Beware of Phishing Text Messages Pretending to Be USPS
0
richardtech

Cybersecurity threats are becoming increasingly sophisticated, and one of the latest scams involves fake text messages pretending to come from trusted organizations like USPS. At RichardTECH, we are committed to keeping you informed and protected against such scams. This article will help you recognize these phishing attempts and protect yourself from becoming a victim.

What Are Phishing Texts?

Phishing texts, also known as “smishing” (SMS phishing), are fraudulent messages designed to trick you into providing sensitive information, such as passwords, credit card details, or other personal data. These scams often impersonate trusted organizations to gain your trust and prompt immediate action.

Example of a Phishing Text

Below is an example of a suspicious message many people have reported receiving. The message claims to be from USPS, but it contains several red flags:

Message Details:

  • The sender is an unfamiliar phone number.
  • The message claims there’s an issue with a package due to an “invalid zip code.”
  • It includes a suspicious URL (e.g., https://usps.com-packzem.com) that is not an official USPS website.
  • The instructions to reply with a “Y” and reopen the text to activate the link are highly unusual for USPS or any legitimate organization.

Red Flags to Watch Out For

Here are some signs that the text message you received might be a phishing attempt:

  1. Unknown Sender: The message comes from a phone number or email address that doesn’t look official.
  2. Suspicious Links: The URL in the message may look similar to a legitimate website but contains extra words, characters, or domains (e.g., “usps.com-packzem.com”).
  3. Urgent or Threatening Language: Scammers often use urgency (e.g., “Act within 24 hours”) to pressure you into acting without thinking.
  4. Poor Grammar or Spelling: Legitimate organizations usually proofread their messages carefully.
  5. Requests for Personal Information: USPS will never ask for sensitive information like passwords or credit card details via text.

What to Do if You Receive a Phishing Text

  1. Do Not Click the Link: Clicking the link could lead to malware being downloaded onto your device or your information being stolen.
  2. Do Not Reply: Replying to the message confirms that your number is active and may lead to more scam attempts.
  3. Verify the Message: If you’re concerned about the validity of the message, go directly to the official USPS website or contact USPS customer service.
  4. Report the Message:
    • On iPhone: Tap “Report Junk” below the message.
    • On Android: Block the sender and report the message as spam.
    • You can also forward the message to 7726 (SPAM) to report it to your mobile carrier.
  5. Delete the Message: Once reported, delete the message from your phone.

How to Stay Safe Online

  • Be Skeptical: Always question unexpected messages that request personal information or urge immediate action.
  • Use Official Websites: Access services directly through official websites or apps instead of clicking on links in unsolicited messages.
  • Enable Two-Factor Authentication (2FA): Adding an extra layer of security to your accounts can protect you even if your credentials are compromised.
  • Keep Software Updated: Ensure your device’s operating system and antivirus software are up-to-date to protect against malware.

Final Thoughts

Phishing scams like this one are on the rise, but staying informed is the first step in protecting yourself. At RichardTECH, we prioritize cybersecurity and are here to help if you need guidance or support. Share this article with your friends, family, and colleagues to spread awareness and keep everyone safe from these deceptive scams.

Stay safe online,

Richard A. Ovalle JR
RichardTECH

Google bans ‘stalkerware’ from Play store
0
richardtech

Google has issued a ban on any software that allows an individual to track the whereabouts of other users without their consent, apps often referred to as ‘stalkerware‘.

As a part of new changes to its Developer Program Policy, Google said that Android apps intending to monitor other users’ behaviour will be obliged to present the tracked user with a persistent notification and unique icon that clearly identifies the app.

They will also be banned from advertising themselves as a “spying or secret surveillance solution” and will be unable to “hide or cloak tracking behavior or attempt to mislead users about such functionality”.

However, the ban, which comes into effect on 1 October, does not apply to apps used by parents to track the whereabouts of their children. Any software that allows companies to track employee devices, such as enterprise management apps, will also be excluded from the ban.

According to David Emms, principal security researcher at Kaspersky, apps which help monitor adults without their permission or knowledge “masquerade as parental control software and call themselves legal that way”.

“The whole category is tricky because we can’t label it as malware and report it as we would a backdoor trojan or similar, because in some jurisdictions it’s legal so it straddles a grey area,” Emms told IT Pro last month.

According to Kaspersky research, the period between January and August 2019 saw over 518,223 cases globally where the company’s protection technologies either registered presence of stalkerware on user devices or detected an attempt to install it – a 373% increase in the same period in 2018.

Apart from the formal ban of stalkerware apps, Google also announced that it would be making changes to its policy in order to tackle the issues of misrepresentation and gambling.

Effective from 21 October, developer accounts will not be allowed to mislead users by impersonating any person or organisation, as well as misrepresenting or concealing their ownership or primary purpose of the app.

Google will also restrict online gambling to the UK, Ireland, France, and Brazil.

For confidential advice, call the National Abuse Helpline on 0808 200 0247 or visit nationaldahelpline.org.uk

by: Sabina Weston17 Sep 2020

Source: https://www.itpro.co.uk/security/spyware/357137/google-bans-spouseware-from-play-store