CryptoChameleon

By Trilogy Financial
June 7, 2024
Share on:

CryptoChameleon is a phishing-as-a-service kit that makes it easier than ever for cybercriminals to create convincing phishing campaigns. Criminals often use it to impersonate reputable companies to steal passwords, account information, and other sensitive data.

 

A recent scam using CryptoChameleon targets LastPass, a popular password manager. Scammers pretend to be from LastPass, starting with seemingly authentic support calls. They later send follow-up emails with links to fake login pages, designed to look like legitimate LastPass sites. Once victims enter their master passwords on these fraudulent pages, scammers can access their password vaults and potentially lock them out of their accounts.

 

Reputable companies will never ask for your master passwords through phone calls, emails, or text messages. To protect yourself from these scams, remember to:

 

  • Hang up immediately if you receive a suspicious call claiming to be from LastPass or another reputable company.
  • Do not press any options in automated messages or clicking on links in emails from unfamiliar sources.
  • Report suspicious activity to the reputable company, including screenshots of suspect text messages and forwarded emails.

You may also like:

By
Jeff Motske, CFP®
March 7, 2019

A tax refund isn’t winning the lottery. It isn’t a gift. It’s the return of your money, money that you’ve earned that the government has been holding. At a time when you need your money to be working for you, you can’t afford to have your money do nothing, not even earn interest. Rather, your money needs to be working towards your financial freedom.

The issue with a large tax refund is that the money that has been withheld throughout the year could have been working for you all along. Rather than have it deducted, you could have been paying down debt, contributing to your emergency fund or investing it for your future. Yes, you can definitely do those same things with your tax refund. However, now you’ve missed out on the time your money was being held where it could have been earning interest or saving you money by paying off debt sooner.

While I am a firm believer in minimizing your withholdings throughout the year, I know that this shines a light on an individual’s sense of discipline. You need to make sure that you’re applying the additional funds where they need to go, which is not the retail fund or other expenses that aren’t working towards your future. Automatic transfers for both savings and investment accounts make it convenient to get your money to work for you. Another consequence of having a minimal amount withheld throughout the year is that you could owe the government come tax season. Once again, this supports the need for saving and being disciplined with your money.

You’ve put in a lot of hard work for your money. Not only should it be a means to your financial independence, it should be a tool that you can access right away. Take advantage of your money today to ensure that you get where you want to go tomorrow.

This information is not intended to be a substitute for specific individualized tax advice. We suggest that you discuss your specific tax issues with a qualified tax advisor.

By
June Adams
May 10, 2022

How long do you think it would take a hacker to crack your current passwords?

On average, it takes a hacker about 2 seconds to crack an 11-character password that only uses numbers. See the attached chart that illustrates the time it takes for a hacker to brute force attack your password. A brute force attack is when cybercriminals use trial and error to guess your details. Cybercriminals currently use sophisticated software that can run thousands of password combinations in a minute, but their technology and resources are only getting stronger.

A general rule is that your password should be at least 11 characters, utilizing both numbers as well as upper and lowercase letters. That combination will take hackers 41 years to crack. Regardless of the possible variations, the shorter your password, the easier it is to crack. Check out how long it will take a hacker to crack your password at https://www.security.org/how-secure-is-my-password/.

Lastly, simplify and secure your accounts by using a password manager that creates and stores all your passwords for you.

Strengthen your password security with the following tips:

  • Prioritize the length and complexity of your passwords.
  • Don't use personal information. This can be publicly available and easily accessible by hackers.
  • Avoid using dictionary words as passwords. Cracking tools can easily process every word in the dictionary.
  • Don't reuse passwords. If one account is breached, your other accounts would be vulnerable as well. Rather, use password managers, which are a convenient and secure way to manage complex passwords on multiple platforms.
  • Use multifactor authentication (MFA or 2FA) for especially sensitive accounts.
  • Avoid typing passwords while using public Wi-Fi. Instead, use a VPN or avoid websites that require your login information.

 

 

Get Started on Your Financial Life Plan Today