In this episode, how we are still very much reliant on passwords in 2021, Google plans to enforce the use of two-factor authentication for everyone who has a google account. Also, a breakdown of how Attackers Distribute Malicious Apps via Office 365 apps are discussed. Lastly, Why you should not trust that 5-star review you read about a product on Amazon as researchers found a database of documents behind a product reward scam run by vendors on Amazon.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or by email to [email protected].

LINKS: 

1. World password Day- A simpler and safer future — without passwords 

2. The Wages of Password Re-use: Your Money or Your Life

3. Malicious Office 365 Apps Are the Ultimate Insiders

4. Further reading about How Attackers Distribute Malicious Apps - How Attackers Use Compromised Accounts to Create and Distribute Malicious OAuth Apps 

5. Amazon Fake Reviews Scam Exposed in Data Breach 

6. A further explanation about 2FA or 2SV -Episode 4 Cybersmart Security Podcast 

In this episode, the cost of ransomware has doubled over a year, the risk with using old version software(or end of life operating system like Windows 7). Update your Mac now. Also, beware of a fake Microsoft DirectX12 installer in the Wild. This malware is an information-stealing malware that attempts to harvest a victim's cookies, cryptocurrency wallets, passwords, and more in the background when installed.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or by email to [email protected].

1. Ransomware: don’t expect a full recovery, however much you pay. https://nakedsecurity.sophos.com/2021/04/27/ransomware-dont-expect-a-full-recovery/

2. Task Force Seeks to Disrupt Ransomware Payments

https://krebsonsecurity.com/2021/04/task-force-seeks-to-disrupt-ransomware-payments/

3. Kaspersky finds 22% of PC users still running end-of-life Windows 7 OS

https://usa.kaspersky.com/about/press-releases/2021_kaspersky-finds-22-of-pc-users-still-running-end-of-life-windows-7-os#_ftn1

4. Update Your Mac Now: The ‘Worst Hack In Years’ Hits Apple Computers

https://www.forbes.com/sites/thomasbrewster/2021/04/26/update-your-mac-now-the-worst-hack-in-years-hits-apple-computers/?sh=3ee9cd855da0

5. NVIDIA Driver Downloads

https://www.nvidia.com/Download/index.aspx

6. Fake Microsoft DirectX 12 site pushes crypto-stealing malware

https://www.bleepingcomputer.com/news/security/fake-microsoft-directx-12-site-pushes-crypto-stealing-malware/

Over half a billion Facebook and Linkedin user profiles were recently leaked online or put up for sale by cybercriminals. Also, about 1.3M Clubhouse user profilers were posted on a hacker forum. This may have been due to data scraping, which is allowed by Clubhouse API or app and can be accessed by "anyone". 

April fool's joke by Deliveroo and Volkswagen backfires.  Shouldn't inaccurate or untrue information published as a joke by some companies be classified as misinformation rather than a prank? 

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or by email to [email protected].

LINKS

1. The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned https://www.troyhunt.com/the-facebook-phone-numbers-are-now-searchable-in-have-i-been-pwned/

2. The joke is on Volkswagen after April Fool’s name change debacle https://www.aljazeera.com/economy/2021/3/31/bb-thejokeis-on-volkswagen-after-april-fools-name-change-debacle

3. Deliveroo April Fool's joke backfires in France

https://www.bbc.co.uk/news/world-europe-56617049

4. Security News This Week: Oh Look, LinkedIn Also Had 500M Users' Data Scraped

https://www.wired.com/story/linkedin-data-scrape-phishing-zoom-security-news/

5. “Not ideal” from a privacy standpoint: Clubhouse API lets “anyone” scrape public user data

https://cybernews.com/security/not-ideal-from-a-privacy-standpoint-clubhouse-api-lets-anyone-scrape-public-user-data/

Have you ever got carried away by compliments to the extent that you may have shared very personal information or that of someone else that you never intended initially? Scammers are exploiting the power of empathy to gain the trust of their victims. In this episode, I talk about how we can better respond to a refund claim via calls, SMS or emails and spot the scammy ones. Also mentioned is a fake clubhouse app to avoid. 

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or by email to [email protected].

FBI Warns About TrickBot in Emails, Costly Error As Books Worth Up To $3.4m Given For Free

Also, an academic book publisher-Springer Nature had a misconfiguration that allowed anyone to download their books for free, and lastly, a costly mistake by an employee in the Health Dept of a county in New York State is briefly dissected in the episode.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or by email to [email protected].

LINKS:

Solarwinds Hack Isn't Intern's Fault, New Covid-19 Phishing Scams And Identifying Social Media Scams.

Cybercriminals are once again using the Covid-19 pandemic as a smokescreen for their phishing scams. These scammers rely on the naivety of victims to gain maximum damage. According to people’s reports to the FTC and a new Data Spotlight, about $117m was lost by consumers to scams starting from social media scams in the first 6 months of 2020. Thus it is more pertinent to know ways to identify scams beginning from the social media platforms. I discuss this and more in today's episode. 

I also address where the fault really lies about the SolarWinds hack. It is more an organizational issue than an individual one. Responsibility and accountability should always come from the top before it trickles down to the bottom. 

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or by email to [email protected]

LINKS:

T-Mobile is in the news again for the fifth time in four years for a data breach; this time, 400 users were victims of a SIM Swap Fraud.  The recent attacks via SIM swap fraud have brought Wireless carriers under the spotlight.

In 2021, more companies are embracing cryptocurrencies investments. Online users are buying company shares via mobile applications; it is thus crucial to ensure that accounts are kept safe from identity theft and other types of attacks. 

In episode 23, I talk about protecting yourself from SIM swap attacks and keeping your crypto safe. I also comment on the verdict by a US District Judge to order Facebook to pay $650M in settlement for a privacy violation. Besides, this episode notes includes a research paper regarding vulnerable authentication challenges published in January 2020. 

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral.

    https://www.securityweek.com/judge-approves-650m-facebook-privacy-lawsuit-settlement

    https://www.bleepingcomputer.com/news/security/t-mobile-discloses-data-breach-after-sim-swapping-attacks/

     https://beta.documentcloud.org/documents/20492859-t-mobile-feb-2021-bc-data-breach

     https://www.schneier.com/blog/archives/2020/01/sim_hijacking.html

     https://www.issms2fasecure.com/assets/sim_swaps-01-10-2020.pdf

     https://www.techdirt.com/articles/20200114/06480143727/study-shows-internet-is-hugely-vulnerable-to-sim-hijacking-attacks.shtml

     https://www.vice.com/en/article/j5bpg7/sim-hijacking-t-mobile-stories

     https://techcrunch.com/2018/08/20/what-happens-when-hackers-steal-your-sim-you-learn-to-keep-your-crypto-offline/amp/

If you know why you should take privacy protection seriously, then taking proactive actions towards achieving foolproof security against the bad guys is the next step.  In this episode, I discussed 5 ways you can start to have a sense of control over everything that connects to you.  Before that, I delved into the recent charges brought against 3 North Koreans arrested for globally related cyberattacks that include fake Cryptocurrency Trading Platforms used to fool unsuspecting users to download malicious applications. How to ensure your mobile number is not ported to another sim by impersonators is also addressed.