• 888-966-4827
Menu

Category Archives:
cybersecurity

Home / Blog / cybersecurity
Guilty of Fraud: The Rise of Jury Duty Scams

Guilty of Fraud: The Rise of Jury Duty Scams

It’s Sunday night after grilling out, a perfect ending to a long, relaxing weekend. You’re listening to the opening of 60 Minutes while prepping for your Monday morning calls. As if right on cue, your phone starts to ring as the leading story sparks your interest. With one eye on the tv and the other on your phone, you don’t give it a second thought to answer the call from a number with your area code.

“I’m sorry to inform you but did you know that you missed jury duty?” the caller apologetically says.

Wait, what?

“There’s a warrant out for your arrest but here’s the good news, I can make it all go away if you pay a fine … immediately.”

Really?

“This happens all the time,” they say. “But you have choices, you can pay the fine via gift card, wire transfer or through our secure website.”

They can’t do that, can they?

Unfortunately, they’re right. It is possible to be in trouble for missing jury duty. A judge can issue a fine, contempt of court charge or even a bench warrant. The penalties vary by state and county but they are always handled formally through mailed notices or in-person proceedings.

Jury duty scams are happening all the time and they’re rising in sophistication. The Federal Trade Commission reported that “some scammers are now telling you to visit a website to enter your personal information — all so they can steal it and your money. They send you to a site that looks legitimate, with an official-sounding URL and government-looking seals (all fake). It’ll ask you to enter your birthdate and Social Security number to ‘look up how much you owe.’ It might ask you to pay up to $10,000 in fines on the site, or send you to a ‘government kiosk’ (no such thing) to pay by cryptocurrency. But every bit of this is a scam.”

Here is how the scammers are getting away with it:

Scammers make it look real by using caller ID spoofing technology so the call that comes in on your cell will have your local area code so you’re more likely to pick it up. In some cases, with a particularly sleuth-y scammer, the number calling says something ominous like ‘County Courthouse’ and it’s the actual phone number of your local court … so, even if you Google it while on the phone with them, it looks legit.

Important to know:

– Your court will never call or text people demanding money for jury duty.

– If the court needs to contact you, they will use the U.S. postal service for that.

Protect yourself:

– If someone contacts you and you do not know them or were expecting a call to verify or receive personal or financial information from you, perk up, wise up and hang up immediately.

Guard Well Identity Theft Solutions exists to protect you, your family and your employees from the damages of identity theft. Please don’t hesitate to reach out if you need help or have any questions or concerns. We are available to you 24/7/365 at 888.966.4827 (GUARD) and [email protected].

 

16 Billion Logins Leaked

16 Billion Logins Leaked

This is by far the biggest leak this year. Late last month, Cybernews uncovered a massive compilation of 30 exposed datasets containing approximately 16 billion login credentials stolen via infostealer malware from individual devices with accounts with companies like Apple, Google and Facebook (along with various US government services). Yes, that was a lot to swallow. Long story short, your logins may be compromised.

This wasn’t just one massive breach though. No, no. This treasure trove is the result of years of corporate leaks, phishing scams and a particularly shady type of malware called “infostealers.” These programs hang out on your devices like digital bedbugs quietly snatching up usernames, passwords, cookies, session tokens and probably your last ounce of sanity.

Here’s how to save yourself from becoming a cautionary tale:

– Change. Your. Passwords. If you’re still using ilovecats123! or Password!, let’s take a few minutes and use a unique and strong password for every account. Write this information down and keep it locked in a safe place. I use color-coded post-its in a plastic container kept in my fire-proof safe … I know it’s not the best system but, it’s something.

– Turn on two-factor authentication. It is one of the best things you can do to protect your accounts. But, let’s be honest… it’s not without its little quirks. There is the stress of the six-digit code expiring because you had a sneezing fit, paused two seconds too long and didn’t type the code in before it vanished into the digital abyss. Blink and it’s “code expired, try again.” And then there’s the waiting game if the verification code was ONLY sent to your phone and it is lost in the couch, dead or charging in another room. Classic. It happens to the best of us.

– Use an authenticator app or better yet, try passkeys. A passkey is a newer, password-free way to sign in to websites and apps. Instead of remembering passwords or entering a code, you use your face, fingerprint or device PIN to log in securely. Passkeys are practically phishing-proof since they can’t be reused or tricked into logging in somewhere fake and they work across all of the devices you’re signed into.

– Update your software. Regularly. That “update now” pop-up is your friend. It’s patching security flaws that hackers love.

– Do not click! If an email or text asks you to log in, call them or download anything, run and don’t look back. Phishing is the number one way credentials get stolen. Block the number, report the message and delete it from all of your devices.

– Avoid public Wi-Fi like the plague unless you’re using a Virtual Private Network (VPN). Although VPNs hide your IP address (your location and identity online), they don’t make you invisible … just harder to track.

The bottom line is, if you have reused login credentials, you’re at risk. Updating your digital hygiene today is urgent and essential. Guard Well Identity Theft Solutions exists to protect you, your family and your employees from the damages of identity theft. Please don’t hesitate to reach out if you need help or have any questions or concerns. We are available to you 24/7/365 at 888.966.4827 (GUARD) and [email protected].

 

 

Scam Alert: That Apple Care Text is Not Legit

Were you one of the unlucky people who received a text at 11:39 am on Monday, June 26th that said “Apple Care: You were charged $136.77 via Apple Pay at App Store. If this wasn’t done by you, Contact Support immediately at +1(833)-770-3833 to abort.”? …..I was. Definitely not something I needed to see on a busy Monday right before lunch.

Legit or not? This is how to tell. Look at the formatting in the text closely. The phone number format was the first thing that stood out to me. The English also sounded a bit broken with ‘via App Store’ instead of ‘via the App Store.’ Also, I wondered why ‘Contact’ and ‘Support’ both be capitalized not to mention why they would need me to do anything for them.

After doing a quick copy and paste, I asked ChatGPT who quickly told me it was a scam and referenced a link from Apple. It was suggested that I block the number, report it to Apple and delete the message. If ChatGPT isn’t one of your new besties, you could just type “Apple Care Text” in the search bar and the same type of information would pop up.

If you receive a suspicious email or SMS text message that looks like it’s supposed to be from Apple, the company is requesting that you email a picture of it to [email protected]. Apple reiterated that they will not ask for personal information in an e-mail or text. If you ever have a doubt about a text from them, call the legitimate Apple support number (1-800-MY-APPLE).

Guard Well Identity Theft Solutions exists to protect you, your family and your employees from the damages of identity theft. Please don’t hesitate to reach out if you need help or have any questions or concerns. We are available to you 24/7/365 at 888.966.4827 (GUARD) and [email protected].

Your Face – The Truth About Biometric Data Theft

Your Face – The Truth About Biometric Data Theft

It all started with a smile. Byron’s new fitness app promised to tell him his new “biological age” but required a selfie to validate his account. So guess what he did? Snapped it for the app and went about his day. Although he didn’t quite agree with their age calculation later that night, he totally brushed it off and slathered on more skin care product.

A few weeks later, he saw a delivery app charge him for food several states away. Then his bank app asked him to confirm a new device. The kicker was when his pharmacy required him to update his new insurance card before picking up a prescription. He didn’t even have a prescription to pick up. “I better change my passwords,” he told his wife. That didn’t work. Stranger things kept happening. And she kept asking him about it. Annoying.

Even though he was proactive about updating his accounts, the problem was that he couldn’t change his face (well, technically he could have but extreme plastic surgery wasn’t in his five-year plan).

Hackers know you can’t just change the features that make you uniquely you. That data is one-of-a-kind and as permanent as it gets … which is why it is so powerful for authentication and totally devastating when compromised.

Remember that fun little fitness app that quietly stored his facial data? Well, their security wasn’t so great. They got hacked. Unlike that password you can’t quite remember, you can’t swap out your face or your fingerprints for new ones. So, what can you do?

– Make multi-factor authentication your new best friend. It might add an extra 15 seconds to your day, but your bank account’s balance is worth it in the long run.

– When your device tells you, “Software Update Available: Install Now?” don’t blink!

– Don’t automatically opt in. Get your readers out and check the fine print before handing over your face, fingerprints or your eyeballs to an app.

Guard Well Identity Theft Solutions exists to provide you, your family and your employees from the damages of identity theft. If you have any questions or concerns, please contact our Member Services team immediately. We are always available for you 24/7/365 at 888.966.4827 (GUARD).

Smart Home, Dumb Security? The Truth About IoT Devices

Smart Home, Dumb Security? The Truth About IoT Devices

Somewhere between switching your coffee to half-caf and trying to figure out TikTok, you may have dipped a toe or entire foot into the smart home world. Think Ring doorbell, Nest thermostat, Google Home and your smart TV for a start. Apartment or house, size doesn’t really matter. Hackers don’t discriminate against your 850 sq ft new digs or 12,000 sq ft whopping investment money pit … they just want in!

Welcome to the future. Today we can tell your house to turn on the lights, lower the thermostat, play smooth jazz and spy on your pets all without lifting a finger. Yes, these wonderful Internet of Things (IoT) devices are super convenient, but IoTs aren’t always built with strong security in mind. If a device doesn’t have good protection, it can be hacked. Some guy halfway across the globe could use your Wi-Fi to check out your emails and get details on your bank accounts. They could peek in through your security camera, listen (and talk …creepy!) through your baby monitor or just keep it mildly annoying and slow down your internet with junk traffic or turn your home into a sauna.

Maybe your teen gave you an Alexa because they were tired of you yelling, “Hey Google, turn up the volume” at your bluetooth speaker. However you got to the land of smartness, your gadgets might be clever but your security settings may be stuck in 2005. So how do we prevent the midlife crisis your Wi-Fi didn’t ask for?

– “Admin” is not a password … it’s an invitation. If your smart speaker, router or security cam is still set to the factory default, you’re officially easier to hack. Choose a password that you need to write down. And I’m not talking about ones that are easy to remember like “ILoveMyCat123.”

– Educate yourself on all aspects of smart home technology. Your smart plug doesn’t need your location and microphone access.

– Different devices on a shared network all need different passwords. Huge tip: use your guest Wi-Fi for all of your smart devices.

– Don’t buy off-brands with three reviews. Just because ElectroZing sounds like something fun out of The Jetsons, that new toaster oven can wreak havoc on your life.

– If your fridge has Wi-Fi, a touchscreen and your social security number, it might be time to re-evaluate. That almond milk that is getting low may cost you the depletion of your bank account. Just because your new condo comes with one that can connect to the internet doesn’t mean that it has to!

– Keep your devices updated. They have trust issues, too.

– If you ever see a message like “Unknown device connected to your network” … immediately take action!

Yeah, smart tech is awesome but if it’s not protected, it can cause more problems than it solves. Be smart about your smart stuff! Guard Well Identity Theft Solutions exists to provide you, your family and your employees from the damages of identity theft. If you have any questions or concerns, please contact our Member Services team immediately. We are always available for you 24/7/365 at 888.966.4827 (GUARD).

 

QR Code Scam Alert: A New Twist on Brushing

QR Code Scam Alert: A New Twist on Brushing

A new scam is making its way into mailboxes, combining brushing scams with QR code fraud. A brushing scam is a deceptive scheme where online sellers send unsolicited packages to random people to boost their rankings and post fake reviews. These packages often contain cheap items such as socks or phone cases. The goal is to make it look like a real purchase was made and reviewed, tricking online marketplaces into improving the seller’s visibility.

Scammers prey on curiousity. If you receive a mysterious gift on your front porch, naturally you’re going to want to know who sent it, right? That gift may look like a free gift, but it oddly doesn’t include any details on who sent it. What it does have is a note inside instructing you to scan a QR code to “find out who sent this gift” or to “scan here to get return instructions.”

Scanning that QR code can lead to serious risks:

– Phishing websites that steal your login credentials, credit card details or other sensitive data.

– Malware downloads that infect your phone, allowing hackers access to your device.

– Identity theft if scammers collect enough of your personal information to do massive damage.

Cybercriminals are constantly finding new ways to exploit technology. If you receive an unsolicited package with a QR code, think before you scan! Avoid interacting with it, and always verify sources before providing any personal information.

Guard Well Identity Theft Solutions exists to provide you, your family and your employees from the damages of identity theft. If you have any questions or concerns, please contact our Member Services team immediately. We are always available for you 24/7/365 at 888.966.4827 (GUARD).

2.9 Billion SSN Records on Dark Web

2.9 Billion SSN Records on Dark Web

A background check service known as National Public Data (NPD) just confirmed that their system has been breached. The company stated that “the breached data may include names, email addresses, phone numbers, social security numbers (SSNs) and mailing addresses.”

Ten days ago a large portion of the database was leaked with an enormous amount of sensitive information, including 2.9 billion social security numbers. Bleeping Computer reported that “the leaks started after a threat actor in April using the alias USDoD offered to sell for $3.5 million 2.9 billion records allegedly stolen from NPD.” The records include citizens from the United States, Canada and the United Kingdom. A hacker known as “Felice” leaked the most complete version of the data for free. Learn More

Because contact information and sensitive background information related to family members, even those who are deceased, are a part of what was leaked, there is a high probability of individuals being victims of phishing attempts. There is also a reputation aspect of the breach that could potentially cause harm to individuals, leading to embarrassment, humiliation and/or emotional distress.

What You Can Do:

– If you have received a Cyber Agent notification from us, contact us immediately at 888.966.4827 (GUARD) so we can help place proactive measures for you.

– Update your passwords for your email and financial institution accounts.

– Enable multi-factor authentication on all of your accounts that offer the service.

– Be on the look-out for phishing attempts. Do not respond to anyone calling, texting or emailing to update your banking credentials. Learn More

Guard Well Identity Theft Solutions exists to provide you, your family and your employees from the damages of identity theft. Please don’t hesitate to reach out if you need help or have any questions or concerns. We are available for you 24/7/365 at 888.966.4827 (GUARD) and [email protected].

Photo courtesy credit: Erfan Parhizi via unsplash.com