Read More: Google Introduces Over 20 New Security Features to Protect Users

You still need a security app on your device to fully protect yourself from phishing scams. Download dfndr security and you can block phishing attempts by activating the anti-hacking feature. With advanced AI built in — this feature can block attacks coming from your web browser, SMS, or chat apps.

The Facebook phishing tool has some advantages, particularly in identifying homograph attacks. Uh, what are those you might ask?  

Homograph Attacks
Some phishing attacks come in the form of a homograph attack. Hackers create websites with domain names that are almost identical to a brand name site, with the sole purpose of fooling someone and getting them to unknowingly input login credentials.

The only way to tell a site is fake is by examining the name of the site. A fake one usually has a letter or a punctuation mark out of place. Unless you’re watching closely, you could easily be fooled. This is where the Facebook tool comes in.

What the Tool Does
Named Certificate Transparency Monitoring, the tool is a Facebook-hosted application that any webpage owner can access for free with a Facebook account. The tool has been around since 2016 but it was recently updated it, allowing webmasters to detect homograph domains that are spoofs of their websites.

Webmasters add their domain to the tool’s dashboard which will scan the public Certificate Transparency (CT) logs. The logs have information about new domains that recently got an SSL certificate. The tool will then warn website owners about fake sites in the CT logs that use a similar name to theirs.

Will the Tool Help You Really?
As someone concerned about your security, the Facebook tool can help you identify phony websites, but in the end, it’s really for domain owners to suss out imposters. While the tool is useful, it will not actively block phishing scams lurking out there.

Once again, it’s wise to take security into your own hands, and have an antivirus app downloaded and ready to be your eyes and ears against hacking attempts.

O post Is Facebook’s New Phishing Tool Effective? apareceu primeiro em PSafe Blog.

Windows
A simple trick for Windows is to merely place your sensitive information within a folder and then mark the folder as ‘hidden,’ which will hide it within the file explorer. To hide a folder, right click on the folder and select the properties option. Once the properties dialogue is open, ensure there is a checkmark next to the hidden label – that’s all there is to this method! When you want to view that hidden folder, simply select the view tab within the file explorer and check the option to display hidden items.

Read More: 3 Private Messenger Apps That’ll Keep It Confidential

MacOS
The process isn’t as easy on Mac and does involve a bit of time in the Terminal application. If you’re unfamiliar with using Terminal, we suggest checking out a quick tutorial first. Start by opening the Terminal app from your Applications folder and navigate to the directory in which your folder is placed. Once you are within the proper directory type the following command, followed by the enter key,’ to hide the folder: “chflags hidden [name of folder].” For example, if we have a folder named ‘photos’ which we want to keep hidden, we would type: “chflags hidden photos.”

Android
Due to the open nature of the Android platform, one of the best options for hiding sensitive data is a third-party solution. One such option is dfndr vault, an app that easily allows you to create a hidden gallery of photos and videos; it even offers a feature known as applock, which can prevent access to certain apps by letting you add a secure passcode. No need to worry anymore about friends snooping around your Tinder profile or co-workers discovering embarrassing snapshots. Android users can also take advantage of dfndr performance, which has a ‘quick cleaner’ feature to remove any private information that might be in your device’s temporary files.

iOS
If you’re an iPhone or iPad user, you can choose to add your private photos or videos to a ‘hidden gallery’ built into the device. Simply visit your Photo app and navigate to the media you wish to hide, once there tap the share button (the square with the upward facing arrow), and select hide from the menu. The photo you just chose to hide will no longer be viewable from the main camera roll or any of the adjacent photo features. To view the private collection, head to your albums and locate the folder named Hidden. Sadly this option won’t keep the most curious of individuals out, but it will prevent any private images from popping up while scrolling through your camera roll.

O post How to Hide Private Files on Your Computer or Smartphone apareceu primeiro em PSafe Blog.

How to Check if You’ve Been Compromised
To begin, head over to Equifax’s security website and use your social security number to check if your private information was included in the stolen data. Unfortunately, Equifax does not detail exactly what parts of your private data was compromised. With the scary possibility that your personal information is going to the highest bidder, we recommend obtaining identity theft protection as soon as possible. Luckily, Equifax provides this service at no charge.

Read More: What Should You Do After Losing Your Phone?

If you have reason to believe that your passport may have been included in the Equifax breach, take a few measures to enhance your security. For example, the DMV recommends that you contact them in regards to the stolen document. A passport is an official piece of government identification that could allow malicious individuals to impersonate you.

Replace Your Passport
If you’re a frequent traveler, you can quickly replace your passport through a United States passport agency office in under 2 weeks. Otherwise, you can visit a local post office to have your passport renewed, but the process may take over 2 weeks to complete. Don’t forget to bring a secondary piece of identification such as a driver’s license when applying.

Besides replacing your passport, you should also be aware of any activity on future credit reports. If a cybercriminal decides to use your information, your credit report will log this. To be safe, consider ‘freezing’ your credit report so that none of them can be used without prior authorization.

Look Ahead at Credit Reports
If you discover possible fraudulent activity on your credit report, go to this Equifax page to report any fraudulent activity, The reporting tool will also alert the 2 other major U.S credit bureaus, Experian and TransUnion that fraud may be at play.

Equifax’s critical data breach is a cybersecurity blunder that affected us all, but with careful attention, we can all remain safe by being diligent and aware.

O post The Equifax Breach Might Have Compromised Your U.S. Passport apareceu primeiro em PSafe Blog.

Read More: The Danger of Spoofed Websites: Learn to Tell the Difference

The best way to protect yourself from cyber threats is to ensure you download antivirus software on all your devices, your phone included. For Android users, we recommend dfndr security, which has a security scan feature that combs your entire device, even the SD card, and blocks viruses or malware.

How It All Began
A cyber drive-by attack wasn’t much of a threat in the early days, mainly it was used to gain free access to Wi-Fi. Hackers would drive by the streets of a town, locate a Wi-Fi signal and If the signal was insecure, they would hack through to siphon Internet.

How They Evolved
Now cybercriminals use this same practice but in more sophisticated ways. They often target badly secured routers and first figure out the router manufacturer. Once they’ve gotten that information, they’ll next tap in and listen to the traffic and find ways to compromise the password, which eventually gives them access to a computer or phone.

With all systems weakened, the next stage of an attack is to introduce malware or a keylogger, and once this happens, tapping into someone’s sensitive information is child’s play.

A keylogger can bait a victim by having them visit a legitimate website that’s infected through a popup or ad, or by slyly redirecting the person to an infected site. Information like bank accounts, logins, or social security numbers could be discovered and used in illegal ways.

Criminals are also targeting businesses with this type of attack, which requires no user interaction at all and depends on the vulnerability of a device or modem.

In other cases, cybercriminals use ‘man in the middle’ software, by having attackers spy on victims by setting up conversations between multiple parties.

Last Words and Tips
In addition to downloading a security app, individuals and companies should update devices regularly with the latest security patches and script blocking plugins. Additionally, businesses should ensure employees don’t have local administrative access to their devices. Set them up with a separate account instead.

Other measures to take include segmenting a company’s network so that everyone isn’t running on the same server, which ensures that malware doesn’t spread throughout an entire office.

Finally, all work and personal data should be backed up as frequently as possible on external hard drives or a cloud service, which should not be left connected to the main network.

O post A Cyber Drive-By Attack Could Be Lurking in Your Hood apareceu primeiro em PSafe Blog.

Lock Down Your Admin Account
When you first signup for a WordPress account or you decide to self-host, your website is controlled by an administrator account. By default, the name of a WordPress administrator account is ‘admin.’ While this username is easy to remember when you want to log in, it also gives hackers half the information they need to hack your website. Start by changing the default ‘admin’ login to something different – think of a username that is easy to remember, but also not obvious such as your business name. In addition, be sure that your password is a strong alphanumeric combination and isn’t based on something easily guessable such as your birthday or a pet’s name.

Read More: Here Are the Most Common Passwords, Ranked

Keep Everything Up To Date
No matter what device or service you’re trying to protect, it’s essential that your WordPress site is updated regularly to combat security threats. Unfortunately, in a recent survey, it was found that almost half of all WordPress sites are not updated to the latest version. Don’t concern yourself with the momentary downtime to perform a critical update, many hosting companies now do automatic updates for you. If your hosting company doesn’t provide this service — don’t ignore notifications to update, it really is painless and only takes a few minutes.

Change Your Login Address
You can generally access the login of a WordPress site by typing in the website address and adding ‘/wp-admin/’ to the URL. For example, if Google was hosted on WordPress, you would head to ‘www.google.com/wp-admin/’ to gain access to their login prompt. By leaving this login address at the default value, you’ve basically shown hackers to the front door. Consider changing the default login to something more unique to keep hackers guessing. After all, if you knowingly give them access, can you blame them once they break in?

O post Tips to Secure Your WordPress Site Against Hackers apareceu primeiro em PSafe Blog.

GandCrab
Recently, GrandCrab has grabbed everyone’s attention. The ransomware was discovered just this year and continues to hold everyday individuals hostage by encrypting all of the data on a user’s machine. What makes this piece of malware so ingenious is the way it’s been designed to hide the identity of the hackers who created it. To remove the ransomware from your machine, you must pay between $300-500 through a secure TOR network connection using an anonymous cryptocurrency known as Dash.

Read More: How to Protect Your Data from Ransomware Attacks

WannaCry
Accurately described by its name, the WannaCry strain of malware will indeed make you weep if you fall victim to it. The malicious piece of ransomware infected individuals in over 150 countries last year, in addition to targeting Britain’s National Health Service. Initially, the software used a piece of the Microsoft Windows file sharing system to infect other machines, but it eventually evolved. As with other ransomware scams, anyone infected found themselves forced to pay, this time via Bitcoin if they ever wanted to see if their data again.

GoldenEye
Not to be confused with the action-packed James Bond film of the 1990s, GoldenEye is a nasty piece of malware that’s also known as ‘NotPetya.’ Infecting reputable companies such as AP Moller-Maersk, Cadbury, FedEx, and Merck, the ransomware requested $300 for every computer infected. Easy to be tricked by, the malware sneaks onto your machine through an email or infected Word document. To add insult to injury, the malware has been smart enough to clear any actions it takes on a device, making it difficult to track down the criminal creators.

How Do You Stay Safe?
What’s disturbing is each piece of malware noted above have all been released within the last few years. Your data is at significant risk because ransomware attacks grow more aggressive each year.

Your computer isn’t the only device at risk either, collections of malware also target Android users. You can keep yourself protected by downloading dfndr security which has a full virus scan feature to locate any threats on your device, as well an anti-hacking feature that’s powered by AI, which will block malicious links before you click on them.

O post The World’s Most Malicious Ransomware Attacks apareceu primeiro em PSafe Blog.

Read More: Why Bother Protecting Your Social Media Apps

Sounds so simple, but some users would like this option to be more obvious; however, learn more about this new feature and how it works.

What Brought This About?
Facebook faced plenty of backlash over the Cambridge Analytica scandal that revealed the company was harvesting the personal information of users, and selling the information to third-party companies so specific ads could be targeted to users that search for products or services.

Zuckerberg admitted at the company’s recent F8 conference that, by default, Facebook still tracks the activity of users and sends them ads connected to the information they search for. In the immediate future, users will be able to stop this practice with a new feature.

How Can Users Change This?
Supposedly the new feature will be similar to how you clear cookies and history in your web browser. Facebook’s feature will allow you to view your browsing history on the site and clear it, including what you’ve clicked on, app history, websites you’ve visited, and more.

Essentially, you’ll be able to choose to not have this information stored in your account. But, Zuckerberg warns that turning off function will eliminate some of your preferences the same way deleting cookies does, which will require you to sign onto sites again since the information in any auto-fill forms will be gone.

The Effect This Could Have
The move could bring many users back to Facebook because the will have the power to not have their preferences tracked. Zuckerberg added that the new privacy control will be called Clear History. He warned it would take the company about 3 years to become more proactive at policing content, which means you might still see content that doesn’t fit your preferences if you choose to keep your data tracking intact.

However, deleting your browsing history will result in the company removing identifying information so a log of sites and apps you’ve used won’t be connected to your account, which is a step toward more privacy.

O post Want Facebook to Stop Tracking Your Browser History? Ask Them apareceu primeiro em PSafe Blog.

Google Defense for Businesses
Many phishing attacks will trick you into signing into a false account, giving hackers full access to all your data. The new Google feature will have an additional screen that asks a user to review the login email address and confirm that he or she is the proper owner of the account. This extra verification process is meant to enforce security and can be used with two-factor authentication.

Read More: How Safe is Google Chrome for Your Android?

What About Your Personal Google Life?
As previously noted, this new feature will only be available for Google Chrome users. This sadly leaves other browsers and Mozilla devotees in a vulnerable spot. After all, you still use Google services like Android, YouTube, or Google Photos. Basically, these new changes don’t assist the majority of Google users. Your data will still be exposed to hackers.

Your best bet is to stick with a third-party solution like dfndr security and activate the anti-hacking feature to block potential phishing attempts. The feature uses advanced AI to stop an attack before you even click on a malicious link. Your data is most infiltrated by the deceptive phishing process of placing malware links in emails, chat apps like Facebook Messenger, and SMS.

It’s also important to follow safe web browsing practices when checking email or enjoying the internet. If you’re unsure where a link might take you, avoid it and move on – the risk isn’t worth it.

When dealing with emails, always follow up with the sender of an email by phone to confirm the message details. And finally — be skeptical of any requests for detailed information. With these tips, all of us can have a safe, enjoyable experience online.

O post Google Introduces Anti-Phishing Feature for GSuite Users apareceu primeiro em PSafe Blog.

Read More: Know Your Enemy – How Ransomware Payments Happen

Be a responsible employee and citizen by protecting all your devices from potential attacks, including your Android phone. The best way to fight hackers is by installing a well-rated app like dfndr security, a full virus scan feature can check for any threats in your device, by scanning your files and even your SD card.  

SamSam ransomware is like any strain of ransomware, mainly designed to encrypt data on a server or device and the only way to recover your data is by paying a “ransom’ to have it returned. However, SamSam has some specific details you should know about.

It Spreads Quickly
Most ransomware is sent by sending one copy of the malware to thousands of possible victims over the course of a day or two. However, the hacking creators of SamSam ransomware did something different – they sent thousands of copies of the malware to computers within a single organization at once.

Once the organization was infected, the hackers offered a “discount” to restore the company data all at once. Many cybercriminals use the “spray and pray” technique – attack an organization and hope for fresh victims. But the perpetrators of the SamSam ransomware attacks specifically targeted organizations with glaring vulnerabilities or weak credentials.

What Did They Exploit?
The SamSam ransomware attacks exploited bugs that organizations are not aware of, or had missed in their IT security plans. They also rolled out brute-force attacks against the Remote Desktop Protocol, a Microsoft software that allows two computers to remotely connect. This allowed them to gain access to unauthorized networks.

The ransomware was then spread to other connected networks through network mapping and credential theft.

What Can You Personally Do?
Always follow your IT department’s recommendations on having strong credentials, by creating passwords that are at least 8 characters long with some combination of lower-case and upper-case letters, as well as numbers and symbols. Ideally, use all randomized characters.

Take the stance of “defensive computing,” which helps protect you from malware, ransomware and phishing attacks. Don’t open links and files from people you don’t know or from “friends” who’ve sent you odd messages (cause the person may have been hacked!). Heed company protocols on backing up corporate files regularly and stored off-site, so if an attack were to happen, the impact could be lessened.

O post The SamSam Ransomware is Behind the Atlanta Attacks apareceu primeiro em PSafe Blog.

Read More: Which Android Apps Should You Be Locking?

If you want to keep curious individuals out of your Android phone, we recommend dfndr security’s applock feature. By creating a secondary passcode, you can quickly lock down apps that you don’t want anyone to access on your device. Whether your phone is stolen or you’re lending it to a friend, using applock can ensure your most important apps are off limits.

The concept of locking down apps, in general, might seem weird. You might be wondering, why bother doing this and on what occasions would you need to?

 Love Knows No Bounds in Your eBooks
We know, you love Stephenie Meyer’s Twilight books; it’s the way she weaves vampire romance onto a page, but you don’t want your friends to discover her books’ in your Kindle app – not to mention all the detailed notes and highlights you took on Edward and Bella’s relationship. Be smart, lock your secrets away, but don’t delete the ‘undead’ passion.

Absolutely Not, You Can’t Buy That on Amazon
Kids seem to be born with an instant ability to understand technology, but that can sometimes have a downside. Keep those prying little fingers out of shopping and financial apps such as Android Pay or the Amazon Store. Sure, you want to make your kid happy, but how thrilled will you be when a $250 LEGO set shows up at your doorstep?

That Embarrassing Photo, ‘You Know the One’
It was late, you definitely lost count of the beers you were drinking and the number of karaoke songs you sang badly. Sure, you can look at the pics and laugh now, but your mother-in-law might beam a cold stare at you when she accidentally clicks on your photo gallery. Lock it all down, and hopefully, she won’t be curious to see what you were up to last Saturday.

Stop Your Friend From ‘Fixing’ Your Love Life
Anyone single can relate to dealing with ‘that person’ – the one who has made it their mission to put you in a relationship. Keep your privacy under wraps, and keep others from swiping left for you. After all, do you really need a date with another person that your friend finds absolutely ‘perfect?’ Maybe it’s time to “fire” your self-appointed matchmaker, because no, that guy in ripped camo shorts with the python probably isn’t your soulmate, no matter what your friend thinks.

O post Who Should You Hide Apps From and Why apareceu primeiro em PSafe Blog.

Read More: Get to Know These Cybercrime Trends

There are only a few reports of hotels receiving complaints about a small subset of criminals entering rooms and taking personal items through this technology, but the vulnerabilities in keycard technology suggest it’s only a matter of time before these crimes go mainstream.

How the Master Key Works and is Built
To get a master key to access a room, hackers book a hotel room and copy the data on an electronic keycard, which then gives them access to any room. In some cases, they don’t even need a keycard because the process can be done remotely by standing close to a hotel guest or a hotel employee. The ‘Master Key’ can be unlocked through a design flaw that’s common in most electronic lock systems.

Hackers then buy a portable programmer for a few hundred dollars to overwrite the key and create a master key within minutes. Once this is accomplished, the cybercriminals generally target travelers who store their laptops, passports, and cash in hotel rooms.

How the Key Opens Doors
This device, which is an RFID reader and writer, is simply held close to a door lock. The Master Key will run different key combinations within a hotel’s electronic database in less than a minute, cracking the master key combination to a particular room and unlocking the door. This can be done with a custom-tailored device or by writing the master key back to a hacker’s keycard.

A Temporary Fix
Being alerted to this flaw, Assa Abloy, the company who manufactures the portable programmer issued a software fix to keep hotel guests and their personal items safe. The company recommends that hotels worldwide update their keycard software to ensure these cyber attacks don’t occur in their facilities since new vulnerabilities can show up over time.

O post Hackers Can Now Break Into Your Hotel Room apareceu primeiro em PSafe Blog.

How Tabnapping Attempts to Trick You
This is how tabnabbing works. Say you stumble onto a website – maybe you found an interesting web article, clicked on a link sent by a friend, or are researching a specific topic. Often when we’re busy, opening several tabs to save a page or blog post to read later is normal multitasking, but this is where tabnabbers get you. When you open a new tab to work on something else, the malicious page begins to transform in the background while you’re occupied and not looking.

Read More: Phishing Attacks Can Be Stealthier Than You Think

The bogus website’s icon, known as a favicon, suddenly changes to something else like the Google logo, with the entire webpage following suit. When you tab back to where you were before, you’re presented with a fake Google account login box. You quickly assume that you were automatically logged out of something and enter your credentials, but what you don’t realize is you just fell for a dubious phishing attack. And now a hacker has your login information.

Tabnabbing are targeted attacks — hackers scour for vulnerabilities in HTML script, image loads, and various web browsers. Methods like this allow hackers to detect which site a user is visiting, or what sites a user visits regularly. For example, if you use Facebook daily, a hacker could simply switch out a tab to the Facebook login screen and ensnare you to enter personal details.

There is Hope for Protection
Keep following necessary security standards such as always checking the website URL, not only once it loads, but whenever you’re being prompted for a password or other personal information. Implementing two-factor authentication can also make it more difficult for hackers to access your account even if they’ve managed to get a hold of your password.

Finally, always have an antivirus software installed on all your devices, both computer, and smartphone. dfndr security is a well-rated app for Android devices and offers advanced technology based on AI machine learning. There is a full virus scan feature that scans your device from top to bottom and detects malware or viruses, and the anti-hacking feature blocks any malicious links before you even click on them.

The big lesson here? Your data is at risk, but the good news is you don’t have to go it alone.

O post Tabnabbing Attacks While Your Back is Turned apareceu primeiro em PSafe Blog.

Begin Protecting Your Device
One way to start protecting your Android if manufacturers aren’t doing it is to use a reliable third-party app like dfndr security. Take advantage of a full virus scan feature and anti-hacking technology that fights any malware threats or phishing attempts. With 21 other great features included, you may not be able to control your manufacturer, but you can stay one step ahead of hackers.

Read More: What You Need to Know About Google’s Security Patch Record

According to the study, the manufacturers have been claiming within their devices’ settings that all security and system patches are up to date when they are actually behind. This practice of deceit not only leaves Android phones vulnerable but also calls into question the validity of a manufacturer’s security practices. In order to find the cleverly hidden lie, the firmware of many devices had to be carefully examined.

For Some, The Problem is Worse Than Others|
Companies with a mix of patched and unpatched devices or only behind by a single patch includes Google, Sony, Samsung, and Wiko Mobile. However, of those noted previously, companies HTC, Huawei, LG, Motorola, TCL, and ZTE are at least 3 or more patches behind. While Google is the company that issues patches for the Android operating system, it’s the responsibility of each manufacturer to deliver patches to their line of handsets accurately.

Some Light at the End of the Tunnel
Luckily, there could be a possible solution. Google has begun implementing a new project they have dubbed Treble. The project attempts to fix manufacturer patching issues by putting more control of Android’s core back into the hands of Google. What this means is your device could be updated as soon as a patch is released without having to wait for a manufacturer. While Treble has been included in Android 8.0 Oreo, not all devices currently support it. However, the good news is the project will be implemented on all Android devices moving forward.

O post Manufacturers Caught Lying About Device Security apareceu primeiro em PSafe Blog.

These often go unnoticed because of how small each transaction is, but the severity of these crimes is still massive because when the toll is added up — hackers end up accumulating millions of dollars from unsuspecting victims. Cybercriminals don’t just ‘break-in’ to a company’s network, they actually use various techniques to begin their online assault. Malware, phishing scams, ransomware, and other trojan horses are a few ways information is stolen from companies, employees, and their customers.

Read More: Get to Know These Cybercrime Trends

Understanding how credit and debit card breaches are carried out and what to do about them can help you not fall prey to these attacks.

How They Happen
Cybercriminals first look for vulnerabilities in a company’s security protocols and exploit these by targeting specific people, systems or networks. Network attacks and social attacks are the 2 main ways hackers strike.

With network attacks, hackers are monitoring for weaknesses in applications, infrastructure, or in an entire system itself.

Social attacks entail phishing scams or other ways of tricking employees into providing hackers with access to a company’s network. These attacks can be done through fraudulent emails with malicious attachments that appear to be from an important figure in the company, or through fake login screens that an unaware employee populates with a username and password, thus giving full access to a hacker.

After a hacker gains access to a computer or device, the network is cracked open and confidential company data is stolen, such as credit and debit card numbers.

You Aren’t Helpless if Your Info is Compromised
The Office of Consumer Protection urges consumers to watch out for these scams and data breaches. One thing you should do is periodically look at your credit card statements for any odd or unknown charges. If there is any, contact your bank to report suspicious activity.

We recommend setting up new login information for your account immediately, but don’t stop there. Take further measures by placing a fraud alert and a security freeze on your credit bureau reports. Make sure you frequently check these reports for any strange activity.

It’s also worth keeping in mind that you’re eligible for a free annual credit report from each of these 3: TransUnion, Experian, and Equifax. Call 877-322-8228 or visit AnnualCreditReport.com to claim your free credit report.

O post What to Do if Your Credit or Debit Card is Compromised apareceu primeiro em PSafe Blog.

While you focus on ensuring that a hacker doesn’t manipulate your trust, your mobile device is still vulnerable to cyber attacks. Available for Android devices, dfndr security offers antivirus capabilities that scans and removes malware, and an anti-hacking feature that warns you if a link is dangerous. A quick download will go a long way towards making you feel safer.

Targeting Your Stressors
One psychological technique that’s used to manipulate is to target someone who is under stress and likely feeling vulnerable. When we’re stressed, we tend to make rash decisions to push away the source of stress. This might include a situation like receiving an email asking you to send password information to your ‘IT department’ because it’s ‘urgent.’ No matter what’s going on around you, be sure to take a deep breath and handle tasks with your full attention. Why? That email from IT could be a scam.

Email From the Big Boss
We tend to bow to pressure in the face of authority quite easily; this basic psychological idea has been showcased in psychology tests as far back as the 1960s – and it’s just as relevant today. If you see an email from your boss, you’re more likely to address the request quickly. However, always double check that email to ensure it isn’t fraudulent. Your boss will thank you for preventing a possible phishing attack.

Respond Quickly or Else
Lastly is the psychological manipulation of placing a time limit on your decision-making capabilities. We’ve seen the tactic used in both phishing scams and television commercials – you need to act now before time runs out! Don’t allow anyone to control how fast you move, caving in can tear down your ability to rationalize. The next time you see an email that stresses urgency, slow down, and take the time to consider the proposal – your future self who doesn’t get hacked will be grateful.

O post Learn the Psychology of Digital Fraud apareceu primeiro em PSafe Blog.

Read More: How to Prevent Identity Theft When You’re Online

As a parent, you should ensure that your children are protected from cybercrime. If they use your Android device frequently to play games, install antivirus software on your phone, like dfndr security. This AV-TEST approved app has a full virus scan feature that checks your mobile device for any malware or potential threats, eliminating them instantly. If your child is older and you’ve generously granted him or her with an Android, be sure they have dfndr security installed and have activated the full virus scan feature.

It can feel helpless on how to protect what’s most important to you, but knowing how this faceless enemy operates gives you the power to support your children as they grow up in the digital age.

The Stats on Child Identity Theft
Listen to these sobering stats. In 2017 alone, there were more than 1 million children targeted by cybercriminals. The stolen information was commonly used to extort money from parents. $2.6 billion in losses were caused by hackers who stole the data of children, regardless of age. Out of that $2.6 billion, families endured losses of approximately $540 million, while the rest was spent by the authorities and government.

While 60% of adults who fall prey to identity theft likely knows the perpetrator (a vengeful ex-partner or cousin, for example), only 7% of children were found to be connected to a perpetrator. Another shocking stat is that 11% of households in the U.S. reported that at least one child had personal information compromised in 2017. It’s also easier for criminals to target children because their parents are unlikely to check their child’s credit report.

The Tell-Tale Signs
The Federal Trade Commission outlines some ways your child’s identity may have been stolen. First, if your child is rejected for benefits because an account was already opened elsewhere, that’s a huge clue. Another example is if the IRS sends a notice claiming your child should have paid income taxes but didn’t, or you discover your child’s Social Security number appeared on another tax form — these are both red flags to pay attention to.

Additionally, if debt collectors begin calling regarding unpaid products and services that your child never purchased or used, this could be identity theft.

Don’t Feel Paralyzed; Get Proactive
Monitor your child’s phone or your own phone to ensure apps are locked down with parental controls, so only certain apps can be opened. It’s also important to have a conversation with your child about being prudent when sharing photos, videos, or any sensitive data with friends. Having an open, honest dialogue means your children are more likely to admit sharing the wrong information or experiencing oddities when using apps.

O post How to Protect Your Child From Identity Theft apareceu primeiro em PSafe Blog.

One way to protect yourself from online phishing attacks is to download dfndr security. Providing a host of solutions, dfndr security monitor’s your Android phone for any signs of malware. An advanced anti-hacking feature, when activated, can notify you of suspicious links before you even click on them.

The latest phishing scams have been utilizing a more malevolent form of deception known as spear phishing. While a standard phishing attack is aimed at many individuals at once, a spear phishing attack is directed at a single individual. Scammers first collect information by digging into your personal and professional life so when they launch an attack, it seems realistic and trustworthy.

Read More: Don’t Get Poked by Spear Phishing Attacks: Learn Hacking Methods

Many times you can rule out standard phishing emails through mere observations like receiving an email from the incorrect email address or noticing the greeting doesn’t address you by name. However, due to sophisticated spear-phishing techniques, using only observation may fail you.

This newest scam begins with hackers targeting employees working within credit mortgage lending institutions and real estate agencies. A phishing email is sent in an attempt to trick the employee into providing sensitive information such as an email login password. Once the hacker gains access to specific information, they can then begin analyzing data on customers of the lending institution or real estate company.

All of this data collecting leads to their final plan: sending you an email from a legitimate address that either con you into sending a downpayment on a new home or your monthly mortgage payments to a fraudulent account. The terrible blow about this scam is once any money is wired; getting it back is highly unlikely.

When receiving emails from essential institutions, such as your bank or a broker, be careful of the information you’re choosing to share. If you get an email requesting new financial details or payment requests, check with the company directly to ensure it’s legitimate. Keep your eyes sharp and have an anti-hacking solution for your devices to help you avoid running into any trouble.

O post Hackers Target Homeowners or Potential Buyers With Mortgage Scheme apareceu primeiro em PSafe Blog.

Read More: The Facebook Malware Scanner Is Holding Users Hostage

One of the best ways to defend your smartphone from these attacks is with an antivirus software like dfndr security, which has a full virus scan feature that checks all your programs for malware. The app will check everything that’s on your device’s memory, as well as your SD card.

The recent rise of consumer ransomware is rattling for sure, which begs the question – what is the second best defense you can employ besides an antivirus software? Knowledge!

How These Attacks Happen
The main reason why hackers continue to develop sophisticated ransomware techniques is that they have a high success rate. As a consumer, you will never see them coming because they show up in the most unexpected ways, such as a pop-up, in an email or via SMS. If you open the wrong email, malware can lock your device out, forcing you to pay ‘ransom’ to gain the encryption key that reopens your device.

Research on ransomware targeted at consumers found that 38% of targeted individuals pay criminals to have their devices unlocked. 45% of consumers don’t even know what ransomware is, while 23% don’t backup files on their computer or mobile device. 48% are not worried about being hit with a ransomware attack at all, which is disturbing. The worst thing you can do is assume you won’t be a victim.

How to Avoid a Target on Your Back
Besides downloading security software for your device, there are a number of ways to protect yourself from ransomware. Make sure to keep your device up to date with the latest operating system. Without the combination of security software and an updated system, there may be security holes that a malicious email or SMS can exploit.

When surfing with your web browser, make sure Adobe Flash is turned off. Ransomware can sometimes enter your device through a Flash vulnerability. Also, stay away from questionable sites on the web because they may be littered with pop-up ads. These often contain false promises and a whole lot of malware.

Finally, make sure you backup all your files on an external hard drive or a cloud that you can use in case you get hacked. Losing all your data and being locked out of your device will sting less if your data is backed up.

O post Watch Out Consumer: You’re a Major Target for Ransomware apareceu primeiro em PSafe Blog.

Read More: Scary Spyware Apps Found on Google Play

Here’s what you should know about spyware and how you can protect yourself from it.

They Exist as Both Hardware and Software
There are numerous types of spyware available, some of which are physical devices that look like USB flash drives. Cybercriminals have been using these devices to spy by placing them in a person’s home or on their property somehow. One woman said that a stalker put a USB in her purse when she wasn’t looking, allowing the criminal to listen to her conversations and blackmail her.

Hackers have also been able to spy on victims by installing spyware on devices without their knowledge. Criminals can then look at victims through their cameras, track their keystrokes, or go through their browsing history. Another person who fell prey to spyware was taking a shower and immediately afterward received a text from a criminal asking the victim if they had a nice shower.

It’s Easy to Purchase Spyware Devices
These USB listening devices have been sold on popular e-commerce websites such as Amazon and eBay, where you can pick one up for only $25. More sophisticated devices were higher in price, commanding as much as $400. The e-commerce sites were notified these devices were being sold and took down the listings but only after their existence was reported.

Until recently, there were also apps available in mobile app stores, designed to listen in on people’s conversations. One even marketed itself as a way to track your spouse’s phone anytime and from anywhere. The chances of these popping up on another online shopping site are highly likely if the demand increases.

How to Protect Yourself
If you’re afraid of getting spyware on your device or if you think it’s already been infected, download and install anti-spyware software, which can do routine check-ups. You should also be careful when surfing the web as spyware can come from infected or malicious websites and pop-ups. Make sure your phone is on the newest operating system and apply patches to apps or software installed on your computer.

Another smart move is to check your browser settings and ensure you’re viewing websites in a protected manner. Look for clues – a trustworthy site should be using the “https://” security key, for example.

While spyware can be scary, the best way to guard your privacy is by being aware of your surroundings and your devices.

O post Spyware is Easy to Get and Scary to Be a Victim Of apareceu primeiro em PSafe Blog.

On February 15th, 1995, the FBI arrested the then infamous computer hacker, Kevin Mitnick. While Mitnick was detained for more advanced hacking schemes, he relied heavily on social engineering to obtain sensitive information from his victims. Flash forward to a fictional movie called Hackers — released in the same year — and the film’s eerie opening scene shows the protagonist posing as an executive to extract information from an unaware security guard. A chilling example of social engineering caught on celluloid.

Read More: 5 Things You Can Do to Prevent Phishing Scams at Work

Social Engineering is a tactic used before the days of computing but has rapidly evolved and become more sophisticated as the digital age emerged. Today, many individuals may be familiar with the term ‘phishing,’ an extremely prevalent form of social engineering in which a hacker impersonates a trusted person or entity, convincing someone to share valuable personal information.

You can avoid social engineering by becoming familiar with the techniques involved and understand how a hacker might attempt to manipulate you for their own purposes. Here are the six fundamental principles of social engineering laid out by Professor Robert Cialdini in his 1984 book, Influence: The Psychology of Persuasion:

1. Reciprocity – You’re more likely to perform an action for someone if it’s framed as returning a favor. Social engineers rely heavily on this emotional cue and the best defense is to carefully consider the information you’re giving out – just because you owe someone a favor, don’t give them keys to the castle.
2. Commitment – When an individual commits to an idea they are more likely to sacrifice in order to obtain a goal. For example, if you agree to work on a project with an individual and are asked to share sensitive information, your commitment to the person or project could convince you to hand over data – be aware of what you’re providing and why.
3. Social Proof – This can be summed up by the old phrase “Monkey see – monkey do.” As social creatures, we’re likely to follow what those around us are doing. If your coworkers in the office are unknowingly entering a sweepstakes scam, you’re more likely to jump in and do the same. Don’t forget to think for yourself and avoid the herd mentality – do your research!
4. Authority – Perceived authority is one of the major influences for social engineers to prey upon. The adherence to authority is commonly used in phishing scams. A hacker sends a phony email that appears to come from an authoritative entity like your human resources department, which can cause you to react and provide the requested information right away. However, the fake request can be more direct such as a ‘supervisor’ asking you for a password. When confronted with these types of emails, make sure to understand your company’s security policies. In many cases, passwords shouldn’t be handed to anyone, no matter the person’s level of authority.
5. Scarcity – If the desired object is scarce, you’re more likely to jump for it. These feelings point to historical research when early humans had to forage for supplies and food, often competing for minimal resources. Don’t allow ‘limited time offers’ or ‘act now’ keywords influence you. Think before entering any personal information.

A final tip here is to always take a step back and not allow factors such as authority and commitment warp your judgment. Social engineering is a terrifying practice. Hackers aren’t just attempting to break into our computers, but also manipulate our minds – the most private space of all. Understanding how social engineering techniques work is a head start in keeping yourself protected.

O post Social Engineering Isn’t About Making Friends, But Exploiting Your Trust apareceu primeiro em PSafe Blog.

Read More: Snapchat Users Subjected to Malicious Phishing Attack

The best way to fully protect your iOS device from being hit with a phishing attack is by using dfndr vpn, which blocks phishing attempts as you navigate the web, while also ‘hiding’ your IP address from hackers, so all your online activities remain private and secure.

Learn more about the holes in the iOS privacy icon and what you can do about it.

Data Collection
The latest iOS software update introduced a privacy icon, which helps you identify when Apple asks for more personal information. However, the update does not change the amount of data that Apple collects. Instead, the icon shows you what data will be collected when using an Apple app or feature for the first time. This new privacy feature is mostly useful for understanding how your app experience will be personalized through data collection.

However, phishing attacks may still be successful even after you update security features because your iCloud password could still be a target of hackers. Because your iPhone or iPad often asks you to confirm your username and password without indicating why, this vulnerability gives hackers the opportunity to inject malicious code and attain your information.

Protecting Yourself
If a legit looking pop-up appears on your iPhone asking for sign-in information, verify this prompt by clicking on the ‘home’ button. If doing so removes the pop-up, then it was a phishing scam because a true pop-up does not disappear after hitting the ‘home’ button.

You should also never enter your credentials through an app. Instead, exit the app and go to your iTunes account through Settings. Logins stay active for several minutes by default, so you should be able to open the app without authenticating yourself once you go through iTunes. That’s your clue if it’s legitimate or not.

O post The iOS Privacy Icon Will Not Stop Phishing Attacks apareceu primeiro em PSafe Blog.

Double Check That ‘Familiar’ Email Address
Just because you see an email from your friend ‘John Smith’, don’t assume this means it came from him. When a hacker sends fake emails, they opt to obscure the sent address with a name that might be familiar. To see the true address, simply tap the name in the ‘From’ field of your smartphone. On a computer, hover over or click the same information with your mouse. You should now be able to see the originating email address and determine if it’s genuine.

Read More: Why Are People Falling for Phishing Scams?

It’s Unlikely That Your Bank Forgot Your Name
Typically, when receiving an email from a secure source, such as a government entity or your financial institution, they will always address you by first and last name. If you receive a generic, unpersonalized email from your bank, there’s a good chance that something fishy is at play. To orchestrate mass phishing scams, hackers will commonly greet you with a readily applicable ‘Dear Sir or Madam.’

Gift Cards Aren’t Legitimate Payment Methods
A recent scam that’s been exploding across the web is the ‘IRS prepaid cards scam.’ A hacker will pose as an IRS agent demanding that you pay your outstanding taxes by purchasing an iTunes card or other gift cards from major retailers. No legitimate institution will request payment of debt with a gift card. Worse, if you fall for this scam, there is little credit card companies can do to protect because you fully authorized the purchase of such cards. If you spot an email asking for gift cards as payment, be sure to delete it right away.

You Probably Don’t Need to ‘Act Right Away!’
Another common phishing scam is when an email urges you to act immediately, causing you to make fast decisions. Reacting out of panic to these kinds of emails can quickly cloud your judgment. If you receive an email alerting you that your device has malware or you’re running out of storage, be sure to drop that ‘alert’ into the trash folder. If you’re genuinely concerned, utilize an antiphishng solution for your smartphone such as dfndr security, which has an anti-hacking feature that not only keeps your phone free from malware but also monitors possible incoming threats that arrive over SMS, email services, messaging apps, and web browsing.

Think Before Downloading an Email Attachment
Does that email you just received contain an email attachment that you weren’t expecting? Unless you were fully prepared to receive an email containing a file, don’t click it! Including malicious pieces of software with false emails are a standard way for hackers to gain access to your machine or phone. In doubt? Always have a third-party antivirus app installed on your devices remains a sensible way to double check email attachments. Remember the security mantra: Don’t know what it is? Don’t click it!

O post 5 Tips to Determine if an Email is Actually a Phishing Scam apareceu primeiro em PSafe Blog.

Read More: Hackers Are Taking Over Your SIM Card and Personal Phone Number

Being the victim of an online attack is shocking, not to mention embarrassing, but with knowledge and resources to turn to, you can gain some closure and move forward.

Types of Scams
There are 3 main ways that hackers try to trick you. One is to offer a reward such as a free vacation or gift card. The second comes in the form of a threat, demanding payment due to unpaid taxes or missed jury duty. The last method is a generic email that could appear to be from your employer, but it’s really not.

All of these fake emails are designed to extort payment or have you unknowingly click on a link filled with malicious code, which can then be used to steal your personal or financial information.

How to Avoid Getting Hacked
If an email seems suspicious, call the company the email appears to be from to ensure it’s not a scam, or type the real URL directly in your browser. If you weren’t expecting an email from a particular sender yet receive one full of links, don’t click on any of them — they could be malware designed to take over your phone. Same goes for generic emails, they are usually a bigger sign of potential danger.

Never share personal information like your full name, banking details, credit card number, or anything else to the sender of an unsolicited email.

What to Do if You’re Targeted
To address the feeling of helplessness that comes with being victimized, consider reaching out to any of these resources:

• The BBB’s Scam Tracker allows you to enter details of a scam you were the victim of. Your entry is added to a large database of known scams. This can help others in similar situations.
• Report a scam on the Department of Justice’s website in the case of an intellectual property crime (they do happen).
• If your social profile is hacked, use the Facebook Help Community to report the incident. The compromised account will be shut down as they investigate the matter.
• The FBI’s IC3 is another avenue to file a complaint of a serious hack or other online crime.
• Along with federal sources, always utilize the local authorities at the same time to help gain your device or information back.

O post What to Do if You’re the Victim of Hacking apareceu primeiro em PSafe Blog.

The hackers were able to access the system of both retailers through an online phishing attempt in which an employee likely opened a malicious email or web link. With access to sensitive information, employees are one accidental click away from causing a detrimental disaster. Here are some tips on being the best employee at your organization and keeping company secrets safe.

Follow Best Practices to Avoid Phishing
Let’s begin by tackling the misstep that led to Saks, Inc. and Lord & Taylor taking such a hard hit. Phishing attempts happen when a malicious individual attempts to gain your trust to obtain sensitive information. Two conventional methods of phishing can include having you actively respond to what you believe is a safe email or merely manipulating you into clicking on a dangerous link.

Read More: 5 Things You Can Do to Prevent Phishing Scams at Work

When receiving an email, be sure to note where the message originated from. On a computer, use your mouse to hover over the email’s ‘From’ field to view the full email address of the sender. You can accomplish the same on your smartphone by tapping on the ‘From’ field with your finger. Carefully gauge if the name of the sender matches a known email address. Hackers will try to create fake, but eerily similar email addresses of your colleagues to fool you. If the name and known email address don’t match up, there’s a chance you could be the target of a phishing attack. Be sure to contact your company’s IT department for further instructions.

Securely Lock Your Mobile Device
The amount of information we carry around on our smartphones can be surprising. In addition to your personal information, there’s a good chance that you might have a corporate email account on your device. Or perhaps, you may have direct access to critical systems. For those reasons alone, it’s vital to protect your smartphone with a password or pin code. Avoid using memorable dates, repetitive patterns or other easily guessable information when securing your device.

Increase Your Device’s Security
It can be challenging to ensure your device remains wholly secure and unaffected by malicious malware – after all, we’re only human. Your best defense is using a third-party solution to keep an eye on your device at all times. An app such as dfndr security has an anti-hacking feature, which alerts you to malicious websites before you even click on a link. Helping yourself with some personal security can aid your professional life, and hopefully, your proactive steps will win you an “employee of the year” award.

O post How to Be a Good Employee and Reduce Security Risks to Your Company apareceu primeiro em PSafe Blog.

Read More: Don’t Get Poked by Phishing Attacks: Learn Hackers Methods

This is one of many phishing schemes spreading across the country with the sole purpose of taking your money. You can avoid falling prey to these cons with dfndr security’s call blocker feature, which allows you to block spam calls or any number originating from a  caller who may be harassing you or trying to trick you.

Find out more about these scams and what you can do to keep safe.

Arrest Warrant Threats
One of the most common ways con artists try to get your money is by calling and alleging there’s a warrant out for your arrest and you’ll go to jail unless you pay for unpaid parking or speeding tickets. These scammers spoof phone calls that seem like they originate from your local police department and once they’ve hooked you, ask for your credit card number. A legitimate police department will never call to demand payment for arrest warrants since normal legal procedures involve delivering a court summons for a pending case.

Debt Collections Schemes
Another scam you might encounter is from someone claiming to be a police officer or government official notifying you of outstanding debt owed. You’ll receive a phone call demanding debt repayment and if you don’t pay, you’ll be threatened with jail time. In cases where you do owe money, this would never happen since only a third of states jail for unpaid debt, and even the ones that do must complete due process in court and win a lawsuit.

The Parents and Grandparents Scam
If you’re a parent or grandparent, you might get a call informing you that your child or grandchild has been arrested. You’ll then be asked for “bail money” or a bond amount to release the child. Try not to fall for it and remember that these are often horrible scams designed to hit you emotionally.

How to Protect Yourself
If you receive a call from a police officer that’s unexpected, confirm that it’s indeed an officer. Promise the caller you’ll phone back, then look up the number for your local police precinct and call there to confirm the information you were given is legitimate. Chances are, you were the victim of a scam and a full investigation to find the culprits might ensue.

Downloading dfndr security on your mobile device is also effective because the call blocker feature can block scammers every time they try to call with a con. It’s nice to know you have control over who calls you and why.

O post Scammers Lure in Victims by Impersonating Police Officers apareceu primeiro em PSafe Blog.