Read More: The Danger of Spoofed Websites: Learn to Tell the Difference

The best way to protect yourself from cyber threats is to ensure you download antivirus software on all your devices, your phone included. For Android users, we recommend dfndr security, which has a security scan feature that combs your entire device, even the SD card, and blocks viruses or malware.

How It All Began
A cyber drive-by attack wasn’t much of a threat in the early days, mainly it was used to gain free access to Wi-Fi. Hackers would drive by the streets of a town, locate a Wi-Fi signal and If the signal was insecure, they would hack through to siphon Internet.

How They Evolved
Now cybercriminals use this same practice but in more sophisticated ways. They often target badly secured routers and first figure out the router manufacturer. Once they’ve gotten that information, they’ll next tap in and listen to the traffic and find ways to compromise the password, which eventually gives them access to a computer or phone.

With all systems weakened, the next stage of an attack is to introduce malware or a keylogger, and once this happens, tapping into someone’s sensitive information is child’s play.

A keylogger can bait a victim by having them visit a legitimate website that’s infected through a popup or ad, or by slyly redirecting the person to an infected site. Information like bank accounts, logins, or social security numbers could be discovered and used in illegal ways.

Criminals are also targeting businesses with this type of attack, which requires no user interaction at all and depends on the vulnerability of a device or modem.

In other cases, cybercriminals use ‘man in the middle’ software, by having attackers spy on victims by setting up conversations between multiple parties.

Last Words and Tips
In addition to downloading a security app, individuals and companies should update devices regularly with the latest security patches and script blocking plugins. Additionally, businesses should ensure employees don’t have local administrative access to their devices. Set them up with a separate account instead.

Other measures to take include segmenting a company’s network so that everyone isn’t running on the same server, which ensures that malware doesn’t spread throughout an entire office.

Finally, all work and personal data should be backed up as frequently as possible on external hard drives or a cloud service, which should not be left connected to the main network.

O post A Cyber Drive-By Attack Could Be Lurking in Your Hood apareceu primeiro em PSafe Blog.

GandCrab
Recently, GrandCrab has grabbed everyone’s attention. The ransomware was discovered just this year and continues to hold everyday individuals hostage by encrypting all of the data on a user’s machine. What makes this piece of malware so ingenious is the way it’s been designed to hide the identity of the hackers who created it. To remove the ransomware from your machine, you must pay between $300-500 through a secure TOR network connection using an anonymous cryptocurrency known as Dash.

Read More: How to Protect Your Data from Ransomware Attacks

WannaCry
Accurately described by its name, the WannaCry strain of malware will indeed make you weep if you fall victim to it. The malicious piece of ransomware infected individuals in over 150 countries last year, in addition to targeting Britain’s National Health Service. Initially, the software used a piece of the Microsoft Windows file sharing system to infect other machines, but it eventually evolved. As with other ransomware scams, anyone infected found themselves forced to pay, this time via Bitcoin if they ever wanted to see if their data again.

GoldenEye
Not to be confused with the action-packed James Bond film of the 1990s, GoldenEye is a nasty piece of malware that’s also known as ‘NotPetya.’ Infecting reputable companies such as AP Moller-Maersk, Cadbury, FedEx, and Merck, the ransomware requested $300 for every computer infected. Easy to be tricked by, the malware sneaks onto your machine through an email or infected Word document. To add insult to injury, the malware has been smart enough to clear any actions it takes on a device, making it difficult to track down the criminal creators.

How Do You Stay Safe?
What’s disturbing is each piece of malware noted above have all been released within the last few years. Your data is at significant risk because ransomware attacks grow more aggressive each year.

Your computer isn’t the only device at risk either, collections of malware also target Android users. You can keep yourself protected by downloading dfndr security which has a full virus scan feature to locate any threats on your device, as well an anti-hacking feature that’s powered by AI, which will block malicious links before you click on them.

O post The World’s Most Malicious Ransomware Attacks apareceu primeiro em PSafe Blog.

Read More: Know Your Enemy – How Ransomware Payments Happen

Be a responsible employee and citizen by protecting all your devices from potential attacks, including your Android phone. The best way to fight hackers is by installing a well-rated app like dfndr security, a full virus scan feature can check for any threats in your device, by scanning your files and even your SD card.  

SamSam ransomware is like any strain of ransomware, mainly designed to encrypt data on a server or device and the only way to recover your data is by paying a “ransom’ to have it returned. However, SamSam has some specific details you should know about.

It Spreads Quickly
Most ransomware is sent by sending one copy of the malware to thousands of possible victims over the course of a day or two. However, the hacking creators of SamSam ransomware did something different – they sent thousands of copies of the malware to computers within a single organization at once.

Once the organization was infected, the hackers offered a “discount” to restore the company data all at once. Many cybercriminals use the “spray and pray” technique – attack an organization and hope for fresh victims. But the perpetrators of the SamSam ransomware attacks specifically targeted organizations with glaring vulnerabilities or weak credentials.

What Did They Exploit?
The SamSam ransomware attacks exploited bugs that organizations are not aware of, or had missed in their IT security plans. They also rolled out brute-force attacks against the Remote Desktop Protocol, a Microsoft software that allows two computers to remotely connect. This allowed them to gain access to unauthorized networks.

The ransomware was then spread to other connected networks through network mapping and credential theft.

What Can You Personally Do?
Always follow your IT department’s recommendations on having strong credentials, by creating passwords that are at least 8 characters long with some combination of lower-case and upper-case letters, as well as numbers and symbols. Ideally, use all randomized characters.

Take the stance of “defensive computing,” which helps protect you from malware, ransomware and phishing attacks. Don’t open links and files from people you don’t know or from “friends” who’ve sent you odd messages (cause the person may have been hacked!). Heed company protocols on backing up corporate files regularly and stored off-site, so if an attack were to happen, the impact could be lessened.

O post The SamSam Ransomware is Behind the Atlanta Attacks apareceu primeiro em PSafe Blog.

Read More: Get to Know These Cybercrime Trends

There are only a few reports of hotels receiving complaints about a small subset of criminals entering rooms and taking personal items through this technology, but the vulnerabilities in keycard technology suggest it’s only a matter of time before these crimes go mainstream.

How the Master Key Works and is Built
To get a master key to access a room, hackers book a hotel room and copy the data on an electronic keycard, which then gives them access to any room. In some cases, they don’t even need a keycard because the process can be done remotely by standing close to a hotel guest or a hotel employee. The ‘Master Key’ can be unlocked through a design flaw that’s common in most electronic lock systems.

Hackers then buy a portable programmer for a few hundred dollars to overwrite the key and create a master key within minutes. Once this is accomplished, the cybercriminals generally target travelers who store their laptops, passports, and cash in hotel rooms.

How the Key Opens Doors
This device, which is an RFID reader and writer, is simply held close to a door lock. The Master Key will run different key combinations within a hotel’s electronic database in less than a minute, cracking the master key combination to a particular room and unlocking the door. This can be done with a custom-tailored device or by writing the master key back to a hacker’s keycard.

A Temporary Fix
Being alerted to this flaw, Assa Abloy, the company who manufactures the portable programmer issued a software fix to keep hotel guests and their personal items safe. The company recommends that hotels worldwide update their keycard software to ensure these cyber attacks don’t occur in their facilities since new vulnerabilities can show up over time.

O post Hackers Can Now Break Into Your Hotel Room apareceu primeiro em PSafe Blog.

How Tabnapping Attempts to Trick You
This is how tabnabbing works. Say you stumble onto a website – maybe you found an interesting web article, clicked on a link sent by a friend, or are researching a specific topic. Often when we’re busy, opening several tabs to save a page or blog post to read later is normal multitasking, but this is where tabnabbers get you. When you open a new tab to work on something else, the malicious page begins to transform in the background while you’re occupied and not looking.

Read More: Phishing Attacks Can Be Stealthier Than You Think

The bogus website’s icon, known as a favicon, suddenly changes to something else like the Google logo, with the entire webpage following suit. When you tab back to where you were before, you’re presented with a fake Google account login box. You quickly assume that you were automatically logged out of something and enter your credentials, but what you don’t realize is you just fell for a dubious phishing attack. And now a hacker has your login information.

Tabnabbing are targeted attacks — hackers scour for vulnerabilities in HTML script, image loads, and various web browsers. Methods like this allow hackers to detect which site a user is visiting, or what sites a user visits regularly. For example, if you use Facebook daily, a hacker could simply switch out a tab to the Facebook login screen and ensnare you to enter personal details.

There is Hope for Protection
Keep following necessary security standards such as always checking the website URL, not only once it loads, but whenever you’re being prompted for a password or other personal information. Implementing two-factor authentication can also make it more difficult for hackers to access your account even if they’ve managed to get a hold of your password.

Finally, always have an antivirus software installed on all your devices, both computer, and smartphone. dfndr security is a well-rated app for Android devices and offers advanced technology based on AI machine learning. There is a full virus scan feature that scans your device from top to bottom and detects malware or viruses, and the anti-hacking feature blocks any malicious links before you even click on them.

The big lesson here? Your data is at risk, but the good news is you don’t have to go it alone.

O post Tabnabbing Attacks While Your Back is Turned apareceu primeiro em PSafe Blog.

While you focus on ensuring that a hacker doesn’t manipulate your trust, your mobile device is still vulnerable to cyber attacks. Available for Android devices, dfndr security offers antivirus capabilities that scans and removes malware, and an anti-hacking feature that warns you if a link is dangerous. A quick download will go a long way towards making you feel safer.

Targeting Your Stressors
One psychological technique that’s used to manipulate is to target someone who is under stress and likely feeling vulnerable. When we’re stressed, we tend to make rash decisions to push away the source of stress. This might include a situation like receiving an email asking you to send password information to your ‘IT department’ because it’s ‘urgent.’ No matter what’s going on around you, be sure to take a deep breath and handle tasks with your full attention. Why? That email from IT could be a scam.

Email From the Big Boss
We tend to bow to pressure in the face of authority quite easily; this basic psychological idea has been showcased in psychology tests as far back as the 1960s – and it’s just as relevant today. If you see an email from your boss, you’re more likely to address the request quickly. However, always double check that email to ensure it isn’t fraudulent. Your boss will thank you for preventing a possible phishing attack.

Respond Quickly or Else
Lastly is the psychological manipulation of placing a time limit on your decision-making capabilities. We’ve seen the tactic used in both phishing scams and television commercials – you need to act now before time runs out! Don’t allow anyone to control how fast you move, caving in can tear down your ability to rationalize. The next time you see an email that stresses urgency, slow down, and take the time to consider the proposal – your future self who doesn’t get hacked will be grateful.

O post Learn the Psychology of Digital Fraud apareceu primeiro em PSafe Blog.

Read More: The Facebook Malware Scanner Is Holding Users Hostage

One of the best ways to defend your smartphone from these attacks is with an antivirus software like dfndr security, which has a full virus scan feature that checks all your programs for malware. The app will check everything that’s on your device’s memory, as well as your SD card.

The recent rise of consumer ransomware is rattling for sure, which begs the question – what is the second best defense you can employ besides an antivirus software? Knowledge!

How These Attacks Happen
The main reason why hackers continue to develop sophisticated ransomware techniques is that they have a high success rate. As a consumer, you will never see them coming because they show up in the most unexpected ways, such as a pop-up, in an email or via SMS. If you open the wrong email, malware can lock your device out, forcing you to pay ‘ransom’ to gain the encryption key that reopens your device.

Research on ransomware targeted at consumers found that 38% of targeted individuals pay criminals to have their devices unlocked. 45% of consumers don’t even know what ransomware is, while 23% don’t backup files on their computer or mobile device. 48% are not worried about being hit with a ransomware attack at all, which is disturbing. The worst thing you can do is assume you won’t be a victim.

How to Avoid a Target on Your Back
Besides downloading security software for your device, there are a number of ways to protect yourself from ransomware. Make sure to keep your device up to date with the latest operating system. Without the combination of security software and an updated system, there may be security holes that a malicious email or SMS can exploit.

When surfing with your web browser, make sure Adobe Flash is turned off. Ransomware can sometimes enter your device through a Flash vulnerability. Also, stay away from questionable sites on the web because they may be littered with pop-up ads. These often contain false promises and a whole lot of malware.

Finally, make sure you backup all your files on an external hard drive or a cloud that you can use in case you get hacked. Losing all your data and being locked out of your device will sting less if your data is backed up.

O post Watch Out Consumer: You’re a Major Target for Ransomware apareceu primeiro em PSafe Blog.

How They Are Accessing Your Personal Data
Researchers discovered that the vulnerability takes advantage of an iTunes feature known as ‘iTunes Wi-Fi Sync.’ Normally, this feature allows users to sync their photos, music, and other content wirelessly over a Wi-Fi network, without the need to plug into a Mac or PC. However, in this circumstance, hackers take advantage of the useful ability to access your device’s personal data. Worst of all, you don’t need to enable ‘iTunes Wi-Fi Sync’ because an attacker is able to perform the action themselves.

Read More: Android vs. iPhone: Which One Has Better Security?

The exploit begins when the user of an iOS device, such as an iPhone or iPad, connects to an unidentified machine bobby trapped with the malware and chooses to ‘Trust’ it. This action allows the machine to communicate with your device, as well as set up the remote access it needs to breach your security.

Defending Yourself Against the Exploit
The solution may seem simple, like ensuring you don’t plug your iPhone or iPad into any unfamiliar machines – and you definitely shouldn’t choose the ‘Trust’ function. Luckily, it really is that simple! Certainly, don’t plug devices into machines you’re unfamiliar with, but there could be times when a familiar machine isn’t readily available.

A common occurrence when you might plug your device to an unfamiliar machine is at a local pharmacy’s photo department. Many pharmacies offer printing services directly from your smartphone. However, this service does require you to choose ‘Trust’. For an easy workaround, offload your photos to a flash drive, or utilize a third-party solution from the App Store to wirelessly transmit photos to your pharmacy’s photo department.

Overall, the new exploit may be dangerous, but it’s quite easy to avoid. As with many instances of cybersecurity, remaining cautious and using your best judgment is a strong defense against malicious attacks.

O post iOS Exploit Targets Your iPhone and iPad Devices apareceu primeiro em PSafe Blog.

On February 15th, 1995, the FBI arrested the then infamous computer hacker, Kevin Mitnick. While Mitnick was detained for more advanced hacking schemes, he relied heavily on social engineering to obtain sensitive information from his victims. Flash forward to a fictional movie called Hackers — released in the same year — and the film’s eerie opening scene shows the protagonist posing as an executive to extract information from an unaware security guard. A chilling example of social engineering caught on celluloid.

Read More: 5 Things You Can Do to Prevent Phishing Scams at Work

Social Engineering is a tactic used before the days of computing but has rapidly evolved and become more sophisticated as the digital age emerged. Today, many individuals may be familiar with the term ‘phishing,’ an extremely prevalent form of social engineering in which a hacker impersonates a trusted person or entity, convincing someone to share valuable personal information.

You can avoid social engineering by becoming familiar with the techniques involved and understand how a hacker might attempt to manipulate you for their own purposes. Here are the six fundamental principles of social engineering laid out by Professor Robert Cialdini in his 1984 book, Influence: The Psychology of Persuasion:

1. Reciprocity – You’re more likely to perform an action for someone if it’s framed as returning a favor. Social engineers rely heavily on this emotional cue and the best defense is to carefully consider the information you’re giving out – just because you owe someone a favor, don’t give them keys to the castle.
2. Commitment – When an individual commits to an idea they are more likely to sacrifice in order to obtain a goal. For example, if you agree to work on a project with an individual and are asked to share sensitive information, your commitment to the person or project could convince you to hand over data – be aware of what you’re providing and why.
3. Social Proof – This can be summed up by the old phrase “Monkey see – monkey do.” As social creatures, we’re likely to follow what those around us are doing. If your coworkers in the office are unknowingly entering a sweepstakes scam, you’re more likely to jump in and do the same. Don’t forget to think for yourself and avoid the herd mentality – do your research!
4. Authority – Perceived authority is one of the major influences for social engineers to prey upon. The adherence to authority is commonly used in phishing scams. A hacker sends a phony email that appears to come from an authoritative entity like your human resources department, which can cause you to react and provide the requested information right away. However, the fake request can be more direct such as a ‘supervisor’ asking you for a password. When confronted with these types of emails, make sure to understand your company’s security policies. In many cases, passwords shouldn’t be handed to anyone, no matter the person’s level of authority.
5. Scarcity – If the desired object is scarce, you’re more likely to jump for it. These feelings point to historical research when early humans had to forage for supplies and food, often competing for minimal resources. Don’t allow ‘limited time offers’ or ‘act now’ keywords influence you. Think before entering any personal information.

A final tip here is to always take a step back and not allow factors such as authority and commitment warp your judgment. Social engineering is a terrifying practice. Hackers aren’t just attempting to break into our computers, but also manipulate our minds – the most private space of all. Understanding how social engineering techniques work is a head start in keeping yourself protected.

O post Social Engineering Isn’t About Making Friends, But Exploiting Your Trust apareceu primeiro em PSafe Blog.

Double Check That ‘Familiar’ Email Address
Just because you see an email from your friend ‘John Smith’, don’t assume this means it came from him. When a hacker sends fake emails, they opt to obscure the sent address with a name that might be familiar. To see the true address, simply tap the name in the ‘From’ field of your smartphone. On a computer, hover over or click the same information with your mouse. You should now be able to see the originating email address and determine if it’s genuine.

Read More: Why Are People Falling for Phishing Scams?

It’s Unlikely That Your Bank Forgot Your Name
Typically, when receiving an email from a secure source, such as a government entity or your financial institution, they will always address you by first and last name. If you receive a generic, unpersonalized email from your bank, there’s a good chance that something fishy is at play. To orchestrate mass phishing scams, hackers will commonly greet you with a readily applicable ‘Dear Sir or Madam.’

Gift Cards Aren’t Legitimate Payment Methods
A recent scam that’s been exploding across the web is the ‘IRS prepaid cards scam.’ A hacker will pose as an IRS agent demanding that you pay your outstanding taxes by purchasing an iTunes card or other gift cards from major retailers. No legitimate institution will request payment of debt with a gift card. Worse, if you fall for this scam, there is little credit card companies can do to protect because you fully authorized the purchase of such cards. If you spot an email asking for gift cards as payment, be sure to delete it right away.

You Probably Don’t Need to ‘Act Right Away!’
Another common phishing scam is when an email urges you to act immediately, causing you to make fast decisions. Reacting out of panic to these kinds of emails can quickly cloud your judgment. If you receive an email alerting you that your device has malware or you’re running out of storage, be sure to drop that ‘alert’ into the trash folder. If you’re genuinely concerned, utilize an antiphishng solution for your smartphone such as dfndr security, which has an anti-hacking feature that not only keeps your phone free from malware but also monitors possible incoming threats that arrive over SMS, email services, messaging apps, and web browsing.

Think Before Downloading an Email Attachment
Does that email you just received contain an email attachment that you weren’t expecting? Unless you were fully prepared to receive an email containing a file, don’t click it! Including malicious pieces of software with false emails are a standard way for hackers to gain access to your machine or phone. In doubt? Always have a third-party antivirus app installed on your devices remains a sensible way to double check email attachments. Remember the security mantra: Don’t know what it is? Don’t click it!

O post 5 Tips to Determine if an Email is Actually a Phishing Scam apareceu primeiro em PSafe Blog.

Read More: Hackers Are Taking Over Your SIM Card and Personal Phone Number

Being the victim of an online attack is shocking, not to mention embarrassing, but with knowledge and resources to turn to, you can gain some closure and move forward.

Types of Scams
There are 3 main ways that hackers try to trick you. One is to offer a reward such as a free vacation or gift card. The second comes in the form of a threat, demanding payment due to unpaid taxes or missed jury duty. The last method is a generic email that could appear to be from your employer, but it’s really not.

All of these fake emails are designed to extort payment or have you unknowingly click on a link filled with malicious code, which can then be used to steal your personal or financial information.

How to Avoid Getting Hacked
If an email seems suspicious, call the company the email appears to be from to ensure it’s not a scam, or type the real URL directly in your browser. If you weren’t expecting an email from a particular sender yet receive one full of links, don’t click on any of them — they could be malware designed to take over your phone. Same goes for generic emails, they are usually a bigger sign of potential danger.

Never share personal information like your full name, banking details, credit card number, or anything else to the sender of an unsolicited email.

What to Do if You’re Targeted
To address the feeling of helplessness that comes with being victimized, consider reaching out to any of these resources:

• The BBB’s Scam Tracker allows you to enter details of a scam you were the victim of. Your entry is added to a large database of known scams. This can help others in similar situations.
• Report a scam on the Department of Justice’s website in the case of an intellectual property crime (they do happen).
• If your social profile is hacked, use the Facebook Help Community to report the incident. The compromised account will be shut down as they investigate the matter.
• The FBI’s IC3 is another avenue to file a complaint of a serious hack or other online crime.
• Along with federal sources, always utilize the local authorities at the same time to help gain your device or information back.

O post What to Do if You’re the Victim of Hacking apareceu primeiro em PSafe Blog.

Read More: Malicious Ransomware Could Be Around the Corner

Protecting yourself from ransomware can be tricky, but dfndr security offers solid protection for your Android device with advanced, anti-hacking capabilities that safeguard you from malicious websites before you even tap on a link.

If you’ve never heard of ransomware, it’s vital to know in case an attack ever happens to you.

Malware That Spreads Easily
Ransomware is a form of malware that takes a device hostage until a “ransom” is paid, usually in the form of Bitcoin or another cryptocurrency which is virtually untraceable and protects the hacker’s identity. These types of viruses usually begin as a phony email posing as a friend or co-worker, containing a link you’re encouraged to click on. Once malware infects a system, it can spread from machine to machine, or if a single device is affected, a hacker can gain full control over the phone.

Easy targets of ransomware attacks are device owners with older operating systems that do not have adequate security software. Once hackers take over your device, you will be given a certain amount of time to pay, usually around 72 to 96 hours. If you fail to pay, your device will likely be permanently locked.

South Korea is Largest Target
A recent study discovered that people in South Korea get targeted more frequently than anywhere else. About 20,000 people were targeted all over the world for $16 million worth of ransomware and around $2.5 million of these attacks were collected from device owners in South Korea.

Yikes, What Should I Do?
One way to protect yourself from ransomware attacks is by backing up your data somewhere else, like an external hard drive. If you get targeted, you can reset your device to the original factory settings, eliminating the ransomware. You can then transfer old files to the device and avoid paying the ransom. However, hackers may still be able to target your device sometime in the future as ransomware worms are easy to modify.

Security Apps Protect You the Best
In order to avoid these attacks altogether, the best thing you can do is download a security app that protects you from a variety of attacks. With dfndr security’s anti-hacking feature, your device will block phishing attempts while you navigate the web, as well as other malware designed to take your money.

Though ransomware is disturbing, with awareness you can still preempt a strike from hackers and continue enjoying your online world without worrying.

O post Know Your Enemy: How Ransomware Payments Happen apareceu primeiro em PSafe Blog.

A Dangerous Loophole in Chrome
When a website wishes to deliver notifications to your device from within Google Chrome, a small popup will appear on your screen. From here, users can either select to ‘Allow’ or ‘Block’ the website from displaying such content. Chrome is now supposed to log your decision and prevent the site from asking you again, but there’s a problem – clever web programming has found a way around this system.

One method of fighting against this type of scam is to use dfndr security on your Android device. dfndr security offers a full virus scan and an advanced anti-hacking feature; these include scanning your device from top to bottom for malware, while also preventing dubious websites from touching your device by blocking malicious links. In a short period, the dfndr lab team has detected and blocked over 10,000 attempts of the Chrome-based scam.

Due to this flaw, if a website wants to ask for repeated permissions continuously, the site programmer can merely swap between multiple subdomains until the user chooses to allow consent. Research at dfndr lab has shown this practice of websites using a slew of subdomains is an attempt to force an individual into accepting.

Staying Protected Against the Attack
Besides downloading an antivirus solution for your device, if you still stumble upon the scam, your best bet is to try and close out the webpage, so that it can no longer ask for permission requests. Do not give in to hitting ‘allow’ out of pure frustration, once you’ve done that, hackers are one step closer to infiltrating your Android.

O post dfndr lab Uncovers Potentially Malicious Google Chrome Scam apareceu primeiro em PSafe Blog.

To begin protecting yourself from the start, consider using dfndr security, which offers an anti-hacking feature for your Android device. With the dfndr security anti-hacking feature on, malicious sites are blocked even before you have a chance to click on a link in an email or SMS.

Website Spoofing is Pretty Scary
Website spoofing is a conventional component in the criminal scam of phishing. Hackers have been creating lookalike sites since hacking was born, yet the alarm here is their methods are getting more sophisticated, so the average person can’t tell the difference between a legitimate site or a phony one. This is why educating yourself is one step away from getting hacked.

Read More: Phishing Attacks Can Be Stealthier Than You Think

The latest website spoofing trick is a technique known as a cloaked URL. By utilizing technical loopholes, a hacker can make a link in your address bar look completely genuine. Here are few things to look out for when attempting to avoid spoofed websites:

• • Double check the address bar. Many spoofers will utilize a slight typo in the web address that they hope you won’t notice. Instead of visiting ‘Money.com,’ you may indeed be visiting ‘M0ney.com.’
  • Verify the email address. Received a suspicious email? Tap on the name in the ‘to’ field to reveal the originating email address. The email may not be from who you’d expect. So it’s easy to conclude the web link may not be genuine either.
  • Keep your browser updated. Some ploys, such as the cloaked URL scam that we already spoke of is being addressed by browser manufacturers. Update your software to help fight phishing and blot out cloaked URLs.
  • Watch the language used. Not bad language, we mean pay attention to the information provided. If some of your private details seem spot on, but the rest is vague  – that’s a red flag. Watch out for emails that don’t address you by name, but instead use a generic greeting. Even spoofed websites can be full of general information that’s not specific enough – look out for that too.

Stay Safe by Staying Aware
Website spoofing is an issue that we all need to remain aware of when browsing the web. If you receive an email from your bank or other financial institution, be sure to read the link carefully before clicking on it. Even better, don’t click the link at all, but instead manually type the address into a new tab of your web browser and compare. If you’re 100% positive what lays beyond is safe, only then should you click a mouse or tap a finger to proceed.

O post The Danger of Spoofed Websites: Learn to Tell the Difference apareceu primeiro em PSafe Blog.

While email scams are still prevalent, online con artists have evolved into targeting everyone from video game users to cryptocurrency investors and organizations in virtually every industry. What’s also evolved is where they attack. Smartphone cyber attacks have steadily risen every year, nearly equal to computer hacks. 

Read More: Why You Shouldn’t Store Data on the Cloud

Learn more about some of the more frightening phishing attacks you should be aware of in 2018.

Spoofed Email Accounts
The traditional phishing scams via email are becoming more sophisticated as these messages can now beat email safeguards. Scammers are targeting users by impersonating email accounts from friends and co-workers that look like the real deal. These hackers are often taking advantage of phishing vulnerability Mailsploit, which can spoof email addresses to the user and email server.

FIFA World Cup 2018
The FIFA World Cup 2018 is only a few months away as it kicks off on June 14 and runs through July 15, marking the most anticipated sporting event of the year. Hackers are taking advantage of the event by sending fraudulent emails to victims, offering them “free” tickets and other products for free. These emails appear to be legitimate because they use FIFA’s official logo, as well as information from organizers and official sponsors to trick you into believing it’s legitimate.

SMS and Social Media
Hackers are also using SMS phishing attacks because it’s typically more difficult to protect users from these types of attacks over email scams. Clicking on a fake link may be all it takes to gather your information. Social media is also being used to con victims with fake accounts that pretend to be customer service agents for large brands. Hackers are also using phishing bots to steal your social media information and launch social engineering attacks against you or your family and friends. 

Cryptocurrency Attacks
If you have a digital wallet filled with bitcoin or other cryptocurrencies, hackers may be targeting you with links that download malicious files on your device and take over your “wallet” with the intent to steal your bitcoin. These often come in emails that appear to be from a digital wallet site, offering you a free upgrade to your account.

Cloud-Based Phishing Scams
Using a cloud to backup your data has no shortage of benefits, but cloud technology is still vulnerable to phishing attacks. Beware if you receive an email that appears to be from your cloud provider, asking you to authenticate your account. Though it seems like a normal procedure, it may not be. Review any past emails from your cloud service to compare, or contact support directly to check if they indeed, sent the request.

O post 5 Phishing Scams You Need to Pay Attention to apareceu primeiro em PSafe Blog.

Read More: What Does the Future of Cybersercurity Look Like?

Here’s what you should know about the latest cybercrime trends roaming the digital world.

Steganography Attacks
This branch of cybercrime refers to the use of steganography in attacks, as hackers use malicious code in images to infect your devices. Using steganography as a method for a cyberattack has not been used widely in recent years, but security experts believe the trend is slated to make a comeback. One of the most common forms of steganography attacks is the Sundown exploit kit, which uses malware to steal information.

Keep an Eye Out for Ransomware
There are forms of ransomware outside of steganography that have also been infecting device owners, including Locky. The ransomware has been around since 2016 and it is a spam campaign that sends a Microsoft Word document via email with malicious macros, asking users to enable macros. If the macros are enabled, their device will get infected with a trojan. These attacks are becoming more sophisticated with time, so beware!

The Rise of IoT Attacks
Internet of Things (IoT) devices are all the rage these days as they offer convenience at the palm of your hand. However, some of the most common cybercrimes nowadays target IoT devices such as Wi-Fi cameras. There are botnets known as Reaper that can target multiple vulnerabilities at once.

Industrial Malware Also Increasing
Vulnerabilities found in industrial control systems and safety instrumental systems suggest that industrial malware could be making waves soon. Malware such as Triton has been shutting down plants and industrial systems recently, mostly in the Middle East. However, these threats could eventually make their way stateside.

While some of these cybercrime trends seem far from your everyday life, the truth is some of them could easily sweep into your digital world. The best thing to do is remain aware, vigilant, and have antivirus software installed on all your devices.

O post Get to Know These Cybercrime Trends apareceu primeiro em PSafe Blog.

The study looked at tens of millions simulated phishing attacks conducted over the course of a year through and reviewed more than 15 industries to see how susceptible each one is. The results may surprise you.

Read More: dfndr lab Discovery: McDonald’s Phishing Scam

The Stack Up of Other Industries
It was discovered that education workers were less likely to fall for a phishing scam than industries such as technology, entertainment, hospitality, government consumer goods, retail, and telecommunications. There are also some industries that are less susceptible to these cyberattacks than higher education, including transportation, energy and finance.

What Makes Higher Education Workers Different?
A number of universities have started implementing phishing awareness campaigns on their websites in order to help workers avoid compromising the privacy of students, colleagues or teaching staff. For example, the University of Pittsburgh created special inboxes where students and staff can report suspicious messages to the institution’s IT team.

What Organizations Can Do to Avoid Phishing Scams
There are some telltale signs of phishing attacks that everyone should know about, such as emails that appear suspicious. A phishing scam can entail a few things, but a big one is when an email impersonates an institution’s domain name from an account that looks similar to the real deal, but isn’t (such as “@harvard.edu” vs. “@harvardu.edu”). If the email is prompting you to click on a link, it could be a scam. Don’t click it!

What Can You Do Personally
If you’re attending college or work at one, one vulnerable point that is missed are smartphones. A smartphone is sometimes glued to your side and is necessary for school work or your profession.

To skirt the vulnerability that your phone can pose, consider using antivirus software there too, not just for  your computer. dfndr security’s advanced anti-hacking feature blocks phishing threats when you’re surfing, chatting, or studying. Best of all, it does the work for you by alerting you and blocking malicious links before you click on them.

While it’s interesting to peek at other industries and their cybersecurity measures, security actually begins with you first.

O post Higher Education Workers Rarely Fall for Phishing Scams apareceu primeiro em PSafe Blog.

But how are these hacking attacks happening? One way is by sending you a phony BACS transfer by using a fake name. Emails, once again, are used to hook people. A line of defense for your phone (cause let’s be honest, phishing emails appear there too) is to use a layer of protection like dfndr security to avoid falling prey to hack attacks. It comes equipped with a powerful Anti-Hacking feature that detects suspicious links within emails.

Here’s what you should know about the growing wave of online hacks and other ways you can protect yourself.

Read More: Where Do Most Phishing Attacks Occur and Why?

Common Issues With Online Payments
The problem with BACS and CHAPS payments is that accidentally sending the wrong amount can lead to a world of trouble when trying to get the money back. Also, don’t forget, hackers are always on the prowl to scam you. As we mentioned earlier, one method is that fake BACS transfer using a fake name.

These con artists send phishing emails that appear to be from legitimate companies to lure you into paying for a service or item that isn’t real. Sometimes, they contact you using email accounts that appear to be from a real company, but they’re actually from another domain name.

For example, a legitimate email from Wells Fargo would come from an email that ends on @wellsfargo.com, while a hacking scammer might create an email that includes part of the original company name but adds a few extra letters/word combinations, like this example: @wellsfargopayments.com.  

Make Sure the Email Really Matches
One victim received an email from a group of cybercriminals that claimed to be from PayPal, regarding a recent transaction. However, the email came from a Skype account, which should confirm that PayPal wasn’t contacting them.

Also, keep an eye out for notifications at the bottom of emails that alert you to scams. A legitimate company sometimes notifies customers that their bank account information will not change during the course of a transaction, and warns you against sending money to certain accounts that have been scamming users.

Don’t Fall Victim: Be Proactive
Even though you’ve heard this a million times, make sure you change your passwords regularly, at least every 90 days. Downloading a certified antivirus app will also help you deter phishing attacks and other scams. And if something seems off from an email, refrain from responding, and connect to the company by visiting their official website and obtaining real contact details.

O post Your Online Payments Are At Risk apareceu primeiro em PSafe Blog.

Increased personalization is the goal of spear phishing attacks. Instead of sending out a collection of mass messages or spoofing an online campaign for stealing waves of user data, spear phishing is aimed at a specific target, which sounds unsettling. Such is the tip of a spear, sharpened and directly aimed at one fish in the pond. But how are these attacks carried out and who is at risk?

Open Season for Spear Phishing
Spear phishing attacks are launched against a targeted individual or organization. When a business has been selected as the target, the hacker is looking to obtain industry secrets or put themselves in a position of financial gain.

Read More: 5 Phishing Clues to Look for in Emails from Your Contacts

The attack itself may start with a low-level employee: the hacker takes time to learn a bit about the person and their position. After their research is complete, the hacker sends a phishing email to coax confidential information or sensitive data, such as passwords, out of the individual.

Different from a standard phishing attack, a spear phishing email will address you by name and may claim to be from an internal department you’re accustomed to dealing with. For example,  fake email may claim to be your colleague from IT asking that you confirm your information for the system. The dangerous aspect of spear attacks is how personalized they, customized for you — the hacker’s target.

Always double check the email address in the ‘from’ field. Does it truly originate from within your company or is the email address similar enough, but not quite right? The best defense in the workplace is to stay vigilant and notice where emails are actually coming from. Also, take a moment to have a discussion all the departments you work with, so you know what types of information they will never ask.

Targets Go Beyond Businesses
You don’t need to be an employee or a corporate CEO to be the target of a spear phishing attack. You may be unaware of the sensitive information stored on your personal devices and assume you aren’t a worthy target of these types of attacks. Uh, not so.

When it comes to regular people, spear phishing is more efficient than regular attacks. An attacker may obtain specific information about you such as your name, where you bank, and the contacts you trust. Are you friendly with your local banking repr? Now the hacker also knows this and can create a personalized phishing email that’s aimed at stealing your account details. What’s unsettling is it seems trustworthy – the email addresses you by name, it’s signed by your banking rep, and they even know some of your details.

One way to get started on securing your Android phone is to download a robust antivirus app such as dfndr security, which has an advanced anti-hacking feature. With the ability to alert you of phishing attempts and block potentially malicious links, an app like this can become your line of defense.

Whether you’re on personal or work devices, be sure to check the ‘from’ field of emails to ensure they are originating from an actual trusted source. Basic practices should also be followed like not giving out any personal information or passwords to anyone.

O post Don’t Get Poked by Spear Phishing Attacks: Learn Hacking Methods apareceu primeiro em PSafe Blog.

Read More: Avoid Being Hacked When Shopping Online

Here’s what you should know about the latest threat that spoofs SIM cards and how you can protect yourself.

How Hackers Intercept Unencrypted Messages
The way cyber criminals go about stealing your information is by intercepting SMS messages sent through your device as it’s sent over the network. They can also steal databases full of data about mobile device accounts from phone carriers. One way they do this is by sending phishing emails, followed by exploiting a vulnerability in the signaling network that connects calls and messages.

One such scam was used through a T-Mobile bug on the company website that gave hackers access to the personal details of customer accounts. Hackers then used this information to impersonate T-Mobile customers in order to get a copy of their SIM cards. The scam involved pretending to lose a phone and then calling customer service and requesting an identical SIM card. They are then able to drain your bank account if it is linked to your phone or access other personal details.

Two-Factor Authentication? May Not Be So Secure
Experts now believe SMS is not as secure as using physical tokens or authentication apps on smart devices. One alternative to two-factor authentication that some companies are offering is a hardware token, as it does not send information over a carrier’s network.

The benefit of using this technology or a security app with authentication features is that they do not depend on the SIM card. Plus, these apps are not randomly generated since they are based on a seed code connected to your identity, making it harder for hackers to access.

Cryptocurrency Owners Being Targeted Too
Hackers often target wealthy groups or individuals flush with bitcoin and other cryptocurrencies in order to drain their accounts. Security groups have discovered that it’s very easy for hackers to intercept text messages and steal bitcoin from unsuspecting digital wallet holders. For example, Coinbase accounts linked with specific Gmail accounts that were secured by two-factor authentication fell to hackers hands.  

The white hackers then experimented by intercepting text messages and exploiting flaws in the cell network, giving them the ability to reset passwords to Gmail accounts and take over their Coinbase information.

In addition to using security apps and hardware tokens, you can avoid falling prey to these attacks by setting up a special PIN number with your mobile phone carrier that’s required every time you call customer service. With that extra security measure in place, this can deter spoofing of your SIM card.

Finally, be careful when using two-factor authentication. It’s always wiser to use it, rather than not, but perhaps disable it for any web based email that’s connected to your cryptocurrency account.

O post Uh Oh, Hackers Can Barrel Through Two-Factor Authentication apareceu primeiro em PSafe Blog.

Read More: 5 Things You Should Never Post on Social Media

While it’s ideal that to keep an eye out for these attacks, it also helps to have someone watching your back. dfndr security offers an Anti-Hacking feature that any Android user can quickly take advantage of. The anti-hacking technology scans and blocks potential malicious links that may appear on your smartphone. This ability means you can enjoy Snapchatting with a bit less worry.

However, there are additional steps you can take to ensure that not only your Snapchat account is secure but also your other social media accounts remain safe online.

Keep an Eyebrow Raised For Phishing
While there isn’t a desire to instill paranoia, there’s a need to acknowledge that hackers and scammers are continually using phishing techniques to steal information. In the recent Snapchat attack, users received messages from other compromised users that asked them to look at a link. Once the link was clicked on, a fake Snapchat login screen opened and prompted users to enter their login information. This scam allowed hackers to walk away with thousands of usernames and passwords.

Always be cautious when clicking any links. If you aren’t sure where they are headed – it might be best to stay away. If you do click through to a website that asks for your login information, check the address bar by tapping on it with your finger. You can then examine it to ensure the site is authentic and not a phishing scam.

Never Go Without Two Layers of Defense
Most social networks, including Snapchat, now offer the ability to enable two-factor authentication on your account; this means even if a malicious individual steals your password, they would be prompted to enter a unique one-time code to log in. This one-time code is typically texted to your smartphone, so they would never receive it. Enabling two-factor adds another layer of security to your online life and verifies that you’re identity when logging in to an account.

Take Back Your Account
Sometimes, even with the best of intentions, we find ourselves victimized by hackers. You may notice your social account has been compromised if your friends receive weird spam-like messages from you or you get alerts that someone is attempting to sign in from a different location. With Snapchat specifically, only one device can be logged in at a time, so you’re always being prompted to login when using the app, it may be a sign that someone else has been there.

Snapchat advises all users to take the first step of changing your password as soon as you believe your account has been compromised. Also, verify that your email address and mobile number on file are up to date. Lastly, remember to turn on that two-factor authentication, doing that small gesture will keep you snapping in safety for a long while.

O post Snapchat Users Subjected to Malicious Phishing Attack apareceu primeiro em PSafe Blog.

Read More: Celebrate Your Own Cybersecurity Women’s Day

Who Are They?
A group that is believed to originate from the Middle East is creating fake Facebook profiles to lure in unsuspecting men with pictures of pretty girls and then sending friend requests to initiate the final stage of the scam. This group is suspected to be in existence since 2015, tricking their targets into ultimately downloading malware that can steal messages, photos, audio recordings and even a victim’s location.

The online scamming group is nicknamed ‘Tempting Cedar Spyware,’ by experts. The moniker points to the M.O. of tempting victims with “fake” women and the cedar tree, which is a large part of the Lebanon flag. Many victims come from the Middle East and the group started from that region.

Learn Their Shady Patterns
The cybercriminal network created swathes of phony accounts to trick users, with names such as Alona, Rita, and Christina by using stolen images from online profiles of real people. They then interact with one another to make the catfishing accounts appear real. Once they reel in a Facebook user, they send flirtatious messages and work up to asking for an “intimate” chat in a  private platform.

The group then sends victims a link to install a messaging platform called Kik to continue chatting, which appears to be legitimate but actually contains commands that the hackers can use to spy on victims. The malware includes ways to steal contacts, photos, call logs, text messages, device geolocation information, number, network operator and model. People in the Middle East are the main targets, but users in the U.S., China, Germany, and France have also been duped by this scam.

I’m Lonely and Want to Meet the ‘One’
The best way to meet people for dating purposes is through a dating or social app designed to help you find love, which you should lock down when using your phone or lending it to a friend for whatever reason. A smart way to protect your dating apps or all your social apps for that matter is to use dfndr security’s social guardian feature. It allows you to add a second password to keep apps hidden from snoops.

Another new thing that Facebook rolled out is a feature called “Discover People” to help you meet potential business or love connections.

The feature is in the navigation section below Friends, Events, and Groups. Once you find the section, Facebook will ask you to introduce yourself by updating your profile. Following this step, you’ll be shown a list of upcoming events that you’ve either been invited to, are going to attend, or that might interest you. When you tap on one of these events, you’ll see profiles of people attending, which you can swipe through and potentially meet your future partner. Just be aware to use restraint and good online practices yourself when connecting.

O post That Pretty Girl Friending You On Facebook? Be Cautious! apareceu primeiro em PSafe Blog.

Read More: Why It’s a Bad Sign If Your Apps Keep Crashing

Here’s what you should know about the “Grammarly” bug that struck millions of people.

Weakness in Top Browsers
The issue was found due to a vulnerability in the Grammarly extension for Chrome and Firefox browsers. Information of about 22 million users accounts was exposed as a result, making it easy for remote hackers to access their personal documents and records. Tavis Ormandy, security researcher with Google’s Project Zero, said the it was a high severity bug.

Ormandy said that the authentication tokens to all Grammarly websites were there for the taking easily stolen by cybercriminals remotely with four lines of JavaScript code. The company said that the vulnerability only affected Grammarly Editor, but the issue could still have very severe consequences for some users if their documents were stolen.

The Issue Was Addressed in Time
Grammarly’s outside security IT team responded to the issue swiftly, fixing the bug only three days after the issue was revealed. A number of security updates were made available for Chrome and Firefox browser extensions, which the company is automatically updating without users having to actively find the update. Adding an extension on the Chrome Web Store seems to have done the trick for Chrome users.

A Grammarly spokesperson wrote an email to their security firm, noting that there is no evidence that users personal documents and information had been stolen, nor exposed by a hacker. Ormandy noted that the company’s response time was impressive. Grammarly added that the vulnerability may affect text saved on Grammarly Editor.

Any Further Threats?
While it is likely that the security threat is gone, the company says it is actively working to monitor any new issues in order to keep users information private and secure. Luckily the bug had no effect on Grammarly Keyboard, the Grammarly Microsoft Office add-in, or any documents created online while using the company’s browser extension.

O post Grammarly Has a Vulnerability You Should Know About apareceu primeiro em PSafe Blog.

Before you lay down plastic to pay for a matcha latte or a magazine, here’s how to stay secure when using a system you have no control over.

Read More: Attacks on Mobile Banking Apps to Look Out For

Go Back to Old-School Green Paper
We all love to use credit cards because they’re more straightforward than carrying around a wad of cash, but the truth is paper money and coins remain the most secure way to pay for goods. With cash, it doesn’t matter if a payment system is compromised. Having some greenbacks stuffed into your wallet can help guard against unknown situations. Especially when dealing with a new store or traveling overseas. Cash is not hackable.

Keep Your Online Baking Safe Too
With all this talk of the physical world, remember that you’ll always start with the online world first. It’s critical to ensure your online banking is just as safe as your offline activities. Make sure you bank with trusted sites, who take security seriously. Always use a secure password that involves random numbers, letters, and symbols – avoid full words and other easily guessed information. And don’t forget to enable two-factor authentication if your bank offers the ability. Two-factor authentication is another deterrent against hacks.

Reloadable Card For Purchases
Using your debit or credit card when making a purchase can put your accounts at risk for a cyber attack, so consider one of those nifty reloadable prepaid debit cards. If something happens where your prepaid debit card is stolen or your information is compromised, the loss is less of a blow. You may lose the money on your prepaid card, but overall, your primary banking accounts and credit cards are safe. A win-win situation!

Start a Relationship With Your Bank
We live in a connected world, so take advantage of the features that your bank offers. Almost all banks provide the ability to set up alerts, so you’re notified of any strange activity like substantial withdrawals being made or unusually high purchases. If you want to get even more cozy, considering receiving an alert from your bank whenever your card is used to monitor account activity in real-time.

O post Hackers Now Target Your Credit Card at Local Retailers apareceu primeiro em PSafe Blog.

Here’s what you should know about the dangers of this vulnerability and why it’s important to patch your browser right now.

Read More: How Vulnerable Is Your Email Account to Malware?

An ‘Arbitrary Code Execution’ Flaw
Mozilla released the Firefox update a week after the release of the company’s new Firefox Quantum browser, also known as Firefox 58. The new browser includes an improved graphics engine, as well as performance optimizations and patches for more than 30 browser vulnerabilities.

Cisco released a security advisory that stated this update for Firefox 58.0.1 fixes an ‘arbitrary code execution’ vulnerability.

Could Hackers Get to You?
The vulnerability opens the doors for hackers to run arbitrary code on a victim’s computer that tricks them into opening a file with malware containing malicious code. Cybercriminals could then take control of a user’s privileges and completely compromise their system. They could do everything from installing programs to creating new accounts, to changing or deleting data.

If a user’s configurations offer fewer user rights, the impact on their device could be less harmful. Owners of Firefox 56 (.0, .0.1, .0.2), 57 (.0, .0.1, .0.2, .0.3, .0.4) and 58 (.0) could be affected. You can download the update on the company’s website. The vulnerability was discovered by Mozilla developer Johann Hofmann and it does not affect Firefox browser for Android and Firefox 52 ESR.

How Can Chrome Users Protect Themselves?
If you don’t use Firefox, this update doesn’t apply to you, but Chrome users may have to deal with other vulnerabilities. Google recently released a new update for Chrome in version 64, which includes changes to the browser that should help deal with speculative side-channel browser attacks. These are malicious ways in which hackers try to gain access to a system’s memory.

The biggest lesson here? Always update your browser because important security patches within updates keep your online experiences safer than not.

O post Patch Your Firefox Browser Before It’s Too Late apareceu primeiro em PSafe Blog.