Recent Posts

Pages: 1 2 [3] 4 5 ... 10
21

These texts are not for you. getty
Update: Republished on May 6 with new intelligence on the scale of dangerous texts.

America’s Android and iPhone users are under attack from a plague of dangerous text messages driven by organized Chinese gangs. The FBI has warned that such scams are sweeping the country “state to state,” and thus far no network or phone maker has been able to stem the tide. This is not getting better, it’s getting worse — much worse.

While undelivered packages and unpaid tolls have grabbed the headlines, it’s a different type of malicious text that has been described by the police as “the latest, fastest growing digital scam,” and which was highlighted by the FTC as a threat to Americans.

We’re talking wrong number lures, which have already been sent to tens of millions of Americans, with countless more sent every day. The intent of the text is to solicit a reply, to trick the recipient into a chat. The FTC warns these “often evolve into a conversation with romantic undertones that can lead to investment and other scams.”

If you haven’t been hit up by these texts yet, the chances are that you will. It might be a simple call out to a name you don’t recognize or it might tempt a reply with a lure such as “Hey Stacy, just making sure you’re still on to meet at 6pm. I’m heading there now,” to trick you into a well-meaning reply to let the sender know it’s a wrong number.

Other lures might include a doctor’s appointment, a social event, a funeral, a hospital visit, a message after a long absence, anything to solicit a reply. This is pure social engineering, the itchy texting fingers we all have. The texts will usually start with a name that isn’t yours. The intent is to be clear it’s a wrong number from the start.

The goal of the text often isn’t to lead into a conversation of any kind — all the attacker needs is for you to reply, to reply with anything, and they hit their target. Your phone number is included in multiple databases that are held overseas by the organized criminal gangs behind these operations. Wrong number lures are a powerful way to confirm your number is active — the text goes through — and the user is willing to reply.

If you do reply, an unrelated attack will follow. Not necessarily straight away, but soon. And it won’t just be one further attempt, the gangs have multiple different ways to try to trick you into clicking a link, giving away your passwords, your financial information, and potentially even your identity. This is fraud on an industrial scale.

McAfee warns “these messages may seem harmless, but they’re often the first step in long-game scams designed to steal personal data — or even life savings. McAfee research shows 1 in 4 Americans have received one. Best advice? Don’t engage.”

The power in this approach is the message itself doesn’t seem to be a scam. As Bitdefender says, “these texts though are not so obvious from the beginning, with no red flags such as suspicious links or mentions of you winning a prize.”

A new report from XConnect and Mobilesquared highlights the scale of the market when it comes to “harmful” traffic, swhcuh is defined as “SMSes that can have a direct or indirect negative impact on consumers and enterprise, including smishing, SIM farms, AIT, trashing, SIM swap, and so on.”

The report suggests “harmful traffic levels peaked in 2023 and are projected to gradually decline over the remainder of the forecast period to 2029. Harmful traffic peaked at just over 18% of total traffic and will drop to around 16.5%."

That said, a reduction from 18% to 16.5% is not the game-changer most would hope for, and they’d certainly want to see better filtering of such threats by networks or devices. The other factor that plays here is the likelihood for detection and whether the fraud will hit its targeted outcome. It’s here that the acceleration of AI-fueled scams will have a devastating impact, making attacks much more efficient and effective.

“Over half of telecoms service providers expect SMS to experience an increase in fraud in 2025,” says Digit News, citing these latest findings, "with less than a third expecting SMS to become a cleaner channel in this period." That’s not a good news story.

Fortunately this works both ways — or will when it starts to make more of a dent. Google Messages, essentially the stock texting client on Android, “now uses AI to flag conversational text patterns commonly associated with scams, so you can identify messages that seem harmless, but turn dangerous over time."

Meanwhile, the FBI warns that “though they’re posing as regular people who entered the wrong numbers on their phones, the scammers who run fake wrong-number text scams use extremely sophisticated technology to commit their crimes.” The bureau tells users to report these scams to www.ic3.org and to “delete any smishing texts received.”

source
22
On the last day of April 2025, Intel and Nvidia shipped several new drivers for Windows 11 version 24H2, 23H2, and all supported versions. AMD also shipped Ryzen Chipset Driver 7.04.09.545 and Adrenalin 25.4.1 (optional update), but they started rolling out earlier in the third week of April 2025.

So what’s new in Windows 11 April 2025 driver updates? Let’s first talk about Intel’s release, which has been in the news for all the wrong reasons. Intel GPU Driver 32.0.101.6739 has patched several issues, and it’s targeted as a non-WHQL release, which means it’s not supposed to download or install automatically.

According to the release notes, Intel has fixed an issue where PyTorch 2.7 does not work correctly on Arc-B series and Ultra Series 2 lineup. For those unaware, PyTorch 2 is a machine learning based library that allows you to work with NLP on your PC and is typically used by AI/ML users/developers.

Intel has also posted Wi-Fi Driver 23.130.1.1 and Bluetooth 23.130.0.3, but in our tests, Windows Latest observed that they do not make any significant changes. There have been some concerns about Intel drivers draining battery on Windows 11, but these updates have not fixed the reported issues.

However, there are some other fixes in Intel Wi-Fi Driver 23.130.1.1 and Bluetooth Driver 23.130.0.3, including better performance and stability.

And that’s all. No major issues have been fixed in all these Intel releases. To get the Intel April 2025 Update driver updates, just follow these steps:

Download and install the Intel Driver and Support Assistant (DSA) tool.
You’ll find the option to open the Intel Update Assistant app via the system tray.
Intel Wi-Fi Driver for Windows 11
Finally, start checking for updates, and you’ll see the updates listed on Intel’s website, which opens automatically when you check for new drivers. It opens in the default browser.
Click on “Download” next to the updated driver, and Intel’s installation wizard will open to apply the updates.
AMD Ryzen Chipset Driver 7.04.09.545 and GPU Driver 25.4.1 for Windows 11 24H2 (April 2025)
AMD has posted Ryzen Chipset Driver 7.04.09.545 for Windows 10 and 11 with minor bug fixes in some components.

This update is available via AMD’s website only, but remember it’s not a major release, and I recommend that you skip it because a better release will come soon or be offered via Windows Updates.

Drivers released via Windows Update are typically more stable, but older.

There’s also a GPU driver update. AMD Adrenalin 25.4.1 graphics driver is currently marked as optional, but it fixes tons of issues and adds support for the following games:

Elder Scrolls
Assassin’s Creed Shadows
Kingdom Come Deliverance 2
Dynasty Warriors Origin
Civilization 7
Naraka Bladepoint
AMD has fixed an issue where some of you might run into problems with DirectML/GenAI models on newer GPUs, including Radeon RX 7000. In the case of the Radeon RX 9000, you will notice that the GPU cannot generate the images correctly despite using the proper GenAI model.

Last but not least, AMD has fixed a bug where the integrated camera is not detected on Windows 11 24h2.

You can find the driver on AMD’s website.

GeForce 576.28 WHQL driver for Windows 11 24H2
Nvidia GeForce 576.28 WHQL is a nice release because it patches a bug where some games crash on Windows 11 24H2.

Microsoft has already done some work on the game crashes issue on Windows 11 24H2, but Nvidia’s efforts were also required to improve performance.

For example, Nvidia confirmed that a bug has been fixed where Task Manager reports lower GPU clock speeds in Windows 11. A bug that causes a black screen on Windows 11 is now patched, and you’ll no longer run into flickering or incorrect lighting.

Nvidia driver 576.28 for Windows 11 24h2

You can head to Nvidia’s download page and download GeForce 576.28 or just use the Nvidia app.
Via windowslatest.com
23
Windows 11 / Windows 11 24H2 downloads even if you don’t want it
« Last post by riso on May 06, 2025, 12:47:00 PM »
Windows 11 24H2 now offered via Windows Update on affected PCs. Windows 11 version 24H2 will now show up for “download and install” automatically if you go to Settings > Windows Update and click Check for updates, but only when your device does not have a compatibility hold. Even if you don’t check for updates, Windows 11 24H2 will automatically download at some point.

As first spotted by Windows Latest, Microsoft quietly confirmed that Windows 11 24H2 has finally entered the last phase of the “rollout.” As I have personally observed with Windows 11 23H2 or 22H2 in the past, the last phase is when Windows 11 feature update is declared “fully ready” and is configured to download automatically.

In our tests, Windows Latest observed that when we check for updates on the Settings app, we’re automatically seeing Windows 11 24H2, and it also starts downloading. But this is not the case for everyone.

The Windows 11 2024 Update is offered immediately when you check for updates, but it will not download unless you click “Download and install.” Nothing downloads until you click that “Download and install” button (or “Install all” if you have cumulative + feature updates grouped together).

However, Windows 11 can automatically check for updates in the background, and in some of those cases, Windows 11 24H2 will start downloading on its own.

“Devices running Home and Pro editions of Windows 11, versions 23H2, 22H2, and 21H2 that are not managed by IT departments will receive the update to version 24H2 automatically,” the company noted in the support document.

You’ll get an alert when the upgrade is being downloaded and is pending installation, and that’s where things get interesting because Windows 11 doesn’t let you cancel an ‘upgrade’ when it’s already downloaded.

Microsoft says that “you can choose the time to restart your device or postpone the update,” but you’ll not see an option to cancel it.

What can you do when Windows 11 version 24H2 is being downloaded, but you hate it because it caused issues on your PC and don’t want it at this point?

How to cancel Windows 11 version 24H2 forced installation
We’ve already posted a well-detailed “How to block Windows 11 24H2 if it is already downloading,” but to repeat it all over again, here’s how to cancel the upgrade using Command Prompt:

We recommend using Command Prompt. You can launch it by typing cmd.exe in Windows Run or search Command Prompt using Windows Search.
In Command Prompt, you need to run two commands to stop the Windows Update service. To do this, just run these commands:
net stop wuauserv

net stop bits
Once you’ve paused the updates, you will have access to Windows Update-related folders, which means you can now delete the Software Distribution folder. This folder contains Windows Update files, including those required for version 24H2.
To remove the folder, run the following command:
del /f /s /q %windir%\SoftwareDistribution\Download\*

But that’s not all. You’ll still need to specifically block Windows 11 24H2 because it will start downloading again. To block it, we can use wushowhide tool, which you can find on our Discord server (attachments channel).
Run the wushowhide.cab. Follow the on screen instructions, click Next and select the Hide updates option.

In the “Hide updates” section, you can select “Windows 11, 24H2 version“, and then move ahead with “Next.”

You can now close the tool, and Windows 11 24H2 would have been cancelled plus paused at this point.
You will also need to resume the Windows update service by running net start wuauserv in the Command Prompt.

There are also other ways to cancel the upgrade, and I recommend following our guide on how to block Windows 11 24H2 if it is already downloading to know more.
Via windowslatest.com
24
Webcapture Google Pic, source winfuture.de




25

Tracking is here to stay. getty
Google has just updated Chrome to kill a secretive form of tracking most of you didn’t even realize was there. It should be a good news story. But it has been overshadowed by the worrying news that Chrome’s more infamous form of tracking is here to stay, and that a separate, outlawed form of tracking has also returned.

First to that good news. Google confirmed the stable release of Chrome 136 this week, which stops bad actors abusing Chrome’s display of previously visited webpage links to assemble a history of where you’ve been, or more realistically publishing links to determine which of you visiting its site have been to specific webpages.

As Google explains, “if you clicked a link, it would show as ‘:visited’ on every site displaying that link. This was the core design flaw which enabled attacks to reveal information about the user’s browsing history.” Here’s the worked example. “You are browsing on Site A and click a link to go to Site B… Later, you might visit Site Evil, which creates a link to Site B as well. Without partitioning, Site Evil would display that link to Site B as :visited — even though you hadn’t clicked the link on Site Evil.”

The fix is simple. Chrome will only mark websites as previously visited if you clicked through from the website you’re currently on, partitioning the data. A little clunky, but much safer than making that universal “:visited history” dataset available to all.

Google confirmed this change on April 2. But then just twenty days later, it announced “we’ve made the decision to maintain our current approach to offering users third-party cookie choice in Chrome, and will not be rolling out a new standalone prompt for third-party cookies.” In other words, tracking cookies are here to stay and the teased one-click stop tracking prompt was not going to be offered to users after all.

Just a few weeks earlier came Google’s other awkward u-turn — digital fingerprinting, the practice of harvesting IP addresses, and browser and device identifiers to provide a form of unique user profile. This had been outlawed — by Google ironically — but was suddenly back. And whilst originally it had just impacted browsers, its return saw a wider remit encompassing smart TVs, gaming consoles and all your other devices.

When the return of digital fingerprinting was announced in December, it was balanced against ongoing efforts to kill cookies — one way or another. Now that’s not going to happen, we’re left with both tracking cookies and digital fingerprinting. Two u-turns. On any level, it seems a far worse situation for Chrome users than we expected. Browsers and smart devices — everything is now being tracked.

You can’t do much about digital fingerprinting — there’s no opt-out. But you can use Chrome’s incognito mode to mask your IP address and cut down its trackers. You can also switch to a different, more private browser. Cue Apple’s Safari ads. Thus far, Chrome’s 3 billion users are voting with their feet, through, and sticking around.

If it’s already hard to keep up, the DOJ’s action won’t help.

source
26
Windows 10 | Windows 8.1 Pic's | Videos / Video test youtube
« Last post by riso on May 02, 2025, 02:27:13 PM »
27
into the bloat-free, faster operating system you need



The lukewarm reception to Windows 11 is clear from the wave of third-party tools built to fix it. One of the most recent is Crapfixer Rebirth Version, a utility that’s been around for about seven years (although it looks older), which has now been given a full refresh.

Winhance is another tool you’ll definitely be interested in. It can debloat and optimize Windows -- and keep it that way. Although it’s been designed for Windows 11 it works just fine on Windows 10. Winhance was originally a PowerShell GUI application, but version 4 is a standalone app that can be installed or uninstalled easily, and it also comes in a portable version, so there's no reason not to get started with it today.

Winhance allows you to install or remove Windows apps and features like Microsoft Edge, OneDrive, Recall, Copilot, and other optional packages and capabilities, as well as directly install additional software such as browsers, multimedia apps, document viewers, and any other applications you might need when setting up a fresh Windows installation.

The app offers an extensive selection of system optimization tools, giving you access to Windows security settings, privacy controls, gaming and performance tweaks, update management, power settings, and optimizations for Explorer, notifications, and sound.

It also lets you customize the Windows experience, including theme selection, taskbar adjustments, Start menu settings, and more.

Users can manage their Winhance settings by saving them to configuration files for easy import on new systems or after a reinstall. The app itself also supports light and dark themes.





This is what’s new in Version 4:

   • Winhance changed from a PowerShell GUI Script to a C# application with proper
      install/uninstall support and a portable version.

   • Winhance now has its own logo

   • Winhance now has its own download page http://winhance.net

MainWindow & UI Changes

   • Changed to Google Material Symbols rather than relying on Windows Fonts to render symbols
      which created inconsistencies in the app between Windows 10 and Windows 11.

   • Added Save & Import Config buttons that can be used to manage selections and settings in Winhance

   • Added Support/Donate Button

   • Added a styled scroll bar

Software & Apps View Changes

   • Windows Apps & Features Section

   • Added a section with a legend to explain symbols that appear in the Windows Apps GUI and a search bar to search for items

   • Moved the "Remove Selected Items" button to the top and added an "Install Selected Items"
      button below it to install items if available.

   • Seperated Windows Apps, Legacy Capabilities and Optional Features into different sections for better organization.

External Apps Section

   • Added a new section with multiple useful apps in different categories ex. Browsers, Multimedia
     utilities, Document viewers etc. that can be installed via WinGet.

Optimize View Changes

   • Added an info section with a legend and search bar to search for items.

   • Added an icon to indicate if a registry key or value is missing.

   • Added toggle switches to each available setting in their subcategories (ex. Privacy, Gaming
      etc.) to allow users better control over what is applied.

   • Moved Sound, Notifications and a part of the Explorer customizations from Customize View to the Optimize View.

   • Added a Combobox/Dropdown menu in Power Settings to select a Power Plans

Customize View Changes

   • Added an info section with a legend and search bar to search for items.

   • Added an icon to indicate if a registry key or value is missing.

   • Added toggle switches to each available setting in their subcategories (ex. Taskbar, Start Menu
      etc.) to allow users better control over what is applied.

   • Changed the Windows Theme selector (Dark Mode/Light Mode) to a Combobox/Drodown Menu

About View Changes

   • Removed About View, will add a similar view with a better structure in a future update

You can download Winhance 4 from here, and if you want to see the tool in action you can watch the video here.


source
28

Upgrade now, yes or no — it’s time to decide Getty Images

Update: Republished on April 29 with new analysis of this latest move by Microsoft.

Decision time. Microsoft has just issued a detailed upgrade choice for the 240 million Windows users facing down the cyber nightmare of their PCs losing all security support with no free upgrade options remaining. Your PC will “no longer receive security or feature updates,” Microsoft warns, before providing advice on what to do now.

“Still using Windows 10?” WindowsLatest reported after spotting Microsoft’s new warning for those Windows 10 users caught in this nightmarish trap. “Microsoft recommends that users buy a secure Windows 11 PC, preferably the Copilot+ PC.”

This will hurt — a lot. Whilst 500 million Windows 10 users are sitting on a free Windows 11 upgrade offer, this less fortunate group needs to decide between a hefty PC upgrade bill or the risk of running the security gauntlet without support.

“Explore the latest Windows 11 and Copilot+ PCs at our global retail partners,” Microsoft says, “including Amazon, Best Buy, Boulanger, Costco, Currys, Elkjøp, Fnac, Harvey Norman, JB Hi-Fi, JD.com, MediaMarkt & SATURN, Officeworks, Sharaf DG and Walmart.” The Windows-maker’s post even includes shopping links to each.

“AI is no longer a buzzword,” the company says. “It’s changing how we tackle problems, with as many as 76% of consumers today using AI to get help with hard tasks. We are meeting this demand with AI experiences that are intuitive, fast and built-in, no subscriptions required, to help you be your most productive self.”


Buy a new PC, says Microsoft. Windows Latest

Cue a raft of complaints from Windows 10 users with perfectly good non-AI machines, now having to pick between recycling and landfill. “Copilot+ PCs are indeed a good choice,” Windows Latest says, “but it doesn’t make sense to ditch a fully-capable Windows 10 PC because it doesn’t support Windows 11’s system requirements of TPM 2.0. However, Microsoft says you should, and you have no choice.”

Put simply, the website says, “it’s time for consumers to decide. Windows 10 support is scheduled to end on October 14, 2025,” adding that in addition to the new post, Microsoft is also “resorting to full-screen pop-ups to raise awareness.” So, why the concerted push for Windows 10 users to buy new Copilot+ PCs?

“Well,” says XDA-Developers, “a recent report may be at the heart of this renewed push to adopt AI hardware. The report claimed that ‘only’ 20 million users use Copilot every week , a far cry from the 400 million that ChatGPT musters. Not only that, but the adoption rate has apparently plateaued. If Microsoft doesn’t do something soon, that 20 million figure can only stay the same or go down, neither of which is ideal for the company that invested billions in this tech.”

Microsoft paints a different picture. “We’ve been blown away by the early reception – we’ve never seen a faster adoption of a new category. As we shared in January, 15% of premium-priced laptops in the U.S. during the holiday quarter were Copilot+ PCs.” Whatever the reality, it wants to sell more — many millions more.

If you do decide to ditch Windows 10 for a new Copilot+ PC, you’ll also get to enjoy Recall, the controversial screenshotting feature that records everything you do on your PC to really keep you motivated to apply all the latest security updates. That’s a hellish data trove to ever lose. As I reported earlier, the latest warning for those who do enable it, is to let others know — it’s their data you’re also recording, remember.

source
29
Think that next refresh is going to get better? The first step to freedom is admitting there's a problem. OPINION Windows is at that awkward stage any global empire has to go through. Around one in five of the world population is a Windows user – 1.5 billion humans. Aside from the relatively small slice that Mac takes, everyone else is happy with smartphones, so until we make contact with credulous aliens, there are no new worlds for Microsoft to conquer. In an industry obsessed with growth, this is untenable.

It gets worse. For almost all of the existing user base, Windows 10 is perfectly fine, so Windows 11 has to be forced down their gullets at gunpoint. You cannot have a fifth of humanity pinned like a moth collection to your desktop and not monetize them. This has led, as Dave Plummer notes, to an OS that's both tool and adversary, one that gives you AI whether you like it or not, and one that advertises and prods and pulls you toward paid services whether you like it or not. There is change for change's sake, and not for small change either.

This will not get better. Microsoft is unsure of or unable to communicate what's coming. Project Hudson Valley, initially talked of as Window 12 with a 2025 launch, faded away as Hudson Valley became the AI-laden Uncanny Valley of Win 11 24H2. The marketing power of a new major version doesn't work if it's an amplification of a previous failure, but all that can mean is more bad AI you can't turn off, more monetization tweaks, more attempts to kill the older version. There may even be a push to a subscription licensing model.

All of this is reprehensible from an engineering viewpoint. Windows used to be terrible, then it got good, now it's getting terrible again because it is exempt from competitive forces.

Nobody talks much about Windows 12 because it doesn't matter, it's going to be even worse, it's going to hurt more. You may have more freedom to escape than you think, especially if you plan ahead. Cold turkey isn't the only way to skip free of an addiction. Think ahead to how things will be on recent evidence, then think on.

There's nothing to be done in big companies. Corporate IT at employee level is, like most experiences at employee level, all corporate, nothing employee. Budgets must be built up and spent down, boxes must be ticked, perceived risks minimized. A previous hegemony stood under the standard "Nobody ever got sacked for buying IBM." But that flag has long been captured by Microsoft. The user experience, the actual efficiencies in doing the job, the wishes and needs of those who use it, and those who keep the lights on, mean little to nothing. Thou shalt get what thou art given, here are some beer tokens, shut up already.

Then there are those with choice and the capacity to use it. Independent developers, people in small companies where diversity is not denied, all those whose knowledge grants them autonomy. Some love Windows, some tolerate it because it interfaces with people who cut checks, some just have to use single-platform applications. Many have jumped ship to macOS or Linux. Some have burned out and live on riverboats with solar panels writing retro 6502 games on an original Commodore 64.

This could be you, at least in spirit. You don't burn out from a job you love, but you do when that job starts conspiring against you. Time to start plotting the detox before you hit that bleak Windows rock bottom.

First, give yourself as much runway as you can. The Register is here for you with an overview of how to combine Microsoft's reduced fat semi-secret industrial long-term support options with a third-party package manager. This gives you another two years, possibly more, of Win 10 life served up how you like it. This is stuff designed for robots. You can't upsell a robot, so be a robot.

With sanity secured for the short term, plan for the long. Many have been tempted to add a Mac to their fleet, as the entry-level Apple Silicon machines are consistently category-leading value for money. macOS contains the same tar pits as Windows, a closed ecosystem in danger of becoming a launchpad for AI, and plenty of onramps to proprietary services. Apple makes money from hardware, though, and seems more circumspect about forcing bad experiences on its users. It also has the best accessibility, which future you may appreciate.

Linux has a fetish for freedom that can still seem daunting, with a bouquet of options in an ecosystem that resembles a rain forest in its florid complexities. Pick a mainstream distro, preferably with a community of users you can get on with, and set about learning it. It will run on any old tat, although you'll do better with something swift, and it will never, never not ever, stick its feeding tube down your nose to pump in AI.

Then, having picked an option that feels the best fit, start using it for the simple things in life, the online services and the experimental tasters of this or that new idea. Small projects that stretch you a bit. Keep using that de-bloated Windows 10 for the things you like Win 10 for, and the things you've learned so well over the years, but keep spending time picking up speed with your alternative. Avoid a single PC with virtual machines if you can – it's another layer to distract your most precious asset, your attention, plus it will always feel like a slightly inferior option to dedicated hardware. No, that's not justified by logic, only by your previous experiences of learning your first serious platform.

It's not a matter of switching after a few days, it's one of looking into the future and training for it. All the big OSes have converged from very different pasts, but their futures will diverge again. Now is the perfect time to decide which future will keep you happiest and most productive, a choice as much psychological and technological, and find a way to have fun as you take your chosen path. It's that or going to eBay for that Commodore 64. ®
Source opinion@theregister.com
30

Delete all these texts now getty

The dangerous email and text threat campaigns making headlines this year are designed to trick you into clicking a link that will steal your credentials or install malware on your device. Some of those links are in an email or text or social media post and some are in an attachment. Others may be disguised behind an image or QR code. The demand for devious domains to successfully trick users has never been higher.

DomainTools has just warned that "the sheer volume of newly observed domains in 2024 was over 106 million — approximately 289,000 daily creating a significant challenge for security teams." The report shares many “publicly reported malicious domains and the global scale of all newly observed domains.” These malicious domains are the links you see in unpaid toll, undelivered package and other scam text messages.

But even more alarming than the scale of this attack industry is the rapidity with which it moves. DomainTools CISO Daniel Schwalbe tells me “the common cradle-to-grave life cycle of a malicious domain is 24 hours.” That means it all has to happen in a single day before the link stops working. Below are typical keywords for links to malware that have just that day to hack your phone or phishing sites to steal your credentials.


Common Malware Delivery Domain Name Keywords
DomainTools


No sooner have users hit the scam button or reported the malicious message link, than the scammers are unwrapping another new domain that won’t yet be on any filter list. This is yet another reason Apple and Google and telco networks are under fire for a seeming inability to cut off these text scams that helped drive U.S. losses from such frauds up 33% to more than $16 billion last year.

The FBI warns users to delete all so-called smishing texts from your phone. These are texts containing the malicious domains that lead to malware, credential harvesting, even identity theft. It’s fueled by Chinese organized criminal gangs that operate on an industrial scale. And it will soon evolve from undelivered packages and unpaid tools to sophisticated financial campaigns mimicking your bank or credit card provider.


Common Credential Harvesting Domain Name Keywords
DomainTools


“The fact there are almost 1,500 top level domains active on the internet right now,” Schwalbe warns “is both a blessing and a curse. Threat actors are certainly capitalizing on the opportunity to either get very cheap domains, or register domain names that impersonate legitimate businesses and organizations under lesser known TLDs.”

Not only are these unlimited domains cleverly crafted, but new tricks are coming into play as well. This week, Group-IB warned that it has “uncovered an ongoing phishing campaign impersonating toll road services, using Google AMP links and browser fingerprinting to evade detection.” In these new attacks, “scammers leverage trusted platforms like Google AMP to mask phishing URLs, redirecting victims through legitimate domains to evade detection and abuse user trust.”

source
Pages: 1 2 [3] 4 5 ... 10