Executive Impersonations Lead to $2.7 Billion in Costs To Businesses

Executive impersonation attacks, also known as CEO fraud or whaling attacks, are a type of phishing attack where attackers pose as a high-level executive, such as a CEO, CFO, or other C-Level, in order to trick employees into revealing sensitive information or transferring money. Essentially, these are other ways attackers use Business Email Compromise (BEC) attacks. Executive impersonation attacks can be very costly for businesses. In 2022, the FBI's Internet Crime Report found that these types of attacks cost businesses over $2.7 billion. READ FULL STORY

Online And Mobile Payment Option Security

Most of us have heard of the various payment systems that allow us to pay almost anyone without writing the old-fashioned paper check. Now, we can pay nearly anyone, residing anywhere in the world with just a few taps on the keyboard or touch of an app. The three best known are PayPal, Venmo, and Zelle and all of them are increasingly being used for business purposes. PayPal and Venmo work essentially the same way and are actually owned by the same company, though there are some small differences in how they are used. READ FULL STORY

Rental Listing Scams Leave Hopeful Renters Out In The Cold And Flat Broke

Searching for a new place to live can be stressful enough, but when rental scammers get involved the stress ratchets-up into overdrive. These scams have become so common and financially devastating that the Federal Trade Commission (FTC) got involved to help keep them from happening. It’s a “renter beware” situation and those plowing into listings without taking the time to think their incredible find may not be so credible after all. These phantom rentals can be found anywhere. READ FULL STORY

Credential Stuffers Compromise More Than 100K Accounts

Credential stuffing is a cyber-attack in which stolen user credentials and corresponding passwords are used with brute force to make automated login requests. The stolen user credentials are typically from data breaches that could have happened recently, but also may have occurred long ago. These types of attacks are particularly effective when the same username and password combination is used across multiple websites or services. New York’s attorney general announced that an investigation into credential stuffing had uncovered 1.1 million compromised customer accounts linked to 17 well-known companies. READ FULL STORY

Info-Stealing Deepfakes Target Android Mobile Banking Users

A report by ESET (Essential Security against Evolving Threats) looks at the cyber threat landscape over the first half of the year. Their combined data collection and monitoring finds some troubling threat patterns targeting Android users and their mobile devices. Those findings involve info-stealing malware combined with AI deepfakes to heist user financial information—a devious combination that gives all of us a reason to be concerned. READ FULL STORY

Amazon “Free Stuff” Brushing Scam Makes Victims Pay The Price

Open your front door and there they are, boxes from Amazon you weren’t expecting. The thought of getting free stuff might give you a giggle, but the truth is, the last laugh could be at your expense. That’s because you’ve just been pulled into a “brushing” scam using you and Amazon to work. Brushing scams are happening more often than ever before, and a closer look at them shows how free stuff could end up costing you. If you find yourself the target of a brushing scam, it means the scammer already has enough of your PII to involve you. READ FULL STORY

The Truth About Temu Shopping App Gives Reasons To Delete It

Temu, the insanely popular Chinese-owned discount marketplace app is creating a stir in the U.S. With help from 50 million+ Americans now onboard, Temu snuck into first place bypassing Amazon, Walmart, and Shein with its global number of app users. And like any app you consider downloading, Temu deserves a closer look first. Not long after Temu’s U.S. launch during last year’s Superbowl, the app came under scrutiny from disillusioned customers and cybersecurity professionals, but for very different reasons. READ FULL STORY

Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more. Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware “RedLine Stealer” can hijack those stored passwords in a heartbeat. READ FULL STORY

Financial Fraud Evolves As Fraudsters Ramp Up Their Attacks

Cybercriminals are stepping-up to the surge in opportunities for financial fraud. The new products and services that financial institutions (FIs) offer to compete for customers, gives fraudsters new avenues to exploit. Expanding banking options give FIs the ability to battle for customers with their marketing approach. But for many FIs and their clients, bad actors are also responding to these banking options. For all the wrong reasons, they too appreciate additional channels for banking, but only as an opportunity to expand their fraudulent attacks. READ FULL STORY

Has Your Account Been Compromised? Five Cyber Smart Tips Everyone Can Use

The transition to living life through our devices has become very real for scores of people and businesses. By now, the coronavirus has changed our lives in ways we never expected. This transition includes doing most things from home. Unfortunately, adapting to online life also gives bad actor’s a cornucopia of targets to exploit. There are proactive steps to take when you suspect an account may be compromised, including ways to help keep it from happening to begin with. READ FULL STORY

'Tis The Season Of Fake Shopping Sites

As we’re all getting back into the holiday spirit after a somewhat glum 2020 season, it’s important to remember that the holiday shopping season doesn’t end on December 25. In fact, some retailers put their marketing effort into overdrive. There are after holidays sales, new year’s sales, and even “getting rid of all this stuff we didn’t sell at Christmas” sales advertised under some creative title. Retailers try to take advantage of the shopping spirit as far into the new year as they can and those who like to capitalize on this are also upping their game. READ FULL STORY

Bootleg Apple Software Hides Cryptomining Malware On Macs

For those keeping up with technology news, it’s not often Macs make hacking headlines. And for those who are simply Mac lovers, it’s not wise to think hacks happen only to Androids since both are vulnerable. A recent finding linking bootleg Apple software, malware, and cryptomining is a lesson all users can learn from. After all, a successful attack on Macs can end up targeting Androids, too. Security researchers at Jamf Threat Labs found a bootleg version of Final Cut Pro Apple software hiding cryptomining malware. READ FULL STORY