Serious Security: Browser-in-the-browser attacks – watch out for windows that aren’t!

By Paul Ducklin — September 13^th 2022 at 20:52

Simple but super-sneaky - use a picture of a browser, and convince people it's real...

pipe-light-not-1200

Naked Security

Facebook 2FA scammers return – this time in just 21 minutes

By Paul Ducklin — July 13^th 2022 at 16:46

Last time they arrived 28 minutes after lighting up their fake domain... this time it was just 21 minutes

Naked Security

Facebook 2FA phish arrives just 28 minutes after scam domain created

By Paul Ducklin — July 1^st 2022 at 20:01

The crooks hit us up with this phishing email less than half an hour after they activated their new scam domain.

Naked Security

“Missing Cryptoqueen” hits the FBI’s Ten Most Wanted list

By Paul Ducklin — July 1^st 2022 at 16:49

The "Missing Cryptoqueen" makes the American Top Ten... but not in a good way.

Naked Security

S3 Ep89: Sextortion, blockchain blunder, and an OpenSSL bugfix [Podcast + Transcript]

By Paul Ducklin — June 30^th 2022 at 12:57

Latest episode - listen and read now! Use our advice to advise your own friends and family... let's all do our bit to stand up to scammers!

Naked Security

FTC warns of LGBTQ+ extortion scams – be aware before you share!

By Paul Ducklin — June 27^th 2022 at 14:58

It's a simple jingle and it's solid advice: "If in doubt, don't give it out!"

Naked Security

S3 Ep88: Phone scammers, hacking bust, and data breach fines [Podcast + Transcript]

By Paul Ducklin — June 23^rd 2022 at 11:08

Latest epsiode - listen (or read) now!

Naked Security

Interpol busts 2000 suspects in phone scamming takedown

By Paul Ducklin — June 20^th 2022 at 18:10

Friends don't let friends get scammed. Not everyone knows how typical scams unfold, so here are some real-world examples...

Naked Security

Beware the Smish! Home delivery scams with a professional feel…

By Paul Ducklin — May 30^th 2022 at 17:59

Home delivery scams are getting leaner, and meaner, and more likely to "look about right". Here's an example to show you what we mean...

Naked Security

Phishing goes KISS: Don’t let plain and simple messages catch you out!

By Paul Ducklin — April 25^th 2022 at 16:58

Sometimes we receive phishing tricks that we grudgingly have to admit are better than average, just because they're uncomplicated.

Naked Security

Beware bogus Betas – cryptocoin scammers abuse Apple’s TestFlight system

By Paul Ducklin — March 16^th 2022 at 15:49

"Install this moneymaking app" - this one is so special that it isn't available on Google Play or the App Store!

Naked Security

Cryptocoin ATMs ruled illegal – “Shut down at once”, says regulator

By Paul Ducklin — March 14^th 2022 at 17:51

If you live in the UK and hadn't yet heard of cryptocoin ATMs... it's too late now!

Naked Security

Instagram scammers as busy as ever: passwords and 2FA codes at risk

By Paul Ducklin — February 28^th 2022 at 17:56

Instagram scams don't seem to be dying out - we're seeing more variety and trickiness than ever...

Naked Security

S3 Ep71: VMware escapes, PHP holes, WP plugin woes, and scary scams [Podcast + Transcript]

By Paul Ducklin — February 24^th 2022 at 16:51

Latest episode - listen now!

Naked Security

French speakers blasted by sextortion scams with no text or links

By Paul Ducklin — February 21^st 2022 at 17:59

You'd spot this one a mile away... but what about your friends or family?

Naked Security

S3 Ep68: Bugs, scams, privacy …and fonts?! [Podcast + Transcript]

By Paul Ducklin — February 3^rd 2022 at 16:20

Latest episode - listen now!

Naked Security

Coronavirus SMS scam offers home PCR testing devices – don’t fall for it!

By Paul Ducklin — January 28^th 2022 at 23:58

Free home PCR devices would be technological marvels, and really useful, too. But there aren't any...

Naked Security

Happy Data Privacy Day – and we really do mean “happy” :-)

By Paul Ducklin — January 28^th 2022 at 15:34

We give you some simple digital lifesytle tips that cost nothing.

Naked Security

S3 Ep67: Tax scams, carder busts and crypto capers [Podcast + Transcript]

By Paul Ducklin — January 27^th 2022 at 19:57

Latest episode - listen now!

Naked Security

Romance scammer who targeted 670 women gets 28 months in jail

By Paul Ducklin — January 17^th 2022 at 14:13

Found love online? Sending them money? Friends and family warning you it could be a scam? Don't be too quick to dismiss their concerns...

Naked Security

Instagram copyright infringment scams – don’t get sucked in!

By Paul Ducklin — December 30^th 2021 at 14:40

We deconstructed a copyright phish so you don't have to. Be warned: the crooks are getting better at these scams...

Naked Security

US government securities watchdog spoofed by investment scammers – don’t fall for it!

By Paul Ducklin — November 24^th 2021 at 19:57

Those numbers that show up on your phone to tell you who's calling? Treat them as SUGGESTIONS, never as PROOF.

Naked Security

Banking scam uses Docusign phish to thieve 2FA codes

By Paul Ducklin — October 26^th 2021 at 18:57

999 people in 1000 will know this is a phish straight off the bat. But for 1 in 1000 it will be plausible at first sight...

Naked Security

S3 Ep55: Live malware, global encryption, dating scams, and secret emanations [Podcasts]

By Paul Ducklin — October 21^st 2021 at 18:13

Latest episode - listen now! (And sign up for our forthcoming Live Malware Demo at the same time.)