This Phishing Attack is Almost Impossible to Detect On Chrome, Firefox and Opera

A Chinese infosec researcher has discovered a new “almost impossible to detect” phishing attack that can be used to trick even the most careful users on the Internet.

He warned, Hackers can use a known vulnerability in the Chrome, Firefox and Opera web browsers to display their fake domain names as the websites of legitimate services, like Apple, Google, or Amazon to steal login or financial credentials and other sensitive information from users.

Read more

More and more people are using VPN services to protect their privacy online — here’s how they work

Internet privacy was once again thrust into the limelight recently when President Donald Trump signed a bill that would allow internet service providers to sell your browsing history to third parties like advertisers.

As much as the news rekindled concerns around internet privacy, little has actually changed. The signed bill is generally keeping things as they are. The outrage comes from the fact that the bill is rolling back an Obama-era measure to prevent ISPs from tracking and selling your browsing history, which didn’t have time to take effect before he left office.

Read more

How to stop those annoying, endless robocalls to your smartphone

Have you noticed an uptick in those super annoying robocalls, telemarketers, and scams hitting up your smartphone all hours of the day and night? I have, and it’s driving me nuts.

Last month, I had a bogus call to lower my electricity bill. A few weeks ago, it was a pause after I said hello, then a woman saying, “Oh, I’m sorry, I’m adjusting my headset,” before launching into a sales pitch of some sort. And then there’s the daily deluge of numbers that look legit — like my daughter’s school calling, or a media outlet from Manhattan — only to end up being an obvious scam. “This is George Michael,” says a male caller with a heavy accent, “calling from your online pharmacy with your diet medication.” Talk about adding insult to injury.

Robocall rage

According to the Federal Communications Commission, there are nearly 2.4 billion robocalls made every month. That’s more than 7 calls per person, according to new research from the YouMail Robocall Index.

At best, the calls are frustrating. At worst, they’re robbing us blind. So what can we do about it once and for all?

#1 Google your own smartphone number

Let’s start with a little self-education. How the heck are these criminal-callers getting our cell numbers in the first place? If you don’t post it publicly across social media, use it on shady shopping sites, or shout it out to every telemarketer who calls — how is it getting out there? The Better Business Bureau recommends Googling your own number. Do it. I’ll wait.

Was it there? Mine was. It might not be alongside your name, but chances are it’s there, collected by a “people search” company like Nuwber that aggregates information from “White Pages listings, Public Records and Social Network Information.” Thanks to modern technology, these lists are now easy for cyber scammers to scrape.  And that’s how the the robo-games begin.

#2 Add your number to the Do No Call list

If you haven’t already, add your cell number to the National Do Not Call list. I just went there to verify that I’m on the list and sure enough, I’ve been registered since February 2006. So much for that. Obviously, it doesn’t fix the issue all the way around, but it does help keep legitimate companies from cold-calling you. Sadly for us, the bad-guys have easy workarounds (like #1).

If you’re already on the Do Not Call Registry and still get hit up, report the calls to the FTC, which compiles the reports and hands out the fines. You can also block them right from your smartphone and block any spammy texts too.

#3 Blocking calls and texts

On iPhones, tap the green phone icon on your home screen, select the “Recents” tab on the bottom of the screen, then tap the blue “i” information icon next to the phone number you want to block. A screen pops up with a bunch of options and at the very bottom you’ll find “Block This Caller.” Tap it and then when the verification screen appears, confirm your decision.

On most Androids, there are two easy ways to block numbers. If you’re on the standard version of Android 6.0 you can go into your call log and long-press on the number you want to block, then select “Block number” from the pop-up menu.

If you’re using a version of Android other than the stock version (or if you don’t know which version you’re actually using) you can select “Settings” and then “Call blocking,” then tap “Add number” and type in the number you want to block.

#4 Bring in the big guns

There are a handful of apps that promise enough anti-spam ammo to stop annoying calls for good. They all require a bit of set-up, but the toughest part of that so far for me has just been remembering my AT&T password. (You’ll need the provider password for some of them.)

Nomorobo – (iOS)

This is my best of these apps I’ve reviewed to date — so it’s no surprise that it won a competition by the FTC. After you download the app onto your device, you can sign up for a free trial for 30-days, or commit right away to either $1.99 per month or $19.99 per year. (If you don’t remember to cancel your sign-up, you’ll be auto-billed.)

After you install the app, it prompts go into your iPhone’s settings, select “Phone” then tap “Call Blocking & Identification” and tap Nomorobo to enable it. Back in the Nomorobo app, it asks you to enter your phone number for verification (to make sure you’re not a robocaller yourself). After that — you’re done.

You can send yourself a test robocall to see exactly how it all works. When a sketchy telemarketer hits up your phone number, your call screen shows a big red dot and a note that says “Robocaller” so you know to avoid it. There’s even an option in the app to block these calls automatically, before they even reach your smartphone screen.

Nomorobo swears it doesn’t block legitimate calls from pharmacies, schools, or other important institutions — because it “analyzes millions of calls made to hundreds of thousands of phone lines every single day.” While it doesn’t want to say much more about its secret sauce than that, I’m using it and it seems to be working well.

Truecaller – This paid app (iPhone, Android, Windows Phone) reports that it’s collected more than 3-billion phone numbers and relies on information from users to filter out the scams. When the app identifies a specific phone number as robocall or scam, it lets you know with an alert on the call screen. The website says it gets its information from a central database that is constantly being updated with new phone numbers.

Set up is similar to NoMoRobo. Download the app, follow the prompts. I like that you get link it to Facebook to auto-fill and there’s an animated screen that shows you the entire set-up process. It doesn’t get much easier than that.

There are several pricing options, but you end up paying about $1.50 per month for the full suite of features. Because Truecaller queries a central database for information on each number, the app requires a data connection to identify new callers, so keep that in mind if you often find yourself in places without 3G or 4G available.

Enough is enough!

I posted a message on this topic in my Facebook feed, and dozens of people chimed in. Other people have good things to say about similar apps such as PrivacyStar, Mr. Number, Hiya, and YouMail. We’ll try those and deliver an updated anti-spam round-up with the next few weeks.

Have you found a clever way to outsmart robocalls? Be sure to let us know in the comments section below.
usa today

Hacking Group Claims N.S.A. Infiltrated Mideast Banking System

For the past few months, an elite hacking group calling itself the Shadow Brokers has sporadically leaked sensitive data from the National Security Agency. On Friday, just when its leaks had appeared to slow, the group released what appears to be its most damaging leak so far: a trove of highly classified hacking tools used to break into various Microsoft systems, along with what it said was evidence that the N.S.A. had infiltrated the backbone of the Middle East’s banking infrastructure.

The timing of the leaks coincides with the United States’ recent shift in policy in Syria, which has escalated the conflict with the Syrian government’s main backer, Russia. The Shadow Brokers wrote in broken English in an online post, which cited the American missile attack on a Syrian air base among other reasons for the leak, that after a hiatus, it had returned to leaking because it was upset that President Trump was abandoning “the peoples who getting you elected.”

Read more

Hackers can steal your password by looking at how you tilt your phone

According to a team of cybersecurity experts at Newcastle University, the way you tilt your phone could be used by hackers to break into your device.

When it comes to security and the protection of privacy, people often worry about connecting to public Wi-Fi networks, tricking face recognition technology, or bypassing fingerprint sensors. What usually gets left out of the discussion is the multitude of basic motion and orientation sensors that can be found inside most smartphones and tablets today. Well, according to cyber-experts at Newcastle University, we should be paying more attention to these sensors that we take for granted every day.

According to the paper published by the team, they were able to crack four-digit pins with 70 percent accuracy on the first guess and 100 percent accuracy by the fifth guess.

Read more

Global Surveilance: North Korea Hackers Target Nigerian Banks

A new report from a Russian online cyber security firm, Kaspersky, has observed that North Korean hackers are attacking banks in 18 countries, including Nigeria.

The organisation noted in its report that this could be regarded as the biggest bank heists in world history.

Banks and security researchers have previously identified four similar cyber-heists attempted on financial institutions in Bangladesh, Ecuador, the Philippines and Vietnam.

Read more

Researchers found it is scarily easy to crack Android users’ lock screen patterns

If you use a lock screen pattern to protect your Android phone, it’s a lot less secure than you might think.

That’s the message from researchers at the University of Lancaster, who have put out a paper explaining how they were able to reconstruct people’s lock screen patterns with a high degree of accuracy by using discretely captured footage. (You can check out the full study below.) Read more