Scams

Graham Cluley reports that UK losses from hacked email and social media accounts have risen by 417%, with scammers posing as your friends to sell tickets to gigs that do not exist. The post says this is part of a big rise in cyber scams stealing social media accounts. Home users should be careful with messages from friends that ask for money or tickets, and check requests through another channel before paying.

KnowBe4 reports that a phishing campaign is targeting Google accounts with fake offers of free Claude Max subscriptions. The site uses a browser-in-the-browser trick to show a fake Google login window, so users should avoid signing in from unexpected giveaway pages and check the real web address before entering credentials.

Malwarebytes Labs reports that Domino’s customers have received emails saying their account was accessed by a third party. Domino’s says its systems were not breached, and that the logins used a password and email combination stolen from another online account. The company reset affected accounts and says customers should use a strong, unique password for every site, turn on two-factor authentication where available, and avoid following links in unsolicited emails. Unsolicited account-update emails claiming to be from Domino’s may be phishing attempts.

Malwarebytes Labs reports that Free Mobile customers received very convincing phishing emails after a major data breach. The post says the emails appeared after the breach and were aimed at customers, so ordinary users should be careful with messages that ask for account details or other personal information and avoid clicking links in unexpected emails.

The Record reports that an international police operation has disrupted the KillSec ransomware group, with three suspects arrested and five servers seized. Authorities say the group used software vulnerabilities and poorly secured entry points to steal data and pressure victims into paying ransoms. Windows users and small offices should keep systems and internet-facing services updated, use strong passwords, and be cautious with unexpected messages or files that could lead to account theft or malware.