Caution Flags 

The radical simplicity and irresistible pull of the Coinbase spot was the talk of the post-game ad reviews. But out of the din of this discussion came another message — this one from the Federal Bureau of Investigation (FBI). Inc Magazine’s Jason Aten pointed to a warning they had issued a month prior to the big game – the first lines lay out the situation quite clearly:

The FBI is issuing this announcement to raise awareness of malicious Quick Response (QR) codes. Cybercriminals are tampering with QR codes to redirect victims to malicious sites that steal login and financial information.

QR Codes Are Back, And Bigger Than Ever

Once again, it seems that bad actors have seized on a popular trend to help them do their dirty work. A simple technology dating back to the 90’s, QR Codes are on the rise lately – as they’ve become a very effective digital tool for marketers who want to quickly convert mobile phone readers into shoppers and buyers. The Wikipedia entry on QR codes gives you a quick grasp of just how powerful they can be when scanned on a mobile phone:

QR codes may be used to display text to the user, to open a webpage on the user’s device, to add a Card contact to the user’s device, to open a Uniform Resource Identifier (URI), to connect to a wireless network, or to compose an email or text message.

All you have to do is think about how hackers might use that kind of power, and you can quickly see that indiscriminate scanning of QR codes could lead you into some serious trouble. 

Two Primary Sources of QR Code Danger

The first danger with malicious QR codes is the fact that they can transport you seamlessly to a fake website. As with most hacks, the first layer of the transaction seems to be legitimate: the QR code works! The user arrives at a site that has the offer or information they were seeking. 

And this is when many users will let their guard down, and fail to notice telltale signs that the site isn’t legitimate. Super-sweetened offers can also play a role in softening up otherwise careful users. The bad website can be a collection point for private information and financial data, and the path to financial losses and ID Theft is paved.

The second danger is QR codes that include malware themselves. Once again, let’s turn to the FBI for — “just the facts”:

Malicious QR codes may also contain embedded malware, allowing a criminal to gain access to the victim’s mobile device and steal the victim’s location as well as personal and financial information. The cybercriminal can leverage the stolen financial information to withdraw funds from victim accounts.

That’s about as bad as it can get. So, short of forsaking the use of all QR codes — how do you defend yourself?

What Can You Do?

Here are the five steps you can take – we discuss each below in more detail:

1. Get informed about what QR codes are and what they can do.
2. Make sure your device has good security software.
3. Use that security software regularly!
4. Before scanning any QR code, scan “the situation.” 
5. Make sure you land where you expected to!

You’ll be glad to know that you’re well on your way to completing the first step. We hope this article has helped in this regard, and if you want to get even more up-to-date on potential threats to you and your mobile device, we highly recommend these two companion articles:

Six Ways That Cybercriminals Try To Take Over Your Device – QR codes are covered here along with several other traps, like WiFi Honeypots, Fake Apps, and even Subtitles in Streaming Apps. Do give it a careful read – lots to learn here.

Can a QR Code Be Used In A Phishing Attack? – If you’ve followed us so far, you know the answer to this question is YES! But hit the link to get more information on how QR codes can bait the hook for hackers’ big Phishing expeditions.

Security Help

If you’re using dfndr security, make sure you activate the anti-hacking feature to protect you from scams and malware. dfndr security PRO plan also has a dedicated Safe App function to help sniff out apps that contain malware, and also provides complete Identity Theft reports should you suspect trouble.

Eyes Up!

But your awareness is always going to be your first line of defense. Remember that QR codes primary benefit is to help you connect to a specific spot on the web without your having to type in a URL. The “fun” of seeing this work is no doubt a major part of the success of that Coinbase ad. 

If you decide you do want to scan a QR code – make sure you can verify it’s from a trusted source, and take a good close look at the surroundings: the copy and design, the context of use. Is the code stuck on a wall outside a club? Or did it come to you via a traceable source like a mass mailing? If you can verify that the code is from a trustworthy source – make sure the landing spot is what you expected it to be.  

Just remember what your friends in the FBI told you: a QR code isn’t a game to be taken lightly — or a Pokemon type game where you have to capture and collect. They serve a very specific function, and they’re more powerful than they look. Treat QR codes with the same caution you’d give to any unknown app or web address.

O post Careful With That QR Code! Five Steps For QR Code Safety apareceu primeiro em PSafe Blog.

But the sense of ease and security we have when dealing with the teller at our local bank, or flying on our favorite airline, may not serve us well when we use an app provided by a company we know well “IRL” (in real life). 

“The widespread development of apps by businesses is not only good for marketing and sales,” remarks Emilio Simoni, Director of Research at PSafe’s dfndr lab, “but it also feeds a billion dollar business in re-use of your data.”

Data Means Dollars

Modern day operating systems for both iOs and Android provide some mechanisms for you to limit the way apps can track your behavior across the web, but these only offer limited protection. “The data you use in everyday interactions with these apps is of tremendous interest to hackers,” Simoni observes,  “and data breaches for some of the world’s biggest and most respected companies have become almost commonplace.” 

Leaked data is commonly resold or accessed on the dark web, and once procured, it can be used in a variety of ways. It’s fairly common for leaked data to be used to fuel scams that entice users to expose even more information, or, to provide direct access to financial levers.

“What users need,” Simoni explains, “is the means to see the whole picture for their apps and the data they use.  This is what we provide with dfndr security Pro: a Privacy Scan, which gives users the ability to see, in one place, a complete picture of how apps are using and sharing your data – whether voluntarily, or through leaks.”  

Here’s what that complete picture shows:

• The data and access permissions you have granted for each app
• Where each app sends the data it collects
• A data breach history for each app (more than one breach is not unusual).
• Apps you have installed that may be malicious or known to pose risks 

Obviously the first thing you can do with this information is to make judgments about which apps you want to keep – but it may also help guide you to further steps, like changing passwords, or changing settings on the app. It can also give you important information for staying aware of likely hacks or doing further research to determine precisely what sort of personal data may have been compromised.

“Getting this comprehensive picture is really the best way to see context and to stay alert and ahead of the game,” Simoni says.

Before You Load Apps

PSafe’s dfndr security Pro also includes a feature called Safe App, which enables you to evaluate apps before you load them on your phone. Safe App tells you if an app is known to be malicious, or if it has previously been breached. 

Try PSafe dfndr security for Free

The easiest way to see how both Safe App and Privacy Scans work is to try dfndr security for yourself. You can start with the Free Version of the app, which will help you manage your phone’s memory, storage, and battery power – and also give you some good basic security capabilities like a URL checker and an Antivirus App scan.

Add dfndr security Pro. and you’ll be able to do a quick Privacy Scan and see where you stand, and you can check any new apps you want to install with Safe App. You’ll also get Anti Theft functionality to locate your phone (and protect your data) if it’s stolen. 

Use this link to learn more and try out the free version of PSafe’s dfndr security.

Stay Alert

“The capabilities a good security app can provide offers essential protection,” Emilio Simoni emphasizes, “but staying alert ourselves is another key element of our overall defense.”

In addition to procuring and using a proven security solution like dfndr security Pro, Simoni suggests the following “data hygiene” habits for users:

Strong Passwords: Use a password manager and make sure you never use the same password for more than one account. 

Take Care With Social Media: Many social media accounts these days, asking questions and offering quizzes, are simply storing and selling clues to hackers. 

Beware of Phishing: Hackers are certainly not above using news about data leaks as an occasion for reaching out to defraud users. For any communications you receive about data, passwords, accounts, or any transactions you’ve made (or pines you haven’t!) — always double check the source.  

“With a good security app and the conscientious use of privacy ‘best practices,’ your use of apps can provide the convenience and ease you’ve come to expect from them,’ Simoni concludes. “We’ll continue to research viruses and hackers methods to make sure we’re doing our part to maintain our interesting-leading solutions.”

O post Are Your Apps Leaking Data? How To Know and What To Do apareceu primeiro em PSafe Blog.

During the past few months, Joker has become one of the most active Android malware infections. Joker rides on the coat-tails of seemingly legitimate apps, then covertly signs up users for pricey subscription services. It can also steal SMS messages, contact lists, and device information. 

Joker variations seem to arrive in batches, with a fresh batch leeching onto dozens of apps as recently as September. 

Joker Infiltrates The App Store

“One of the best ways to avoid malware and trojan apps is to use Google’s sanctioned app store,” says Emilio Simoni, PSafe’s dfndr lab Research Director, “but unfortunately, Joker has managed to disguise itself and mutate so profusely, that it has found its way on to several apps within the official Google Play marketplace. Of course third party app stores are also offering Joker-tainted apps — so the best protection is going to be a strong security app that sniffs out malware-tainted apps immediately, like our dfndr security Pro.”

Google removes the offending apps as soon as they’re reported — but the high rate of variation and concealment with this particular trojan keeps bringing new specimens on board.

Delay Tactics

“Part of what makes Joker so effective is that it waits to take effect,” Simoni remarks. “After the trojan-app is downloaded (many of these are knockoffs of better-known apps) it waits to drop a very small packet of code, it then reaches out to the server that loads the malware that does all the dirty work.” 

What Can You Do To Stay Safe?

Good hygiene with your digital devices includes:

• Installing only the apps that you need and use. Loading up your device with as many apps as you can imagine using is a hazardous path. 
• Being wary. Look for apps from developers you know and trust.  Do a little background checking and make sure that cool new app is coming from a known and trusted provider.
• Cleaning house periodically. To keep the number of apps you use to a minimum, do a periodic review of the apps on your phone and delete the ones you’re not using. 

“Good security habits are always the first step,” Simoni observes, “but we can see that with truly devious malware like Joker, personal vigilance may not be enough.  When a piece of malware is mutating on a monthly basis, you need a dedicated security solution to help keep you safe.” 

The Best Defense Begins BEFORE Dangerous Apps Are Downloaded

An excellent way to protect yourself is to use a security application like dfndr security Pro, which has a dedicated Safe App Installer that can tell you if the app you’re about to install has been identified as malware.  This is exactly what the Safe App Installer does: it AUTOMATICALLY protects you from malware and apps known to compromise your data — before you even install them.

More Protection for Your Digital Life

Safe App Installer is only one of the key features dfndr security Pro offers.  It also comes with a full suite of security capabilities that can protect you not only from digital threats, but from thieves “IRL” as well.

Beyond Safe App, there are four additional features dfndr security Pro offers to protect you and make your digital life easier:

Anti-theft protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock  it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Privacy Protection: You can locate on a map where your app data is going and how it might be used by third-parties.

Unlimited Identity Theft Reports: These reports provide “perimeter defense,”looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 10 billion compromised credentials. 

Ad-Free: As an extra bonus, Pro is totally ad-free.

Get The Protection You Need Today

Click here to download dfndr security and free trial dfndr security Pro to put all of these features to work securing your phone, your data, and your digital life. dfndr security Pro offers a full suite of protection, constantly updated, to make sure “you’re safe out there.”

O post Joker Malware is Back (And It’s No Joke) apareceu primeiro em PSafe Blog.

Data breaches — even among major platforms and providers — are becoming an almost daily occurrence. With so much of our life and business being carried out online, and the multitude of devices and platforms we use to work, shop, and play, the “attack surface” for hackers grows (much) larger every minute. Even the biggest and best-run companies and platforms have become favorite targets for hackers. So much so, that attacks on well-known companies and platforms have become almost commonplace. 

“There’s a double danger in data leaks becoming so common,” says Emilio Simonis, Research Director at PSafe’s dfndr lab. “First, of course, are the attacks themselves — but as they become more ubiquitous, many people start to take them for granted, and assume they pose only modest personal danger.” Significant lag time between the breach-event itself, and subsequent criminal action on the part of hackers, also contributes to the lack of decisive response. “Hackers are very patient — they know many victims won’t take immediate action to protect themselves,” Simoni remarks, “and they use that aspect of human nature to their advantage.”

Try dfndr security today, it will help you secure your phone and protect your data from hackers and malware of all kinds.

How do breaches happen?

Just as hackers use their knowledge of human nature to design their scams, they also rely on human error to create openings they need to get at private data. Poor passwords and weak credentialing processes are probably the most common source of breaches, and lost or stolen (and unprotected) laptops and drives also contribute. 

Phishing scams, enticing recipients to give up data voluntarily, have never flagged in popularity. Malware is also a common method, and is often combined with phishing techniques to get at personal and financial data stores. “Increasingly, these attacks are targeted at corporate assets, so employees must remain vigilant,” Simoni warns, “especially now, as so many people are using devices from their home to connect to work.” 

Malware and ransomware have become a more favored method as many users have become used to “shopping by downloading” — trying out free versions of new software solutions before deciding if they want to keep a new app or game. Malware often asks for extensive permissions, then quietly works behind the scenes with the permissions it has accrued, logging data and  building up significant data-leverage, before shipping that information payload off, or using it to launch further attacks on the user.

External, code-driven attacks are also growing more common than ever. Often called “brute force attacks,” these are now guided by increasingly sophisticated artificial intelligence, and very powerful computers, to crack weaker protections.

What information do they target?

Hackers have a wide-open market for the information they steal, and generally they’re after Personal Identification Information that most individuals and companies (and laws) seek to protect. Of course they also seek information like bank and credit card account information that gives them immediate financial leverage. The worst nightmare for individuals is when a hacker is able to transact business as their victim through identity theft. Identity theft can be very complicated to undo, and the process of undoing the damage wrought by an identity theft can be protracted and painful. “Hackers are keenly aware of the leverage that personal identifying information gives them,” Simoni cautions, “they know how to make the most of it, and rarely show any restraint once they have the upper hand.” 

What can you do?

Major breaches are on the rise and show no signs of tailing off. That’s the bad news.  “The good news,” Simoni observes, “is that protecting yourself is still something that you have a lot of control over individually.. It’s something you can do well with some simple habits and tools.“

“We recommend taking three fundamental precautions to all of our customers,” says Simoni. “Make sure you adopt best-practices for your passwords, use two-factor-authentication whenever you can, and use a solution like dfndr security Pro for immediate notice if your personal data has been accessed outside of your control. Our Pro solution also scans new apps to prevent malware attacks.”

“Your phone itself can also be a target,” Simoni advises, “which is why dfndr security Pro has the capability to shut your phone down for use, and show you its location, in case of theft. ”

Best practices for passwords include the following: 

• Never use the same password for more than one site. 
• Make sure that your passwords are kept up to date on every site, and change them immediately whenever you’ve been notified of a breach. 

The Big Benefits of Two-Factor Authentication 

Most financial and major social sites now offer two-factor authentication (usually with an option to send a code via-text to your phone).  Use these protocols whenever they’re available, as they greatly reduce the capability of hackers to break through.

Breaches are occurring with disturbing frequency, so the best way to stay ahead of the hackers is to have immediate notification of leaks with your personal data at any time. dfndr security Pro offers free unlimited ID theft checks, which can give you the flexibility and insight you need.

As noted, dfndr security Pro also has other important safety features, like a Safe App Scanner to protect you from malicious (data stealing) apps, and Anti-Theft features that help you locate and control your mobile device if it gets lost or stolen. 

With dfndr security installed on your phone, you will have more protection, so you can test it now if you like. Click here if you want dfndr security for free.

O post Have you already been the victim of a data leak? apareceu primeiro em PSafe Blog.

Phones are a prime target

“Hackers target smartphones because they are so rich with data,” advises Emilio Simoni, Research Director at the dfndr lab, “our lives are tied to our phones in so many ways: our work, our families, our buying habits, our financial tools, and of course we’re physically tied to them as well.” Simoni continues: “With accelerometer and GPS functions becoming standard “always on” functions, our phones literally follow our every move.”

What are the risks?

The variety of uses made of personal data are almost as numerous as the types of malicious apps generated. Many apps simply steal personal information and resell it to companies who are eager to gobble up masses of personal data. Browser histories, GPS information, accelerometer data, and network information can be gathered and exported without your permission when an app has been given (or taken) the right permissions. Of course, logins, personal security and financial information can also be more directly leveraged. Ransomware is another common technique, where an app locks up a phone and demands payment to release it back to the user. 

“We see increasingly sophisticated scams taking place,” Simoni warns, “where gathering data is simply the first step in the process. This information then used to leverage the subject or to perpetrate fraud or crimes involving phishing or identity theft.”

Simoni concludes: “The costs can be significant,” which is why you have to protect yourself — both with knowledge, and with a good software solution.”

How to identify malicious apps?

This is getting harder to do all the time, as hackers have become more sophisticated — which is why we suggest employing a software solution like dfndr security pro. (dfndr security, in premium version, features a SafeApp checking function designed expressly for this purpose). But your own wary eye can also provide a first-line of defense. 

Here are a few key guidelines:

• Get your apps from a reputable source. Google’s Play Store isn’t able to immediately catch every malicious app that comes down the pike: but they are on the lookout, and apps that are offered to you through alternative channels are much more likely to be malicious.
• Check permissions. If a simple app is asking for a lengthy list of permissions, you may be signing up for more than you bargained for.

• Find out who made the app. Check to see the developer’s name and click on the link to their page and all their other apps. Does everything look legitimate? Or are the apps sketchy and the presentation of their features incomplete?

• Google it. Find out what you can find out about the developer. You may find a conversation already underway that can save you a heap of trouble!

• Examine their language. Does the developer sound like they wrote their description while thinking about something else — like maybe the next malicious app they’re going to create? Not a good sign. In fact, a common sign that you’re dealing with malicious software.

Use a reputable security app, like dfndr security 

“We would recommend that everyone employ a good security app on their devices these days, especially their mobile phones,” Emilio Simoni urges, “the risks are just too numerous and the potential losses can be steep.” 

However, the good news is that a focused security capability can spot malicious apps with great accuracy and reliability. dfndr security Pro offers a Safe App feature, which checks-for, and warns you about malicious code, before you download any application. It also provides historical insight — warning you if the app has had its data breached and leaked to unauthorized users. “Our team is on the case around the clock, making sure our security solutions are the most complete on the market,” Simoni concludes: “it’s the kind of job you definitely want to entrust to experts!”

What to do if you have downloaded a mailicious app?

The free version of dfndr security offers a full antivirus capability that can remove viruses from your phone. This version also enables you to schedule an auto virus-scan to run periodically, which will search-for and identify any new digital threats.

Prevention is the best way to go, and that’s why we encourage you to get a good security solution for your devices as soon as possible.

More about dfndr security

dfndr security is a free app that can help you manage the storage, battery life, and wifi security of your digital device, while also offering protection via a url checker, and anti hacker and phishing protections. You can try dfndr security PRO for 3-days free, and upgrade if you like the protection it provides. dfndr security Pro offers:

Safe App installer — checks for malicious apps before you install them

Identity Theft Reports — So you know if your online credentials have leaked

App Privacy Protection — Offers notifications about issues with apps you’re using; app data breaches, permissions you’ve granted to various apps, and info about where your data may be used.

Anti-Theft Protection — Protects your phone from thieves with an alarm, remote lock-out, and a picture of the thief.

dfndr security Pro is a full suite of protection for users who recognize that they must take an active role in their own digital security.

You can download dfndr security Pro and start your free trial right away.

O post More fake apps are causing real losses apareceu primeiro em PSafe Blog.

Source: Checkpoint Research

The figure above, from Checkpoint Research, shows a significant ramp-up (and spike) in Cyberattacks as pupils returned to remote classes, held via online meeting platforms and tools. Worth noting in this figure is the fact that this sector has always been more vulnerable to attack, but is even more so now.

“The urgency of the situation and the speed with which schools needed to make online learning avaccommodations is a kind of perfect storm for hackers and cyber criminals,” explains Emilio Simoni, director at the dfndr lab. “The numbers and the activity convincingly demonstrate that security can’t be taken for granted, or arranged last minute,” Simoni adds.

The range of methods used to attack educational institutions is similar to the kinds of attacks seen in the general population: phishing, ransomware, and malicious apps are all in play — along with the “Zoombombs” receiving more exposure and attention. 

If you haven’t heard: Zoombombs are unwanted take-overs of hosted meeting sessions by hackers. Note that the Zoom app is not especially vulnerable — but its widespread popularity as a meeting-host service has simply caused the name to be associated with the phenomenon. Distributed denial of service attacks (DDOS) are also common. These are purposeful efforts to overwhelm the capacity of a given connection or platform, and frequently they’re the “blunt weapon” of choice for ransom-motivated attacks.

“Of course institutions need to take steps to protect themselves with enterprise grade security solutions,” Simoni notes, “but teachers and student families have to be wary as well.”  Adds Simoni: “If you’re attending classes through a digital connection at home or on-the-go, you will want to have a personal solution you can rely on.”

For these purposes, dfndr security PRO offers a full suite of  capabilities, including:

Anti Hacking Protection: Anti-hacking protects users from malicious URLs and phishing sites. It also blocks scams directly on the SMS app, web browsers and messaging apps (WhatsApp and Facebook Messenger).

Safe App Installer: Lets you know if an app is safe — before you install it.

Wi Fi Theft Protection: Protect you WiFi connection and immediately be notified if anyone is trying to intrude upon or hijack you wifi connection.

App Privacy Scan: Know which installed apps on your device are malicious, or have already been victim of leaks. Also easily see the permissions granted for each app, and where they send data they collect from you.

You can use this link to learn more about dfndr security, and also consider upgrading to our PRO offering. You’ll be glad to know that Anti-Hacking comes with the free version of our solution.

With governmental funding for improved education-institutional security defenses still up in the air, the necessity for students and families to protect themselves is keener than ever.  

We’ll keep you posted on any specific / large-scale attacks, but for now, a good security solution should be considered a requirement for any online student family.

LEARN MORE BY TRYING OUT OUR APP: You’ll get Anti-Hacking protection and be able to see anyone who is priating your WiFi signal with our free dfndr security program. You can download it for free here, and try it out yourself!

O post As Schools Go Online, Cyberattacks Are On The Rise apareceu primeiro em PSafe Blog.

“Leaks can be caused in a wide variety of ways.” Emilio Simoni, Director of Cybersecurity at PSafe’s dfndr lab, notes: “However, the usual result of a breach is that the stolen data is put to use for financial gain or leverage.” 

Common methods of using data for financial gain:

• Stolen financial-information (like credit card or bank numbers) can immediately yield goods or dollars, and they’re often used quickly to do just that — but, Simoni notes: “Not always immediately, and not always in noticeably large amounts.”

• Stolen passwords and personal data are used as keys or leverage to gain financial information, or to apply ransoms; 

• Hijacked / Frozen technology offers another means for criminals to get leverage and ransoms: hackers “lock-out” hard drives or create denials of service for networks from which users must “buy” their way out

• Stolen email, phone numbers, and social ids are regularly used for scams that prey on the unsuspecting, and often, on the good-natured and helpful — targeting the person and known vulnerabilities of human nature.

• Identity theft — the use of detailed personal information to open new credit accounts and / or steal from established accounts. 

Practically speaking, leaks occur in a variety of ways — some quite technical, and some not very technical at all:

• Credentials that are stolen or insecure: As noted above, credentials can sometimes be the treasure that gets robbed, and leveraged later. Of course, they can also provide the path in for the thieves. The number of data breaches caused by weak passwords, like passwords or last names or birth dates is…way too many!

• Unhappy (or careless) employees: Both can be devastating, and as you might guess, in corporate settings there are usually plenty of both. This is why companies have to plan for the possibility that their personnel can go rogue..or just inattentive. No good security policy relies entirely on the integrity and personal conduct of human resources — but unfortunately, far too many do.

• Vulnerable softwares: Commercial and enterprise software is designed to be safe — but hackers are ever watchful, and tirelessly work to find and exploit software vulnerabilities. 

• Real world vulnerabilities: Hard drives and devices of every kind are smaller than ever, hold more information than ever, and they’re more portable than ever: that means physical compromises and seizures are an increasing threat.

Yes, you’re at risk. But here’s how you can protect yourself.

Good “hygiene” with your digital devices means committing to the following:

First, make sure you use strong passwords — and use only one password for each app or site that requires one.  Stay vigilant, and if a site or app is compromised, change your password immediately!

Next, try to install only the apps that you really need and use. Loading up your device with three or four apps for every purpose is a dodgy game. Whenever in doubt, go with a leader in the space, or look for apps from developers you already know and trust.  Do a little background checking and make sure that cool new app is coming from a known and trusted provider.

Finally, make sure you have a full-spectrum security solution on your devices:

An excellent way to protect yourself is to use a security application like dfndr security Pro, which covers your data and your device. 

For app security, dfndr security Pro features a dedicated Safe App Installer that can tell you if the app you’re about to install has been identified as malware.  This is exactly what the Safe App Installer does: it AUTOMATICALLY protects you from malware and apps known to compromise your data — before you even install them.

There are four additional features dfndr security Pro offers to protect you:

Anti-theft protection: This feature protects against physical loss that (frequently) also leads to data loss: in case of theft or loss of your device, you can lock it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

Unlimited Identity Theft Reports: These reports provide “perimeter defense,” looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 4 billion compromised credentials. 

Ad-Free: As an extra bonus, dfndr security Pro is totally ad-free.

Data breaches will continue to occur on both the large and small scale. As Emilio Simoni remarks: “Unfortunately, hackers never take the day off. That’s why our software doesn’t either.” We hope you’ll consider dfndr Pro as your best line of defense to protect your devices and personal data. 

Get The Protection You Need Today

Click here to try dfndr security and put all of these features to work securing your phone, your data, and your digital life. dfndr security offers a full suite of protection, constantly updated, to make sure “you’re safe out there.”

O post Leaks and Breaches: The What, How… and Why You Must Protect Yourself! apareceu primeiro em PSafe Blog.

However, given that there are data breach laws in all 50 states, and good data protection products like dfndr security Pro available, there are a few important ways to get a better grip on your personal data, and keep yours protected. At PSafe, we believe in, and advocate for your rights regarding control of your private, personal data, and our products are designed to help you know who might be using your data, and where that data goes, as the world moves toward a better overall framework of personal data rights. Our Research Director at PSafe’s dfndr lab, Emilio Simoni offers perspective: “At PSafe, we strongly advocate for comprehensive data rights legislation, but in the meantime, we urge our customers to be vigilant, and use the tools we make available to make good decisions about their online interactions – and be aware of the ways these interactions shape the distribution, exposure, and use of their personal data.” 

Before we talk about those capabilities, we want to take a moment to more fully understand what is meant by the term personal data.

Foundations: What Is Personal Data?

“At the most fundamental level,” Simoni explains, “your personal data is any data that can be attached directly and uniquely to you. However, there are some subtleties involved that are worth discussing, to get a more nuanced understanding.”

A simple example of personal data would be your Social Security number, birthdate, or full name. Your credit card and bank account numbers are also clearly personal and private. But there are also pieces of data that have a “double” character: when you shop online, the items you buy are personal information, but they also have a public aspect: the retailer who sells them to you must replenish their stock after all, so they of course track the items and maintain their inventory.

Your Consumer Data

What has expanded greatly in the age of internet commerce however, is information that connects you to your buying (and browsing) habits. What do you buy when shopping online? What do you watch on streaming TV? What websites do you browse? What games do you play? Sellers of services and products, and advertisers, are highly interested in all of those things about you, and this is the area being navigated now by privacy laws and existing or developing data rights legislation. At pSafe, our position is simple: you should have control of where data of this kind is collected, who sees it, and how they use it.

dfndr security Pro offers Privacy Protection 

dfndr security Pro plan enables users with knowledge. Our App Privacy Scan provides four key pieces of information that we see as essential for today’s digital environment.” Check these capabilities as follows:

1. Knowing if apps you are using are known to be malicious.
2. Seeing if any of your apps have suffered data breaches.
3. Being able to easily see the information permissions you have granted for any app.
4. Seeing (on a global map) where app information is being sent or used.

“These fundamentals are each interesting in and of themselves, but they combine to help users truly get a grasp of how their interactions with various applications affect their personal data,” Simoni concludes.

How Can You Get This Protection ?

dfndr security is a free app that can help you manage the storage, battery life, and wifi security of your digital device, while also offering protection via a url checker, and anti hacker and phishing protections. You can try dfndr security PRO for 3-day free, and upgrade if you like the protection it provides.

dfndr security Pro offers:

Identity Theft Reports — So you know if your online credentials have leaked

Safe App installer — checks for malicious apps before you install them

App Privacy Protection — Offers the four protections mentioned above: notifications about issues with apps you’re using; app data breaches, permissions you’ve granted to various apps, and info about where your data may be used.

Anti-Theft Protection — Protects your phone from thieves with an alarm, remote lock-out, and a picture of the thief.

It’s a full suite of protection for users who recognize that they must take an active role in their own digital security.

 You can download dfndr security and start your free trial right away.

O post What is Your Personal Data? And How To Know Where It Goes apareceu primeiro em PSafe Blog.

* Statista data released in 2019.

Usage habits obscure the risks

Asked about the places where they usually access the Wi-Fi Internet, 86% of respondents said they connect from home, 21% in public places, 14% also use a work network, and 13% say they frequently connect from friends’ homes. For the 18% of respondents who suspect that their connection is being stolen, the main reasons given for this suspicion are: a slow connection (62%), suspicious browsing (41%) and shared passwords (19%).

According to Emilio Simoni, director of the dfndr lab, theft of Wi-Fi is a real possibility with an unprotected connection. Simoni’s recommendation is to always have a security solution on your devices to prevent virtual threats from reaching your connection: “Among the most common dangers are the theft of personal data, theft of confidential information, leaks of credentials and passwords, and phishing scams. With the WiFi compromised, you can also get alterations of the router, infection of the connected devices, and even hijacking of your broadband,” Simoni warns. 

The risks are even greater for those who use the home network to do work: Simoni explains: “Aware that several companies adopted the model of remote work during the pandemic, cybercriminals have created scams focusing on home-office workers. This is because the successful attacks on employees have more lucrative potential for cybercriminals, since the leakage of corporate data can cause millions in losses to companies, in addition to the exposure of personal data of the attacked person.”

Most want to know: “Who’s connected to my Wi-Fi?”

87% of respondents said they would like to be able to identify devices connected to their Wi-Fi network. The desire is already a reality for users of the dfndr security application, through the “Wi-Fi Theft Protector” function, launched this week for Android users of the app. On iOS, the function is found within “Network Tools> Devices.” The new function identifies devices connected to a network, and can provide alerts about new connected devices. “If the user identifies a device that does not know the source using his network, it is recommended that he change his password immediately, to avoid the leakage of private information”, advises Simoni.

Despite the concern of the interviewees, 33% of the respondents said they did not use any protection method for the wireless connection, the number corresponds to approximately 103 million Americans. Of the 34% who said they used some security measure for Wi-Fi, 69% chose to trust their security with a secure password, and only 36% said they never share their passwords with third parties. These measures, however, are not enough to guarantee the security of the connection. The ideal is to always have security software installed on your devices — a solution capable of protecting against data leaks.

How to protect against Wi-Fi theft?

1 – Use a security solution on your cell phone capable of identifying the devices connected to your Wi-Fi network. The dfndr security app, for example. Download it for free here.

2 – It’s essential for companies to have a solid security solution against data leaks. The dfndr enterprise is designed to identify vulnerabilities in corporate systems. It does so in real time, and helps companies tackle issues before they become a problem.

3 – Avoid using the same password for different services; always use a secure password that mixes numbers, letters and special characters; and never share your password with third parties. 

4 – Finally, don’t click on links received through social networks and messaging applications without knowing the source and the link-destination — and never enter personal or bank details on websites you are not 100% sure of.

See the research in full: click here.

O post More than 103 million Americans use Wi-Fi networks that are vulnerable to theft apareceu primeiro em PSafe Blog.

Read More: America’s most common scams and digital threats: what to watch for in 2021

Hackers Are More Sophisticated Than Ever

“Hackers are always looking for ways to exploit new security holes in order to elaborate and refine their attack methods. Take phishing as an example. Over time, we’ve seen that these fake pages have become increasingly realistic — and they’re using advanced techniques, like social-engineering to radically increase the number of victims they recruit with each strike,” explains Emilio Simoni,  PSafe’s director at dfndr lab.

To respond to this increasing sophistication, dfndr security Pro offers a smartly integrated set of tools to create an effective defense against the most common (and damaging!) security and privacy problems routinely reported by smartphone users.

By now, you may well have heard the name dfndr security. After all, the app has more than 150 million downloads worldwide, and now has a premium version, dfndr security pro. If you’re considering adding security to your phone to protect yourself, dfndr security should definitely be on your shortlist. 

What is dfndr security?

dfndr security was the first application of the dfndr family (yes, it’s pronounced: “defender”), developed by PSafe – a leader in mobile security in the Americas. dfndr security protects your phone against malware, phishing, and other cyber threats using state-of-the-art technology. It also protects the phone itself: in case of loss or theft, the app enables you to lock and locate your device remotely.

In addition, dfndr security is the only application on the market that offers constantly updated, real-time protection against scams within WhatsApp, Facebook Messenger, and SMS. In total, the app has more than 10 functions focused on ensuring the privacy and security of its users. You can also choose between the free or premium plan – which removes advertisements within the app and gives access to even more powerful security features.

Is dfndr security premium Good?

The key to dfndr’s great track record is research: a vast database of scams and hacks that is constantly updated. In the first half of 2021 alone, dfndr security detected more than 28 million online scams. According to the analysis released by the application, approximately 3.2 million of these online scams were accessed by Americans in that period.

With the sophistication of cyber attacks, it has become increasingly difficult to identify them without the help of a specialized tool. That is why DeMello warns that it’s essential that smartphone users have a security feature installed on their mobile phone that provides protection against virtual threats.

What do experts say about dfndr security?

AV-TEST, a worldwide expert in analyzing digital security products, periodically reviews security software for their effectiveness and performance. According to tests carried out by the institute, dfndr security received a maximum mark on malware detection abilities more than 20 times and obtained the best index – number 6 – in all aspects of security and usability.

In Google Play, for example, dfndr security received more than 5.5 million ratings and has an average 4.5 satisfaction rating. This means that more than 90% of all the people who installed gave a positive nod to the application. Check out some of the comments:

–– –

–

What’s Included in dfndr security premium?

In addition to all the features of the free plan, dfndr security offers 5 more features.

Premium Feature 1: Identity Theft Reports

This feature will help you find out if your data has been leaked to the Internet, and where the source of the leak is. As you know, even the biggest companies and platforms have had data breaches: Facebook, LinkedIn, Dropbox, Adobe, and Snapchat. When these events occur, millions of users’ data files are leaked on the internet.

“Hackers vary greatly in the way they invade security software to leak data. Whether by infiltrating large enterprise systems, creating new phishing scams or spreading malware, the truth is that all these methods inevitably end up exposing sensitive information at some point,” DeMello explains.

However, users can verify if their data leaked over the internet easily with the dfndr pro Identity Theft Report feature. It lets you know if information such as email, passwords, history of private conversations or home addresses have been exposed, when it happened, and how it was disclosed. Just input your email address and a complete search shows the results.

Premium Feature 2: Anti-Theft Protection

Ever thought you could find your mobile phone in case of loss or theft and know who the culprit is? The dfndr pro Anti-theft feature has 5 benefits that help you locate your phone and allows you to remotely control it:

Locate your device With the Anti-theft, it’s possible to know exactly where your phone is, in addition to triggering an alarm to locate it.

Delete data at a distance You can delete all installed apps, private messages, and photos from your mobile phone remotely.

Block intruder access To prevent intruders from accessing the contents of your mobile phone, simply activate your device lock via a password.

Get a picture of the thief If the thief attempts to access your device but fumbles the access code, you will receive an email with a photo of the criminal immediately.

Premium Feature 3: Safe App Installer

“Hackers have stepped up their use of malicious apps to gain access to you information and to expand permissions on your devices,” DeMello says, “this is why we developed Safe App, which scans apps for malicious code before you even install them.”  Safe App gives users a clear and timely security alert if it recognizes problems with an app you’re installing.

Premium Feature 4: Privacy Scan

The dfndr pro Privacy Scan enables users to know which apps on your phone have already been victim of leaks, what permissions you have been granted for each app, and where they send the collected information. “Privacy Scans are a great way to stay informed about the Security Performance of apps and platforms you use on your phone every day,” DeMello adds.  

BONUS Premium Feature: dfndr security Pro Is Ad-Free 

It’s common for apps to contain ads. After all, advertising is the only way that app developers can monetize their products and keep them completely free, up-to-date, and available to the entire population. But at times, advertisements can become annoying to encounter.

But dfndr security pro is completely ads-free and also allows you to choose which notifications you receive, either from dfndr security or from other apps. You’ll be safe, secure, and satisfied, knowing your protections are the best.

Try AV-TEST approved dfndr security premium and get to know these beneficial features:

O post Is dfndr security Pro a good digital security solution? apareceu primeiro em PSafe Blog.

How does this scam work?
Emilio Simoni, director of the dfndr lab, explains the scheme: “With the intention of deceiving Netflix customers, scammers steal the name and graphics of the well-known streaming platform. They approach their victims through emails with a malicious link, which directs them to a fake website posing as the official Netflix website. By clicking on this link, the victim is tricked into providing personal and credit card details for a supposed registration update. Those who provide this information hand over their sensitive data to scammers, making them likely victims of bank fraud “.

How to protect yourself from this type of digital scam:
The experts at dfndr lab list some precautions that everyone should take to avoid falling into phishing scams (malicious links):

1 – Use mobile security solutions that offer protection against digital threats. dfndr security, for example, sends security alerts in real-time to its users whenever they receive a malicious link or fake news, whether it’s on Facebook Messenger, WhatsApp, via SMS, or in the browser.

2 – Always search and check to assure you’re on the official website for every company when you receive information through the Internet. Be wary of promotions, sensational news, discounts — and any administrative action that requires you to re-furnish personal / financial information.

3 – Be careful when clicking on links shared through Facebook, TikTok, and other social networks. Also be especially wary of any unknown email contacts. Don’t provide personal information to websites unless you’re certain of their authenticity.

4 – When in doubt, it is possible to check if a link is fake on the dfndr lab website. Checking the links notifies you in a few seconds whether a website may offer any malicious features.

O post Scammers Posing As Netflix’s Steal Credit Card Details apareceu primeiro em PSafe Blog.

“Unfortunately, one of the traits of the hacking community is relentlessness,” explains Emilio Simoni, Research Director at dfndr lab, “there are always multiple scams being run and the sheer volume and variety of them works to the hackers’ advantage.” Simoni continues: “With the worldwide and individual attention given to coronavirus, we’re of course seeing many scams of this type, but this kind of focused attention creates an opening for other types of scams to flourish. Ransomware scams are some of the worst, because of the potential financial damage for frightened users — so of course this threat requires that users be alert and take appropriate steps.”

How Do Ransomwares Operate?

Typical ransomware scams operate on social media or via email.  On social media, users will deploy malware links on a post from a hacked or “spoofed” (fake) account, and unwary users will unthinkingly follow links provided by people they believe they know. Simoni explains, “One of the hallmarks of these scams is the use of a fake-account as a kind of mask — creating trust and trapping those who simply click without thinking.” Some of the malware used in these scams will freeze your hard drive or lock you out of needed files or folders: this is why it’s crucial to have a regular backup routine for your machine.

Another common ransomware scam involves the threat of revealing potentially embarrassing information, often using messages that refer to popular porn sites and claim the possession of compromising material and information.  An example of a ransom note of this type appears below:

What Should You Do If You’re Asked for A Ransom?

First and foremost, don’t pay any ransom. At best you will simply lose the money you pay, at worst (most hackers won’t bother to “unlock” your files — that’s just another risk for them), at worst, you will mark yourself as a candidate for further exploitation. “Scammers don’t want to risk their own exposure — they run these scams as broadly as possible and make money from those most frightened and vulnerable, then move on,” Simoni explains.

If you are locked out of your files, you may want to consult local computer service professionals. Ransom scams are very common, so they may have seen the hack you’re dealing with before, and know ways to help. If you have regularly backed up your machine, you can change hard drives on your computer and reload your files from your backup source. 

But the best way to protect yourself from these scams is to have a good defense.

Protect Yourself From Hacker and Ransomware

One of the best ways to protect your information now is to upgrade your dfndr app (if you haven’t already) to dfndr PRO.  By clicking here, you will learn more, and you can use it to download PRO if you decide it’s right for you. It offers a full suite of security capabilities.

1 – Safe App Installer: Protects you from apps known to have had data breaches — before you install them.

2 – App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

3 – Unlimited Identity Theft Reports: These provide your “outer-perimeter” defense, looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 4 billion compromised credentials. 

4 – Anti-theft protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock  it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

5 – Ad-Free: As an extra bonus, PRO is totally ad-free.

Stay Vigilant!

With dfndr PRO in your toolbox, the rest is a matter of staying as aware as you can and protecting yourself and your family.  Consider adopting these rules for use of digital devices in your home:

1 – Take extra care with any link or article sent to you on social media by a friend — look closely at every link you receive before clicking!

2 – Don’t click on links sent to you via email from unknown people. 

3 – Only download or install software from trusted sources. Make sure you double check URL’s!

4 – Make sure you do regular backups on your machines, and don’t pay on any ransom note sent your way to liberate your own files — or to discard compromising material. 

O post Ransom Scams On The Rise apareceu primeiro em PSafe Blog.

“Scammers are constantly finding new ways to steal your money. You can protect yourself by knowing what to look out for.”

With more people using the internet than ever before, the digital threats have multiplied. Quite often, these scams are disguised as something good. So it’s smart to employ a healthy amount of suspicion and caution, along with strong passwords, and a good security software solution, like PSafe’s dfndr security solutions.

Emilio Simoni, Research Director at PSafe’s dfndr lab, suggests that becoming familiar with the top threats is a good start for protecting yourself. “Hackers are always busy, always coming up with new ideas to trick users,” Simoni says, “but they’re also heavily reliant on a few standard approaches. That’s why it’s a great idea to know what the most popular scams look like. Odds are, new scams will be variations on these classic themes.”

With Simoni’s advice in mind, we present you with 2021’s Top Digital Threats in the USA:

Phishing and False Promotions

“According to an analysis by our experts,” Simoni observes, “the most popular scams in the USA in 2021 are fake offers / false promotions and phishing scams.”

Between 01/01/2021 until 04/13/2021 PSafe detected and blocked both of these types of scams more than a million times each:

• False payouts: 1,077,233 blocks
• Phishing: 1,033,210 blocks

For PSafe the total of blocks in the USA between 01/01/2021 and 04/13/2021 were: 2,843,539 blocks

How these attacks work: Basically, the victim accesses a website that says he is raffling some kind of prize (like smartphones, for example) and inputs requested data. Typically, the victim is then informed they won a prize — but to receive it, the winner is told they  must share the site with other contacts, thereby multiplying the scope of the scam. 

Simoni adds that trust is built by copying seemingly trustworthy sites and sources: Amazon, Ebay, Walmart, Netflix, and similar. 

See below for two typical examples, uncovered by our team:

COVID-19 Scams

As the coronavirus pandemic continues, there are still plenty of fraudulent offers to sell PPE (personal protective equipment) or sell home-testing and contact-tracing kits. Scammers may also pose as a representative of WHO (the World Health Organization) or CDC (Centers for Disease Control) offering to sell you access to special information, services, or medicine.

In 2021, there are even more scams with virus-treatment and vaccine-related messages.  These messages offer new cures and treatment only available from this provider. And vaccine-eligibility messages can be disguised as a trusted source, but link to bogus websites to ask for your personal information. Some criminals will try to gain access to your vaccine card, too.

Some covid scams are delivered through Malware – and dfndr security Pro has a Safe App Installer feature that can identify Malware before you install it on your phone.

Charity Scams

With so many people in need, those who are able, try to help. Fraudsters often use nearly the same language and appeals to steal your money that legitimate charities use to raise funds. However, they may pressure you to give right now,  and they may only accept cash, gift cards, or wire transfers. Their organization may sound familiar, but the scam charity will not usually offer any details about the organization. Another variation is that you “must” donate to be included in a too-good-to-be-true sweepstakes.

Account Takeover / Identity Theft

A perennial, and growing danger: criminals use some of your personal information to pose as you, to gain access to even more of your information. Then they use that access to:

–  Make unauthorized transactions, such as making purchases with stolen payment information

–  Transfer funds to other accounts

–  Change your account details to lock you out and cover their tracks

–  Sell access to your account to other fraudsters

–  Use stolen credentials to open new accounts. Nearly half of all account fraud involves accounts that are less than 24 hours old.

PSafe’s dfndr security Pro offers identity theft reports to help you become immediately aware if your identity has been hacked and your private info is being used on the web. dfndr security Pro also offers a Privacy Scan that enables you to see which sites and platforms you may visit have suffered data breaches.

IRS and Tax Scams

Criminals pose as IRS (Internal Revenue Service) representatives or tax collection agents to either gain your personal and financial information or obtain a payment… or both. They claim you made a mistake on your tax return — and scare you with an overdue tax bill and penalty payment, if you don’t act promptly. Simoni adds: “Hackers often borrow their authority from other authorities. This is something always to bear in mind when a message seems fishy and it’s coming from a seemingly ‘official’ or authority’ source.”

Investment Scams

The offers may vary, but fraudsters almost always promise enormous amounts of money. They try to coax you into investing by offering high returns, “multiplying your investment quickly and easily” with their supposedly “secret” methods. They may even impersonate reps from actual investment companies. Ponzi and pyramid schemes are additional examples of investment scams.

Interest Rate, Debt Collection & Mortgage Fraud

These scams exploit the financial duress many people are currently feeling. Deceptive interest rate reduction fraud is a relatively new twist on credit card fraud. You are offered a “guaranteed” reduced interest rate on your credit card… in exchange for a fee and your personal information.

Debt collection fraud involves scammers posing as collection agencies demanding you pay them for bogus debts. Mortgage fraud —often aimed at distressed homeowners— includes foreclosure rescue schemes, loan modification schemes, and equity skimming schemes, among others.

Money Mule Scams

Most victims of this type of scam are enticed into a work-from-home job. Or the scammer gains the victim’s trust through social media or online dating sites. The criminal sends the victim money and asks them to send the funds to someone else. The initial check bounces, the bank asks for repayment, and legal trouble can arise.

For older Americans, lottery and prize-winning scams, Medicare and social security scams, celebrity imposters, and online romance scams remain prevalent, as well.

Simoni adds, “With so many of our daily financial activities carried out online due to the pandemic, fraudsters have more chances than ever to take advantage of those who let their guard down. That’s why a good security solution is essential these days.”

How Can You Get PSafe dfndr’s Digital Protection?

dfndr security is a free app that helps you manage the storage, battery life, and wifi security of your digital device, while also offering protection via a url checker, and anti hacker and phishing protections. 

You can also try dfndr security PRO for 3-days, free, and upgrade if you like the protection it provides.

dfndr security Pro offers the following key protections:

Identity Theft Reports — So you know if your online credentials have leaked

Safe App installer — checks for malicious apps before you install them

App Privacy Protection — Offers notifications about issues with apps you’re using; app data breaches, permissions you’ve granted to various apps, and info about where your data may be used.

Anti-Theft Protection — Real-world protection from thieves: with an alarm, remote lock-out, and a picture of the thief.

It’s a full suite of protection for users who recognize that they must take an active role in their own digital security.

 You can download dfndr security here, and start your free trial right away.

O post America most common scams and digital threats: what to watch for in 2021 apareceu primeiro em PSafe Blog.

We wanted to let you know more about the threat, and how you can protect yourself.  We also wanted to provide a reminder that our security products, dfndr security and dfndr security Pro are designed to meet the needs of these kinds of heightened threat situations. Look to the end of this article for more information on how to download or upgrade these solutions.

The Perfect Storm Continues

With lockdowns and movement restrictions continuing as the virus surges again, many people are still more highly engaged with internet-mediated interactions than they have ever been before.  More time reading and writing emails, checking in with social media, shopping online (even for groceries), and of course, a large group of people continuing to work (and school) from home.  

With the vaccines arriving on the scene, new variants of the virus, and infection rates climbing, news about the coronavirus remains an item of exceedingly high interest.  

“Hackers  see the activity,” says Emilio Simoni, Research Director at the dfndr Lab, “they continue to focus efforts on using the intense interest regarding this topic to get over that first hurdle all hackers must clear: gaining the victim’s interest, and earning their implicit trust.”

Simoni continues, “Since March of 2020, when the WHO declared the pandemic, the PSafe cybersecurity team has detected and blocked more than 22,2 million scams related to covid-19. Our success hasn’t stopped them from trying though — they continue to rack up more victims who choose to go online unprotected.”  

Messages Change, Mediums & Methods Stay The Same 

INTERPOL suggests there are three primary methods hackers are using to steal information or make financial threats:

Malicious Domains: Domains using “coronavirus,” and “Covid-19” in some form or other, have grown exponentially. Many are legitimate of course, but hackers use the familiarity of the term, and resemblance to legitimate sites to make their dangerous sites look credible.

Malware: Malicious code that takes up residence on your computer and steals information or takes command of your machine. Malware is being used on Covid-19 sites and maps, in emails, and on apps offered for tracking or avoiding the virus.

Ransomware: Ransomware threats are targeting medical and public institutions already over-stressed with managing their coronavirus response, as hackers feel this pressure increases the likelihood their ransoms will be paid.

Be On The Lookout

“Any time there is a large scale event or response to this pandemic,’ Simonis notes, “hackers will swoop in again — I think this is particularly important to remember as additional stimulus funds are made available, and as vaccine information and availability ramps up.”  

Another powerful factor driving this storm is curiosity: people are extremely hungry to hear news, and hopeful / practical news in particular.  Scammers have stepped into make the most of these factors, and as Emilio Simoni, Research Director at the dfndr Lab explains: “What we’re seeing is cybercriminals redoubling their efforts to create more, increasingly sophisticated scams, in order to reap profit from baseless, sensational ads or news — or through thefts of personal and financial data. The information they offer is almost invariably false, and sometimes the information itself is immediately dangerous to victims who act on it.”

INTERPOL’S Advice

Interpol suggests that users: “Be vigilant. Be skeptical, Be safe.” They suggest the following basic steps for protection:

• Backup online and off-line files regularly and securely
• Strengthen [security for] your home network
• Use strong passwords
• Keep your software updated
• Manage your social media profiles with care (and strong passwords)!
• Check privacy and security settings on the devices and platforms you use
• Avoid opening or (especially) clicking on anything from suspicious emails

PSafe’s Advice and Added Protections

In addition to all the basics above, Simoni notes that “It’s crucial that you make sure you’re using a security solution that’s built to alert you immediately when you access a scam site, or interact with a known digital virus carrier.” Of course, dfndr security has an excellent Anti-Hacking feature you can activate if you have the app — and if you don’t have the app,  you can download the free version, right here. PSafe’s Anti Hacking capability will protect you from phishing scams and other dangers — our database of known malicious sites and senders grows every day.

Finally, dfndr security also protects you by letting you know if your wi-fi connection has rogue users.  If it does, you can easily change your password and knock them off.

If you upgrade to the dfndr security Pro version, you’ll get the added benefit of a Safe App Installer (which warns you if an app you’re about to install may be a vector for malware). It also offers Identity Theft Protection that can keep you apprised if your personal information is compromised in a cybersecurity — for example on a large corporate website or platform.

As this emergency continues, we’re going to keep working to keep you informed and up to date.  Emilio Simoni provides us with a final summary of the situation: “It’s unfortunate that such trying times must be further complicated by malicious actors, but that’s why we come to work everyday: to thwart their efforts. If you stay vigilant as INTERPOL suggests, and use our security solutions, you can stay two steps ahead of the crooks. We’re going to do everything in our power to make sure you can!”

dfndr security is free, fast, and extremely easy to use. It provides excellent AntiVirus and AntiHacking capabilities, and it also will help you maintain your device in tip top running condition. The PRO version can protect your identity, your privacy, and help you recover your device if stolen.  Download the free version and read more, here.

O post Interpol Has Issued a Covid-19 Cyberthreat Warning apareceu primeiro em PSafe Blog.

At PSafe, we always look at big online shopping days from a security perspective. With such a huge online shopping event coming this week, we asked users of our dfndr security application to share with us their thoughts and experiences with online shopping– and took a close look at the experience from a safety and data security perspective.  We wanted to share with you some of the highlights of our results, in hope that they might better prepare you for this year’s Black Friday, and the online holiday shopping season in general.Immediately below are a few of the key questions we asked, and the answers we received, along with our commentary and analysis:

See the research in full: click here.

Do you usually shop online on Black Friday?

Yes:  30% 

No: 70%

This result obviously reflects the history of Balck Friday as a “hit the stores for the best deals type of event, but this year, we’re guessing that these numbers will likely be flipped.

Have you ever received inks for a FAKE promotion?

Yes: 67.5%

No: 32.5%

Have you ever fallen for a fake-store scam or fake promotion?

Yes: 49%

No: 51%

Two thirds of respondents have been exposed to fakes and scams, and nearly half of our respondents have been victims of them.  So: the danger is quite real, and yes, this year, we expect Black Friday this year to be a very active day for hackers as well. 

Have you ever felt afraid to shop online?

Yes: 71%

No: 29%

Before making any online purchase, do you do any checking or research to make sure the site is reliable?

Yes: 66%

No: 34%

We combine these responses to show how similar the numbers are, and to show how prevalent apprehension about foul play is when we’re shopping online. We expect that those who do checking are often among those who have been victims before!

Two Keys to Protection

We recommend two important ways to protect yourself while shopping online this Black Friday.  The first are a few simple steps you can take to make sure you’re protecting yourself as much as possible, and the second is a high quality security solution like dfndr security Pro.

Protecting Yourself

Emilio Simoni, Director of Cybersecurity at PSafe’s dfndr lab, emphasizes that the first steps we need to take are practical. “A big part of protecting yourself is simply heightening your awareness at all times for the kinds of interactions scammers initiate,” Simoni explains, “and if at all possible, be even more vigilant on days of high-activity and anticipation, like Black Friday.”  Simoni emphasizes that following a few simple rules can help immensely:

Shop at places and stores that you trust and know. Now is not the time to experiment with a vendor you’ve never heard of who sends you an email with an outrageous deal.

Be wary of email offers, especially when they’re too good to be true. “Part of the hackers arsenal nowadays is leveraging FOMO (fear of missing out),” SImoni notes. “By creating offers that are hugely appealing or impossible to resist, they can pull users into their traps. The excitement that surrounds an occasion like Black Friday can make that easier for hackers.”

If you do choose to go out to shop, protect your phone and valuables. “Real-life” threats like theft are still quite prevalent — so stay aware, and make sure your phone has some kind of anti-theft protection.

Security Solutions: dfndr security Pro

The second key to protecting yourself is to get a good security solution for your phone that keeps an eye out for you automatically. You might want to consider upgrading your dfndr security app (if you haven’t already) to dfndr security Pro.  (This link will help you learn more, and you can use it to download dfndr security Pro if you decide it’s right for you.)

dfndr security Pro offers a full suite of security capabilities that can protect you not only from digital threats, but from everyday thieves as well. 

These are the features dfndr Pro offers to protect you:

Anti-theft protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock  it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data. This is great security to have if you’re heading out to shop in physical locations on Black Friday.

Safe App Installer: Safe App protects you from malware and apps known to have had data breaches — before you install them. This is another great safety check if you’re thinking of downloading any new store or shopping apps for Black Friday.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties. You might want to do this with the shopping apps you currently use before you settle in to shop.

Unlimited Identity Theft Reports: These reports provide an “outer-perimeter” defense, looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked — with a one-click check of a database with over 4 billion compromised credentials. Data breaches don;t stop for the holidays!

Get The Protection You Need Today

We hope that some of the data and solutions we have shared here will help you get ready for a great Black Friday shopping-season. Click here to try dfndr security and put all of these features to work securing your phone, your data, and your digital life. dfndr security offers a full suite of protection, constantly updated, to make sure “you’re safe out there.” 

The benefits of this app will help out all year long, so you’ll be ready to shop again next year when Black Friday rolls along. Just remember that any time there’s a lot of excitement around “big deals” — hackers will be out there trying to take advantage of that mood.  Of course, we hope you get some great deals this year — and we hope we’ve helped you stay safe in the process!

*The dfndr lab, a digital security laboratory managed by PSafe, conducted a survey to discover the habits of online shopping during Black Friday in the United States.  1.434 responses were received from American users of the dfndr security application between November, 12 and November, 16, 2020. The projections were made based on data released by Statista in August 2019 regarding the American population with access to the Internet, which would be 95% of the population in the period.

**PSafe (www.psafe.com), the largest private cybersecurity company in Latin America, develops and distributes free mobile protection, performance and privacy solutions for Android and iOS smartphone users. Created in 2011, it currently has more than 300 million installations of its mobile security solutions. PSafe has the largest base of digital threats and attacks in Brazil, which powers its Artificial Intelligence system, capable of detecting new virtual threats in less than 1 second.

PSafe © 2020

O post Online Purchasing Safety During Black Friday: Our Survey Results apareceu primeiro em PSafe Blog.

How Fakespy Entices Users

“Hackers are always looking for our soft spots,” remarks Emilio Simoni, PSafe’s dfndr lab Research Director “and FakeSpy uses the natural excitement people have for receiving a package of some kind. Most people immediately want to know who sent you something, and what you might have received.”

Typically, this malware loads via a fake app posing as the website for your country’s mail service — in America, the USPS; in England, the Royal Mail, and so on.  The fake app is designed to look like the real thing, and once it downloads and the fake transaction is completed, it actually passes the user on through to the real USPS site, to avoid detection. Meanwhile, the malware has loaded, and a broad host of information stealing is underway: financial information, account information, app information, contact lists — Fakespy can even read other SMS messages.  And, like most malware, Fakespy immediately begins its work to replicate itself by sending offers to its victims’ contact lists.

Permissions Required Provide a Warning…

“It’s a very sophisticated and still evolving malware,” Simoni warns, “the people behind it have been refining its design for some time now.” One strong warning-sign is that the app asks for extensive permissions — but many users have grown accustomed to approving these for sites they trust. “If the enticement of a missed package works and the fake mail-delivery site is compelling, it’s easy to see how victims can get manipulated,” Simoni says.

What Can You Do To Stay Safe?

“The first thing to remember is that hackers are using every venue available to them to get their software on your devices,” Simoni explains. “Add smishing and vishing to your malware vocabulary and keep in mind that callers and texters may not always be who they appear to be— or say they are.”  

However hard you work to stay informed, a good protection solution — with a team behind you, is almost essential to stay one step ahead of all the various threats evolving in the digital landscape.  

The Best Protection, For The Worst Threats

An excellent way to protect yourself is to always keep a security installed on your phone. dfndr security offers a full suite of security capabilities that can protect you not only from digital threat, but from everyday thieves as well. Click here to install for free.

(Remember, they steal devices and data too!) 

These are the features dfndr security Pro offers to protect you:

Safe App Installer: AUTOMATICALLY protects you from malware and apps known to have had data breaches — before you install them.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

Unlimited Identity Theft Reports: These reports provide an “outer-perimeter” defense, looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 4 billion compromised credentials. 

Anti-theft Protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Ad-Free: As an extra bonus, Pro is totally ad-free.

Stay Safer!

With dfndr security in your toolbox, the rest is a matter of staying as aware as you can.  Follow a few simple rules to avoid and minimize digital damage:

• Take extra care with any link from an unknown source — and be extra wary if it promises a surprise of some kind. Check your curiosity!
• Don’t click on any links sent to you via email or SMS from unknown people.  And if you get a link from somebody you know, ask: WHY would he / she send me this?
• Only download or install software from trusted sources!
• Make sure you do regular backups on your machines!

Be careful, and we’ll keep you informed as always, whenever we hear more about Fakespy, or any other major threats!

O post “Smishing” Malware Uses Missed-Delivery Notification To Lure Victims apareceu primeiro em PSafe Blog.

“Credential stuffing” is the technique that’s used to take vast amounts of leaked data and use it to gain entry to sites that can provide immediate financial rewards, or future leverage for blackmail or other techniques. 

How Credential Stuffing Works

“The process begins with data, usually leaked from large, corporate breaches. But it’s important to note that there’s also a rapidly-growing  secondary market for this data,” says PSafe’s Director of Cybersecurity at dfndr lab, Emilio Simoni. “Now there are even mega-collections — huge aggregations of breached data, that are being re-sold or offered for free downloads on dark web marketplaces.  Some of these have hundreds of millions of password username combinations.”

To bypass web-site security protocols, hackers use tools designed to make attempts appear to be coming from a wide variety of different IP addresses, and simply storm as many commercial sites as they can (where credit card or bank account information, for example, might be stored.  “They may be successful as few as 0.1% of attempts,” Simoni explains, “but when they’re working with hundreds of millions of identity assets, the math works out in their favor.” 

Once the hackers have gained entry, they can take over the account and make use of it, either by using financial resources, or stealing more personal data to use in subsequent attacks.

How To Protect Yourself

As crafty and sophisticated as hackers’ use of technology has become, and as common as major breaches seem to be, the good news about credential stuffing is that it’s relatively easy to protect yourself from damage. “We recommend three fundamental steps to all of our customers,” says Simoni, “practice good password hygiene; use two factor authentication whenever possible, and protect yourself with a solid ID Theft prevention solution.”

Password Hygiene: Never use the same password for more than one site. You can use many free services to generate strong passwords for you, and make sure that your passwords are kept up to date on every site. This way, if a Social Site gets hacked, your password for your bank account isn’t in danger. 

Two Factor Authentication: Most financial and major social sites now offer two-factor authentication (usually with an option to send a code via-text to your phone).  Use these protocols whenever they’re available.

ID Theft Protection: “Having an early warning system for identity thefts and data breaches is a great way to stay ahead of hackers,” Simoni explains. “This is why our dfndr PRO product offers a feature that allows you to scan globally to see if your data has been breached, and lets you know where and when if it does discover a breach.”

With breaches occurring with increasing frequency, perhaps the way to stay ahead of the hacker-security cat-and-mouse game is to have a searchlight ability to know the status of your personal data at any time. With dfndr installed on your phone, you have one free ID Theft scan, so you can test it now if you like.  dfndr security PRO also has other important safety features, like a Safe App Scanner to protect you from malicious (data stealing) apps, and Anti-Theft features that help you locate and control your mobile device if it gets lost or stolen.  

If you want to be fully protected, we suggest that you download dfndr security now. Just click here!

In the meantime, make sure you have strong passwords, and different passwords on every site, and deploy two factor authentication wherever you can.  At Psafe, we’ll continue to keep you apprised of the many ways hackers are trying to make your life miserable — and the best ways you can return the favor!

O post Major Data Breaches & Credential Stuffing: What You Need To Know apareceu primeiro em PSafe Blog.

Do you know what to do in those moments?

Fortunately, today, technology has advanced enough that defensive features can help guarantee the recovery of your device and / or files, and protect your information. 

So, how do you find your cell phone and protect your files in case of loss or theft of your device? 

With the dfndr security anti-theft protection, you can control your cell phone remotely and prevent third parties from accessing the contents of your device. This way you can defend your phone and information as soon as you realize it’s gone missing.

Here’s How to Activate Anti-Theft Protection:

For advanced protection against theft and loss to be active, just follow the steps:

• Open the dfndr security app. If you don’t have it yet, download it here.
• In the bottom menu, touch Tools > Anti-theft protection.

• Tap Next and enable permissions for contacts, location and phone calls.

• Choose an Account.
• Touch Continue to confirm receipt of the access code.
• Read the information and then tap Enable to use the feature.
• Touch Continue to confirm receipt of the access code.
• Read the information and then tap Enable to use the feature.

You will receive an email confirming the activation of Anti-Theft Protection. That’s when you know the feature is active!

Accessing Anti-Theft Functions

Once it’s running, you can access your Antitheft dashboard at http://meu.psafe.com

Through the MyPSafe website, you can locate your device, lock the screen, activate the alarm and erase all data. The tool was made for you to give commands to your cell phone remotely. This gives control and helps ensure your privacy in case of loss or theft.

As a PRO user, you have full access to the Theft Protection function of dfndr security, which includes the following features:

Locating your device

With Anti-Theft Protection, it is possible to know exactly where your cell phone is, in addition to setting an alarm to find it.

Erasing data remotely

With this feature, you can erase all installed apps, private messages and photos from your phone remotely.

Block access by intruders

To prevent intruders from accessing the contents of your cell phone, simply activate your device’s password lock.

Receive a photo of the thief

If the thief tries to access your device, but misses the access code, you will instantly receive an email with the photo of the criminal.

This combination of capabilities is the best way to protect your phone from thieves. 

DON’T SETTLE FOR LESS!

O post How to Activate the Anti-Theft Function in dfndr security apareceu primeiro em PSafe Blog.

Strandhogg 2.0: Worse Than The Original

“StrandHogg 1.0” used Android’s task affinity to hijack applications—by matching the packageName of any other app, then allowing “TaskReparenting,” the StrandHogg app would be launched, undercover, in place of the target app — then share the information with the attacker and the targeted app (to go unnoticed).

Image Source: Promon

Emilio Simoni, research director at dfndr lab explains:  “Using this method, you would see (for one typical example) what looks like a fully legitimate Gmail icon on your phone, with the usual login dialogue — just exactly as it would appear when you’re logging back  into your account. But once you enter your credentials, you’ve unknowingly shared them with the attacker too. To shield its intervention, your info is also sent to Gmail (or whatever other legitimate application has been hijacked), continuing your transaction and leaving no signs you’ve been compromised. The malware comes on board in the form of innocent looking game apps — one named SuperHappyFunGame — but it does its worst work undercover.”

StrandHogg’s 1.0 weakness was the presence of sketchy task affinity codes in the Android Manifest. Scouring for the 1.0 version required simply scanning the Google Play store for these problematic taskAffinity declarations. But StrandHogg 2.0 doesn’t require any special settings, because the attacking code isn’t necessarily present on the Play Store. Instead, the attacker just downloads the attack code later, once the trojan app or game has taken up residence.

StrandHogg 2.0 also hijacks additional data via app permissions: so contacts, photos, and it can even victim’s movements and location are compromised. Simoni advises: “With the right permissions, StrandHogg 2.0 can even siphon off entire text message conversations, which can enable hackers to defeat two-factor authentication protections.”

The Norwegian security firm Promon, the firm that gave the malware its name,  suggests that updating Android devices with the latest security updates — out now — will fix the vulnerability. Users are advised to update their Android devices as soon as possible. 

“However,” Simoni warns, “the key is protecting yourself from the next StrandHogg.  For that, you need a front line of defense.” 

Protecting Your Devices and Data From Unsafe Apps

You should always count on a extra layer of security for your phone. dfndr security, for example, has a Safe App Installer feature that can operate as your advance-line of defense against apps like SuperHappyFunGame, and the next generation of trojans  StrandHogg uses. Safe App Installer will also keep you protected from all other malicious apps. “The feature lets you know if an app is unsafe before you even install it,” Simoni advises, “and our team does the work to constantly update our database of malicious apps.” With Safe App Installer, every app you consult before installation will be rated for trust. 

There are two levels of alert if Safe App Installer discovers an issue:

• Security Alert: If the app is malware.
• Privacy Alert: If the app already experienced a data breach

An app is rated as Trusted only if the app is not malware or has never experienced a data breach.  

dfndr security also offers Anti-Theft Protection for your device, and Identity theft protection for you.  “Our PRO package has been very thoroughly thought out to provide users with the full suite of protections they need,” Simoni concludes.

We’ll continue to provide updates here on the PSafe blog for new malware that could compromise your security and safety — stay tuned!

O post StrandHogg 2.0 Steals Data From Real Apps apareceu primeiro em PSafe Blog.

However, there’s one great reason to always stay on top of things and update your Android apps whenever they offer one. And it may just be the best reason of all: SECURITY.

“Most apps will update for a variety of different reasons, but one of the most common reasons is security,” says Emilio Simoni, Research Director at dfndr lab. “Engineers are always testing and discovering vulnerabilities in their apps, so even if an update has no new features, for your own good, you should make it a habit to update. Or, set your device to update apps automatically.”  

Why You Should ALWAYS Update dfndr security

dfndr security’s main objective is to keep you safe. That is the reason why you should always do updates with dfndr security immediately when you receive notice of them. Our antivirus database is constantly being updated, often with the defense against the latest, most widespread threats – so if there’s ONE app you want to keep up to date, make it dfndr security.

Why not take a moment and check now to see if your drndr security is up to date?

Follow the instructions from Google below to make sure your dfndr security app always updates automatically:

• Open the Google Play Store app.
• Tap Menu > and then > My apps & games.
• Select dfndr security as the app you want to update.
• Tap More.
• Tap Enable auto update.

dfndr security will then update automatically when updates are available. To turn off automatic updates, just uncheck the box.  This is what the Enable Auto Update looks like when selected:

Set Your Android Apps To Update Automatically

Android lets you control automatic updating so that it always occurs only when you’re connected to WiFi. Setting to Auto Update with WiFi is a great way to make sure all your apps are always up to the second.  Here’s how to make that happen:

• Open the Google Play Store app.
• Tap Menu, Menu and then Settings.
• Tap Auto-update apps.
• Select the Over Wi-Fi only option to automatically update apps only when connected to Wi-Fi.

If you need to do an emergency update and you have no WiFi you can override this setting.

Viruses, Hackers, and Malware Are Out There.  Keep them OUT!

“We’re seeing lots of aggressive activity among hackers since the start of the Coronavirus Pandemic,” Emilio reminds us, “If you keep your dfndr security always app up-to-date it’s going to give you the best protection we have to make sure you can use the web safely.” Simoni concludes: “And right now, with social distancing still in effect in so many places, you want to make sure your access to the web is safe and secure.”

O post Always Update Your Android Apps: Start With dfndr security apareceu primeiro em PSafe Blog.

“Eventbot” leverages Android accessibility to reap private data from financial applications. It also has the ability to hijack SMS-based two-factor authentication codes, and it can even read user SMS messages. A very foreboding mix of capabilities. 

“This one is especially dangerous,” remarks Emilio Simoni, Research Director at dfndr lab, “Eventbot is a trojan that targets over 200 different financial apps.” Simoni explains that these  include banking, money transfer services, and crypto-currency wallets like Coinbase, Paypal Business, TransferWise, HSBC, CapitalOne, Santander, Revolut, and Barclays… and many more.

How EVENTBOT Does Its Damage

 First identified in March 2020, Eventbot makes its way onto phones by posing as a legitimate app: Adobe Flash, Microsoft Word, and similar.  Eventbot primarily resides on unofficial Android App stores and other unauthorized websites, it has also been delivered through bulk SMSs and Emails, typically offering special savings on popular Android apps.

When installed, Eventbot requests a robust list of permissions, including accessibility settings; “read” permission from external storage; the ability to send and receive SMS messages; run in the background; and launch after system boot.

Users who grant these permissions unwittingly enable EventBot to operates as a keylogger, which can extract notifications about other installed applications, and scan and scrape the content of open windows. It also further-leverages Android’s accessibility services to steal the lock-screen PIN — then sends all of its stolen data in an encrypted format to its command-center server. 

Simoni explains: “The ability to track SMS messages also enables this malware to pass-through SMS-based two-factor authentications, which opens the gates wide for financial attacks of the very worst kind.”

Protect Yourself

“It’s important to always rely on a security mechanism. dfndr security, for example, has a Safe App Installer feature that is designed expressly to deal with dangerous apps like this,” Simoni offers, “This feature lets you know if an app is safe before you ever install it, and its updated constantly by the PSafe security team. We scan the web constantly for updates and information to enrich our database.”

With Safe App Installer, any app you intend to install will be rated for trustworthiness. There are two levels of alert if the feature discovers an issue:

• Security Alert: If the app is malware;
• Privacy Alert: If the app already experienced a data breach;
• Trusted: If The app is not malware or has never experienced a data breach. 

 “Eventbot would absolutely trigger a security alert,” Simoni notes.

The free version of dfndr security also has an anti-hacking capability that blocks scams directly on the SMS app, web browsers and messaging apps (WhatsApp and Facebook Messenger). It also offers a URL checker to check the security of any URL you enter.

Further Safety Measures for EventBot (and Similar Trojans)

One of the easiest ways to protect yourself is to make sure that you are only downloading mobile apps from authorized sources,” Simoni emphasizes. “With malwares as dangerous as Eventbot making the rounds, you have to be doubly alert and careful with any unofficial links.” As a rule, you’ll want to avoid any links sent by people unknown to you, and from bulk marketing SMSs and Emails. Finally, be careful with permissions required by various apps — if the list is extremely long or doesn’t make sense, be on guard.

Consider dfndr Pro

One of the best ways to protect your information now is to upgrade your dfndr security app (if you haven’t already) to PRO.  (This link will help you learn more, and you can use it to download PRO if you decide it’s right for you.).

 With dfndr Pro in your toolbox, the rest is a matter of staying as aware as you can to protect yourself and your family. PSafe will continue to provide updates here for new malwares that we discover that is especially noteworthy.

This one is VERY dangerous, so be careful out there!

O post New Android Malware, “Eventbot” Targets Financial Data apareceu primeiro em PSafe Blog.

If anything, they’ve only grown more brazen and active. “Overnight, the pandemic has become the number one subject on everyone’s mind,” explains Emilio Simoni, Research Director at dfndr lab, “and that’s irresistible to hackers and scammers.”

Simoni continues: “The first job of any scammer is to get your attention: to stop you on your path and pull your interest toward their offer or message.  The coronavirus pandemic has created a topic that everyone is intensely interested in, all over the world. This has made the scammer’s job much, much easier. And they’re making use of both the intensity of interest and the global breadth of exposure.” 

An Explosion of Coronavirus Malware

Under Simoni’s direction, the experts at the dfndr lab have found more than 227 different Coronavirus-content scams. Most of them offer a dashboard which falsely promises users access to a real-time map for global or local surveillance of COVID-19 cases. As soon as they’re downloaded, they act as ransomware. Typically, they lock the home screen and blackmail the victim into paying a specified amount of money to “unlock” the phone. The ransomware messages are often intimidating, claiming access to photos and private information, like this one:

SuperVPN: 100 Million Users, Finally Deleted From The Google Store

But coronavirus scams aren’t the only vulnerability out there. As Emilio Simoni explains: “You need security solutions that look out for more than scams and hackers. Even apps that aren’t clearly malware or ransomware can totally compromise your security. SuperVPN is a perfect case in point: it’s security problems have been known for over a year, but the app has been removed from the Google Play store very recently.”

SuperVPN offered users the ability to browse the internet as if they were coming from a different country, providing access to sites and functions that they wouldn’t normally be able to reach. For the app to work, an exchange of information between the device and the app was required. That process of exchange was loaded with serious vulnerabilities, and resulted in the theft of data like passwords and credit card numbers. Beyond its security issues, SuperVPN also appeared to violate Google Play’s algorithm in order to get more installs. They were very successful, racking up more than 100 million users before finally being removed.

“If you know anyone who has downloaded and installed SuperVPN,” Simoni remarks, “make sure they remove the app as soon as possible.”

Above is an illustration of how SuperVPN compromised user’s secure data.  (Image: VPNPro)

Protect Yourself From Hackers AND Vulnerabilities

One of the best ways to protect your information now is to upgrade your dfndr app (if you haven’t already) to dfndr Pro.  (Here’s a link where you can learn more, and download Pro if you decide it’s right for you.)

As apps with hidden “cracks” in security like SuperVPN illustrate, you have to be not only informed enough to resist the hackers and scams, you also have to have proven technical tools to keep your devices safe.

As Emilio Simoni explains it: “As we publicize these cases of hackers and scams, we want to be cautious and let people know that all data breaches or “malware” won’t always follow a specific pattern. Lots of data breaches happen with very reputable software makers or business transactions. There are many ways your data can be compromised. To be safe, you need more than your own human intelligence at work.” 

This is why dfndr Pro offers a full suite of security capabilities:

Unlimited Identity Theft Reports: These provide your “outer-perimeter” defense, looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 4 billion compromised credentials. 

Anti-theft protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock  it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Safe App Installer: Protects you from apps known to have had data breaches — before you install them.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

Ad-Free: As an extra bonus, Pro is totally ad-free.

Stay Vigilant!

With dfndr Pro in your toolbox, the rest is a matter of staying as aware as you can and protecting yourself and your family.  Consider adopting these rules for use of digital devices in your home:

• Take extra care with any link or article about coronavirus. Use reliable sources, such as legitimate government websites, to get real, fact-checked stories and information on COVID-19.
• Don’t click on links sent to you via email from unknown people. 
• Look very closely at email addresses and names: If the source looks or sounds like someone you know but the name or email address seems even slightly off…stay away! If the name is right but the message is brief or confused, or not at all like the person you know…your friend could be the victim of a hack themselves.
• Only download or install software from trusted sources. Make sure you double check url’s! 

Stay safe! We will keep you up to date on all the latest we hear about scams of all kinds: coronavirus-related, and otherwise. Until then, stay safe and keep your loved ones safe and informed too. 

Finally,  if you or someone you know is a healthcare worker, please accept (or pass on) our grateful thanks.  

O post Be Careful: There’s A Malware Pandemic Underway Too… apareceu primeiro em PSafe Blog.

A Perfect Storm For Scams and Disinformation

The behavioral and psychological changes required to make social distancing work are significant: everything from sharing a home or apartment for an entire day (and with more people, especially if you have kids), to figuring out how to go to the grocery store and shop safely.  The combination of emotional, physical, and psychological stressors, combined with significantly increased internet and email “screen-time” for most people, has created a kind of perfect storm for online scams, con-artists, and disinformation. Another powerful factor driving this storm is curiosity: people are extremely hungry to hear news, and hopeful / practical news in particular.  Scammers have stepped into make the most of these factors, and as Emilio Simoni, Research Director at the dfndr Lab explains: “What we’re seeing is cybercriminals redoubling their efforts to create more, increasingly sophisticated scams, in order to reap profit from baseless, sensational ads or news — or through thefts of personal and financial data. The information they offer is almost invariably false, and sometimes the information itself is immediately dangerous to victims who act on it.”

No Slowing Down: Scammers Are Busier Than Ever!

The pace and inventiveness of coronavirus scams appears to be picking up. Emilio Simoni and the dfndr Lab Security Team have gathered the following examples together. Note that these items by no means constitute a complete list of scams in operation.  We share these with you so you can get a richer sense of the variety of these scams, and the methods they employ.

A multilingual scam using the Nike brand name was discovered by the dfndr Lab Security Team (see image above). The scammers used geolocation to adapt the language used to the victims: it showed messages in Portuguese, English, or Spanish, depending on the visitor’s locale. Some generic questions were used to draw people in, and after they were drawn in they were automatically redirected to another domain, full of ads. It was through impressions of these ads that the cybercriminals reaped their profits.

Emilio also notes that “Cyberattacks are becoming more and more sophisticated. One of the most popular scams leveraging the pandemic is the one that falsely promoted a free 1-year subscription for Netflix. The cybercriminals study how official companies and websites offer promotions and sales, then mimic their approach, which can help to create a extremely convincing page.” You can see the example Emilio cites, immediately above.

The dfndr Lab Security Team has also discovered cyberattacks connected to fake profiles on Facebook, also known as bots. These bots are especially prevalent in Facebook Private Groups. Of 3 bots discovered and analyzed by the dfndr Lab, one had engaged more than 10k interactions. These bots used intelligent techniques to persuade the victims, “talking” through pre-recorded messages that request personal information. The most common themes used by these bots to attract new victims were 1) registration to receive the government social security benefits,  and 2) offering a map to check the coronavirus spread around the world. The dfndr Lab also notes that many scams in the US are being disseminated through Facebook Messenger. So be careful!

Paypal phishing attacks have also grown exponentially since the beginning of the pandemic. Dfndr lab stipulates that during the month of March, scam emails fraudulently claiming to be from PayPal, and seeking private information, reached over 1.4k users in the US alone. 

With people all over the world sheltering in place, virtual meeting providers Zoom, has been in high demand. The dfndr Lab detected 4 fake domains using their name. The URLs were hiding trojans that could act in different ways: seeming to install the Zoom app, but redirecting victims to another website full of ads, and rapidly consuming your phone battery.

What Can You Do?

This is a story that will continue to move fast, so the examples above will be joined by new and different examples by time you read this. As Emilio Simoni pointed out, hackers all over the world are in HIGH PRODUCTION mode during this crisis. They’re going to keep inventing new and more devious ways to get information, and steal from you.  

You need to protect yourself. So make sure you’re using a security solution that’s built to alert you immediately when you access a scam site, or interact with a known digital virus “carrier.” dfndr Security has an excellent Anti-Hacking feature you can activate. 

If you upgrade to the dfndr Pro version, you’ll get the added benefit of a Safe App Installer (which warns you if an app you’re about to install may be a vector for malware). It also offers Identity Theft Protection to keep your email safe as well. 

Consider Going Pro

One of the best ways to protect yourself right now is to upgrade your dfndr app (if you haven’t already) to dfndr Pro.  Pro gives you these added protections:

Unlimited Identity Theft Reports: You can check if any of your account credentials have been leaked on the internet.

Anti-theft protection: In case of theft or loss, you can lock down your device remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Safe App Installer: You’ll know if an app has previously had data breaches before installing.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

Ads free version: Totally ad-free

Use this link to learn more about dfndr Pro, and consider upgrading. 

Everyday Digital Hygiene Matters Now Too 

Just as avoiding coronavirus requires that you keep your hands clean (and keep them away from you face!) — digital hygiene is achieved through simple steps as well. Now’s a time to make doubly sure that you:

• NEVER click on links sent to you from unknown people. 
• Look very closely at emails: If the source looks or sounds like someone you know but the name or email address seems even slightly off…stay away! Leveraging contact and friend information is one of the most common paths for scammers to load malware or get your private information.
• Only download or install software from trusted sources. Make sure you double check url’s! The Anti-Hacking feature on dfndr will protect you from malware and known hacking sites. 
• Use reliable sources, such as legitimate government websites, to get real, fact-checked stories and information on COVID-19. Be aware that scammers will be pulling at you emotionally. This is a hard time for everyone, but do everything you can to stay cool and grounded: your ability to “count to three” before clicking or responding to a link or headline is more important now than ever.

We’re going to keep working to keep you informed and up to date.  Until next time, we hope you and yours can stay safe and stay well! 

O post Coronavirus: Remain On High Alert For Scams & Disinformation apareceu primeiro em PSafe Blog.

Strategy for Hacking Email Accounts

Cases involving hacked email are more common than you might think. Emilio Simoni, security expert at dfndr lab, PSafe’s digital security lab, explains that phishing is the most commonly used practice for hacking an email account. 

“Phishing is fake pages that induce the user to provide sensitive data. In this particular case, if a cybercriminal is interested in stealing accounts from an email provider such as Gmail and Hotmail, he or she will create a fake page identical to the original email provider to trick a victim,” explains Simoni.

Generally, phishing attacks are fake campaigns containing misleading promotional messages aimed at stealing access credentials such as logins and passwords. “To attack, hackers mass-mail these campaigns through email and SMS to reach the largest number of users,” reports Simoni.

Risks to Users

Email is the “gateway” to other services on the internet. So, if one account is hacked, a cybercriminal will be able to change the password of virtually every service logged in to your email. It’s also common for hackers to impersonate a person after gaining access to their email and spreading other cyberattacks through someone’s contact list.

“People often link their mobile phone to an email account and if a hacker gets in, there is full access to a person’s location, photos, and confidential files,” adds Simoni.

How to Tell If Your Email Has Been Hacked

Here are some signs that may indicate that your account has been compromised:

Your Login History
Almost all email providers now have a login history. You can view it and see whether your account is being accessed from an unknown device.

Suspicious Email Logs
Make sure your email spam and inbox contains messages that confirm changes to passwords or logins for websites or apps that you made. 

Check Your Sent Messages
View the log of the last messages sent from your account and check for emails that were not written by you.

Check If Your Credentials Have Been Leaked
You can check if personal data such as email, passwords, or your conversation history has already been exposed on the internet. dfndr security has an Identity Theft feature, which lets you know if your emails or logins were leaked, when it happened, and how it was dispersed. The results are given from a completely thorough search of your email address.

My Email was Hacked, What Now?

Have you noticed strange behavior on your email account? Frank Vieira recommends some actions you should take:

1 – Change your account password immediately.
2 – Disconnect email access to all devices. To do this, go to your account settings and look for Login and/or Security options. Anyone logged in to your email from another mobile phone or computer will be automatically be logged out.
3 – Enable two-factor authentication. This will help you monitor access to your email and provide extra protection for your account.
4 – Download an antivirus on your phone. If your email is linked to your phone, it is essential to check for viruses and malware consistently. dfndr security is able to detect and remove any kind of threat on your phone bu providing real-time protection in messaging apps and browsers. Tap here to download dfndr security.

O post How to Tell If My Email Has Been Hacked apareceu primeiro em PSafe Blog.

LEGITIMATE SITES ARE BEING “FAKED”

One of the most high-profile recent attacks was aimed at a popular, interactive COVID-19 tracking map maintained by Johns Hopkins University.  Hackers are selling malware that compromises the map and infects users. The university is aware of the malware impersonation of its site, and warned users to only trust the maps at its own website.

Sadly, the John Hopkins fakes are just one of MANY recent attacks that deliver spam, steal credentials, and infect victims with malware. Digital hackers have been very quick to exploit an understandable desire for reliable information, amid widespread anxiety about the COVID-19 outbreak. Emilio Simoni, director of dfndr lab, a laboratory specializing in digital security at PSafe, notes that “Cybercriminals aim to profit from this global health crisis: by taking and/or ransoming victims’ personal data; by spreading internet scams; and by infecting victims with malicious malware downloads.”

UNPRECEDENTED CHANGE MEANS NEW DIGITAL THREATS

The Coronavirus pandemic has already changed normal daily life and the way business is getting done.  Because so many people are being asked to shelter-in-place and practice social-distancing, a much larger number of people are now working remotely, and spending even more time online.

Hackers have ramped up their activity to meet this moment.  Malicious actors have seized the opportunity to target victims with greater numbers of scams and malware campaigns.  Remote work vulnerabilities are being exploited, so organizations must minimize cybersecurity risks as best they can.

PROTECTING YOUR DIGITAL DEVICES

Most of us access the internet and social networks through our cell phones. For this reason, security experts recommend that you employ a dedicated solution that alert you in real time whenever you access a scam site, or interact with a known digital virus “vector.” dfndr Security has a robust Anti-Hacking capability you can activate if you have the app — and if you don’t have the app,  you can download the free version, right here. Upgrade to the dfndr Pro version if you want to get the Safe App Installer (which warns you if an app has malware). It also offers Identity Theft Protection to keep your email safe. 

Consider downloading dfndr Pro during this crisis to keep your digital devices and your information as safe as possible..

MORE WAYS TO PROTECT YOURSELF

The best ways to protect your personal (and business) cyber health are almost exactly the same as during “normal” times: 

• Don’t click on any links from unknown people
• Only download or install software from trusted sources — double check those url’s! 
• To make these checks automatic, download dfndr and use its anti-hacking features: it will protect you from malware and known hacking sites. You can also use a link analyzer, like the free one dfndr offers, but having the app on your device makes this so MUCH easier!
• Use reliable sources, such as legitimate government websites, for current, fact-based information regarding COVID-19

Information and prevention are the best weapons to fight the Coronavirus: 

It’s worth remembering that the simplest measures will be immensely powerful in this battle. Stay alert, stay calm, wash your hands as frequently as you can, and practice social distancing. It’s important to recognize that while you may not be in a high-risk group, and you may not feel ill yourself, you can still be a carrier of this virus.

Make sure you get your information from reliable sites and from people with credentialed expertise. If a message, inquiry, or offer feels fishy: it may well be a hacker. STEER CLEAR. At PSafe we’ll continue monitoring developments with Covid 19 and the digital scams, hacks, and viruses that are accompanying it.

Count on us to keep you informed and protected. We are with you in this fight!

O post During the Coronavirus pandemic, there is a parallel battle going on digitally apareceu primeiro em PSafe Blog.