In this intriguing discussion, cybersecurity expert Dave Bittner, tech-savvy Maria Varmazis, and information security pro Joe Carrigan tackle a myriad of alarming scams. They share a chilling tale about the risks of shoulder surfing with new debit cards, and a listener's warning against accepting checks from strangers. The trio dives into phishing campaigns targeting iPhone users and crafty e-commerce scams preying on Walmart shoppers. Expect a blend of cautionary tales and laughter as they navigate the digital minefield of scams.
Attention to detail is crucial in preventing identity theft, as exemplified by concerns over personal information visibility on debit cards.
Scammers are increasingly exploiting e-commerce platforms by creating fraudulent ads targeting public wish lists, emphasizing the need for consumer vigilance.
Deep dives
Cybersecurity Awareness Resources
A comprehensive resource kit is available to help IT professionals prepare for Cybersecurity Awareness Month in October. This kit includes engaging content to make cybersecurity awareness more exciting and effective, featuring a streaming-quality show titled 'The Inside Man'. Organizations can utilize these resources to enhance their cybersecurity awareness campaigns and effectively train employees to become proactive in defending against cyber threats. The goal is to foster a culture of security and empower employees with the knowledge needed to recognize and respond to potential threats.
Concerns Over Debit Card Information
A listener shared concerns about debit card design, specifically regarding the visibility of personal information displayed on a single side of the card. This raises issues about potential identity theft and fraud if someone were to obtain a picture of the card during a transaction. The hosts discussed the importance of card security, noting that while such designs might enable easier access to information, most individuals would likely inspect both sides of a card before using it. Ultimately, it's concluded that awareness and caution can help mitigate these risks.
Phishing Campaign Targeting iPhone Users
A phishing campaign recently emerged, specifically targeting iPhone users through emails that appear to come from Apple. These emails claim that iCloud storage is running out and prompt users to log in via a malicious link. The attackers are employing familiar tactics, including fake graphics showing storage levels, to deceive users into providing personal and financial information. The warning emphasizes the importance of verifying such notifications independently rather than clicking on links provided in emails.
Scams Utilizing Public Wish Lists
Scammers are exploiting publicly accessible wish lists on e-commerce sites, such as Walmart, to launch fraudulent customer service schemes. They create malicious ads on Google, leading users to these wish lists that contain false customer service numbers disguised as legitimate. Unsuspecting individuals may unwittingly call these numbers, triggering a scam script that leads to various intimidation tactics aimed at extracting money. This clever manipulation underscores the need for vigilance in identifying authentic customer service channels to avoid falling victim to such scams.
It's all in the details, folks. Pay attention to those and you can avoid unnecessary stress. Dave Bittner, Maria Varmazis, and Joe Carrigan swap stories on email password-stealing attacks, Google ads scams, and fake banks this week. The team shares follow up from listener Steven from the UK about the hazards of shoulder surfing when they received their new debit card with all PII on the same side of the card. A friend of the show JJ shared a story and a warning about fake checks. Never accept a check from a stranger.
Dave's story covers Action Fraud, the UK’s national fraud and cyber reporting center, warning iPhone users of a new Apple ID phishing campaign. Maria talks about new research that uncovers a new scam that takes advantage of public wishlists on ecommerce websites, which in this case is Walmart, but is similar to those found on Amazon and other sites. Joe's story is about a firm in Singapore with an email from a supplier requesting that a pending payment be sent to a new bank account based in East Timor.
Our Catch of the Day is from Reddit on the /scambait subreddit "THE Dolly Parton is going to let ME in her VIP club."