growing, with the threat actors suspected of being from Brazil. But you can be sure, it isn't only a threat there. READ FULL STORY

Senior Scams—When Elder Fraud Gets Personal

Last year in the U.S., nearly two-thirds of scam victims were seniors. Whether family, friend or neighbor, many of us know a senior citizen. But one thing many of us don’t know is how vulnerable they are to cybercrime. The FBI reports those aged 60+ are potential victims of a nearly $3.5 billion criminal scheme to defraud this at-risk group, and it’s only getting worse. The reasons behind the attacks are simple. It's about money and trust. READ FULL STORY

Gmail Tech Support Exposes New Threats From AI

A significant cybersecurity breach involving Gmail raised alarms across the tech community late in 2024. Hackers leveraged advanced AI techniques to create a sophisticated scheme involving account recovery phishing emails that were nearly indistinguishable from legitimate communications. And, to make it even more believable, they were followed up with a phone call from a “Gmail tech support person,” throwing everyone a phishing curveball. READ FULL STORY

Text Scams Impersonating Financial Institutions

Jim Stickley gives a quick warning about malicious text messages that appear to come from your financial institution. READ FULL STORY

Before You Unsubscribe, Know This First

Bad actors are everywhere these days, and now they’re behind the latest “unsubscribe” email phishing scam. We all know how invasive spam emails are, and keeping them from flooding your inbox is but a dream. And now, clicking the unsubscribe button is a devious way to infect your device with malware.  Hackers are now setting up bogus “Unsubscribe” buttons that can really frustrate you. Fortunately, there is some help. Here’s what you need to know. READ FULL STORY