CryptoChameleon

By Trilogy Financial
June 7, 2024
Share on:

CryptoChameleon is a phishing-as-a-service kit that makes it easier than ever for cybercriminals to create convincing phishing campaigns. Criminals often use it to impersonate reputable companies to steal passwords, account information, and other sensitive data.

 

A recent scam using CryptoChameleon targets LastPass, a popular password manager. Scammers pretend to be from LastPass, starting with seemingly authentic support calls. They later send follow-up emails with links to fake login pages, designed to look like legitimate LastPass sites. Once victims enter their master passwords on these fraudulent pages, scammers can access their password vaults and potentially lock them out of their accounts.

 

Reputable companies will never ask for your master passwords through phone calls, emails, or text messages. To protect yourself from these scams, remember to:

 

  • Hang up immediately if you receive a suspicious call claiming to be from LastPass or another reputable company.
  • Do not press any options in automated messages or clicking on links in emails from unfamiliar sources.
  • Report suspicious activity to the reputable company, including screenshots of suspect text messages and forwarded emails.

You may also like:

By Trilogy Financial
July 28, 2023

Password managers are a key resource in maintaining your security. They allow you to keep track of your passwords and encrypt them before they leave your device. Some password vaults can also generate and change passwords for you in one click, as well as securely store other types of data like credit card information. Password managers may remind you to change passwords regularly, evaluate their strength, or scan the dark web to check if any of your logins appeared online. A password manager also makes sharing your data with family and friends safer.

When using a password manager, you’ll only need to remember one master password. Combine it with multi-factor authentication (MFA)and biometric authentication to increase your security.

While they can increase your security exponentially, even reliable password managers can’t keep you 100% safe online. Following are a list of possible risks and ways to mitigate them:

  1. Not all devices are secure enough. Password managers can be hacked if your device is infected with malware. Users should invest in a trustworthy antivirus that will secure all devices first and reduce risks.
  2. Not using biometric authentication. NordPass, RoboForm, and Keeper all offer a biometric authentication option, such as requiring a fingerprint or face scan which offers another level of protection.
  3. Utilizing a Bad password manager. Not all password managers are created equal. Make sure the software you use does not lack the necessary security features to effectively protect your credentials at all times.
  4. Forgetting your master password. Select a password manager that has a reset feature or store your master password in some physically secure place. Be sure to enable account recovery options.
  5. Know what data is in your password manager. Be sure to know which accounts are stored in your password manager so in the case of a breach, you know which accounts to take action on, thus leaving the attacker with less time to cause more harm.

In a digital landscape where cyber threats are on the rise, using a password manager is a proactive measure that can overall protect your personal information and maintain robust online security. It simplifies the process of managing passwords, strengthens your defenses against unauthorized access, and provides peace of mind in an increasingly interconnected world. If you don't already, consider integrating a reputable password manager into your digital routine to enjoy the benefits of streamlined and fortified password security.

 

By
Jeff Motske, CFP®
June 7, 2018

Your retirement savings, which is the means to your financial freedom, should be set up in the same way. There is no way to accurately predict what life will be like during the course of your retirement. Based on the climbing US debt, it is safe to assume that tax rates may increase. Unanticipated expenses may arise. Life is never predictable. Therefore, you need your money to be ready to work for you. In my experience, one of the best ways to ensure this is by utilizing three types, or buckets, of savings.

The first bucket is comprised of your traditional retirement investments like a 401(k), 403(b), or 457 plan. These plans are very popular and easily accessible as most employers offer them. Contributions grow tax-deferred and can be automatically deducted from one’s paycheck. However, what was a tax benefit while saving becomes a tax-trap once you retire as those funds will be taxed once they are pulled out. Another thing to consider is what the tax rate will be like at that time. I always ask my clients, “Do you think taxes will have gone up or down by the time you retire?” No one ever says down. Therefore, if all your retirement funds are in this first bucket, you are suddenly at the mercy of the government on how you utilize your retirement money. This is not financial freedom.

However, more buckets mean more options. Let’s consider that you also have retirement savings invested in a second bucket containing tax-free funds. This is typically comprised of Roth IRA’s or Roth 401(k)’s. Although Roth 401(k)’s are not highly promoted or even included in a lot of employer-offered plans, they are a very powerful saving tool. Your contributions grow tax-deferred and are distributed tax-free. With the addition of this second bucket or savings, you suddenly have a little more flexibility on how you access your money.

The final bucket is one that isn’t on most people’s radar. This bucket should be comprised of the investments in your portfolio of stock equities. The gains on these investments are taxed as capital gains. Historically, capital gains tax rates are significantly lower than typical income tax rates. If these investments are sold properly, they can provide another option when trying to manage how your money works for you.

As you can see, multiple buckets of retirement savings seek to provide you with freedom and tax control. If taxes are high, utilize your second bucket. If taxes are lower, feel free to dip into your first bucket. You can work with your financial advisor on what investments belong in which bucket, as well as to dial more or less into these buckets depending on tax rates and what your needs are. This flexibility is key to securing your financial freedom in retirement.

The opinions voiced in this material are for general information only and are not intended to provide specific advice or recommendations for any individual. Investing involves risk, including the risk of loss.

Get Started on Your Financial Life Plan Today