❌

Visualização normal

Antes de ontemCybersecurity News

A gift to scammers: why you should probably keep your birthday a secret

Using a fake DOB or leaving the field blank when making an online account can offer protection from identity theft

You get a call from your bank saying there has been suspicious activity on your account. They read out your name, address and date of birth so you are happy it is a legitimate caller.

But you are talking to criminals who have used your date of birth as part of a web of verifying information to convince you they are someone else.

Continue reading...

© Photograph: kmt_rf/Alamy

© Photograph: kmt_rf/Alamy

© Photograph: kmt_rf/Alamy

  • ✇Data and computer security | The Guardian
  • Cookie theft: how fraudsters get the digital key to your accounts Hilary Osborne
    ‘Session cookies’ are a primary target for hackers letting them hijack and use your accountsYou’ve had a busy morning of life admin, logging into various accounts to check balances and make payments. At the end of a productive few hours you close your laptop and move on to your next job.What you don’t know is that fraudsters have hijacked your session with the bank and are now able to access your account. You are the victim of cookie theft, which belongs to a type of fraud known as “session hija
     

Cookie theft: how fraudsters get the digital key to your accounts

‘Session cookies’ are a primary target for hackers letting them hijack and use your accounts

You’ve had a busy morning of life admin, logging into various accounts to check balances and make payments. At the end of a productive few hours you close your laptop and move on to your next job.

What you don’t know is that fraudsters have hijacked your session with the bank and are now able to access your account. You are the victim of cookie theft, which belongs to a type of fraud known as “session hijacking”.

Continue reading...

© Photograph: Rawf8/Alamy

© Photograph: Rawf8/Alamy

© Photograph: Rawf8/Alamy

  • ✇Firewall Daily – The Cyber Express
  • Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam Samiksha Jain
    The Federal Trade Commission (FTC) has filed a complaint against GovAssist LLC, Entry LLC and Scott Zuckerman over an alleged government impersonation scheme targeting consumers seeking U.S. passport and travel-related services. The case highlights how paid search advertising, misleading service promises and allegedly fake customer reviews can be used to make commercial websites appear connected to official government services. According to the FTC, the defendants allegedly used websites and sp
     

Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam

23 de Outubro de 2026, 07:27

Government impersonation scheme

The Federal Trade Commission (FTC) has filed a complaint against GovAssist LLC, Entry LLC and Scott Zuckerman over an alleged government impersonation scheme targeting consumers seeking U.S. passport and travel-related services. The case highlights how paid search advertising, misleading service promises and allegedly fake customer reviews can be used to make commercial websites appear connected to official government services.

According to the FTC, the defendants allegedly used websites and sponsored search results to attract travelers, collect personal and financial information, and mislead consumers about the services they would receive. The complaint was filed in the U.S. District Court for the District of Puerto Rico.

How the Government Impersonation Scheme Allegedly Worked?

The FTC alleges that, since at least October 2023, GovAssist, Entry and Zuckerman operated websites including GovAssist.com, Entry.com and IVS.us, offering passport applications, passport-related services, visa applications and visa renewals.

The complaint states that the websites presented themselves as affiliated with the U.S. State Department, although the defendants were neither the federal government nor authorized government-affiliated providers of passport-related services.

The alleged operation relied on paid search ads to reach people looking for official passport information. Searches such as “apply for a new passport,” “passport renewal,” and “passport renewal online” routinely returned IVS.us and Entry.com pages among Google’s top sponsored results, according to the FTC.

This approach allegedly placed commercial services in locations where users might expect to find official government resources. The distinction matters because consumers searching for essential documents may not recognize that a sponsored result belongs to a private company rather than a government agency.

Misleading Passport Service Claims and Hidden Costs

The FTC alleges that the defendants made false promises about what their services could deliver, including claims that they could directly issue U.S. passports. In many cases, consumers allegedly received only a completed passport application that was available for free through the State Department’s website.

The complaint also challenges the companies’ pricing disclosures. Although their advertisements or websites reportedly stated that services started at $89, the FTC alleges that the lowest available price was $119, plus a $29 shipping fee, bringing the total to $148.

Consumers also needed to pay the State Department when submitting their passport applications. According to the complaint, the defendants prominently displayed their own prices while omitting or downplaying the additional government fee, potentially leaving customers unaware that they would have to pay again.

Delivery claims are another part of the case. The FTC alleges that the defendants advertised expedited passport services promising delivery in as little as six to 10 business days or three to four business days. The agency contends these promises were false because the timelines were faster than the quickest expedited service available through the State Department, the only source of U.S. passports.

Fake Reviews and Consumer Trust

The complaint further alleges that the defendants used fake positive reviews to make their services appear legitimate. Their websites reportedly highlighted excellent ratings based on consumer feedback published on Trustpilot and other review platforms.

According to the FTC, those ratings relied on high numbers of fake positive reviews. If established, the allegations would show how misleading reviews can reinforce the credibility created by sponsored search placements, making it harder for consumers to distinguish legitimate services from deceptive offerings.

The alleged combination of deceptive ads and fake reviews is central to the case because consumers may rely on both search rankings and customer feedback when deciding which service to trust.

FTC Alleges Violations of Three Federal Laws

The FTC alleges that the defendants violated the FTC Act, the Impersonation Rule and the Gramm-Leach-Bliley Act. The complaint targets the alleged impersonation of government services, misleading representations about passport processing and pricing, and the use of false consumer reviews.

Zuckerman, identified as the owner and sole member of GovAssist and Entry, allegedly operated the scheme while subject to an FTC order in an earlier, unrelated case involving Support King LLC. That case concerned stalkerware and resulted in a final administrative order addressing data privacy.

The FTC said its staff received assistance from the U.S. Postal Inspection Service, the U.S. Attorney’s Office for the District of Puerto Rico and the U.S. Department of State. The Commission authorized the complaint in a 2-0 vote.

What the Case Reveals About Online Consumer Fraud

The allegations illustrate how consumer fraud can exploit the gap between what users expect from an online search and what a website actually provides. A sponsored result may appear prominently, but its placement does not establish that the service is government-operated or officially authorized.

The case also highlights the role of pricing transparency and review authenticity in online trust. Claims about faster processing, low starting prices, and positive customer experiences can influence purchasing decisions, particularly when consumers need time-sensitive travel documents.

The FTC has emphasized that filing a complaint does not establish that the defendants violated the law. The case will be decided by the court.

For consumers, the allegations underscore the importance of distinguishing official government services from third-party providers and checking fees, processing claims, and reviewing credibility before sharing personal or financial information. The FTC also states that it will never demand money, threaten consumers, instruct them to transfer money, or promise them a prize.

Cloudflare
Verify you are human

loading

Checking your browser before accessing this site.
Click to verify →
Then you will be redirected to the requested content.
Ray ID: 8f3a2c1b9d4e5f6a · Performance & security by Cloudflare

site-verification-ok

Cloudflare
Verify you are human
loading
Checking your browser before accessing this site.
Click to verify →
Then you will be redirected to the requested content.
Ray ID: 8f3a2c1b9d4e5f6a · Performance & security by Cloudflare

site-verification-ok

  • ✇Cybersecurity News
  • EU Opens Booking.com DSA Investigation Over Fake Listings and Phishing Scams Do Son
    The EU's Booking.com DSA investigation targets fake listings, Booking.com phishing scams and hidden ads. Fines could hit 6% of global turnover. Related Posts: Claude Duet AI Agent Takes On OpenAI Dots and Muse Gemini in Apple CarPlay Arrives on Google Maps Chrome ClickFix Protection Scans Risky Clipboard Commands The post EU Opens Booking.com DSA Investigation Over Fake Listings and Phishing Scams appeared first on Daily CyberSecurity.
     
  • ✇Cybersecurity News
  • Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests Do Son
    A scam crackdown on West Africa scam centers by Meta, tech firms and police removed 3.7M accounts, led to 28 arrests and freed 117 victims. Related Posts: DOJ Charges Engineer After OpenAI Recording Device Arrest DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies Ivanti Connect Secure Zero-Day Chain CVE-2026-104935 Exploited by UTA0576 to Gain Root Access The post Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests appeared firs
     
  • ✇Data and computer security | The Guardian
  • ‘You have a meeting’: the calendar phishing scam growing exponentially Hilary Osborne
    Appointment or renewal reminder appears in victims’ calendar to lure them into logging in to fake Google, Microsoft or PayPal pageYou’re preparing for the week ahead and take a look at your Google calendar. There’s an entry for a meeting that you must have completely forgotten. The note that pops up when you click on it says you’ll be reviewing a project and includes a link to more details. Confused, you follow it to find out more; the website you land on asks for logon details, and you provide
     

‘You have a meeting’: the calendar phishing scam growing exponentially

Appointment or renewal reminder appears in victims’ calendar to lure them into logging in to fake Google, Microsoft or PayPal page

You’re preparing for the week ahead and take a look at your Google calendar. There’s an entry for a meeting that you must have completely forgotten. The note that pops up when you click on it says you’ll be reviewing a project and includes a link to more details. Confused, you follow it to find out more; the website you land on asks for logon details, and you provide them.

Unfortunately, this was not a failure of your memory but a calendar phishing scam. You have handed your name and password to fraudsters who will sell it on in a batch with other people’s details, use it to break into your work email, or to persuade you that they are contacting you from your bank, or another institution.

Continue reading...

© Photograph: grinvalds/Getty Images

© Photograph: grinvalds/Getty Images

© Photograph: grinvalds/Getty Images

Asos warns customer data may be compromised after ‘unauthorised’ app access

Shares in fashion company fall nearly 10% after its app systems are accessed by ‘unidentified third party’

Asos is investigating unauthorised access to its app system after shoppers received a notification claiming hackers had “fully compromised” its data.

The online fashion retailer said basic personal information including name and contact details might have been accessed by an unidentified third party but it did not believe payment card records or passwords had been compromised.

Continue reading...

© Photograph: Rafael Henrique/Sopa Images/Shutterstock

© Photograph: Rafael Henrique/Sopa Images/Shutterstock

© Photograph: Rafael Henrique/Sopa Images/Shutterstock

  • ✇Cybersecurity News
  • Nigeria-Based Fraudsters Hijack .edu Accounts to Run University Job Scams Do Son
    University job scams are spreading through .edu account takeover. Proofpoint shows how fraudsters phish logins, then send fake jobs and bogus checks. Related Posts: Russia's Star Blizzard Scales Up Phishing With RedFlick to Deliver CosmicPulse Backdoor SVG Phishing Attacks Return in August as Symantec Logs 222,000 Detections Microsoft Links JADEPUFFER Azure Attack to Agentic Ransomware Actor Storm-3168 The post Nigeria-Based Fraudsters Hijack .edu Accounts to Run University Job Scams appeared
     
  • ✇Firewall Daily – The Cyber Express
  • US House Passes Bill to Help Police Track Down Scammers Targeting Seniors Samiksha Jain
    The U.S. House of Representatives has passed the bipartisan GUARD Act, legislation aimed at strengthening law enforcement efforts against elder financial fraud, cryptocurrency investment scams and other financial crimes targeting older Americans. The bill, H.R. 2978, passed on September 15, 2026, and now heads to the Senate. The GUARD Act, or Guarding Unprotected Aging Retirees from Deception Act, was co-led by Representatives Josh Gottheimer, Zachary Nunn and Scott Fitzgerald. The legislation
     

US House Passes Bill to Help Police Track Down Scammers Targeting Seniors

17 de Setembro de 2026, 04:40

GUARD Act

The U.S. House of Representatives has passed the bipartisan GUARD Act, legislation aimed at strengthening law enforcement efforts against elder financial fraud, cryptocurrency investment scams and other financial crimes targeting older Americans. The bill, H.R. 2978, passed on September 15, 2026, and now heads to the Senate.

The GUARD Act, or Guarding Unprotected Aging Retirees from Deception Act, was co-led by Representatives Josh Gottheimer, Zachary Nunn and Scott Fitzgerald. The legislation would provide state, local and Tribal law enforcement agencies with additional resources to investigate fraud, track stolen funds and pursue criminals involved in increasingly complex financial schemes.

GUARD Act Targets Elder Financial Fraud and Crypto Scams

Under the GUARD Act, law enforcement agencies could use existing federal grant funding to investigate elder financial fraud, general financial fraud and pig butchering crypto scams.

The funding could support the hiring of analysts and other experts, as well as specialized training for investigators handling complex and often transnational financial crimes.

The bill would also clarify that federal law enforcement agencies can assist state, local and Tribal law enforcement partners and fusion centers with blockchain tracing tools and related technology. The goal is to help investigators follow the movement of funds and identify individuals involved in cryptocurrency-related scams.

The legislation also directs the Treasury Department, FinCEN and federal partners to report to Congress on the scale of financial scams in the United States. The report would examine how much Americans lose each year, how many scams are linked to overseas actors and organized crime, and the effectiveness of existing enforcement efforts.

‘Pig Butchering’ Scams Under Focus

The legislation specifically addresses pig butchering crypto scams, a form of financial fraud in which criminals build trust with victims before persuading them to put money into fraudulent investment opportunities.

The term refers to the process of building up a victim's confidence and encouraging larger investments before the criminals steal the funds.

According to the information provided with the legislation, the FBI's 2025 Internet Crime Complaint Center report recorded $20.9 billion in total internet crime losses in 2025, a 26% increase from 2024. Cryptocurrency-related losses reached $11.37 billion across 181,565 complaints, while investment fraud accounted for more than $8.6 billion in losses.

Bill Moves to Senate

Gottheimer said the legislation would give investigators tools and resources to pursue fraudsters, recover stolen money and address criminal networks operating from overseas.

Nunn said the bill followed concerns raised by an Iowa sheriff's deputy about local officers lacking the tools needed to track criminals and recover victims' money.

The GUARD Act has received support from organizations including AARP, the Iowa State Police Association, the Financial Technology Association, Consumer Bankers Association, America’s Credit Union Association, Digital Chamber, National Police Association, Crypto Council for Innovation and Iowa Bankers Association.

With House passage complete, the legislation now moves to the Senate for consideration.

WhatsApp Just Added 3 New Ways to Protect Your Account

26 de Agosto de 2026, 10:44

WhatsApp is adding stronger two-step verification, multiple passkeys and more context for unknown callers as it expands protections against scams.

The post WhatsApp Just Added 3 New Ways to Protect Your Account appeared first on TechRepublic.

Singapore Is Literally Training People to Get Scammed

14 de Agosto de 2026, 15:50

Singapore is using simulated AI-enabled scam calls to train the public, offering IT leaders a new model for social engineering security training.

The post Singapore Is Literally Training People to Get Scammed appeared first on TechRepublic.

❌
❌