One Windows habit people still get wrong: don’t just trust the file extension. In File Explorer, turn on View > Show > File name extensions so .pdf.exe and similar tricks are visible. If a “document” ends in .exe, that’s not a document. That’s Windows being polite about trouble.
…
Good move by Microsoft and the partners involved. Taking down the domains is one of the few things that can actually slow these phishing kits down for a while, even if the operators usually try to pop back up elsewhere.
That’s a neat little reminder that browser address bars are still a minefield if you’re not paying attention. Typosquatting with lookalike characters is the sort of trick that works because people are busy, which is, unfortunately, most of us.
One Windows check people skip: make sure Controlled folder access is actually on in Windows Security > Virus & threat protection > Ransomware protection. If ransomware ever gets a foot in the door, this can stop it from trashing your Documents and Desktop. Handy little gatekeeper, assuming it’s been left awake.
