Security News

S3 Ep58: Faces on Facebook, scams that pose as complaints, and a Kaseya bust [Podcast]
2021-11-11 19:41

Crooks combine a new social engineering scam with a new way of packaging malware. Oh! No! How to block radio communications in a land with no hills.

Friday Squid Blogging: Squid Game Cryptocurrency Was a Scam
2021-11-05 21:11

The SQUID cryptocurrency peaked at a price of $2,861 before plummeting to $0 around 5:40 a.m. ET., according to the website CoinMarketCap. This kind of theft, commonly called a "Rug pull" by crypto investors, happens when the creators of the crypto quickly cash out their coins for real money, draining the liquidity pool from the exchange.

“Customer complaint” email scam preys on your fear of getting into trouble at work
2021-11-05 19:49

Well, over the past 24 hours, we, and many of our colleagues, have been on the receiving end of an email scam that preys on exactly these fears. In other words, receiving an email from a "Colleague" whom you don't know, and who doesn't know you, but who seems to have been dragged into a customer "Dispute" that you weren't even aware of yet.

Teen Rakes in $2.74M Worth of Bitcoin in Phishing Scam
2021-10-27 20:17

During the early days of the pandemic, while the rest of the world was stress streaming and working on sourdough starter, an ambitious teen stuck in his bedroom decided to set up a fake "Love2Shop" gift card site to harvest people's payment information, invest the stolen money in cryptocurrency and become a millionaire. His age certainly didn't prohibit the scammer from being allowed to purchase Google ads to help lure people to his phishing scam site, according to prosecutors, ultimately ranking the scam phishing site over the legitimate one.

Over 10 Million Android Users Targeted With Premium SMS Scam Apps
2021-10-26 22:03

A global fraud campaign has been found leveraging 151 malicious Android apps with 10.5 million downloads to rope users into premium subscription services without their consent and knowledge. The premium SMS scam campaign - dubbed "UltimaSMS" - is believed to commenced in May 2021 and involved apps that cover a wide range of categories, including keyboards, QR code scanners, video and photo editors, spam call blockers, camera filters, and games, with most of the fraudulent apps downloaded by users in Egypt, Saudi Arabia, Pakistan, the U.A.E., Turkey, Oman, Qatar, Kuwait, the U.S., and Poland.

Banking scam uses Docusign phish to thieve 2FA codes
2021-10-26 18:57

It's easy to forget that the "Obviousness" of many scam emails comes from the fact that the crooks never intended those scams for us in the first place. We received a phish this morning that specifically targeted one of the main South African banks.

Tech support scams becoming the top phishing threat to consumers
2021-10-22 03:30

The latest findings show tech support scams, which often arrive as a pop-up alert convincingly disguised using the names and branding of major tech companies, have become the top phishing threat to consumers. Tech support scams are expected to proliferate in the upcoming holiday season, as well as shopping and charity-related phishing attacks.

S3 Ep55: Live malware, global encryption, dating scams, and secret emanations [Podcasts]
2021-10-21 18:13

Hook up with our forthcoming Live Malware Demo presentation. Why we think you should celebrate Global Encryption Day.

Textbook Rental Scam
2021-10-20 11:16

Here’s a story of someone who, with three compatriots, rented textbooks from Amazon and then sold them instead of returning them. They used gift cards and prepaid credit cards to buy the books, so...

Tech support scams top list of latest phishing threats
2021-10-19 15:30

Tech support scams work because they try to trick people into believing there's a serious security crisis with their computers, says Norton Labs. The tech support ruse was the number one scam described by Norton Labs in its new October Consumer Cyber Safety Pulse Report.