Two-Factor Authentication (2FA), two-step verification, and Multi-Factor Verification (MFA) are all names for a process that makes the user prove their identity. MFA requires an individual to provide two or more credentials to authenticate their identity, thus adding an extra level of protection to user accounts.
Microsoft-owned social network LinkedIn is reportedly the latest victim of a massive data breach where data of 500 million user profiles has been allegedly leaked by cybercriminals. The leaked data includes email addresses, phone numbers, workplace information, full names, account IDs, etc. The potential for social engineering attacks is huge.
According to CyberNews, the potential of the leak is huge. An individual selling the data on a hacker forum claims it was scraped from 500 million profiles. The leaked data includes users’ email addresses, phone numbers, workplace information, full names, account IDs, links to social media accounts, and gender details.
Confirming the news to Business Insider, a LinkedIn spokesperson said that the leaked data has been scraped from LinkedIn. “We’re still investigating this issue, the posted dataset appears to include publicly viewable information that was scraped from LinkedIn combined with data aggregated from other websites or companies.” “Scraping our members' data from LinkedIn violates our terms of service and we are constantly working to protect our members and their data,” the spokesperson added.
The company also informed that the data of private members is safe. This means the scraped data only includes information from LinkedIn public members.
Earlier this week, personal data of 533 millions of Facebook users were allegedly leaked including 6 million people in India. The leaked Facebook data has been posted for free on hacking forums and includes date of joining, place of work, names, gender, occupation and relationship status of users. Full story at: https://www.thequint.com/tech-and-auto/data-of-500-million-linkedin-users-for-sale-on-a-site-report
While the world continues to navigate life during a pandemic, countless families and individuals are struggling financially. In a truly malicious response to the situation, scammers are launching phishing attacks that claim to offer financial assistance to those in need.
The phishing email impersonates your local government and it states that you are eligible to receive financial aid. You’re directed to click a link in the email for more information. If you click the link, you are taken to a phony government website. The site asks for personally identifiable information, including your social security number. Once you’ve provided this information, the site claims that you will be contacted regarding your aid. Don’t be fooled! Anything you enter here is sent directly to the cybercriminals.
This past July, Twitter fell victim to an infamous social engineering attack. The attack gave hackers control of over one hundred high-profile accounts - from politicians to celebrities. The hackers used these accounts to scam Twitter followers out of money. Now, cybercriminals are using this event as bait for a convincing phishing scam.
The phishing email uses text that is very similar to the official statement that Twitter made in response to the July attack. The email claims that due to a security breach, you must confirm your identity by clicking on a link in the email. If you click the link, you are redirected to a site that looks very similar to the real Twitter login page. The site is actually a look-alike designed to steal your login credentials. Any information that you enter on this page is delivered straight to the bad guys.
Don’t be fooled! Follow these tips:
