Fake Refund APP Scams Steal Banking Info, Cash

Who wouldn’t love a message from their bank about a hefty refund coming their way? Most of us would, and that’s why this latest refund scam is, well, breaking the bank. It’s called “authorized push payment” (APP) fraud, and trusting consumers are handing their most sensitive banking information to fraudsters. APP scams make big promises but they’re really another form of phishing. Take a look at what to watch for with these latest scams. READ FULL STORY

Digital Wallet Security — Learn Before You Leap

It wasn’t long before the success of digital wallets led to the same idea for storing your sensitive information. But there’s a big difference between storing credit cards versus storing your driver’s license, passport, and other sensitive, personal info. After all, it’s uber-convenient keeping this information in one “identity” wallet. The reality is, the risks can outweigh the rewards and any cybercriminal can tell you that — or would they? READ FULL STORY

Phishing Scam Falsely Claims Google Subpoena Access To Your Email

Google has been in the news a lot lately…and we mean A LOT. We’ve seen browser extension warnings, password recovery warnings, a slick scam that claims to be from Google Technical Support, and several others. Now, a new phishing scam is making the rounds, targeting users with alarming messages that claim Google has received a subpoena to access their email account. It’s getting difficult to keep up with all of these. This scam uses Google’s own tools to make it even more realistic and to allow the emails to bypass authentication checks and still land in your in box, rather than your spam box. READ FULL STORY

How To Report Fraud To The FTC

When you report a scam, you contribute to a larger effort to prevent fraud from affecting more people. Scammers often target multiple victims, and your report can help authorities identify patterns and warn others about emerging scams (FTC). Even if you didn’t lose money, your experience can alert the public and prevent someone else from falling victim. The FTC uses reports to build cases against scammers and works with other law enforcement agencies to shut down fraudulent operations. Your report is added to the Consumer Sentinel database, which is accessible to thousands of federal, state, and local law enforcement partners who rely on this information to investigate and prosecute criminals. READ FULL STORY

Fancy Bear Turns Your Router Into a Spy

Most people think of their router as that little box in the corner that makes the internet work. Set it and forget it. Unfortunately, Russian state-sponsored hackers see it a bit differently. Security agencies recently warned that the notorious hacking group Fancy Bear has been compromising vulnerable TP-Link routers and quietly turning them into surveillance tools. By hijacking router settings, the attackers can redirect internet traffic, steal login credentials, and spy on online activity without victims ever realizing it. The good news? A few simple security steps can make your router a much harder target. READ FULL STORY

Bug Lurks in the Firefox Browser Engine. Update Now

A security flaw in Mozilla Firefox, highlights why browser updates matter more than ever. The vulnerability involves a heap buffer overflow, a component used to process certain video content on the web. Ok, that’s a bit technical, but suffice it to say, in the worst-case scenario, attackers could potentially exploit this flaw to execute malicious code, crash the browser, or manipulate how Firefox behaves if a specially crafted media file or webpage is loaded. READ FULL STORY

This Cunning Account Takeover Robbed A “Cybersmart” User’s Account

While banking online, this person received a message saying her account had been compromised and provided her a phone number to call. A woman in New York learned the hard way that even those who know the tell-tale signs of a cyberattack can be fooled. She fell victim to an account takeover (ATO) of her financial accounts – to the tune of over $30,000. Know that all types of accounts are vulnerable to ATOs, and not just those that are financial. READ FULL STORY

Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

World Cup Fever is in the Air—Watch for Soccer-Related Scams

The FIFA World Cup attracts billions of fans around the globe, but it also attracts cybercriminals looking to score against unsuspecting victims. From counterfeit tickets and fake streaming sites to fraudulent travel packages and phishing emails, scammers use the excitement surrounding the tournament to steal money, personal information, and account credentials. Before you buy tickets, book travel, or stream a match, learn the most common. World Cup scams and the simple steps that can help keep you from becoming the next victim. READ FULL STORY

Social Media Brings Out The Worst Scammers

Social media attacks are a favorite of those pesky cybercriminals. One might wonder why. Well, it’s because it’s easy pickin's going for those accounts. Researchers at Arkose Labs found that of 1.2 billion social media interactions, 53% of the logins were fraudulent and 25% of new accounts were phony. Millions of people use one form of social media or another, whether it’s Facebook, Instagram, Snapchat, LinkedIn, or something else. That leaves a barrel full of phish used for targets for hackers and scammers. READ FULL STORY

Medicare Phone Scams Circulating Now

Senior citizens and others on Medicare are an ongoing target for scammers. However, some Medicare scams spike at various points during the year, like other types of scams such as tax-related ones. Phone scams abound during peak “attention” time, such as the Medicare open enrollment period (OEP) with the goal of stealing PII for financial and other identity crimes. Those on Medicare and the people who care for them need to know how these OEP scams happen and how to avoid them. READ FULL STORY

Watch Out for Juneteenth-Themed Scams This Holiday

As Juneteenth celebrations take place across the country, cybercriminals are taking advantage of the holiday's growing visibility. Security experts are warning consumers to be cautious of phishing emails, text messages, and social media posts that use Juneteenth-related themes to steal personal information, passwords, or financial data. Scammers often capitalize on holidays and major events because people are more likely to trust messages that appear connected to community celebrations, special promotions, or charitable causes. Juneteenth is no exception. READ FULL STORY