Please don’t buy this: identity theft protection services

Identity theft protection services promise to have your back against cybercriminals looking to steal your data. But they don't actually stop them from taking your identity. Are they worth it, then? We say no. Categories: Cybercrime Privacy Tags: credit cardcredit monitoringEquifaxExperianfraudidentity theftIdentityForceIdentityWorksLifelockplease don't buy this (Read more...)

The post Please don’t buy this: identity theft protection services appeared first on Malwarebytes Labs.

The post Please don’t buy this: identity theft protection services appeared first on Security Boulevard.

from Please don’t buy this: identity theft protection services

Please don’t buy this: smart locks

The announcement of Amazon Key, a smart lock paired with a security camera that lets couriers into your home, spawned our new series called "Please don't buy this." Categories: Privacy Security world Tags: bluetoothIoTprivacysmart locks (Read more...)

The post Please don’t buy this: smart locks appeared first on Malwarebytes Labs.

The post Please don’t buy this: smart locks appeared first on Security Boulevard.

from Please don’t buy this: smart locks

Nigerian scams without the Nigerians

Many in the United States are familiar with Nigerian scams, but what kind of scams are going on in non-English countries? Take a look at the Chinese version – the seminar scam. Categories: Cybercrime Social engineering Tags: 419 scamchinaChinese scamfraudscamseminar scamspam (Read more...)

The post Nigerian scams without the Nigerians appeared first on Malwarebytes Labs.

from Nigerian scams without the Nigerians

Please stop posting your X-rays to social media

Many people post unredacted medical images to Twitter and Instagram. They shouldn't because the details included on the image often can compromise personal identity online and in rare instances, lead to a possible attack on an exposed piece of medical IT infrastructure. Categories: Cybercrime Privacy Tags: doxxinghackinghealth recordsmedical recordsMRIprivacySocial Engineeringsocial mediaX-Ray (Read more...)

The post Please stop posting your X-rays to social media appeared first on Malwarebytes Labs.

from Please stop posting your X-rays to social media

Amazon third party sellers: A new threat

On Monday, the Wall Street Journal reported a wave of hijacked Amazon seller accounts that proceeded to fleece buyers for large sums of money. As reported here, attackers would use credentials harvested from other breaches to take over the account, then either simply redirect funds to their own deposit account or create lots of fake... Categories: Cybercrime Privacy Tags: amazonfraudleakpasswordscamtwo-factor authenticationWall Street JournalWSJ (Read more...)

The post Amazon third party sellers: A new threat appeared first on Malwarebytes Labs.

from Amazon third party sellers: A new threat

The top 5 dumbest cyber threats that work anyway

The common conception of cyber attacks is kind of like bad weather: ranging from irritating to catastrophic, but always unpredictable. Hackers are simply too sophisticated to draw any reliable judgments on and we shouldn’t try. As it turns out, some hackers are fairly predictable in their successful use of really dumb attacks. Categories: Cybercrime Hacking Social engineering Tags: Business Email Compromisecyber attackcyber threatsddosmalwareransomwarescamsql (Read more...)

The post The top 5 dumbest cyber threats that work anyway appeared first on Malwarebytes Labs.

from The top 5 dumbest cyber threats that work anyway

Your ISP, browsing history, and what to do about it

In late March, Congress approved a bill lifting restrictions imposed on ISPs last year concerning what they could do with information such as customer browsing habits, app usage history, location data, and Social Security numbers. Given that the repealed restrictions hadn't yet come into effect, the immediate impact of the new bill is somewhat unclear. But given what typically happens with massive stores of aggregated, location-specific customer data, the prognosis is not good. Categories: Privacy Security world Tags: comcastData privacyencryptionInternet PrivacyISPprivacy (Read more...)

The post Your ISP, browsing history, and what to do about it appeared first on Malwarebytes Labs.

from Your ISP, browsing history, and what to do about it

Tech support scammers and their banking woes

We all know about tech support scams by this point. Unfortunately for the scammers, banks know this as well, making it quite difficult at times to maintain an account to store the criminal’s ill-gotten gains. So how does the enterprising criminal cash out with your money? Let’s take a look. Categories: Cybercrime Social engineering Tags: fraudscamtech supporttech support scamsTSS (Read more...)

The post Tech support scammers and their banking woes appeared first on Malwarebytes Labs.

from Tech support scammers and their banking woes

How do I get my employees to stop clicking on everything?

If you’ve been given responsibility for network security in a non-technical area of the business, there’s one eternal question that has been bedeviling. How do you get your employees to stop clicking on everything? Categories: 101 Business Tags: Business Email Compromisebusiness securityCISOphishingscamThreat Intelworkforce (Read more...)

from How do I get my employees to stop clicking on everything?

Scam as a Service 2: the B Team

Interest in Tor based threats is increasing to the extent that some vendors will scoop up all activity they find on Tor and provide you a nice front end to search through it at your leisure. This might lead the casual observer to assume that the darkness is a one stop shop for cyber threats, but criminals existed on the internet prior to Tor, and still do quite well for themselves without it. In fact, bad guys with good OPSEC tend to be the exception, rather than the rule. So let’s take a quick look at some unpleasant stuff and the nadir of bad OPSEC, Facebook. Categories: Cybercrime Privacy Social engineering Tags: darknetfacebookscamsocial mediatech supporttech support scam (Read more...)

from Scam as a Service 2: the B Team

Tech support scams, stolen data, and botnets

We’ve found a scam in a box company that also offers intelligence leads. That is, they’ll sell you the scam and point you at the most vulnerable targets first. Categories: Criminals Threat analysis Tags: botnetBPO Experts GlobalBPOreseroucesDellscams as a servicetech supporttech support scamTSSwinlogon (Read more...)

from Tech support scams, stolen data, and botnets