More stories

  • in

    Clicked on a phishing link? Take these 7 steps ASAP to protect yourself

    ZDNETWhen you think of phishing emails, you probably think of the crude, grammatically flawed, easy-to-spot samples that go straight to your junk folder.I regret to inform you that those weak “spray and pray” campaigns are yesterday’s news. The crooks haven’t gotten smarter, but their tools have. Also: I clicked on four sneaky online scams on purpose – to show you how they workWith the help of generative AI, online scammers have become dramatically better at crafting and delivering phishing emails that look and sound convincing. Last year, a group of high-powered security researchers found that AI-based phishing tools have reduced the cost of these attacks by more than 95% — while making them brutally effective. One study showed that 60% of respondents fell victim to these automated attacks.Those tools can help a crook create hyper-targeted, meticulously personalized attacks that can be surprisingly difficult to spot, especially if you’re tired or distracted. Even certified security experts can be sucker-punched. Just ask Troy Hunt, creator of the “Have I Been Pwned” site. He was fooled by a sophisticated attacker who stole his Mailchimp mailing list. Listen to his explanation of what happened.Firstly, I’ve received a gazillion similar phishes before that I’ve identified early, so what was different about this one? Tiredness was a major factor. I wasn’t alert enough, and I didn’t properly think through what I was doing. The attacker had no way of knowing that (I don’t have any reason to suspect this was targeted specifically at me), but we all have moments of weakness, and if the phish times just perfectly with that, well, here we are. Secondly, reading it again now, that’s a very well-crafted phish. It socially engineered me into believing I wouldn’t be able to send out my newsletter, so it triggered “fear,” but it wasn’t all bells and whistles about something terrible happening if I didn’t take immediate action. It created just the right amount of urgency without being over the top. What to do if you click a phishing link So, what should you do if you click on one of those links and then discover, to your dismay, that it’s a fake site designed to capture your information? Maybe you realized that almost immediately because something seemed not quite right. Or maybe you’ve already entered some sensitive information. In either case, here’s what to do next. 1. Stop typing! If you haven’t yet entered any information, close the browser tab or mobile app immediately and consider clearing your cache to eliminate the possibility that the site was able to implant some tracking information. 2. When in doubt, disconnect If you’re concerned that the site might be more than a garden-variety phishing attempt and that it might be trying to install a remote access tool or another form of malware, disconnect from the network. You can turn on airplane mode on a mobile device or laptop; if you have a wired connection, unplug the Ethernet adapter. Also: Why delaying software updates is a terrible ideaOr just press the power button to shut down while you figure out your next steps. 3. If this is a work device, call your IT department Let them know what happened so they can check any necessary logs and begin looking for suspicious activity. Be honest. The more information you provide, the more likely they will be able to detect any intrusion and mitigate any damage. 4. Reset your password(s) and turn on 2FA If you gave the attackers your username and password for an account, you need to change that password as soon as possible, before they have a chance to lock you out. If you entered an email address, phone number, or other personal information that an attacker could use to pose as you, consider securing any accounts that are tied to that information. Create new, strong, unique passwords for those accounts. If you haven’t enabled multi-factor authentication (also known as 2-factor authentication or 2FA), do that now, especially for critical accounts. Also: Got a suspicious E-ZPass text? Don’t click the link (and what to do if you already did)If possible, do this cleanup work on a different PC, Mac, or mobile device than the one where you were phished, to avoid the possibility that the device has been compromised. 5. Scan for malware If this is a Windows device, run a full antivirus scan on the affected device to determine whether any malicious software was installed. If possible, use an offline scanner like the Emsisoft Emergency Kit More

  • in

    This timeless analog wearable I tested is the closest thing to an Apple Watch made by Rolex

    <!–> ZDNET’s key takeaways The Withings Scanwatch Nova is available now, starting at $599. It’s an elegant smartwatch with a one-month battery, water resistance up to 10ATM, and various health-tracking metrics. A $10/month subscription is required for some advanced metrics, and the watch is only available in one 42mm diameter. –> Healthy heart monitoring starts […] More

  • in

    The OnePlus 12 is still a powerhouse in 2025 – and it’s on sale for a limited time

    <!–> ZDNET’s key takeaways The OnePlus 12 typically sells for a starting price of $799. It was the company’s most complete handset in 2024, with the fastest charging speeds on the market (both wired and wireless), a flagship camera system, premium build quality, and reliable performance. The lack of generative AI features is felt, but […] More

  • in

    Meta’s upcoming $1,000 smart glasses sound like the Ray-Bans successor I’ve been waiting for

    Unlike the Meta Ray-Bans, the Xreal One Pro features display projections for digital overlays. Kerry Wan/ZDNETThe Meta Ray-Ban smart glasses have been one of the more successful gadgets in recent years for breaking into a competitive wearable market and carving out their place. If CES in January was any indication of what we’ll see in the rest of 2025, expect more people walking, working, and lounging around with smart glasses on.Also: CES 2025: The 8 most advanced smart glasses we tried – and were impressed byClearly, Meta isn’t settling with just branded glasses that can answer questions and take photos; it has a more ambitious goal of producing a pair of eyewear that can also display graphics, track hand gestures, and do more, as suggested by a recent Bloomberg report.The product in development is codenamed Hypernova, and Bloomberg’s Mark Gurman ballparks that it’ll cost anywhere from $1,000 to $1,400, almost four times the listing price of its Ray-Ban smart glasses More