Year-End Financial Planning

CryptoChameleon is a phishing-as-a-service kit that makes it easier than ever for cybercriminals to create convincing phishing campaigns. Criminals often use it to impersonate reputable companies to steal passwords, account information, and other sensitive data.

A recent scam using CryptoChameleon targets LastPass, a popular password manager. Scammers pretend to be from LastPass, starting with seemingly authentic support calls. They later send follow-up emails with links to fake login pages, designed to look like legitimate LastPass sites. Once victims enter their master passwords on these fraudulent pages, scammers can access their password vaults and potentially lock them out of their accounts.

Reputable companies will never ask for your master passwords through phone calls, emails, or text messages. To protect yourself from these scams, remember to:

• Hang up immediately if you receive a suspicious call claiming to be from LastPass or another reputable company.
• Do not press any options in automated messages or clicking on links in emails from unfamiliar sources.
• Report suspicious activity to the reputable company, including screenshots of suspect text messages and forwarded emails.

AI is revolutionizing the way scams are conducted, drastically reducing operational costs while simultaneously enhancing the believability of fraudulent calls. In the 12 months since the launch of ChatGPT, AI-aided identity fraud surged nearly 1,800%, and phishing emails surged by nearly 1,300%, with their quality being the best we've ever seen. Additionally, AI-operated news sites, often used to push out misinformation, disinformation, and propaganda, grew from 40 sites to nearly 600.

Things to Know:

• Content Farms: These platforms pump out low-quality, clickbait articles to earn ad revenue. Initially, humans edited AI-drafted articles for quality, but now, AI can produce vast amounts of content with little to no oversight.
• Advertising Concerns: Reputable brands might unknowingly advertise on these spammy sites, which can mistakenly lend these articles credibility.
• Disinformation Risk: Without human checks, AI can spread false information. This ranges from accidental “AI hallucinations” (fabricated facts) to deliberate disinformation, like fake celebrity obituaries designed to increase site traffic.

Tips for Navigating Content Safely:

• Critical Thinking: Always question the authenticity of online articles.
• Recognize AI Signs: Be cautious of sites with generic names or an overload of ads. Look out for errors and placeholders (e.g., “[date]”) that suggest AI-generated content.
• Take Breaks: Regularly step away from the digital avalanche to avoid content fatigue and maintain cybersecurity awareness.