Aware Force – February Cybernews B26

In this edition: Why you’re getting so many scam emails and texts, and what to do about it.
With the help of AI, romance scammers are becoming much more dangerous.
Here’s how you can tell if an online store is safe.

Live Cyber Poll

Cybersecurity News You Can Use

Security researchers have identified 18 popular browser extensions, used for tasks such as translating pages, downloading videos, and tracking prices, that secretly run malware campaigns that track users’ online activity to sell the data to third-party brokers. Mozilla and Microsoft have pulled them from their stores, but anyone who installed them needs to uninstall them manually.

Phish of the Week: ICE Warning

Scammers are exploiting news coverage of ICE enforcement to defraud victims. This fake ICE email has all the hallmarks of a dangerous scam, and it’s targeting people when they’re most vulnerable.

Don’t click any links or download attachments, even to “verify” it’s fake.
Don’t give out any information: not your SSN, passport number, address, or financial details.
Don’t send money. No legitimate law enforcement agency accepts payment via gift cards, wire transfer, cryptocurrency, or payment apps.
Stiull worried? Look up the agency on their official .gov website and call that number directly. Ask if there’s actually a case with your name.

Update Your Passwords

Users’ passwords from these organizations have recently been found for sale on the dark web.

If you do business with any of these companies, change your account password and use two-factor authentication wherever possible.

One more thing...

“In a recent newsletter, you provided a calculator to determine how long it would take scammers to guess a password. Forget passwords — I want to know how secure a passkey (a four-digit PIN you use instead of a password) is for accessing your account.”

A passkey is different than a password. A passkey is a code you enter on your phone or computer. To tell the device it’s you. The code doesn’t get sent over the internet.

Even if someone wanted to guess the code, they’d need your device and would only get a few tries before it locks. That’s why passkeys with a PIN are much safer than most passwords.

To start using passkeys, go to an account’s security settings and choose “Use a passkey.” Then confirm with your phone or computer using a code, fingerprint, or face scan. After that, you’ll sign in by approving the login on your device instead of typing a password.

“I received an email from Experian stating that my credit usage had gone up and asking me to click to review it. How do I know if it is really from Experian?”

Treat credit alert emails like smoke alarms: verify them before you react. Skip the link in the email. Instead, open a new window on your web browser, and sign in to Experian.com directly. Or you can call them at 866-617-1894.

“Do I really need to buy Antivirus software? Are the free versions good enough? I typically use the free version of Avast, and it seems to perform well. There are other free antivirus options that also receive good ratings.”

You don’t necessarily have to buy antivirus software if you keep the software on your home computer and phone up to date. Free tools like Avast, Microsoft Defender, and others do a solid job at basic malware protection. Paid versions primarily add extras such as identity monitoring, ransomware recovery, and family controls, which some folks want.

“What’s the single most important thing you can do to keep crooks from getting your personal information?”

The most important thing you can do is to stop clicking links in emails and texts. It’s why we keep repeating it in every newsletter! Most scams succeed because they trick us into clicking something that looks urgent and giving away our passwords and credit card numbers. If you go directly to websites and apps to check instead of clicking on the link in the email or text, you shut down the biggest way crooks steal personal information.

Send us your cybersecurity question for possible use in a future newsletter.

Cyber Content Archive: Always Available

Check out our previous newsletters here.