During the past few months, Joker has become one of the most active Android malware infections. Joker rides on the coat-tails of seemingly legitimate apps, then covertly signs up users for pricey subscription services. It can also steal SMS messages, contact lists, and device information. 

Joker variations seem to arrive in batches, with a fresh batch leeching onto dozens of apps as recently as September. 

Joker Infiltrates The App Store

“One of the best ways to avoid malware and trojan apps is to use Google’s sanctioned app store,” says Emilio Simoni, PSafe’s dfndr lab Research Director, “but unfortunately, Joker has managed to disguise itself and mutate so profusely, that it has found its way on to several apps within the official Google Play marketplace. Of course third party app stores are also offering Joker-tainted apps — so the best protection is going to be a strong security app that sniffs out malware-tainted apps immediately, like our dfndr security Pro.”

Google removes the offending apps as soon as they’re reported — but the high rate of variation and concealment with this particular trojan keeps bringing new specimens on board.

Delay Tactics

“Part of what makes Joker so effective is that it waits to take effect,” Simoni remarks. “After the trojan-app is downloaded (many of these are knockoffs of better-known apps) it waits to drop a very small packet of code, it then reaches out to the server that loads the malware that does all the dirty work.” 

What Can You Do To Stay Safe?

Good hygiene with your digital devices includes:

• Installing only the apps that you need and use. Loading up your device with as many apps as you can imagine using is a hazardous path. 
• Being wary. Look for apps from developers you know and trust.  Do a little background checking and make sure that cool new app is coming from a known and trusted provider.
• Cleaning house periodically. To keep the number of apps you use to a minimum, do a periodic review of the apps on your phone and delete the ones you’re not using. 

“Good security habits are always the first step,” Simoni observes, “but we can see that with truly devious malware like Joker, personal vigilance may not be enough.  When a piece of malware is mutating on a monthly basis, you need a dedicated security solution to help keep you safe.” 

The Best Defense Begins BEFORE Dangerous Apps Are Downloaded

An excellent way to protect yourself is to use a security application like dfndr security Pro, which has a dedicated Safe App Installer that can tell you if the app you’re about to install has been identified as malware.  This is exactly what the Safe App Installer does: it AUTOMATICALLY protects you from malware and apps known to compromise your data — before you even install them.

More Protection for Your Digital Life

Safe App Installer is only one of the key features dfndr security Pro offers.  It also comes with a full suite of security capabilities that can protect you not only from digital threats, but from thieves “IRL” as well.

Beyond Safe App, there are four additional features dfndr security Pro offers to protect you and make your digital life easier:

Anti-theft protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock  it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Privacy Protection: You can locate on a map where your app data is going and how it might be used by third-parties.

Unlimited Identity Theft Reports: These reports provide “perimeter defense,”looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 10 billion compromised credentials. 

Ad-Free: As an extra bonus, Pro is totally ad-free.

Get The Protection You Need Today

Click here to download dfndr security and free trial dfndr security Pro to put all of these features to work securing your phone, your data, and your digital life. dfndr security Pro offers a full suite of protection, constantly updated, to make sure “you’re safe out there.”

O post Joker Malware is Back (And It’s No Joke) apareceu primeiro em PSafe Blog.

How Fakespy Entices Users

“Hackers are always looking for our soft spots,” remarks Emilio Simoni, PSafe’s dfndr lab Research Director “and FakeSpy uses the natural excitement people have for receiving a package of some kind. Most people immediately want to know who sent you something, and what you might have received.”

Typically, this malware loads via a fake app posing as the website for your country’s mail service — in America, the USPS; in England, the Royal Mail, and so on.  The fake app is designed to look like the real thing, and once it downloads and the fake transaction is completed, it actually passes the user on through to the real USPS site, to avoid detection. Meanwhile, the malware has loaded, and a broad host of information stealing is underway: financial information, account information, app information, contact lists — Fakespy can even read other SMS messages.  And, like most malware, Fakespy immediately begins its work to replicate itself by sending offers to its victims’ contact lists.

Permissions Required Provide a Warning…

“It’s a very sophisticated and still evolving malware,” Simoni warns, “the people behind it have been refining its design for some time now.” One strong warning-sign is that the app asks for extensive permissions — but many users have grown accustomed to approving these for sites they trust. “If the enticement of a missed package works and the fake mail-delivery site is compelling, it’s easy to see how victims can get manipulated,” Simoni says.

What Can You Do To Stay Safe?

“The first thing to remember is that hackers are using every venue available to them to get their software on your devices,” Simoni explains. “Add smishing and vishing to your malware vocabulary and keep in mind that callers and texters may not always be who they appear to be— or say they are.”  

However hard you work to stay informed, a good protection solution — with a team behind you, is almost essential to stay one step ahead of all the various threats evolving in the digital landscape.  

The Best Protection, For The Worst Threats

An excellent way to protect yourself is to always keep a security installed on your phone. dfndr security offers a full suite of security capabilities that can protect you not only from digital threat, but from everyday thieves as well. Click here to install for free.

(Remember, they steal devices and data too!) 

These are the features dfndr security Pro offers to protect you:

Safe App Installer: AUTOMATICALLY protects you from malware and apps known to have had data breaches — before you install them.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

Unlimited Identity Theft Reports: These reports provide an “outer-perimeter” defense, looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 4 billion compromised credentials. 

Anti-theft Protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Ad-Free: As an extra bonus, Pro is totally ad-free.

Stay Safer!

With dfndr security in your toolbox, the rest is a matter of staying as aware as you can.  Follow a few simple rules to avoid and minimize digital damage:

• Take extra care with any link from an unknown source — and be extra wary if it promises a surprise of some kind. Check your curiosity!
• Don’t click on any links sent to you via email or SMS from unknown people.  And if you get a link from somebody you know, ask: WHY would he / she send me this?
• Only download or install software from trusted sources!
• Make sure you do regular backups on your machines!

Be careful, and we’ll keep you informed as always, whenever we hear more about Fakespy, or any other major threats!

O post “Smishing” Malware Uses Missed-Delivery Notification To Lure Victims apareceu primeiro em PSafe Blog.

Strandhogg 2.0: Worse Than The Original

“StrandHogg 1.0” used Android’s task affinity to hijack applications—by matching the packageName of any other app, then allowing “TaskReparenting,” the StrandHogg app would be launched, undercover, in place of the target app — then share the information with the attacker and the targeted app (to go unnoticed).

Image Source: Promon

Emilio Simoni, research director at dfndr lab explains:  “Using this method, you would see (for one typical example) what looks like a fully legitimate Gmail icon on your phone, with the usual login dialogue — just exactly as it would appear when you’re logging back  into your account. But once you enter your credentials, you’ve unknowingly shared them with the attacker too. To shield its intervention, your info is also sent to Gmail (or whatever other legitimate application has been hijacked), continuing your transaction and leaving no signs you’ve been compromised. The malware comes on board in the form of innocent looking game apps — one named SuperHappyFunGame — but it does its worst work undercover.”

StrandHogg’s 1.0 weakness was the presence of sketchy task affinity codes in the Android Manifest. Scouring for the 1.0 version required simply scanning the Google Play store for these problematic taskAffinity declarations. But StrandHogg 2.0 doesn’t require any special settings, because the attacking code isn’t necessarily present on the Play Store. Instead, the attacker just downloads the attack code later, once the trojan app or game has taken up residence.

StrandHogg 2.0 also hijacks additional data via app permissions: so contacts, photos, and it can even victim’s movements and location are compromised. Simoni advises: “With the right permissions, StrandHogg 2.0 can even siphon off entire text message conversations, which can enable hackers to defeat two-factor authentication protections.”

The Norwegian security firm Promon, the firm that gave the malware its name,  suggests that updating Android devices with the latest security updates — out now — will fix the vulnerability. Users are advised to update their Android devices as soon as possible. 

“However,” Simoni warns, “the key is protecting yourself from the next StrandHogg.  For that, you need a front line of defense.” 

Protecting Your Devices and Data From Unsafe Apps

You should always count on a extra layer of security for your phone. dfndr security, for example, has a Safe App Installer feature that can operate as your advance-line of defense against apps like SuperHappyFunGame, and the next generation of trojans  StrandHogg uses. Safe App Installer will also keep you protected from all other malicious apps. “The feature lets you know if an app is unsafe before you even install it,” Simoni advises, “and our team does the work to constantly update our database of malicious apps.” With Safe App Installer, every app you consult before installation will be rated for trust. 

There are two levels of alert if Safe App Installer discovers an issue:

• Security Alert: If the app is malware.
• Privacy Alert: If the app already experienced a data breach

An app is rated as Trusted only if the app is not malware or has never experienced a data breach.  

dfndr security also offers Anti-Theft Protection for your device, and Identity theft protection for you.  “Our PRO package has been very thoroughly thought out to provide users with the full suite of protections they need,” Simoni concludes.

We’ll continue to provide updates here on the PSafe blog for new malware that could compromise your security and safety — stay tuned!

O post StrandHogg 2.0 Steals Data From Real Apps apareceu primeiro em PSafe Blog.

“Eventbot” leverages Android accessibility to reap private data from financial applications. It also has the ability to hijack SMS-based two-factor authentication codes, and it can even read user SMS messages. A very foreboding mix of capabilities. 

“This one is especially dangerous,” remarks Emilio Simoni, Research Director at dfndr lab, “Eventbot is a trojan that targets over 200 different financial apps.” Simoni explains that these  include banking, money transfer services, and crypto-currency wallets like Coinbase, Paypal Business, TransferWise, HSBC, CapitalOne, Santander, Revolut, and Barclays… and many more.

How EVENTBOT Does Its Damage

 First identified in March 2020, Eventbot makes its way onto phones by posing as a legitimate app: Adobe Flash, Microsoft Word, and similar.  Eventbot primarily resides on unofficial Android App stores and other unauthorized websites, it has also been delivered through bulk SMSs and Emails, typically offering special savings on popular Android apps.

When installed, Eventbot requests a robust list of permissions, including accessibility settings; “read” permission from external storage; the ability to send and receive SMS messages; run in the background; and launch after system boot.

Users who grant these permissions unwittingly enable EventBot to operates as a keylogger, which can extract notifications about other installed applications, and scan and scrape the content of open windows. It also further-leverages Android’s accessibility services to steal the lock-screen PIN — then sends all of its stolen data in an encrypted format to its command-center server. 

Simoni explains: “The ability to track SMS messages also enables this malware to pass-through SMS-based two-factor authentications, which opens the gates wide for financial attacks of the very worst kind.”

Protect Yourself

“It’s important to always rely on a security mechanism. dfndr security, for example, has a Safe App Installer feature that is designed expressly to deal with dangerous apps like this,” Simoni offers, “This feature lets you know if an app is safe before you ever install it, and its updated constantly by the PSafe security team. We scan the web constantly for updates and information to enrich our database.”

With Safe App Installer, any app you intend to install will be rated for trustworthiness. There are two levels of alert if the feature discovers an issue:

• Security Alert: If the app is malware;
• Privacy Alert: If the app already experienced a data breach;
• Trusted: If The app is not malware or has never experienced a data breach. 

 “Eventbot would absolutely trigger a security alert,” Simoni notes.

The free version of dfndr security also has an anti-hacking capability that blocks scams directly on the SMS app, web browsers and messaging apps (WhatsApp and Facebook Messenger). It also offers a URL checker to check the security of any URL you enter.

Further Safety Measures for EventBot (and Similar Trojans)

One of the easiest ways to protect yourself is to make sure that you are only downloading mobile apps from authorized sources,” Simoni emphasizes. “With malwares as dangerous as Eventbot making the rounds, you have to be doubly alert and careful with any unofficial links.” As a rule, you’ll want to avoid any links sent by people unknown to you, and from bulk marketing SMSs and Emails. Finally, be careful with permissions required by various apps — if the list is extremely long or doesn’t make sense, be on guard.

Consider dfndr Pro

One of the best ways to protect your information now is to upgrade your dfndr security app (if you haven’t already) to PRO.  (This link will help you learn more, and you can use it to download PRO if you decide it’s right for you.).

 With dfndr Pro in your toolbox, the rest is a matter of staying as aware as you can to protect yourself and your family. PSafe will continue to provide updates here for new malwares that we discover that is especially noteworthy.

This one is VERY dangerous, so be careful out there!

O post New Android Malware, “Eventbot” Targets Financial Data apareceu primeiro em PSafe Blog.

If anything, they’ve only grown more brazen and active. “Overnight, the pandemic has become the number one subject on everyone’s mind,” explains Emilio Simoni, Research Director at dfndr lab, “and that’s irresistible to hackers and scammers.”

Simoni continues: “The first job of any scammer is to get your attention: to stop you on your path and pull your interest toward their offer or message.  The coronavirus pandemic has created a topic that everyone is intensely interested in, all over the world. This has made the scammer’s job much, much easier. And they’re making use of both the intensity of interest and the global breadth of exposure.” 

An Explosion of Coronavirus Malware

Under Simoni’s direction, the experts at the dfndr lab have found more than 227 different Coronavirus-content scams. Most of them offer a dashboard which falsely promises users access to a real-time map for global or local surveillance of COVID-19 cases. As soon as they’re downloaded, they act as ransomware. Typically, they lock the home screen and blackmail the victim into paying a specified amount of money to “unlock” the phone. The ransomware messages are often intimidating, claiming access to photos and private information, like this one:

SuperVPN: 100 Million Users, Finally Deleted From The Google Store

But coronavirus scams aren’t the only vulnerability out there. As Emilio Simoni explains: “You need security solutions that look out for more than scams and hackers. Even apps that aren’t clearly malware or ransomware can totally compromise your security. SuperVPN is a perfect case in point: it’s security problems have been known for over a year, but the app has been removed from the Google Play store very recently.”

SuperVPN offered users the ability to browse the internet as if they were coming from a different country, providing access to sites and functions that they wouldn’t normally be able to reach. For the app to work, an exchange of information between the device and the app was required. That process of exchange was loaded with serious vulnerabilities, and resulted in the theft of data like passwords and credit card numbers. Beyond its security issues, SuperVPN also appeared to violate Google Play’s algorithm in order to get more installs. They were very successful, racking up more than 100 million users before finally being removed.

“If you know anyone who has downloaded and installed SuperVPN,” Simoni remarks, “make sure they remove the app as soon as possible.”

Above is an illustration of how SuperVPN compromised user’s secure data.  (Image: VPNPro)

Protect Yourself From Hackers AND Vulnerabilities

One of the best ways to protect your information now is to upgrade your dfndr app (if you haven’t already) to dfndr Pro.  (Here’s a link where you can learn more, and download Pro if you decide it’s right for you.)

As apps with hidden “cracks” in security like SuperVPN illustrate, you have to be not only informed enough to resist the hackers and scams, you also have to have proven technical tools to keep your devices safe.

As Emilio Simoni explains it: “As we publicize these cases of hackers and scams, we want to be cautious and let people know that all data breaches or “malware” won’t always follow a specific pattern. Lots of data breaches happen with very reputable software makers or business transactions. There are many ways your data can be compromised. To be safe, you need more than your own human intelligence at work.” 

This is why dfndr Pro offers a full suite of security capabilities:

Unlimited Identity Theft Reports: These provide your “outer-perimeter” defense, looking out for privacy vulnerabilities beyond your own device. These reports reveal if any of your information has been leaked, with a one-click check of a database with over 4 billion compromised credentials. 

Anti-theft protection: Protects against physical loss that leads to data loss: in case of theft or loss of your device, you can lock  it down remotely, find the phone on a map; or, activate a loud alarm to find it nearby. You can also get a picture of the thief, and wipe the phone of your personal data.

Safe App Installer: Protects you from apps known to have had data breaches — before you install them.

App Privacy Scan: You can locate on a map where your app data is going and how it might be used by third-parties.

Ad-Free: As an extra bonus, Pro is totally ad-free.

Stay Vigilant!

With dfndr Pro in your toolbox, the rest is a matter of staying as aware as you can and protecting yourself and your family.  Consider adopting these rules for use of digital devices in your home:

• Take extra care with any link or article about coronavirus. Use reliable sources, such as legitimate government websites, to get real, fact-checked stories and information on COVID-19.
• Don’t click on links sent to you via email from unknown people. 
• Look very closely at email addresses and names: If the source looks or sounds like someone you know but the name or email address seems even slightly off…stay away! If the name is right but the message is brief or confused, or not at all like the person you know…your friend could be the victim of a hack themselves.
• Only download or install software from trusted sources. Make sure you double check url’s! 

Stay safe! We will keep you up to date on all the latest we hear about scams of all kinds: coronavirus-related, and otherwise. Until then, stay safe and keep your loved ones safe and informed too. 

Finally,  if you or someone you know is a healthcare worker, please accept (or pass on) our grateful thanks.  

O post Be Careful: There’s A Malware Pandemic Underway Too… apareceu primeiro em PSafe Blog.

GandCrab
Recently, GrandCrab has grabbed everyone’s attention. The ransomware was discovered just this year and continues to hold everyday individuals hostage by encrypting all of the data on a user’s machine. What makes this piece of malware so ingenious is the way it’s been designed to hide the identity of the hackers who created it. To remove the ransomware from your machine, you must pay between $300-500 through a secure TOR network connection using an anonymous cryptocurrency known as Dash.

Read More: How to Protect Your Data from Ransomware Attacks

WannaCry
Accurately described by its name, the WannaCry strain of malware will indeed make you weep if you fall victim to it. The malicious piece of ransomware infected individuals in over 150 countries last year, in addition to targeting Britain’s National Health Service. Initially, the software used a piece of the Microsoft Windows file sharing system to infect other machines, but it eventually evolved. As with other ransomware scams, anyone infected found themselves forced to pay, this time via Bitcoin if they ever wanted to see if their data again.

GoldenEye
Not to be confused with the action-packed James Bond film of the 1990s, GoldenEye is a nasty piece of malware that’s also known as ‘NotPetya.’ Infecting reputable companies such as AP Moller-Maersk, Cadbury, FedEx, and Merck, the ransomware requested $300 for every computer infected. Easy to be tricked by, the malware sneaks onto your machine through an email or infected Word document. To add insult to injury, the malware has been smart enough to clear any actions it takes on a device, making it difficult to track down the criminal creators.

How Do You Stay Safe?
What’s disturbing is each piece of malware noted above have all been released within the last few years. Your data is at significant risk because ransomware attacks grow more aggressive each year.

Your computer isn’t the only device at risk either, collections of malware also target Android users. You can keep yourself protected by downloading dfndr security which has a full virus scan feature to locate any threats on your device, as well an anti-hacking feature that’s powered by AI, which will block malicious links before you click on them.

O post The World’s Most Malicious Ransomware Attacks apareceu primeiro em PSafe Blog.

Begin Protecting Your Device
One way to start protecting your Android if manufacturers aren’t doing it is to use a reliable third-party app like dfndr security. Take advantage of a full virus scan feature and anti-hacking technology that fights any malware threats or phishing attempts. With 21 other great features included, you may not be able to control your manufacturer, but you can stay one step ahead of hackers.

Read More: What You Need to Know About Google’s Security Patch Record

According to the study, the manufacturers have been claiming within their devices’ settings that all security and system patches are up to date when they are actually behind. This practice of deceit not only leaves Android phones vulnerable but also calls into question the validity of a manufacturer’s security practices. In order to find the cleverly hidden lie, the firmware of many devices had to be carefully examined.

For Some, The Problem is Worse Than Others|
Companies with a mix of patched and unpatched devices or only behind by a single patch includes Google, Sony, Samsung, and Wiko Mobile. However, of those noted previously, companies HTC, Huawei, LG, Motorola, TCL, and ZTE are at least 3 or more patches behind. While Google is the company that issues patches for the Android operating system, it’s the responsibility of each manufacturer to deliver patches to their line of handsets accurately.

Some Light at the End of the Tunnel
Luckily, there could be a possible solution. Google has begun implementing a new project they have dubbed Treble. The project attempts to fix manufacturer patching issues by putting more control of Android’s core back into the hands of Google. What this means is your device could be updated as soon as a patch is released without having to wait for a manufacturer. While Treble has been included in Android 8.0 Oreo, not all devices currently support it. However, the good news is the project will be implemented on all Android devices moving forward.

O post Manufacturers Caught Lying About Device Security apareceu primeiro em PSafe Blog.

An excellent way to take this new threat seriously is to download dfndr security. This 4.5 rated app has a full virus scan feature that scans your files, images, and even the SD card of your Android to check for any viruses or malware. You can’t stay alert all day and night, so utilizing an app that has your back is the best way to start.

Read More: AV-TEST Rates dfndr as Top Among Antivirus Apps

What’s Vulnerable and Why
A feature known as CPU data cache timing, which allows computers to work fast, is at the heart of this major security breach. Explained in easy terms, a machine’s data cache allows it to access bits of information faster than it would without this feature. Unfortunately, a vulnerability in the data cache timing process allows malware to intercept sensitive data such as password information.

Exploits Are Rapidly Increasing
While the most substantial issue has been laptop and desktop computers running Intel or AMD processors, the ARM processors found on smartphones are also at risk. With almost 140 pieces of malware utilizing the new vulnerabilities, consumers and businesses need to remain cautious and on the lookout.

Most Android devices utilize a processor architecture known as ARM – one of the more vulnerable platforms. This means the most popular devices in the world such as Samsung Galaxy, Google Pixel, and Motorola’s Moto, are at risk for the vulnerability.

Possible Solutions to Stay Safe
One possible solution implemented by Intel was halted as the company found the security patch caused system instability. When new vulnerabilities are discovered, companies are typically able to patch them and prevent further damage. However, as we stand months later, Intel and other CPU manufacturers have yet to provide a solution for such a collection of risky vulnerabilities.

For now, the best option for protecting yourself is to ensure that all of your devices such as laptops, computers, smartphones are fully updated to the latest software versions. Running a reliable antivirus solution is also strongly recommended and is your best chance of remaining unaffected by the exploits.

O post Meltdown and Spectre Are Aimed At Your Sensitive Data apareceu primeiro em PSafe Blog.

One way to ward off malicious apps is to download a third-party security app such as dfndr security, which includes a full-virus scan feature. A scan of your Android device will do a deep dive into your files and even your SD card. Worried that you might forget to scan your phone regularly? Not a problem, just use scheduled scans which can run while you’re asleep.

Read More: Is it Safe to Download Apps Outside of Google Play?

In this latest case of infected apps, a piece of malware known as ‘Andr/HiddnAd-AJ’ (try to say that ten times fast) was able to load itself onto a number of apps designed to read QR-Codes. Apps infested with the malware included: QR Code / Barcode Reader, QR Code Free Scanner, and QR & Barcode Scanner. There were a total of seven apps infected, and the malicious apps were downloaded over 500,000 times before being pulled by the Google Play Store.

We know how hard it can be to avoid malware in a world filled with it, but here are a few tips to get you started on a safer journey through the endless world of Android apps.

Download Only Official Sources
We’re aware that this point may appear moot as we noted that the infected apps came from the official Google Play Store, but even though an official source may not be 100% clean, it’s still much safer than downloading an app elsewhere. Despite missing the occasional piece of malware, Google has quite a positive record of keeping their ecosystem clean from the mess.

Avoid Apps From the Web
As you can infer from our last comment, you’re best to avoid downloading apps directly from the Internet or something you found on social media. These apps are more likely to be infected with dangerous malware and are typically prefaced with a request to turn off a security feature to allow app installations from ‘unofficial sources.’ Take this as an immediate red flag and don’t download.

Watch Those Permissions
Once you’ve downloaded an app from an official source such as Google Play or Amazon App Store, try to remain aware. Legitimate apps ask for permissions to access certain parts of your system. In some circumstances, this is normal but use your best judgment. A new email app would request access to your contacts, but why would a QR-Code reader need the same?

O post Malware Hidden in QR-Reader Apps Infects Android Devices apareceu primeiro em PSafe Blog.

Read More: Malicious Ransomware Could Be Around the Corner

Protecting yourself from ransomware can be tricky, but dfndr security offers solid protection for your Android device with advanced, anti-hacking capabilities that safeguard you from malicious websites before you even tap on a link.

If you’ve never heard of ransomware, it’s vital to know in case an attack ever happens to you.

Malware That Spreads Easily
Ransomware is a form of malware that takes a device hostage until a “ransom” is paid, usually in the form of Bitcoin or another cryptocurrency which is virtually untraceable and protects the hacker’s identity. These types of viruses usually begin as a phony email posing as a friend or co-worker, containing a link you’re encouraged to click on. Once malware infects a system, it can spread from machine to machine, or if a single device is affected, a hacker can gain full control over the phone.

Easy targets of ransomware attacks are device owners with older operating systems that do not have adequate security software. Once hackers take over your device, you will be given a certain amount of time to pay, usually around 72 to 96 hours. If you fail to pay, your device will likely be permanently locked.

South Korea is Largest Target
A recent study discovered that people in South Korea get targeted more frequently than anywhere else. About 20,000 people were targeted all over the world for $16 million worth of ransomware and around $2.5 million of these attacks were collected from device owners in South Korea.

Yikes, What Should I Do?
One way to protect yourself from ransomware attacks is by backing up your data somewhere else, like an external hard drive. If you get targeted, you can reset your device to the original factory settings, eliminating the ransomware. You can then transfer old files to the device and avoid paying the ransom. However, hackers may still be able to target your device sometime in the future as ransomware worms are easy to modify.

Security Apps Protect You the Best
In order to avoid these attacks altogether, the best thing you can do is download a security app that protects you from a variety of attacks. With dfndr security’s anti-hacking feature, your device will block phishing attempts while you navigate the web, as well as other malware designed to take your money.

Though ransomware is disturbing, with awareness you can still preempt a strike from hackers and continue enjoying your online world without worrying.

O post Know Your Enemy: How Ransomware Payments Happen apareceu primeiro em PSafe Blog.

A Dangerous Loophole in Chrome
When a website wishes to deliver notifications to your device from within Google Chrome, a small popup will appear on your screen. From here, users can either select to ‘Allow’ or ‘Block’ the website from displaying such content. Chrome is now supposed to log your decision and prevent the site from asking you again, but there’s a problem – clever web programming has found a way around this system.

One method of fighting against this type of scam is to use dfndr security on your Android device. dfndr security offers a full virus scan and an advanced anti-hacking feature; these include scanning your device from top to bottom for malware, while also preventing dubious websites from touching your device by blocking malicious links. In a short period, the dfndr lab team has detected and blocked over 10,000 attempts of the Chrome-based scam.

Due to this flaw, if a website wants to ask for repeated permissions continuously, the site programmer can merely swap between multiple subdomains until the user chooses to allow consent. Research at dfndr lab has shown this practice of websites using a slew of subdomains is an attempt to force an individual into accepting.

Staying Protected Against the Attack
Besides downloading an antivirus solution for your device, if you still stumble upon the scam, your best bet is to try and close out the webpage, so that it can no longer ask for permission requests. Do not give in to hitting ‘allow’ out of pure frustration, once you’ve done that, hackers are one step closer to infiltrating your Android.

O post dfndr lab Uncovers Potentially Malicious Google Chrome Scam apareceu primeiro em PSafe Blog.

While email scams are still prevalent, online con artists have evolved into targeting everyone from video game users to cryptocurrency investors and organizations in virtually every industry. What’s also evolved is where they attack. Smartphone cyber attacks have steadily risen every year, nearly equal to computer hacks. 

Read More: Why You Shouldn’t Store Data on the Cloud

Learn more about some of the more frightening phishing attacks you should be aware of in 2018.

Spoofed Email Accounts
The traditional phishing scams via email are becoming more sophisticated as these messages can now beat email safeguards. Scammers are targeting users by impersonating email accounts from friends and co-workers that look like the real deal. These hackers are often taking advantage of phishing vulnerability Mailsploit, which can spoof email addresses to the user and email server.

FIFA World Cup 2018
The FIFA World Cup 2018 is only a few months away as it kicks off on June 14 and runs through July 15, marking the most anticipated sporting event of the year. Hackers are taking advantage of the event by sending fraudulent emails to victims, offering them “free” tickets and other products for free. These emails appear to be legitimate because they use FIFA’s official logo, as well as information from organizers and official sponsors to trick you into believing it’s legitimate.

SMS and Social Media
Hackers are also using SMS phishing attacks because it’s typically more difficult to protect users from these types of attacks over email scams. Clicking on a fake link may be all it takes to gather your information. Social media is also being used to con victims with fake accounts that pretend to be customer service agents for large brands. Hackers are also using phishing bots to steal your social media information and launch social engineering attacks against you or your family and friends. 

Cryptocurrency Attacks
If you have a digital wallet filled with bitcoin or other cryptocurrencies, hackers may be targeting you with links that download malicious files on your device and take over your “wallet” with the intent to steal your bitcoin. These often come in emails that appear to be from a digital wallet site, offering you a free upgrade to your account.

Cloud-Based Phishing Scams
Using a cloud to backup your data has no shortage of benefits, but cloud technology is still vulnerable to phishing attacks. Beware if you receive an email that appears to be from your cloud provider, asking you to authenticate your account. Though it seems like a normal procedure, it may not be. Review any past emails from your cloud service to compare, or contact support directly to check if they indeed, sent the request.

O post 5 Phishing Scams You Need to Pay Attention to apareceu primeiro em PSafe Blog.

Read More: What Does the Future of Cybersercurity Look Like?

Here’s what you should know about the latest cybercrime trends roaming the digital world.

Steganography Attacks
This branch of cybercrime refers to the use of steganography in attacks, as hackers use malicious code in images to infect your devices. Using steganography as a method for a cyberattack has not been used widely in recent years, but security experts believe the trend is slated to make a comeback. One of the most common forms of steganography attacks is the Sundown exploit kit, which uses malware to steal information.

Keep an Eye Out for Ransomware
There are forms of ransomware outside of steganography that have also been infecting device owners, including Locky. The ransomware has been around since 2016 and it is a spam campaign that sends a Microsoft Word document via email with malicious macros, asking users to enable macros. If the macros are enabled, their device will get infected with a trojan. These attacks are becoming more sophisticated with time, so beware!

The Rise of IoT Attacks
Internet of Things (IoT) devices are all the rage these days as they offer convenience at the palm of your hand. However, some of the most common cybercrimes nowadays target IoT devices such as Wi-Fi cameras. There are botnets known as Reaper that can target multiple vulnerabilities at once.

Industrial Malware Also Increasing
Vulnerabilities found in industrial control systems and safety instrumental systems suggest that industrial malware could be making waves soon. Malware such as Triton has been shutting down plants and industrial systems recently, mostly in the Middle East. However, these threats could eventually make their way stateside.

While some of these cybercrime trends seem far from your everyday life, the truth is some of them could easily sweep into your digital world. The best thing to do is remain aware, vigilant, and have antivirus software installed on all your devices.

O post Get to Know These Cybercrime Trends apareceu primeiro em PSafe Blog.

An Anti-Malware Attempt Gone Wrong
Unfortunately, part of the ongoing issue is that Facebook has been incredibly opaque on why you might be required to scan your device. The social networking giant has acknowledged that the company doesn’t collect enough information to know for sure whether your machine is infected. It’s possible that the company is using a network to watch how malware spreads, but other than speculation we don’t know the hard truth.

Read More: What Information Does Facebook Collect About Its Users?

Another potential issue is millions of people could lose access to their accounts. Some individuals came forward with complaints, citing the fact that they own a Mac and can’t download the Windows executable file required for the scan. Without any ability to run the scan, a user is locked out of their account indefinitely.

Possible workarounds have been discovered, including switching web browsers, but there are no concrete answers on why Facebook opts to remain silent on the issue. Attempting to lead the fight against malicious malware is a noble effort, but if you find yourself faced with being locked out of your account – a different strategy might be in order.

Other Options to Stay Safe
If you can’t rely on Facebook’s anti-malware solution to keep you safe, what other options are out there? A strongly recommended action to take is downloading an antivirus app to your smartphone such as dfndr security to keep your device safe by performing scheduled in-depth security scans. Best of all, the app offers an anti-hacking feature that can detect malicious links within applications like Facebook Messenger and your web browser.

While no one is entirely sure why Facebook has been so quiet on this issue, it remains clear that the best way to keep your devices protected when using social media is to always have a third-party app installed. The company did note that they ‘had helped clean up more than two million people’s computers,” but for any further information on their malware scan feature, we’ll just have to stay tuned.

O post The Facebook Malware Scanner is Holding Users Hostage apareceu primeiro em PSafe Blog.

The study looked at tens of millions simulated phishing attacks conducted over the course of a year through and reviewed more than 15 industries to see how susceptible each one is. The results may surprise you.

Read More: dfndr lab Discovery: McDonald’s Phishing Scam

The Stack Up of Other Industries
It was discovered that education workers were less likely to fall for a phishing scam than industries such as technology, entertainment, hospitality, government consumer goods, retail, and telecommunications. There are also some industries that are less susceptible to these cyberattacks than higher education, including transportation, energy and finance.

What Makes Higher Education Workers Different?
A number of universities have started implementing phishing awareness campaigns on their websites in order to help workers avoid compromising the privacy of students, colleagues or teaching staff. For example, the University of Pittsburgh created special inboxes where students and staff can report suspicious messages to the institution’s IT team.

What Organizations Can Do to Avoid Phishing Scams
There are some telltale signs of phishing attacks that everyone should know about, such as emails that appear suspicious. A phishing scam can entail a few things, but a big one is when an email impersonates an institution’s domain name from an account that looks similar to the real deal, but isn’t (such as “@harvard.edu” vs. “@harvardu.edu”). If the email is prompting you to click on a link, it could be a scam. Don’t click it!

What Can You Do Personally
If you’re attending college or work at one, one vulnerable point that is missed are smartphones. A smartphone is sometimes glued to your side and is necessary for school work or your profession.

To skirt the vulnerability that your phone can pose, consider using antivirus software there too, not just for  your computer. dfndr security’s advanced anti-hacking feature blocks phishing threats when you’re surfing, chatting, or studying. Best of all, it does the work for you by alerting you and blocking malicious links before you click on them.

While it’s interesting to peek at other industries and their cybersecurity measures, security actually begins with you first.

O post Higher Education Workers Rarely Fall for Phishing Scams apareceu primeiro em PSafe Blog.

The truth is blunt and surprising, but if you’re a ‘millennial’, guess what? You’re more susceptible to cyber attacks. What the heck, you might ask. Even though you have experience with surfing the web, and know that a pop-up on your phone isn’t going to lead to a free plane ticket or a large cash prize, 20% of millennials are more likely to fall for these traps than their older counterparts.

Read More: Google Chrome and the Safe Browsing Feature

Read on for the reasons why you’re easier targets for security breaches online than your grandma is.

Born With a Smartphone in Hand
The youngest generation that can now legally drive vehicles in the United States were born in 2002.They arrived in an era that’s currently progressing through young adulthood and when they made an appearance on planet earth, Apple had already released the second generation iPod. Time does fly!

Being born with technology creates a level of comfort; it’s produced a collection of individuals who don’t take much caution when approaching technology but instead expect technology to be at the ready, without risks, when you need something done. The idea of a safe technology Utopia that’s there to help, and not to harm, has almost been drilled into younger minds.

Our grandparents and parents were taught about the importance of privacy, but the latest generation has been born into a society where privacy is becoming obsolete. With being connected by various social media accounts, posting photos and videos online, while also “checking in” on Foursquare and sharing an exact location with strangers — keeping personal information private is not a cultural mindset for millennials. The latest generation wasn’t taught about security or trained to approach technology with caution – it was always there, and that makes it dangerous.

Pure Apathy for Security Procedures
The current generation conveys a general naivety regarding security, as a recent Fortune article pointed out that “millennial employees could be your company’s biggest cybersecurity risk.” 

A recent study carried out reported that about 30% of younger employees leave their sensitive passwords on post-it-notes or other scraps of paper in clear sight. That surprising number can be compared with only 20% of Gen X individuals, such as your parents, keeping their information out in the open, and only 11% of Baby Boomers, like your grandparents, doing the same.

The Why and How
The apathy problem might stem from merely being born with technology in-hand. Security can seem troublesome to millennials who are used to a fast-moving digital culture.

Having to wait for IT to approve taking files home, creating a two-factor authentication to secure online accounts, or even creating different passwords might make this generation lose patience, wanting things to move quicker. After being accustomed to a level of simplicity and ease, it’s difficult to reel everything in by introducing more detailed procedures, even for the sake of security.

Don’t lose hope if you’re a millennial, though. You can become more conscious of your online life. It begins with following some simple security tips:

One, don’t use a single password for all your accounts – create various passwords with random letters, numbers, and symbols

Two, don’t share your passwords – they are yours and should be kept secure, even from your girlfriend or boyfriend.

Three, don’t ignore your company’s security guidelines – reach out to your IT department for help if something seems too hard.

Seems like a boring thing to say, but cybersecurity is everyone’s responsibility. Together, we can remove the stigma attached to any generation and create a more secure internet experience for all.

O post Hacking: It’s Not Just Grandma, You’re Also at Risk apareceu primeiro em PSafe Blog.

Read More: Hackers Might be able to Take Control of your Smart Car

Learn how whaling attacks works, why they work, and ways to avoid them.

They Seem So Legitimate
Snapchat and Seagate have both fallen prey to whaling attacks in recent years. Part of the reason why they are successful is because they are highly personalized towards their target. For example, a fake email from a company executive might include the company logo, phone information and other details to trick the victim.

Whaling scams usually don’t use hyperlinks with malicious software, but hackers occasionally use this route as well. Attackers gather information from the company by examining the personal data of an employee on Facebook, Twitter, LinkedIn and other social media sites that may reveal something about the person.

Point-of-Sale Malware That Steals Data
One recent whaling attack that hit a company is a point-of-sale (POS) scam that relies on User Datagram Protocol (UDP) DNS traffic to extract credit card information. Instead of relying on HTTP to scam users, UDPoS uses Domain Name System (DNS) queries to steal data.

The scam works because the malware masks itself as an update from LogMeIn, which is a legitimate remote desktop service that companies use to manage computers and other systems. However, this malware is not actually an update from LogMeIn, but masks itself in order to avoid detection through firewalls and other security measures and steal card payment data. 

How to Avoid a Whaling Attack
Education is the key. Teach employees, senior management, and IT staff about whaling attacks. All staff should know how to differentiate real emails from spoofed ones, avoid unsolicited attachments, and discern fake hyperlinks. Conducting seminars on fake whaling attacks is a sound way to train employees. Another last measure for an IT department is to flag external emails if they’re coming from outside the company.

But, what can you do, personally? Try to enable safety settings on your private profiles so hackers can’t discover specific details about you, like your date of birth or information about your friends. Finally, be very careful about having work documents on your home devices such as a laptop or smartphone.

O post Inside a Whaling Attack apareceu primeiro em PSafe Blog.

Once a piece of mining malware has attached itself to your Android, it will relentlessly use the CPU and battery life to obtain digital currency. In the process, you may find the battery life of your phone draining or even heating up suddenly. Scarily enough, some bits of mining malware have learned to clone themselves, which means the virus can transfer to other devices on a network that your phone is connected to.

Read More: The Malware That’s Stealing Your Bitcoins (and How to Stop it)

Take these tips to heart to better protect yourself from nasty viruses such as the recently discovered cryptocurrency malware attack.

Third-Party Apps Don’t Play Around
While there’s no way to guarantee that malware won’t be nested in the apps you download, you can reduce your chances of infection by sticking to a reliable store such as the Google Play Store or the Amazon Appstore. Just this past January, Google removed sixty different compromised apps from its store. Sticking to reputable app stores is a smart way to stay away from shady sources.

Listen When Apps Are Speaking
When you download a new application to your Android phone, it will typically make you aware of any permissions it requires such as scanning your contacts to modifying the device itself. Determine what an application probably doesn’t need and understand what each permission allows an app to access. Use common sense here, if a calculator app needs access to your camera, microphone, and contact list – something is dodgy. You’re better off deleting the app than taking a risk.

Call in the Virus Scanning Reinforcements
Truthfully, it’s nearly impossible to stay up to date, detect, and avoid every strain of malware out there. The good news is there are antivirus applications that can help. dfndr security is one reliable app that has a full-virus scan feature, which scans your Android phone’s memory and SD card for any threats, removing them completely.

Just you alone can’t fight off these cryptocurrency miners, but having these tips and a strong security app will no longer make you a slave to hackers looking to hog your phone’s power.

O post Your Android Device is a Slave to Cryptocurrency Malware apareceu primeiro em PSafe Blog.

Read More: Where Do Most Phishing Attacks Occur and Why?

There are several other ways to tell whether or not a link is the real deal, or could lead you to a fraudulent page.

Take Out Your Magnifying Glass
When a link is sent to you via email, direct message or any other way, take a close look at what the link looks like before clicking it. 

A good way to check whether or not you’re getting scammed by a fraudulent email is to look at the exact spelling of the email account, as well as the URL, and compare it to the real deal.

For example, PayPal sends messages via emails that end with @paypal.com, but a fraudster might use an account that ends with @paypalpayments.com to trick you, so watch out for these discrepancies.

It may seem a bit loony to examine email or link addresses so closely, but taking those extra few seconds can save you from the nightmare of being hacked and victimized.

Become a Cybersecurity CSI
Another way to ensure you’re entering a trusted site is to notice if the domain is secure or not. Sounds really CSI, but it’s not as hard as you think.

First, look for the Secure Sockets Layer (SSL), which shows up on a website when it’s secure. A SSL website begins with “https” rather than “http”.

To further enforce security, also look for the green padlock at the beginning of the link and the word “Secure”, or the name of the company before the link. The green address bar only shows up when a site is using a type of SSL certificate called an Extended Validation (EV) Certificate, which helps confirm that the site is operated by a legally incorporated company.

URL Shorteners Could Be Your Enemy
When media outlets share an article on social media sites, they’ll typically use a URL shortener like Bitly or TinyURL. Sometimes, URL shorteners are used in emails as well. These tools help abbreviate long web addresses but make it hard to tell if a website is legitimate since the appearance of a URL is altered.

One way to get around this issue is to right click on the shortened link and copy the URL to a text editor and examine it. Never load it in your web browser though. When it comes to banking, most major financial institutions will probably not use URL shorteners in official emails, so you’re clear there.

We hope these step-by-step tips help you dissect your electronic correspondence better and avoid being a victim of a phishing or cyber attack.

O post The Anatomy of a URL apareceu primeiro em PSafe Blog.

Read More: Dangerous New Android Malware Discovered

What This Malware Does to Androids
The two pieces of malware are known as HARDRAIN and BADCALL and they are capable of installing a remote access tool (RAT) payload on Android devices. The technology can make the affected Windows systems work as a proxy server that can gather information from your device.

The Hidden Cobra viruses can record your phone calls, take over your camera and take screenshots of your device, read data from the contact manager, download and upload data from your device, plus it can execute commands and check for open Wi-Fi channels. Hackers can later use this information to blackmail you as it gives them the capabilities to make your personal information public.

HARDRAIN: Part One
The two federal departments wrote that HARDRAIN is comprised of three executable files that install malware on your Android device. Two of these are dynamic link library (DLL) executables that alter your Windows Firewall in order to allow incoming malicious connections from cybercriminals to breach your device.

In essence, these files open up the door for malicious files masked as secure HTTPS sessions that appear to be legitimate to enter your device. The third file on HARDRAIN is an Executable Linkable Format (ELF) file that links up to hard-coded IP addresses and serves as a RAT program, paving the way for a further invasion of your privacy and exposing your personal data.

BADCALL: Part Two
The other piece of malware is BADCALL, which also uses three files to tap into your phone. Two of these are also Windows executables that disarm your firewall by altering a registry key. After doing so, BADCALL also turns the infected systems into proxy servers. These files allow illicit communication channels to reach your device in the form of encrypted HTTPS traffic.

Rounding up the three files that make up BADCALL, there is an Android Package Kit (APK) that also acts as a RAT program that can access your personal information, record sensitive conversations, capture text messages and screenshots through your device’s camera.

O post Hidden Cobra Malware Infects Android Phones apareceu primeiro em PSafe Blog.

Wait, did I get that wrong? Oh, yes, we’re talking about tax season with receipts and paperwork galore; it may not be an exciting event like a spring feast, but it might lead to a decent refund! However, with hackers waiting for every opportunity to scam the system, ransomware has reared its ugly head again.

An essential start to staying protected should be to use an app on your smartphone such as dfndr security, which provides anti-hacking protection by scanning and blocking any possible malicious links in your web browser, emails, or your chatting/messaging apps. A little piece of security goes a long way.

Read More: Where Do Most Phishing Attacks Occur and Why?

We keep mentioning taxes, but what does this piece of ransomware have to do with your citizenly duties? The malware itself was found in an email when a hacker pretended to be a representative from the IRS. Ransomware is a type of malicious malware that will install itself on your phone or computer, typically locking down access to any files or material until a monetary payment is made to the cybercriminal.

Granted, this specific scheme wasn’t that slick since he was posing as a US agent sending an email from a UK email address and included a German language document.

This form of attack is known as phishing and tricks an individual into believing they are interacting with a trustworthy source. In this case, the attacker posed as a government official. The multi-continental and bilingual email may have been easy to spot, but there are other online scammers with savvier skills that can trick you into downloading malware.

Unfortunately, once you’ve fallen victim to ransomware, you could pay the ransom with no guarantees your data is returned safely.

It’s important when you receive an email or phone call, to double check the source. Look at the ‘From’ field to see the full email address. In this case, it wasn’t an ‘IRS.gov’ email address, let alone one originating from the US. Read the address carefully and make sure it’s spelled correctly — small typos can be missed.

When it comes to IRS tax season, the agency notes they will never reach out via email to request personal information. If you do come across any email phishing scams from the IRS, forward the email to ‘phishing@irs.gov’ to report it and help prevent others from falling prey to scams.

If you receive a phone call, the IRS suggests writing down the supposed employee’s name and badge number. Then, dial the official IRS number at 1-800-366-4484 to check if the request was authentic.

O post Hackers Target Taxpayers with Ransomware During Tax Season apareceu primeiro em PSafe Blog.

However, cybercriminals have been capitalizing on the buzz surrounding bitcoin to lure in unsuspecting victims who are opening malicious links. Avoid falling prey to these scams with dfndr security, which comes equipped with an anti-hacking feature:

Read More: Where Do Most Phishing Attacks Occur and Why?

The Singapore Phishing Scam
Some of the first victims of cryptocurrency cons are phone owners in Singapore who received the following message: “You have (1) BitCoin in your account. Confirm your account here.” This SMS spread around, inviting people who wanted to get rich quick to grab their free Bitcoin by opening an account.

Channel NewsAsia reported that at least two people in Singapore were the recipients of these messages in January, offering them more than S$18,500 (nearly US$14,000) in the cryptocurrency.

Singapore Spreads Worldwide
An investigation revealed that people in other parts of the world had been receiving similar messages, including Australia and New Zealand. Security researchers discovered that clicking the link spells trouble for those fall for it.

In all reported instances, the victims’ personal information was at great risk if they clicked on the link. By entering the domain, victims inadvertently gave cybercriminals the green light to use their phones to mine bitcoin for financial gain, which slowed down their devices — all for the scammers’ benefit.

Twitter Bots Impersonating Celebrities
Another bitcoin scam that has been rising in popularity is in the form of Twitter bots that impersonate celebrities such as Donald Trump and Elon Musk. These fraudulent accounts have been making their way to social media and asking for small amounts of cryptocurrencies in exchange for a large payout later on.

One scammer said he was donating ethereum to the ETH community as part of a 24-hour promotion that will handsomely reward those who donate. You can conclude that in this scam there was no donation of ethereum, just a cybercriminal stealing people’s hard earned money.

How to Avoid Bitcoin Scams
When using social media, keep an eye out for anything fishy such as a celebrity randomly contacting you or any other account asking for your cryptocurrency in exchange for a bigger reward.

As far as phishing scams go, the best way to avoid them is to not click on any link you receive via text or email. Doing so gives hackers the opportunity to access your personal information for criminal, profit-making purposes.

These scams are happening more frequently because tracking cryptocurrency transactions is harder than monitoring normal currency. Plus, more retailers and online services are accepting bitcoin as a form of payment, with some believing the value of the digital coin has yet to plateau.

O post Bitcoin Scams are Coming Your Way apareceu primeiro em PSafe Blog.

How Does It Travel?
Hackers have been targeting unsuspecting smartphone users in the Balkans with this Spider ransomware, which was first discovered on December 10. Users get reeled in through a phishing scam with malicious MS Office files sent as attachments with the subject line “Debt Collection.”

Read More: How to Protect Your Data from Ransomware Attacks

Spider is designed using obfuscated macro code, meaning that if macros are enabled, the ransomware allows a PowerShell to enter the victim’s computer and lead them to a host website with directions.

What Happens Next?
The malware then links up with apps and cloud storage, which proceeds to encrypt and lock away all the user’s files using AES encryption, while adding a “.spider” extension to all their files. On the surface, these emails seem to be legitimate as anyone with credit card debt or unpaid bills could be fooled into believing that these files come from a reliable source.

Cybercriminals proceed to send a message in Bosnian to victims on the ransomware, notifying them that all their personal files have been encrypted and they won’t be able to access them without the key to open them. Victims are then given 96 hours to pay in bitcoin in order to get their files back, with hackers offering them directions on how to do so.

How Do Users Pay?
Victims are given a tutorial on how to pay, beginning with details on how to buy bitcoin and how much money they need to pay. They are then given instructions on how to download the Tor Browser, which is necessary to make the cryptocurrency payment anonymously. Users are then told where to send the payment and how to securely do it.

What Happens if Victims Don’t Pay?
If they fail to pay up in 96 hours, all their information will remain encrypted and permanently locked. The criminals warn victims not to try anything as the ransomware has the technology to delete all their files and damage their PC.

How Do I Protect Myself?
Individuals and businesses looking to avoid Spider should disable their macros, while also being cautious of messages that can only be opened by turning on their macros. For the time being, there is no way to decrypt the ransomware once it does strike due to how recent the technology is. The best thing you could do is install a security app like dfndr security with the advanced anti-hacking capabilities that can help fight a ransomware attack.  

O post Spider Ransomware Gives You 96-Hours to Pay apareceu primeiro em PSafe Blog.

Keeping yourself protected against malicious malware can be a difficult task. One way to prevent an infestation on your phone is to use dfndr security’s Full Virus Scan feature on your Android phone, which scans for viruses, malicious content, or infected apps even checking your SD card.

Read More: All About the Trusted Contacts Feature on Facebook

Dole Out Administrator Permissions Selectively
In the specific instance of the GhostTeam malware, its developers took advantage of both your device’s permissions and your trust. You download and install a supposedly safe app, which then downloads malware in the background and requests administrative access to your device.

Take time to read any Android prompts which ask for specific permissions. For example, consider why a calendar application would require access to your microphone or camera – it typically wouldn’t need this to function. Be careful of what permissions granted to your apps and if one asks to become a device administrator deny the request. Apps with device administrator privileges can prioritize themselves and take control of your device.

Two-Factor For Enhanced Security — The Smart Way to Go
Gaining administrative access to your device was only the first step for GhostTeam. Once the needed permissions were obtained, the device would attempt to phish the user through a barrage of Facebook login requests. Phishing attacks are used to trick users into giving sensitive information to a brand or service they believe to be trustworthy but is only being spoofed for malicious intentions.

While it would be impossible to be completely aware of every trap out there on the web, we should be as alert as possible to potential phishing scams. Some phishing scams are incredibly realistic and fool even the best of us.

This is where two-factor authentication can help. Adding this to your Facebook account is easy, and try to do the same for every account if you can, so hackers won’t be able to get in with just your password. Two-factor authentication ensures you have two pieces of information; in most cases, this includes your password and a one time code texted or emailed to your device of choice.

Consider security practices like two-factor authentication, watch what you download, and you should be quite safe. If you believe that you may have already been infected, be sure to download a security app or use the one you already have to scan your phone.

O post Beware of New Android Malware That Steals Your Facebook Password apareceu primeiro em PSafe Blog.

One of the best solutions for avoiding these scams is vigilance, but software providers do offer solutions to help guard against an attack. For Android users, dfndr security’s Anti-Hacking and advanced Anti-Phishing protection can alert you to possible scams received over SMS, Facebook Messenger, WhatsApp, or your web browser before even clicking on their traps.

Here are 2 of the most common tricks to avoid with phishing scams:

Read More: Phishing Scam Alert: Wells Fargo Customers Targeted By Hackers

Manipulative Web Links
A typical phishing trick is to send users a link that seems as if it might be heading to one website, but instead, it directs you to a malicious alternative; this can be accomplished by showing you the text of a trustworthy site, while the link itself sends you to a more malevolent option. For example, the link you click on may say ‘google.com,’ but thanks to tricky web coding, the results may direct you to a different site designed to harvest your information.

This trick can easily be identified by holding down on the link with your finger to see what web link it truly directs itself towards. Depending on the smartphone and mobile browser you are using, the true link will typically be displayed in a pop-up dialog.

Remember to eye the web link carefully before you click on it. Using slight typos in a web link is an efficient way to make you think you are secure when you are really at risk – heading to y0urbank.com’ instead of ‘yourbank.com.’ Other keywords may even be added to the web address to create a plausible-sounding, but unofficial, link such as ‘yourbanklogin.com.’

Social Engineering
The easiest way to obtain your personal information? Just have the scammer ask for it. Whether through an email, text message, or traditional phone call, scammers are more confident than ever in asking for your information. A hacker will merely pretend to be your banker, a government official, or an IT support representative. In many situations, phishing attacks rely on the fact that humans will typically obey a perceived figure of authority.

The Moral of Lesson 101
Do not trust anyone who asks you for a password or other personal information. Just delete the email, ignore the text-message or hang-up the phone call without giving any personal details. Then contact the institution or company that person claimed to represent by visiting their official website to verify the phishing attempt.

Phishing scams can be dangerous to our personal security and be confusing to identify, but rather than feel powerless at this sentiment there are options to keep your personal information safe. Use antivirus software on all your devices and follow best security practices to help you avoid becoming caught in a phishing scam net.

O post Don’t Know How Phishing Scams Work? Here’s Lesson 101 apareceu primeiro em PSafe Blog.