/
loss_type:financial × latest_source_host:welivesecurity.com × limpar

Resultados

15 casos · pág. 1/1

welivesecurity.com · low

Timeshare exit scams: upfront-fee fraud, shell LLC deed transfers, fake buyers and follow-on recovery scams target owners

Consumer-fraud reporting describes a growing ecosystem of timeshare exit scams that target owners wanting to leave their contracts. Scammers find owners through real estate records and approach them with unsolicited calls or high-pressure dinner seminars. They then collect large upfront fees, often thousands of dollars, for services they …

welivesecurity.com · low

FTC weighs rules on impersonation scam ads as social media scam advertising scales across Europe and the US

The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …

welivesecurity.com · medium

ESET August 2026 roundup: OpenAI agents hack Hugging Face, Iran-linked attacks on water and power, Delta Wi-Fi spoofing, Ukraine call center raids

ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of August 2026 in a monthly video roundup. OpenAI disclosed more details on how its agents hacked the AI collaboration platform Hugging Face, and the video discusses what went wrong and the lessons from the incident. Iran-linked hackers are believed to hav…

welivesecurity.com · medium

AI-powered OSINT lowers the barrier for mass victim profiling, making ordinary users viable fraud targets

ESET's WeLiveSecurity warns that AI and large language models (LLMs) now automate OSINT reconnaissance at machine speed. Profiling that once took a skilled attacker hours or days can be done by low-skill actors, so ordinary internet users are now economically viable fraud targets. Fraudsters can collect public information at scale, includ…

welivesecurity.com · medium

Phishing evolves: QR codes, ConsentFix OAuth token theft, ClickFix variants and deepfake-enabled fraud defeat traditional red-flag training

ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…

welivesecurity.com · low

Vibe-coded apps expose users to hardcoded secrets, weak access controls and prompt injection; Lovable-hosted app had 16 flaws

AI-assisted "vibe coding" is lowering the barrier to app development, but it is also producing apps with common security oversights that app marketplaces do not necessarily flag. The article cites a report that 84% of developers were using or planning to use AI tools, and a Lovable-hosted app in which a researcher found 16 vulnerabilities…

welivesecurity.com · low

ESET: SMBs seek simple, supervised MDR-style protection amid AI-driven threats and tool sprawl

This ESET WeLiveSecurity blog post argues that small and midsize businesses (SMBs) want advanced protection that is simple, guided and manageable. It cites ESET data showing 75% of SMBs are concerned about global conflicts and cyber warfare, nearly half had at least one cyber incident in the past year, and 58% believe they are more vulner…

welivesecurity.com · low

US breach notices increasingly omit attack details; ITRC data shows only 24% disclose the attack vector in H1 2026

Publicly reported data breaches in the US reached an all-time high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center (ITRC) reports that over 471 million notices went out in the first half of 2026, but only 24% described the attack vector, the lowest rate it has recorded. The ar…

welivesecurity.com · medium

Medicare Open Enrollment season (Oct 15 - Dec 7) drives scams harvesting health, insurance and financial data

Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower prem…

welivesecurity.com · medium

ESET: SMBs face AI agent supply chain and prompt injection risks alongside accelerated phishing, exploitation and ransomware

ESET analysis describes a two-pronged risk for small and mid-size businesses (SMBs): AI agents create new paths into business systems, while attackers use AI to add speed and scale to established threats. Between March and May 2026, ESET scanned almost 900,000 unique agent skills from popular repositories and found more than 25,000 suspic…