<![CDATA[Geeks for your information - Avast Blog News and Info]]>

<![CDATA[Geeks for your information - Avast Blog News and Info]]> https://www.geeks.fyi/ Sun, 03 May 2026 22:24:26 +0000 MyBB <![CDATA[Fake e-Shop scams — How cybercriminals are cashing it in]]> https://www.geeks.fyi/showthread.php?tid=20637 Tue, 25 Feb 2025 11:21:58 +0000 jasonX]]> https://www.geeks.fyi/showthread.php?tid=20637 Fake e-Shop scams — How cybercriminals are cashing it in

Shopping scams involve fraudsters setting up fake online stores or apps aiming to fool you. Often they are advertised through social media or other genuine sites and yes, these fake stores appear in search engine results. Most or all of these 'fake stores and shops' showcase items at temptingly low prices. Avast's Nyrmah J. Reina shares us info/tips about 'Fake e-Shop scams[/i]

Quote:The holiday season may be over, but cybercriminals aren’t done shopping for victims. Check out how you can stay protected from these scams that put your payment details and personal data at risk.

Our researchers (Avast researchers) first detected a surge in fake e-shop scams preying on bargain-hunting consumers during Black Friday and Christmas shopping sprees. However, just because the holiday season ended, doesn’t mean that shoppers are off the hook.

According to the Gen Q4/2024 Threat Report, fake e-shops accounted for 23% of all social media scams. Those are staggering numbers. If you shopped online in the last few months, you might have been one click away from a scammer’s trap.

The impact goes beyond losing money on a never-arriving package. These scams steal personal data, payment details, and even identities, leaving victims with empty wallets — and sometimes with long-term financial damage. But don’t fret! Here’s how these scams work, and more importantly, how you can help protect yourself.

More than just a bad purchase

Fake e-shops look like legitimate online stores, but instead of delivering your order, they deliver fraud, financial loss, and identity theft. Something to note is that most fake e-shops follow a tried-and-true formula. Here’s how they operate:

Step 1: The too-good-to-be-true deal

- You see an ad for an expensive item at an unbelievable price.
- These ads often appear on Facebook, Instagram, YouTube, and even Google search results.
- Many use AI-generated ads and fake reviews to make their sites look more convincing.

Step 2: Fake website, real payments
- The scam website looks professional, with stolen images, fake customer reviews, and even trust badges.
- Victims enter their credit card information and personal details to complete the purchase.

Step 3: Vanishing act
- After payment, the customer never receives the product, or they get a low-quality counterfeit.
- The scam site shuts down within weeks, leaving victims with no way to get a refund.

Step 4: Identity theft and fraud
- The stolen credit card details are used for unauthorized purchases or sold on the dark web.
- Personal data — think email, phone number, and address — is used for future phishing scams or identity theft.

Where are fake e-shops popping up?

Scammers don’t just rely on random website traffic. They use highly targeted methods to trick victims, like:

Social media ads: Facebook and Instagram are hotspots for fake e-shop promotions.

Poisoned Google Search results: Scammers manipulate search engines to push fake stores to the top.

Read FULL article HERE

Info derived and lifted from Avast Blog with permission

]]> Fake e-Shop scams — How cybercriminals are cashing it in

Quote:The holiday season may be over, but cybercriminals aren’t done shopping for victims. Check out how you can stay protected from these scams that put your payment details and personal data at risk.

Our researchers (Avast researchers) first detected a surge in fake e-shop scams preying on bargain-hunting consumers during Black Friday and Christmas shopping sprees. However, just because the holiday season ended, doesn’t mean that shoppers are off the hook.

According to the Gen Q4/2024 Threat Report, fake e-shops accounted for 23% of all social media scams. Those are staggering numbers. If you shopped online in the last few months, you might have been one click away from a scammer’s trap.

The impact goes beyond losing money on a never-arriving package. These scams steal personal data, payment details, and even identities, leaving victims with empty wallets — and sometimes with long-term financial damage. But don’t fret! Here’s how these scams work, and more importantly, how you can help protect yourself.

More than just a bad purchase

Fake e-shops look like legitimate online stores, but instead of delivering your order, they deliver fraud, financial loss, and identity theft. Something to note is that most fake e-shops follow a tried-and-true formula. Here’s how they operate:

Step 1: The too-good-to-be-true deal

- You see an ad for an expensive item at an unbelievable price.
- These ads often appear on Facebook, Instagram, YouTube, and even Google search results.
- Many use AI-generated ads and fake reviews to make their sites look more convincing.

Step 2: Fake website, real payments
- The scam website looks professional, with stolen images, fake customer reviews, and even trust badges.
- Victims enter their credit card information and personal details to complete the purchase.

Step 3: Vanishing act
- After payment, the customer never receives the product, or they get a low-quality counterfeit.
- The scam site shuts down within weeks, leaving victims with no way to get a refund.

Step 4: Identity theft and fraud
- The stolen credit card details are used for unauthorized purchases or sold on the dark web.
- Personal data — think email, phone number, and address — is used for future phishing scams or identity theft.

Where are fake e-shops popping up?

Scammers don’t just rely on random website traffic. They use highly targeted methods to trick victims, like:

Social media ads: Facebook and Instagram are hotspots for fake e-shop promotions.

Poisoned Google Search results: Scammers manipulate search engines to push fake stores to the top.

Read FULL article HERE

Info derived and lifted from Avast Blog with permission

]]> <![CDATA[Start the year by protecting your privacy— A stalkerware quick check from Avast Blog]]> https://www.geeks.fyi/showthread.php?tid=20527 Sun, 26 Jan 2025 04:49:50 +0000 jasonX]]> https://www.geeks.fyi/showthread.php?tid=20527

Start the year by protecting your privacy— A stalkerware quick check

Keep your personal life personal—essential tips to spot and stop stalkerware in 2025

Imagine starting the New Year with hopes of a fresh start, only to realize that someone might be tracking your every move without your consent. Disconcerting, to say the least.

Bad actors can do this using stalkerware, a sinister form of spyware that secretly monitors a person’s activities and takes away their privacy. But that’s not all. With location-sharing apps being the norm, the tracking risks increase.

With this in mind, it’s important to take the necessary precautions to help protect yourself. Here’s what you need to know: The growing threat of stalkerware.

Stalkerware isn’t new, but its use surged during the pandemic as more people turned to digital means to exert control over others. In fact, the total number of global users protected from stalkerware and spyware in 2024 has more than doubled (228%) when compared to pre-pandemic levels in 2020, according to our experts.

Unlike traditional spyware, stalkerware is often installed with malicious intent by someone known to the victim, such as a partner or family member, to track their whereabouts, communications, and more.

Also, the popularity of location-sharing features has added a new layer of risk. Many users unknowingly leave location-sharing settings on, exposing themselves to potential monitoring.

A 5-point privacy shield

Stalkerware may be a serious threat, but there are things you can do to help protect yourself. Here are 5 tips you can do to help shield yourself from stalkerware:

Check your app permissions.
Stalkerware requires various permissions to function, such as access to SMS, call logs, contacts, and location. Regularly check the permissions granted to your apps and remove anything unusual or from apps you don’t recognize.
Audit your location sharing.
Location sharing is a convenient feature but can also be risky. Review who you’re sharing your location with, especially if it’s been a while. Also, If it doesn’t make sense for an app to have location access, revoke it.
Review your app list.
Go through your installed apps and look for anything suspicious. Stalkerware apps often disguise themselves by hiding their icons or pretending to be harmless utilities like Notes or WiFi apps.
Watch for performance red flags.
If your phone’s battery drains unusually fast, you notice sudden error messages, or experience strange requests for permissions, it could indicate stalkerware. Keep an eye out for any unusual behavior.
Install security software.
Use security solutions— think Avast One— to scan your phone for known malicious apps, including stalkerware and spyware. Regular scans can help you identify and remove potential threats.

More info HERE

Content lifted from Avast Blog - penned by Emily Lockwood - 21 Jan 2025
]]>

Start the year by protecting your privacy— A stalkerware quick check

Keep your personal life personal—essential tips to spot and stop stalkerware in 2025

Check your app permissions.
Stalkerware requires various permissions to function, such as access to SMS, call logs, contacts, and location. Regularly check the permissions granted to your apps and remove anything unusual or from apps you don’t recognize.
Audit your location sharing.
Location sharing is a convenient feature but can also be risky. Review who you’re sharing your location with, especially if it’s been a while. Also, If it doesn’t make sense for an app to have location access, revoke it.
Review your app list.
Go through your installed apps and look for anything suspicious. Stalkerware apps often disguise themselves by hiding their icons or pretending to be harmless utilities like Notes or WiFi apps.
Watch for performance red flags.
If your phone’s battery drains unusually fast, you notice sudden error messages, or experience strange requests for permissions, it could indicate stalkerware. Keep an eye out for any unusual behavior.
Install security software.
Use security solutions— think Avast One— to scan your phone for known malicious apps, including stalkerware and spyware. Regular scans can help you identify and remove potential threats.

More info HERE

Content lifted from Avast Blog - penned by Emily Lockwood - 21 Jan 2025
]]> <![CDATA[Avast Blog_Tips & Advices: How to know a student loan scam when you see one]]> https://www.geeks.fyi/showthread.php?tid=16226 Sun, 03 Oct 2021 07:53:35 +0000 harlan4096]]> https://www.geeks.fyi/showthread.php?tid=16226 Quote:

These are the red flags related to student loan fraud to be on the lookout for

On August 6, 2021, the U.S. Department of Education announced a final extension of the student loan payment pause until January 31, 2022.

The pause includes the following relief measures for eligible loans:

A suspension of loan payments
A 0% interest rate
Stopped collections on defaulted loans

While this is great news for many, there’s no doubt that fraudsters will use the pause to prey upon student borrowers. Tempting offers of instant loan repayment or special-access official financial aid services may arrive through emails, letters, phone calls, or texts. Be wise and don’t take the bait. When ads are aggressively trying to get you to buy into a loan program, chances are they aren’t coming from the U.S. Department of Education or its partners. Usually these types of companies aren’t offering any services at all — they're just after your money.

Here are five warning signs that a fake student loan debt relief company may be trying to scam you:

1. They ask for money

p-front payments, hidden monthly fees, and requests for credit card numbers or bank account information are all red flags that you are the target of a scam. Since 1996, it’s been illegal to charge in advance for help obtaining or repaying a student loan.

2. They force a quick decision

Shady salesmen love to rush you into saying yes while your head is spinning with new information. If you aren’t being given the time to research your options, just say no and walk away. If it’s a limited-time opportunity, chances are you could find the same thing elsewhere for free.

3. They ask for personal ID information

Never share your FSA ID or sign a power of attorney. That’s like giving someone your credit card, passport, and driver’s license. Also, beware of sharing your Social Security Number, name, and date of birth. This information can easily be used to steal your identity or apply for a FSA ID and take out a loan using your name.

4. They have a patriotic logo and official sounding name

Any student loan services company that uses words like “national,” “federal,” “direct,” or has an eagle or tree logo that resembles the U.S Department of Education seal, be wary. Companies that claim to have special access or federal privileged arrangements are lying. Go directly to the government website for great (as well as often free) information and resources.

5. They promise quick or total loan forgiveness

It’s just not possible to give someone immediate debt reduction or cancelation. Most government forgiveness programs require years of qualifying payments and/or employment in certain fields. There are no “special deals.” Payment levels are set by federal law.

The U.S. Department of Education provides help for free.

Call the Federal Student Aid Information Center at 1-800-4-FED-AID (1-800-433-3243) or visit the government's student loans website.

Read more about the coronavirus student loan payment pause on the government's dedicated webpage.
... Continue Reading]]> Quote:

A suspension of loan payments
A 0% interest rate
Stopped collections on defaulted loans

The adoption of biometric data usage by governments opens the door to a dystopian future

One of the important pieces of information that has come out of the US-led withdrawal from Afghanistan is that some of the equipment left behind was used for a biometric data collection program. The US military had used devices to capture fingerprints, iris scans, and facial images to build a database of the Afghan population to help fight terrorists.

This Handheld Interagency Identity Detection Equipment, referred to as HIIDE, is now in the possession of the Taliban, and it is feared that this information will now be used to track down Afghan citizens who aided the US and its allies. This demonstrates the danger of collection of sensitive biometric personal data and emphasizes the fact that it needs to be minimized. Inevitably, personal data is leaked or accessed by unauthorized individuals. In recent years, data leaks have been occurring with increasing frequency. However, this is not stopping world governments or large corporations from collecting high sensitive biometric data.

The collection of biometric data is actually increasing as well.

The US government accountability office lists 24 federal agencies that are currently using or planning to use facial recognition technology. Six of those agencies mention that they will use it for domestic law enforcement.

As an example, certain individuals have submitted to having their faces scanned to board a plane at the airport. This technology is rife with privacy concerns, as it could easily lead to mass surveillance and false arrests. Some states within the US have already banned the use of facial recognition technology due to these concerns, but most have not. Certainly, this technology has the potential to be very useful for law enforcement agencies — preventing terrorist attacks or tracking criminals to arrest them as well — but it comes at significant cost to personal privacy.

Popular devices that collect biometric data

Apple Watch, Fitbit, and other devices have been collecting their users’ data for years. Recently the Wall Street reported that Apple watches will soon be able to record blood pressure and body temperature to help with fertility planning. The increasing collection of sensitive health and biometric data is concerning. It is just as likely that the data will be used for price discrimination (charging someone a higher price due to some personal information the company is aware of) as advancing diagnosis and treatment of various illnesses.

When it comes to data collected through personal devices, at least individuals have the option not to wear a smartwatch or carry a smartphone with them everywhere they go. However, when a surveillance state leverages facial recognition technology to track its citizens or requires facial scans to get access to essential services like public housing or healthcare, biometric data collection is nearly impossible to avoid. Imagine leaving your apartment to go visit a family member and knowing that the government is able to track you the entire way. This is a stunning example of how invasive technology could be used to destroy any notion of personal privacy.

We applaud the efforts of governments that are banning the use of facial recognition technology and hope that other countries and states follow suit. It's a dangerous precedent to allow the mass collection of biometric data, no matter how noble the goal. The technology is too easily repurposed for something dangerous to civil liberties. We're already seeing countries like China require face scans for its citizens to access public housing, and now they plan to make children scan in order to play online video games. Perhaps children are better off spending less time online gaming, but nevertheless, we believe that the bad outweighs the good, as personal privacy is greatly diminished.

Ben Franklin is often quoted as saying, “Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety.”

This notion is especially relevant in the context of government surveillance. We know that governments with this much power over their citizens are likely to abuse it.

If you want to push back against these types of data collection practices, you can voice your concerns to your local politicians and policymakers. Additionally, you can take conscious steps to anonymize yourself in public (like wearing a facial mask or hat), and importantly, opt out of as many data collection settings on your personal devices as possible.
... Continue Reading]]> Quote:

[Image: Illustration-quote.1-%281%29.jpg]

Here's how we're shaping the digital landscape to be a fairer, freer, more equitable place for all

I was just 13 years old in 1991 when the Soviet Union pulled its last troops out of what was then Czechoslovakia, my home country. I was spared living through the worst abuses of the Communist era, which choked off the Czech people’s free expression, entrepreneurialism, and ability to explore the wider world. I feel extremely lucky to have come of age in Prague at a time when democracy and capitalism were flourishing.

As a young computer programmer in the ‘90s, I was captivated by the potential of information technologies to reshape the world for the better. The arrival of the internet, with its vision of a free, open, and democratic digital world without borders, gave me hope that open and immediate access to information, commerce, and people worldwide could underpin the spread of democracy and social freedoms globally.

The last three decades have seen technology develop on a truly revolutionary scale. Today, 4.8 billion people are online — that’s almost 61% of the world’s population — and it’s estimated that there are 700,000 new users coming online each day. This inspires me every day to push on innovation, to figure out how we can bring positive change to the digital world, and crucially, to be vigilant about protecting personal privacy and civil liberties.

These days, nothing can be taken for granted as the world is undergoing huge, unprecedented change in response to the Covid-19 pandemic, igniting social, economic, and technological shifts. And, a huge part of that change is happening online: the battle for digital freedom, which could play an incredibly important role in defining the future of our global politics and economics.

At Avast, we've been working for over 30 years to keep people safe. It used to be about protecting machines; today, it's about protecting people. And people are growing increasingly worried and feeling more vulnerable — because the cyber problem has become so much larger, and so much more complicated.

Over the last year, we talked extensively with our customers and with internet citizens at large to understand their hopes, fears, and needs.

The more our team at Avast talked to people, the more we heard that the internet was vital to helping them achieve their personal potential, but also that they felt exposed when they went online more than ever before. Six in 10 people said the internet had grown more important to their lives during the pandemic, but just one in five said they felt more confident online than before. Two-thirds told us that concerns over privacy stopped them from doing something online.

Avast is stepping up to tackle this challenge. Today, we are announcing our rigorous commitment to pursuing an expanded, deeper purpose — that of protecting the digital freedoms of all online citizens. You will notice that our brand has a fresh new look and feel to align with our wider mission and to engage with more people on these important digital issues of our time in a relatable, human way. Online security and privacy are complex topics, and it’s an important part of our role as a digital protection provider to ensure people get the information as well as the tools they need to feel comfortable and confident.

Challenging the status quo

Although time has slightly tempered my youthful (and somewhat utopian) vision for the digital age, my enthusiasm for the boundless possibilities it enables hasn’t faded. But it’s clear that while the internet has enabled incredible opportunities, it has also served as a tool to restrict and limit.

There are nation states that use the internet to curtail free speech. There are even governments that misuse and abuse the incredible power of big data, machine learning, and AI to oppress their own citizens. Hackers and cybercriminals mastermind increasingly sophisticated attacks that imperil everything from hospitals and oil pipelines to food companies globally. What’s more, too many tech firms and advertisers demonstrate a disregard for our privacy when they track people’s personal data and spending habits to make it easier to market their products and services. In our research, we learned how people really appreciated the internet as a backbone that connected them throughout the pandemic, but that they also felt increasingly watched and vulnerable. They told us they wanted to reset their relationship with the internet, but they were more confused than ever on how to do that, and who they could trust.

Unless we’re all committed to a digital world that respects our right to privacy, the digital world has the potential to curtail our freedoms rather than enable them.

Similarly, we have fallen down on promises to level the global playing field. Access to the internet is contributing to widening economic disparity, not lessening it.

This digital divide has become particularly acute since the pandemic hit. People who can’t access secure, high-speed internet run the risk of being unable to work, study, manage finances, or even receive quality healthcare. Access to safe internet usage is increasingly becoming a critical right for all.

It’s clear that we need to address these issues and halt this increasing inequity. We need to intervene now and reset our technology trajectory for a better, fairer digital future.
... Continue Reading]]> Quote:

Both are essential for network security.

You’ve probably heard of a firewall. You’ve maybe heard of a VPN. But what’s the difference?

Since we’re living in a time when most people are ultra-conscious of germs and what they’re touching, maybe the easiest way to explain the difference between a firewall and a VPN is like this:

Think of a firewall as a rubber glove. It blocks bad stuff from getting to you. (But it also does more than that — which we’ll get to.)

A VPN is more like an invisible cloak. It keeps the bad guys from knowing your location and activities. Unfortunately, it can’t block viruses, so it’s always good to pair a VPN with a firewall (and antivirus software).

Companies usually use VPNs to let employees securely access remote servers from locations outside the office, while regular folks make use of VPNs when surfing the web in their coffee shop of choice. Firewalls are used by both home and corporate networks to protect computers and devices.

What is a VPN?

A Virtual Private Network (VPN), hides your IP address, which is the string of numbers that identifies your device. It works by routing your network connection through a remote server, protecting you from those trying to find your location and other valuable data. A VPN is essential when you’re using public Wi-Fi or working remotely, as it encrypts your traffic and protects your information while it’s in transit. It’s like a private line to directly access a corporate server or a secure network, from anywhere.

When you use a VPN, your internet service provider, government websites, and the websites you often visit won’t have a way of knowing your true location. If you really care about your browsing privacy and data security, a VPN is your best bet.

On the downside, as previously mentioned, a VPN can't protect your computer from viruses. You can't set up security rules on VPNs. To monitor for and erase viruses, you’ll need antivirus software. To block viruses from entering your network and to prevent data from being stolen, you’ll need a firewall.

What are firewalls?

A firewall watches incoming and outgoing traffic on your network. Firewalls block attacks automatically and also allow you to set security preferences for what you let into your network or computer. If you don’t program a firewall to block a certain kind of site, content, or traffic, it won’t, even if that site has content that could hurt your system.

There are two types of firewalls:

1. Hardware or network firewalls

Hardware firewalls are physical devices that are placed between your computer and the internet. Their disadvantage is that they are separate devices that often require professional support for configuration and maintenance.

2. Software firewalls

Software firewalls are able to control the internet access and behavior of programs on your computer. Most computer operating systems (OSs) include a basic built-in software firewall feature, but firewall software is also available separately from computer stores and trusted online vendors.

Which one should you use?

The answer is: Both! Set up a firewall along with a VPN. A VPN like Avast SecureLine VPN will hide your online activity and allow you to transfer data securely without slowing down your connection — even on public Wi-Fi, But, alone, it can’t protect your device from downloaded viruses or spyware. If you click a bad link on a malicious site, you may still be vulnerable. So a firewall will let you know before you visit potentially harmful sites.

Even if you don't consider yourself to be tech-savvy, Avast Advanced Firewall can be quickly customized to your settings with simple controls. A smart profile setting automatically detects the number of devices on your network and sets your profile to private or public mode to protect you from intruders.

Installing an efficient and strong firewall around your network is essential. It’s a great way to secure your system from invasion and data theft.
... Continue Reading]]> Quote:

Looking back on our 2021 series with some new insights on our lives online

I started this year with a deceptively simple question: What does the internet know about me? I wanted to do a deep dive into the privacy policies and data collection practices of the digital products that I use the most, in order to figure out what pieces of myself I’ve been unwittingly giving away in the 25 years I’ve been online. And, perhaps more importantly, I wanted to know if there was anything I could do about it.

What I found over these past eight months was both shocking — and not. Shocking, because I think it’s important that we all keep being at least a little bit shocked at what companies get away with when it comes to privacy-violating data collection. Shocking, because it’s scary to realize that the internet essentially knows everything about me, from my heartbeat to my address to who walks up to my front door. Not shocking, because — as my friend who sparked this idea for me said — “I kind of just assume everything I do online is tracked.”

While most of what the internet knows about me feels fairly mild, there were some slightly salacious bits of info that I realized. For example, I use an Oura ring as a fitness tracker and because it tracks body temperature, it could theoretically know if I was pregnant, had Covid, or even had too much to drink one night. (Same goes for my Eight bed, which also tracks body temperature.)

There’s no guarantee that they do know those things, but there are cases of apps and services knowing about pregnancies and serving related ads, for example, before the person experiencing the pregnancy was ready to share. So it’s a fair bet that they could figure it out if they wanted to.

I also realized something kind of surprising about myself: I’m willing to give up more personal information than I realized. As my conversations with my friend illustrated, there’s a certain normalization around online data tracking and collection, at least in the US. We’ve been trained to accept this model of the internet as inevitable and our general apathy toward data collection and protection reflects that.

But that doesn’t mean I’m wrapping up What Does the Internet Know About Me? by throwing my hands up in the air and releasing all of my personal information into the Dark Web myself. Because despite the negatives I came across, there were also a lot of positive signs that the tide is turning when it comes to online privacy.

For example, the vast majority of privacy policies that I read (and I read a lot), were surprisingly clear and comprehensive. They were written in plain English, had clear sections, and utilized a minimum of tricky legal language. I appreciate that a lot and also know that it hasn’t always been the case.

I also saw firsthand how legislation can make a huge difference when it comes to how much or how little that we’re asked to give up in exchange for access to sites and services. I live in California but Avast is based in Europe, so I made a point to look at companies’ policies for the California Consumer Privacy Act (CCPA), General Protection Regulation (GDPR) in Europe — and everyone else.

I found that many sites and companies have multiple sets of rules, based on where you live. That means I have more rights than my colleagues who live in North Carolina, for example, and my colleagues in the EU and the UK have even more than I do. So while the internet has no borders, the laws we enact for it certainly do.

That plus the fact that many of these companies have ways to “easily” delete your data (or limit their collection) gives me some hope. I think we’re in the midst of a massive shift away from this data-sucking model to which we’ve all become accustomed. I don’t know where that shift will leave us — but I’m hopeful that it’s going to be somewhere better than where we are today.
... Continue Reading]]> Quote:

Make online school both safe and fun using these tips

Covid-19 didn’t go away when school started. On top of that, new variants are being tracked because this virus isn’t done mutating and hasn’t been eradicated. Students and families could be facing yet another season of distance learning from home, and it’s never too early to start preparing.

At Avast, we care deeply about the safety and well-being of your family, especially when it comes to easy to use and supremely effective digital security. Our Back-to-School Sale is still live, so please take advantage of up to 50% savings on Avast Ultimate security suite that covers an entire family’s network of devices.

If your tech is already set-up to protect you and your devices against cybercrime, we have the following tips to make online learning safe and fun:

1. Routine is key

Schedules are the cornerstone of sanity. Write out a daily/weekly schedule on a big white board or hang it on the refrigerator. Without the expectations and agreements established by a schedule, the days and weeks will quickly dissolve into chaos.

2. Environment is essential

Finding the balance between isolation and distraction is your goal. Be creative and don’t be afraid to get wacky with your furniture. Avoid letting your students lock themselves in their room all day and avoid forcing them to sit somewhere they can’t focus.

3. Supervise their setup

It’s up to you make sure your student has everything they need to be successful. From school supplies to secure, stable Wi-Fi, or note-taking apps and organization strategies, they might not realize they are missing something essential without your guidance.

4. Review goals together

The best part of distance learning is delighting in your time together. During scheduled snack times or family meals, ask each other about your week and what you all hope to accomplish individually and as a family.

5. Teach them tact

Kids don’t have years of professional experience communicating with well-trained teams over video conference, email, and project management software. Give them pointers on how to have good manners while getting their point across.

6. Offer the carrot, not the stick

Positive reinforcement and earned rewards always work better than threats and punishments. Start early and see it through. If you find yourself frustrated, reach out to other parents who are going through the same thing.

7. Help them self-motivate

It’s difficult for some kids to find motivation. Positive and negative reinforcement are both less-effective external motivations. Teaching your child to want to learn is one of the greatest investments you can make with your time and energy.

8. Gamify everything

Work together to create a simple but visible documentation of progress using points, levels of achievement, rewards, and celebrations. Make a game out of learning, to encourage both internal and external motivations for greater results.

9. Ease your worries

Let us help take network security off your list of things to do. Avast Ultimate is a suite of everything you need to look after all your family’s devices in one easy-to-use service complete with tuneup and cleanup tools.

Advanced antivirus and anti-tracking privacy protection features prevent malware while blocking stalkers and advertisers from following your family’s online activity.

Check out our Back-to-School Sale to save on a year’s subscription of Avast Ultimate.
... Continue Reading]]> Quote:

Activists applaud the ban as a great first step toward protecting survivors

The US Federal Trade Commission (FTC) recently announced a ban on the stalkerware company SpyFone and ordered them to delete all of the data they had illegally harvested from victims. Additionally, they banned the company’s CEO, Scott Zuckerman, from working in the surveillance industry ever again and ordered the company to notify everyone who had the app installed on their phone.

“I think that this is a sign that the FTC is getting more serious about this kind of abuse,” Eva Galperin, Director of Cybersecurity at the Electronic Frontier Foundation (EFF), a founding member of the Coalition Against Stalkerware, tells Avast. “And I’m really glad to see them calling out stalkerware and the company’s CEO in such a direct way.”

According to the FTC press release on the ruling, SpyFone (which is registered as Support King LLC) sold stalkerware apps that allowed people to surreptitiously monitor other people’s devices. The monitoring could include messages, photos, web histories, GPS locations, and other personal information. The company also provided instructions on how to install their apps without the device owner’s knowledge.

SpyFone additionally failed to secure the personal data it stole, by “not encrypting personal information it stored, including photos and text messages; failing to ensure that only authorized users could access personal information; and transmitting purchasers’ passwords in plain text,” according to the press release. In fact, a hacker gained access to one of the company’s servers in 2018 and obtained the private information of 2,200 consumers. After that breach, the company promised to work with a date security firm and law enforcement — which the FTC says never happened.

This move by the FTC — the first ban of its kind and the second time the agency has taken action against a stalkerware company — is “the tip of the iceberg” in fighting stalkerware, according to Galperin.

“Start with a ban, start with a decree, then move forward to do what you can in order to enforce these things,” she says. “And I think it makes stalkerware companies think twice about whether or not this type of business will be profitable for them.”

Christopher Budd, Senior Global Threat Communications Manager at Avast, also lauds the FTC move, but wonders what might happen next.

“Now that this has happened, does this mean this program disappears from the internet entirely? Or is there a way the company could start selling it on third party sites from abroad?” Budd says. “We see this with ransomware groups all the time: They close up shop, throw their code out to the wider world, and someone else picks up it up and carries on the work — or they set up shop somewhere else.”

In the meantime, there are steps a survivor can take if they receive the warning that a SpyFone app has been installed on their phone. And while Galperin acknowledges that we don’t yet know exactly what the warning will say, she hopes that the “notification process includes tips on how to remove it and for clarification about whether or not the spying is current and ongoing or whether it’s in the past.”

Galperin also warns that removing a stalkerware app can further escalate a domestic violence situation, as the abuser could become enraged at the removal of access. That doesn’t mean, however, that a survivor must simply tolerate being stalked. Erica Olsen, Safety Net project director for the National Network to End Domestic Violence (NNEDV), tells Avast that the first step to clearing any stalkerware from a device is to “trust your instincts.”

"Most of the time, a survivor believes this is happening because the abuser just knows too much about their activity, is in their accounts, etc.,” Olsen says. “We suggest that survivors try to pay attention to what the abusive person seems to know and narrow down options for how they may know it. If there is no other explanation for the person knowing device activity, accessing accounts, and knowing the survivor’s location, and the abusive person had physical access to the device at some time, then it’s possible it could be stalkerware.”
... Continue Reading]]> Quote:

Ignore lures and reach out to reputable charities like the Red Cross

Hurricane Ida has left a path of destruction along the entire east coast of the United States. While the storm has passed, millions of Americans have been displaced by record-breaking rain, deadly flash flooding, and power outages amid a Covid-19 ridden heat wave. While recovery efforts have already started, it’ll be days before rivers crest and potentially weeks before power is restored.

We encourage you to reach out to trusted, mainstream organizations to make financial donations.

When it comes to unsolicited, inbound requests for money for Hurricane Ida victims, it’s best to ignore them. Scammers often use major disasters to lure unsuspecting (and often elderly) victims who want to help using various methods. They’ll use phone calls, web ads, fake emails, and even in-person visits to ask for relief donations. No matter how convincing or legitimate they may seem — just ignore them.

How you can help

If you want to help those in need, it’s up to you to take the first step and reach out to a reputable charity. If you want to check up on a charity before reaching out, use one of these trusted resources: Better Business Bureau's Wise Giving Alliance, the Charity Navigator, Charity Watch, or GuideStar.

What’s more, if you suspect that you’ve come across an Ida-related scam, here’s how you can report online scams and fraud.
The following list of agencies helping with Hurricane Ida relief has been published by Weather.com.

American Red Cross

Help people affected by Hurricane Ida by visiting the Red Cross website or calling 800-RED-CROSS. Donations directed toward Hurricane Ida enable the Red Cross to respond to and help people recover from this disaster. This includes providing food, shelter, relief supplies, emotional support and other assistance. If you have the time, you can make a significant impact as a Red Cross volunteer. Review the most urgently needed volunteer positions online.

GoFundMe

GoFundMe connects you to people who need help. The Weather Channel and GoFundMe have teamed up to help people in the path of a natural disaster be prepared and recover quicker than ever before. If a hurricane has impacted you or someone you know, you can start a GoFundMe to get on the road to recovery. You can request help or donate to someone in need.

Catholic Charities

Catholic Charities of Acadiana is listing ways for people to help the victims of Hurricane Ida, whether it be by monetary donation or volunteer work. Check the links and information below for ways to help.

Monetary donations: Use this online form or text RELIEF to 797979. Checks can be mailed to: Catholic Charities of Acadiana, PO Box 3177, Lafayette, LA 70502.
Disaster Amazon Wishlist: Make In-kind donations to assist in the disaster.
To volunteer: Fill out the Hurricane Idea support form.
To request help: Request help from Catholic Charities of Acadiana and Acadiana VOAD partners by texting DISASTER to 797979 or fill out the disaster recovery form.

United Way

United Way of Southeast Louisiana is accepting donations and looking for volunteers. It has set up a fund to support both short- and long-term relief efforts. You can find more information on its website.

Salvation Army

The Salvation Army also operates a command unit, refrigerated truck, a laundry unit, shower unit, bunkhouse, and two Field Kitchens. These kitchens can produce between 15,000-20,000 meals per day. Visit The Salvation Army online or call 1-800-SAL-ARMY (1-800-725-2769).

World Central Kitchen

Chef José Andrés, who leads an organization that provides food relief in areas hit by disaster, tweeted that a team in New Orleans would activate its three kitchen facilities in the city. He said they have supplies already on hand for more than 100,000 meals. Those who wish to help can donate using the WCK website.

Mercy Chefs

Mercy Chefs has served more than 15 million meals to people affected by natural disasters or who have other needs. The group has deployed two mobile kitchens to serve hot meals in Ida’s wake. Donate through Mercy Chefs' website.

All Hands and Hearts

All Hands and Hearts deploys volunteers to disaster sites to help with cleaning, rebuilding homes and creating a long-term recovery plan. You can donate to its Ida fund or sign up to volunteer.

Americares

Americares has a fund to support its deliveries of medicine, personal protective equipment and medical supplies to disaster areas.

Save the Children

Save the Children is mobilizing its emergency response team to help children and families in the affected areas. The organization will be collaborating with local education partners in Louisiana and Mississippi to help restore child care and early learning centers impacted by Ida. It has set up an Ida Children's Relief Fund.

Operation Blessing

Operation Blessing partners, staff, and disaster relief volunteers are the first on the ground, partnering with emergency management and local churches to bring food, clean water, medicine and other vital supplies to meet the immediate needs of those suffering. Donate online or visit the Operation Blessing website to find out how you can volunteer.

Rebuilding Together

Rebuilding Together helps local homeowners make critical repairs. There are three ways to help: Donate materials through Rebuilding Together New Orleans’ Amazon wish list. If you know anyone who has been impacted, share the crisis clean-up hotline number with them: (844) 965-1386. Make a donation to Rebuilding Together’s Hurricane Ida disaster recovery fund.

International Medical Corps

International Medical Corps provides emergency relief to those struck by disaster and disease. Donate using their dedicated donation web page.

Pet Relief Agencies

Humane Society Disaster Relief: Donate online.
Louisiana SPCA: Donate online.
Mississippi ASPCA: Donate online.
... Continue Reading]]> Quote:

Monetary donations: Use this online form or text RELIEF to 797979. Checks can be mailed to: Catholic Charities of Acadiana, PO Box 3177, Lafayette, LA 70502.
Disaster Amazon Wishlist: Make In-kind donations to assist in the disaster.
To volunteer: Fill out the Hurricane Idea support form.
To request help: Request help from Catholic Charities of Acadiana and Acadiana VOAD partners by texting DISASTER to 797979 or fill out the disaster recovery form.

How to be prepared for a surprise school shutdown

School is back in session. But for how long? The Delta variant has caused a significant rise in cases and has reversed the steady decline of Covid-19 infections since January. The variant is more contagious, causes more severe illnesses, and in some cases, has even infected people who have already been vaccinated.

It’s entirely possible that not long after the few weeks of school, we may need to go back to attending school from home. Are you prepared? Are your devices and home network still secure?

Here’s a short list of simple tips to help you get prepared for another school shutdown:

Revisit your router.

When’s the last time you checked your connection? Restart your network router and update your account credentials. Your router is your home network’s main connection to the internet–and to cyber threats. Updates help keep your network safe. Consider a physical firewall device to protect against infiltration.

Vaccinate your device.

It’s not a perfect analogy. Of course a vaccination doesn’t really work the same as anti-virus software protection, but did you know while parents believe that distance learning is a major concern for data privacy and digital security, they haven’t done anything about it? No virus is a good virus. Knock 'em out.

Get creative with your passphrases.

Reset ALL of your device and account passwords with long passphrases that are easy for your family to remember, but hard to be hacked. If you have too many to remember, use a secure credential service to help you out.

Have THE talk.

Birds and bees aside, sit your kids down to remind and reinforce good habits about safe surfing and the dangers of online predators. Be honest about why you may have set up parental controls, limited screen time, and anti-tracking protocols on your network. It’s for their safety and your entire family’s privacy and security.

Practice what you preach.

Kids have an amazing sense for hypocrisy. Setting up appropriate digital boundaries doesn’t just apply to privacy and security, it also applies to the habits we form as families. If you don’t structure time away from screens, chances are, it won’t happen. Use the potential of school cancelation as an amazing opportunity to plan to spend more quality time outdoors and face-to-face with your kids instead of driving them back and forth to school.

Every cloud has a silver lining. If you are open to seeking the positive opportunities that come with surprises–which is easier when you plan ahead–you’ll spend less time stressing and more time enjoying life. Time with your family is precious. Seize every moment you have together. These are trying times. Stay safe and healthy.

Be ultimately prepared

Avast Ultimate is a suite of everything you need to look after all your family’s devices in one easy-to-use service complete with tuneup and cleanup tools.

Advanced antivirus and anti-tracking privacy protection features prevent malware while blocking stalkers and advertisers from following your family’s online activity.

Check out our Back-to-School Sale to save on a year’s subscription of Avast Ultimate.
... Continue Reading]]> Quote:

Revisit your router.

Vaccinate your device.

Get creative with your passphrases.

Have THE talk.

Practice what you preach.

In this world of data collection and processing, Apple takes the lead on privacy

When it comes to online privacy, one Big Tech company has taken the lead. I’ll give you a hint: Their name is a fruit and their founder really liked black turtlenecks.

Ding ding ding! If you guessed Apple, you’re right on the money. The tech behemoth has planted a flag in the privacy space, doubling down on the idea that it’s a “fundamental human right” and cracking down on apps and services that track users and compile data. This year alone we’ve seen them roll out anti-tracking features — including the option to opt-out of app tracking — and a Hide My Email feature that helps protect people from data breaches.

They’re not perfect, of course. Apple has been criticized for the potential for law enforcement to access data that’s stored on iCloud. There are serious questions about how data is collected and used within the Apple ecosystem. But I spend all day every day writing about online security and privacy and I’m being completely up front when I tell you that I recommend Apple to my friends and family because of their privacy measures. Again: it’s definitely not perfect. But Apple is further along the privacy path than the majority of their competitors.

So with all of that in mind, let’s take a look at Apple for this installment of What Does the Internet Know About Me?

What does Apple track?

Apple obviously has a lot of different products, so let’s take a look at their overarching Privacy Policy. They explicitly state the situations in which they’ll collect data, which include when you “create an Apple ID, apply for commercial credit, purchase and/or activate a product or device, download a software update, register for a class at an Apple Store, connect to our services, contact us (including by social media), participate in an online survey, or otherwise interact with Apple.”

If you do any of those things, they might ask for the following:

Account information, including your Apple ID, email, devices, account status, and age
Device information, like your serial number or browser type
Contact info you provide
Payment info you provide
Transaction info, like which Apple products you’ve purchased and when
Fraud prevention information
Usage data, like which apps you’re using, your browsing and search history, product interaction, crash data, and performance and other diagnostic data
Location info, which is only precise when using “Find My,” otherwise it’s not exact
Health information, if you use their Health app or the health features of Apple Watch
Financial information, if you provide it for any “Apple-branded financial offerings”
Government ID, if required by your local government for certain services
Anything you share via email, social, or other communication with Apple

What does Apple do with my data?

Apple primarily uses my data to deliver the services I’ve asked for. They specifically state in their Privacy Policy that they retain personal data “only for so long as necessary to fulfill the purposes for which it was collected.” They also might share it with service providers, who are bound by Apple’s Privacy Policy, and third parties like financial institutions they partner with in order to provide services like Apple Card or Apple Cash.

The most ambiguous group that Apple may share my data with is titled “Others.” That category includes neutral “others,” like my carrier when I activated my account, and much less neutral “others,” like law enforcement or national security officers. However, Apple has so far been pretty resistant to law enforcement efforts to access individuals’ devices, even when they’ve been accused of atrocious crimes. So do with that what you will.

There’s a noticeable group missing from the list of who Apple shares data with and if you’ve been reading along with What Does the Internet Know About Me? for a while, you’ve probably already spotted it: Advertisers. Apple doesn’t share my data with advertisers and doesn’t compile it with other data sets to serve me targeted ads.

They do, however, process a lot of my data and use it to sell ads within their own ecosystem. It’s kind of a weird grey area, because they’re not sharing it with third parties but they’re still collecting and using it.

Is it worth it?

I kind of gave away the verdict in the opening of this article, but I’ll reiterate it here: If you care about privacy, Apple is the way to go. Is it perfect? No. Are there still advances to be made? Absolutely. Do I have concerns? One hundred percent. But in this world of data collection and processing, they’re better than nothing.
... Continue Reading]]> Quote:

Account information, including your Apple ID, email, devices, account status, and age
Device information, like your serial number or browser type
Contact info you provide
Payment info you provide
Transaction info, like which Apple products you’ve purchased and when
Fraud prevention information
Usage data, like which apps you’re using, your browsing and search history, product interaction, crash data, and performance and other diagnostic data
Location info, which is only precise when using “Find My,” otherwise it’s not exact
Health information, if you use their Health app or the health features of Apple Watch
Financial information, if you provide it for any “Apple-branded financial offerings”
Government ID, if required by your local government for certain services
Anything you share via email, social, or other communication with Apple

Prevent data loss by keeping a backup safe and sound on a local drive

We’ve all heard its origin story. Facebook, originally TheFacebook, was started in 2004 by Mark Zuckerberg and some of his Harvard classmates as a social site for the school alone. It was a big hit, of course, and suddenly other campuses wanted in. Over time, more and more schools were granted use of the platform, and soon certain businesses were allowed to use it as well. Then, in September 2006, Facebook opened its digital doors to any and all users (as long as they were over 13).

This means next month marks the 15-year anniversary of that moment. The realization made me stop and think, when did I join Facebook?
First, I remembered with nostalgia that it was back in 2008. Then, I realized with alarm that 13 years of my photos, comments, shares, and announcements – essentially all of my social media activity – have been logged and stored on Facebook’s servers, but not my own. If my account were to get hacked, I could lose it all.

NPR reported that Facebook account hacks seem to be surging, which is why we strongly recommend setting up two-factor authentication on your account. But while protecting data is good, having a backup copy is even better. That way, you’ll never experience data loss, no matter what happens.

If you’re thinking, whoa, all my Facebook activity would comprise a pretty darn big file, you’re right. It takes a few days for Facebook just to prep the file for your download. But it’s a very easy process and there is really no reason not to do it. Here’s how.

How to download a copy of your Facebook info

Click the “down arrow” account button in the upper right corner of Facebook
Select Settings & Privacy, then Settings
On the left, click Your Facebook Information
Next to Download Your Information, click View
On this screen, you select your date range (it includes an All Time option), and you can choose categories of data to include in or leave out of your download. You also choose which quality you want for the photos and media, and in which format you want the download, HTML or JSON. (HTML will display your data like a web page in your browser, but JSON will give you more easily editable data.)
Click Create File. Your request will appear as Pending in the Available Copies section of the Download Your Information tool. It may take a few days, but once the file is ready, Facebook will send you a notification.
When it’s ready, transfer the file to an external hard drive so you’ll always have a backup copy.
In six months, do this again, but only choose the Last 6 Months date range. (Or do it every three months if you want. Or every month.)

Getting in the regular habit of downloading your Facebook data and adding it to the external hard drive will ensure that your social media pics, your witticisms, observations, and heartfelt words are all safely backed up, should anything ever go wrong with your account.

I have always been an evangelist for backing up your data, and with Facebook’s 15-year anniversary coming up, I just had to share this tip with you. I hope you pass it on to your loved ones. Facebook’s much too fun to have the threat of data loss hovering over it at all times. Toss away your worries by backing up your data.
...
Continue Reading]]> Quote:

Click the “down arrow” account button in the upper right corner of Facebook
Select Settings & Privacy, then Settings
On the left, click Your Facebook Information
Next to Download Your Information, click View
On this screen, you select your date range (it includes an All Time option), and you can choose categories of data to include in or leave out of your download. You also choose which quality you want for the photos and media, and in which format you want the download, HTML or JSON. (HTML will display your data like a web page in your browser, but JSON will give you more easily editable data.)
Click Create File. Your request will appear as Pending in the Available Copies section of the Download Your Information tool. It may take a few days, but once the file is ready, Facebook will send you a notification.
When it’s ready, transfer the file to an external hard drive so you’ll always have a backup copy.
In six months, do this again, but only choose the Last 6 Months date range. (Or do it every three months if you want. Or every month.)

Recently, someone called me from the CDC. How can I verify that they're legit?

I got a weird call this weekend. That’s nothing special — my phone blows up with robocalls all day every day, just like everyone else’s — but the caller ID for this call caught my eye. It said “Cdc Natl Immun.” I thought about it for a second, then silenced it, assuming it was just another Covid-19 scam call. Because, really, does the CDC show up like that on caller ID? Seemed shady.

Then they called back, from the same number, a few minutes later. So I thought, okay, maybe this really is the CDC! We are in a pandemic and I want to do my civic duty, so let’s give them a shot.

But when I picked up, I was immediately on guard. Remember: I write all day every day about scams, be they online or over the phone, so I know the tricky technology — and even language — that scammers use to scam. This “CDC” guy was going to have to really prove himself to get me on his side.

And he just… Didn’t. Convince me, that is. He had a weird affect and didn’t really explain why he was calling and started by asking me about whether I was over 18, if I was driving, and whether or not I had kids in the house. The whole thing just felt so strange to me, so I told him that I wasn’t convinced this was a real call and I hung up the phone.

Turns out, I was wrong. A quick search for “CDC survey scam” led me to the CDC page explaining that it was legitimate. Apparently, they’re making calls from three numbers with Chicago area codes — 312-871-4241, 312-871-4242, and 312-871-4243 — and the call I received appeared to be from one of those. (And I say “appeared” because, as we’ll get into later, it’s very easy to spoof a caller ID.)

I realized I’d hung up on some poor dude who’s been hired by the CDC to do a national survey about kids and vaccines. And I felt like a jerk.
So I thought, okay, how could this have gone better? Here’s what I found for next time.

Verify the caller ID.

While Avast Threat Intelligence Director Michal Salát says he tells people to “never” answer phone surveys, he does say that if you want to participate, then the least you can do is verify the caller ID number.

In the case of the call I received, it was really easy to find the CDC page that explained what was going on. I double-checked the URL of the website, to make sure it was really the CDC, and checked the security certificate. That felt like good verification to me.

However, it’s important to remember: caller IDs can be spoofed. It’s probably a good idea to do one of the other tips here as well.

Call back on a verified number.

Salát also recommends not giving any information to the person who calls you directly, but instead going online to find a verified phone number from a legitimate source.

For example, in tech support scams it’s common for scammers to say they’re calling from Microsoft. It’s pretty easy to go to the official Microsoft “contact” information and figure out if the number that’s calling you is actually Microsoft. (Spoiler alert: It’s not.)

For the CDC vaccine survey, I found the phone number 1-877-220-4805 to call in order to verify whether or not it was real.

Don’t give them any personal info.

This is one of the reasons my scammer Spidey-senses were tingling on this call: I felt like he was about to ask me personal information and I know that’s a big no-no. “In general, if they are asking any personal questions or ask for personal data, you should hang up or tell them that you'll call back,” Salát says.

But I realized after talking to Salát about the types of personal information you should never share — namely, any kind of ID number (like a social security number, for example), date of birth, where you live, what type of internet service you have, and any answers to popular security questions, for example — that the caller wasn’t asking for specifics. He literally asked me if I was over 18, whether I was driving at that exact moment, and whether there were children under the age of 18 in my house.

Those are all legitimate questions that someone doing a survey for the CDC about kids and vaccines would ask. And I hung up on him. Yup, I’m a jerk.

Never pay.

Finally, don’t send money — of any kind — to anyone who calls you out of the blue.

“If they ask you to take some specific action which involves money in any form (checks, gift cards, money orders, Zelle, PayPal, etc.) — don't do it, “Avast Global Head of Security Jeff Williams says. Anyone with a legitimate need for this should not be doing this sort of thing by phone, email, Discord, SnapChat or anything similar.”

This one is less relevant in the case of the CDC vaccine survey call but it’s so common in other types of phone scams, so it’s worth mentioning.

In conclusion, I didn’t do my civic duty. I hung up on a guy who was just trying to do his job. I felt like a jerk — but I don’t regret it. Because, ultimately, I’d rather be overly cautious with this type of thing than get scammed out of my life savings or have all the data on my computer or my identity stolen.

But I do know that sometimes these calls are legitimate and important. So, CDC, if you’re reading? It might be time to do some trainings around what scam calls sound like, so you don’t sound like one. In the meantime, I think you’re going to get a lot of hung up calls.
... Continue Reading]]> Quote: