Scams use deception to steal money, credentials, or sensitive data, making them a cybersecurity risk for individuals and organizations.
Search across headline titles and summaries.
Background for this topic.
Scams are deceptive schemes intended to make people surrender money, credentials, sensitive information, or access. In information security, they commonly use phishing messages, impersonation, fraudulent websites, business-email compromise, fake technical support, or malicious attachments. Their defining feature is manipulation: the attacker creates a credible pretext and pressures the target to act before verifying the request.
Security teams should treat scams as an attack surface spanning email, messaging, telephone calls, social media, and payment workflows. Material risks include account takeover through stolen credentials, unauthorized payments, disclosure of personal or company data, and malware execution from deceptive content. Useful controls include phishing-resistant authentication, secure payment-change procedures with independent verification, filtering and domain protections, user training focused on reporting, and rapid review of suspicious messages or transactions. Incident handling may require revoking sessions, resetting credentials, contacting financial institutions, preserving evidence, and notifying affected parties where applicable.
Weekly headline count for the current query.
Apps on your iPhone must come from the App Store. Except when they don't... we explain what to look out for.
216 questioned, 15 arrested, 4 fake call centres searched, millions seized...
When someone calls you up to warn you that your bank account is under attack - it's true, because THAT VERY PERSON is the one attacking you!
The Cryptoqueen herself is still missing, but her co-conspirator, who is said to have pocketed over $20m a month, has been convicted.
Five tips to keep yourself, and your friends and family, out of the clutches of "chopping block" scammers...
The warning is hosted on a real Facebook page; the phishing uses HTTPS via a real Google server... but the content is all fake
Don't let a keen eye for bargains lead you into risky online behaviour...
Learn how to protect yourself from big-money tricksters like the Hushpuppis of the world...
That was the week that was...
Two years of scamming + $10 million leeched = 25 years in prison. Just in time for #Cybermonth.
Some thoughts for Cybersecurity Awareness Month: Is is worth reporting nuisance calls? Is it even worth reporting outright scams?
It sounds like a scam that could never work: use a picture of browser and convince the user it's a real browser. You might be surprised...
Last time they arrived 28 minutes after lighting up their fake domain... this time it was just 21 minutes
The crooks hit us up with this phishing email less than half an hour after they activated their new scam domain.
It's a simple jingle and it's solid advice: "If in doubt, don't give it out!"
Friends don't let friends get scammed. Not everyone knows how typical scams unfold, so here are some real-world examples...
Home delivery scams are getting leaner, and meaner, and more likely to "look about right". Here's an example to show you what we mean...
Voting safeguards based on commuity collateral don't work if one person can use a momentary loan to "become" 75% of the community.
"Install this moneymaking app" - this one is so special that it isn't available on Google Play or the App Store!
Latest episode - listen now (or read it, if that's your preference)...