|
|
CryptoChameleon is a phishing-as-a-service kit that makes it easier than ever for cybercriminals to create convincing phishing campaigns. Criminals often use it to impersonate reputable companies to steal passwords, account information, and other sensitive data.
A recent scam using CryptoChameleon targets LastPass, a popular password manager. Scammers pretend to be from LastPass, starting with seemingly authentic support calls. They later send follow-up emails with links to fake login pages, designed to look like legitimate LastPass sites. Once victims enter their master passwords on these fraudulent pages, scammers can access their password vaults and potentially lock them out of their accounts.
Reputable companies will never ask for your master passwords through phone calls, emails, or text messages. To protect yourself from these scams, remember to:
Data Privacy governs how data is collected, shared and used. When private data gets in the wrong hands, bad things can happen. Whether you are in the office or working from home, here are a few tips on how to keep your data private:
VARY YOUR PASSWORDS
Use unique, complex passwords on different sites and systems.
PROPERLY DESTROY UNWANTED DATA
Shred unwanted documents and thoroughly wipe devices before discarding them.
ENCRYPT SENSITIVE FILES
Use encryption when sharing or storing confidential data.
LOCK UP WHEN YOU LEAVE
Secure sensitive files and lock computer screens when you walk away.
