Ta kontakt med oss

SOCIAL

Watch out for ‘Meta-Phish’: New scam seeks to collect data on Facebook users

Publicerad

Watch out for 'Meta-Phish': New scam seeks to collect data on Facebook users

Image: — © AFP Anatolii Stepanov

Users of social media have been warned about a new phishing campaign. The cyber-scam uses  Facebook posts to trick users into handing over their account credentials and personally identifiable information.

Dubbed Meta-Phish, the scam works by attackers sending fake copyright infringement notices warning Facebook users that their accounts would be deleted within 48 hours unless they appeal the decision.

Users are then diverted to a fake appeal form, which collects key personal data about the user, which can put the unwitting recipient at far greater risk of issues like personal identification data theft. The appeal URL links to an actual Facebook post, allowing the threat actor to evade email security checks and deliver phishing messages to users’ inboxes.

Looking into this latest attempt to utilize technology to defraud others, for Digital Journal, s Tonia Dudley, CISO at Cofense.

Dudley explains why those engaging in such illicit activity have turned to Facebook: “With nearly 2.9 billion monthly active users, Facebook has unfortunately been an active target for scammers seeking to exploit accounts and make financial gains for a long time.”

In terms of the form of attack, Dudley elucidates: “This recent attack is very similar to a December 2020 phishing campaign that tricked users into giving scammers their account credentials for fear that their accounts would be disabled. In this case, scammers alerted users to a copyright infringement issue and linked them to an external “support” site named after Meta to reduce suspicion.”

Going into more detail, Dudley adds: “As is common in many of today’s phishing attacks, a critical component of this particular attack is its lure design. Threat actors play the fear factor in many phishing campaigns, which causes many users to overlook common indicators of a phishing attempt, including an improper tone or greeting, grammar or spelling errors and inconsistencies in email addresses, links and domain names.” 

Dudley sees the main responsibility in addressing these attacks as falling with Facebook rather than the user. Dudley states: “To prevent future phishing attacks, organizations like Facebook must take the necessary steps to protect inboxes, detect threats, and respond to an attack.”

Dudley also recommends that the social media giant adopts “actionable intelligence that gives visibility into the risk factors in your network and immediately and decisively responds to phishing threats will help keep malicious actors at bay and ensure the protection of sensitive data.” 

Källlänk

Håll ett öga på vad vi gör
Bli först med att få de senaste uppdateringarna och exklusivt innehåll direkt till din e-postinkorg.
Vi lovar att inte spamma dig. Du kan avbryta prenumerationen när som helst.
Ogiltig e-postadress

SOCIAL

An Overview of Generative AI [Infographic]

Publicerad

An Overview of Generative AI [Infographic]

Generative AI is the latest big tech trend, with the latest variations of text and image generators now able to create original content that’s comparable to human outputs, opening up a range of new possibilities.

That’s also freaking a lot of people out, due to concerns that they could be out of the job entirely due to the sudden influx of impressive AI tools. And some, like digital artists, are already feeling the pinch – but it is worth noting that AI systems can only iterate on what’s come before, in order to provide similar content, they can’t come up with entirely original, unique, or even trustworthy material.

‘Trustworthy’ in this context relates to the accuracy of the text data such systems provide, with AI systems known to ‘hallucinate’ answers based on the various data points they can connect to your query. Essentially, you really have to know and understand the topics that you’re focusing on to produce the best results, because you can then view the outputs with a more critical eye, and ensure no mistakes or errors slip through.

In this sense, these tools work best as assistants – and in that context, it’s less about them taking your job, and more about them leveling up your capacity.

To provide more context as to what these systems are, and how they work, the team from Visual Capitalist has put together a basic overview of some of the key generative AI processes that you need to know about as we move into the next stage of the digital era.

Understanding these tools, and their many applications, will soon become a requisite for many roles – and the more you know, the better placed you’ll be.

Time to jump in – check out the fullständig infografik Nedan.

Källlänk

Håll ett öga på vad vi gör
Bli först med att få de senaste uppdateringarna och exklusivt innehåll direkt till din e-postinkorg.
Vi lovar att inte spamma dig. Du kan avbryta prenumerationen när som helst.
Ogiltig e-postadress
Fortsätt läsa

SOCIAL

US state to require parental consent for social media

Publicerad

Sociala medier i Niger utsattes för en massiv desinformationsattack i februari, har en AFP Fact Check-utredning funnit

Social media. – © AFP Denis Charlet

Utah on Thursday became the first US state to require social media sites to get parental consent for accounts used by under-18s, placing the burden on platforms like Instagram and TikTok to verify the age of their users.

The law, which takes effect March 2024, was brought in response to fears over growing youth addiction to social media, and to security risks such as online bullying, exploitation, and collection of children’s personal data.

But it has prompted warnings from tech firms and civil liberties groups that it could curtail access to online resources for marginalized teens, and have far-reaching implications for free speech.

“We’re no longer willing to let social media companies continue to harm the mental health of our youth,” tweeted Spencer Cox, governor of the western US state, who signed two related bills at a ceremony Thursday.

The bills also require social media firms to grant parents full access to their children’s accounts, and to create a default “curfew” blocking overnight access to children’s accounts. 

They set out fines for social media companies if they target users under 18 with “addictive algorithms,” and make it easier for parents to sue social media companies for financial, physical or emotional harm.

“We hope that this is just the first step in many bills that we’ll see across the nation, and hopefully taken on by the federal government,” said state representative Jordan Teuscher, who co-sponsored the bill.

Michael McKell, a Republican member of Utah’s Senate who also sponsored the bill, said it was a “bipartisan” effort, and praised President Joe Biden’s recent State of the Union address, in which he raised the issue.

Biden last month called on US lawmakers to restrict how social media companies advertise to children and collect their data, as he accused Big Tech of conducting a “for profit” experiment on the nation’s youth.

California has already introduced online safety laws including strict default privacy settings for minors, but the Utah law goes further.

Lawmakers in states such as Ohio and Connecticut are working on similar bills.

Platforms including Instagram and TikTok have introduced more controls for parents, such as messaging limits and time caps.

At Thursday’s ceremony in Utah, McKell pointed to data from the federal Centers for Disease Control and Prevention which he said highlighted the toll social media apps can have on young minds.

“The impact on our daughters — and I have two daughters — it was incredibly troubling,” he said. 

“Thirty percent of our daughters from ninth grade to 12th grade had seriously contemplated suicide. That’s startling.”

Källlänk

Håll ett öga på vad vi gör
Bli först med att få de senaste uppdateringarna och exklusivt innehåll direkt till din e-postinkorg.
Vi lovar att inte spamma dig. Du kan avbryta prenumerationen när som helst.
Ogiltig e-postadress
Fortsätt läsa

SOCIAL

ChatGPT is being used to lure victims into downloading malware

Publicerad

ChatGPT

Hackers are trying to capitalize on the enormous popularity of ChatGPT to distribute malware, security experts have warned.

A report from cybersecurity researchers CloudSEK has detailed an elaborate scheme that includes stolen Facebook accounts, groups, and pages, malicious Facebook ads, and fake ChatGPT software.

Källlänk

Håll ett öga på vad vi gör
Bli först med att få de senaste uppdateringarna och exklusivt innehåll direkt till din e-postinkorg.
Vi lovar att inte spamma dig. Du kan avbryta prenumerationen när som helst.
Ogiltig e-postadress
Fortsätt läsa

Trendigt

sv_SESvenska