The CEO Forum – July 2019

CryptoChameleon is a phishing-as-a-service kit that makes it easier than ever for cybercriminals to create convincing phishing campaigns. Criminals often use it to impersonate reputable companies to steal passwords, account information, and other sensitive data.

A recent scam using CryptoChameleon targets LastPass, a popular password manager. Scammers pretend to be from LastPass, starting with seemingly authentic support calls. They later send follow-up emails with links to fake login pages, designed to look like legitimate LastPass sites. Once victims enter their master passwords on these fraudulent pages, scammers can access their password vaults and potentially lock them out of their accounts.

Reputable companies will never ask for your master passwords through phone calls, emails, or text messages. To protect yourself from these scams, remember to:

• Hang up immediately if you receive a suspicious call claiming to be from LastPass or another reputable company.
• Do not press any options in automated messages or clicking on links in emails from unfamiliar sources.
• Report suspicious activity to the reputable company, including screenshots of suspect text messages and forwarded emails.

Starting December 16, 2025, Meta will begin using what you say or ask in Meta AI chats to personalize what you see on Facebook and Instagram.

• Example: If you ask Meta AI for hiking tips, you may start seeing more hiking posts or ads.
• Meta says it will not use AI chats about sensitive topics such as politics, religion, or health.
• Users will begin receiving notifications about this change in October.

What This Means for You

Your social media experience may start to feel more personalized, but it also means Meta will collect and analyze more information about your interests based on your AI conversations.

Possible Risks

• Less Privacy: Your AI chats could influence what ads or posts you see. Even if Meta says it is not reading your full conversations, it is still learning from them.
• Unintended Targeting: You may start seeing ads or content you did not expect, based on what you mentioned to Meta AI.
• Misunderstandings: If the AI misinterprets what you say, it could lead to inaccurate suggestions or assumptions about your interests.
• Data Sharing Concerns: More information about you increases the risk if Meta’s systems are ever compromised or misused.

What You Can Do

You do not have to stop using Meta AI, but you can take steps to control how much it learns from you.

1. Limit what you share with Meta AI.
   Avoid asking personal or sensitive questions.
   Treat AI chats like public posts and do not share anything private.
2. Review your ad preferences.
   Go to Settings → Ads Preferences on Facebook or Instagram.
   Adjust “Ad Topics” and “Activity Used for Ads” to limit personalization.
3. Use the “Why am I seeing this” option.
   Tap the three dots on any ad or post to understand why it was shown and make changes.
4. Turn off AI features where possible.
   You can skip or decline to use Meta AI in searches or chats.
5. Stay alert for prompts.
   Meta will notify users about this update. Take a moment to read the message before clicking “Agree.”

Bottom Line

Meta’s AI is designed to make your social media feed feel more relevant, but it also means the company is using new kinds of data about you. If you use Meta AI, be thoughtful about what you share and take a few minutes to review your privacy settings so you stay in control.