The IT Nerd

By: Hank Schless, Senior Manager of Security Solutions at Lookout

Great news for student borrowers everywhere: the White House has announced a plan for student loan relief. There are currently 45 million borrowers in the U.S. with debt totaling over $1.6 trillion. Many borrowers are rejoicing at this news, and unfortunately, so are cybercriminals who see a new opportunity to exploit consumers. The Federal Trade Commission previously issued a warning about student loan scams because of the uptick in loan forgiveness scams during the pandemic and moratorium on payments. 

Now that a student loan relief program has arrived, Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, has provided proactive safety  steps borrowers can take to protect their identity, data, and bank accounts in anticipation of student loan forgiveness scams. 

• Check the “sent from” email address: Real loan servicers will send emails from their own domain. One easy way to check for authenticity is to make sure a company email isn’t coming from an address ending in “@gmail.com” or  “@yahoo.com”.
• Go directly to the source: If you receive a phone call or  email requiring action from you, usually involving private information like a social security number, birthday, bank information, or more, immediately go directly to the validated website of the  company or organization the message is reportedly from to locate a valid phone number or email to contact. When in doubt, go directly to the official loan forgiveness website:  www.studentaid.gov. 
• Beware of urgency: Be wary of urgent demand via phone calls or emails that require immediate action and divulgence of personal information. “Emergencies” can sometimes cause people to act without fully understanding the request or the implications of them, which make them a common tool for cybercriminals.
• Install security software on your devices: Security protection, like Lookout, will automatically monitor and identify scam URLs in email, text messages, and on the web and block you from threats that can do harm. The security software will also track if your information is compromised in a data breach. 

By Hank Schless, Senior Manager of Security Solutions at Lookout

Imagine your phone isn’t working. It’s odd, but this should be an easy fix. You contact your phone carrier and you’re told that you requested a new sim card. But you never requested a sim card or called before today. If this happened to you, then you could be the latest victim of a very popular, effective and nightmarish scam. 

Sim swapping is an attack where scammers fake your identity with a mobile carrier to gain access to your phone. From there, they use “Forgot Password” for critical online accounts – think banking, investments and social media – to intercept two-factor authentication text messages. In 2021, this scam resulted in losses over $68 million. 

Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, has gathered the top ways you can protect yourself from sim swapping: 

• Diversify Your Multi-Factor Authentication
  Think beyond SMS messages. Use strong multi-factor authentication methods such as biometrics, physical security tokens, or standalone authentication applications to access online accounts.

• Don’t Overshare Online
  Avoid sharing your phone number, address or birth date in online spaces. This private information can be shared with a phone carrier to fake your identity and gain access to your sim card. 

• Use a Variety of Passwords 
  Use strong and unique passwords for each important online account and change them often.

• Don’t Share Login Details On The Phone 
  If you receive a call from your phone carrier requesting private account details, hang up and call the customer service line directly. 

• Install Security Software On Your Devices
  Security protection, like Lookout, will automatically monitor and identify scam URLs in email, text messages, and on the web and block you from threats that can do harm.

By Hank Schless, Senior Manager of Security Solutions at Lookout

Technology has transformed the hustle and bustle of back-to-school season. According to a recent survey, 35% of school shopping is done online and 65% of those purchases are done from a smartphone. But what is convenient for some is also an opportunity for scammers to exploit consumers during a very busy time of year. The Better Business Bureau has issued a warning about back-to-school shoppers being targeted by online scams. 

In honor of National Back to School Prep Day on Monday, August 15, Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, has provided immediate steps consumers can take to ensure a safe online shopping experience. 

• Stop Before You Click
  If you are not certain that a message is from a legitimate source, avoid clicking on links or attachments in emails, on websites, or on social media. Beware of deals that seem too good to be true. 

• Only Use Unique & Strong Passwords 
  Immediately update any old passwords that have been compromised online. Enable two-factor authentication. 

• Install Security Software On Your Devices
  Security protection, like Lookout, will automatically monitor and identify scam URLs in email, text messages, and on the web and block you from threats that can do harm.

By Hank Schless, Senior Manager of Security Solutions at Lookout

Has your phone been acting strangely? Maybe you’ve noticed mysterious apps, or your battery is draining  quicker than usual. While these activities don’t always mean your phone is at risk,  they could be important signs that your device is compromised leaving your personal data at risk.

Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, has gathered the most common signs that your phone compromised : 

• Overheating Phone
  It’s possible that threat actors may be transferring a lot of your data to their remote server from your device, making your cell phone overloaded with work.

• Random Apps Downloaded
  Hackers can be responsible for installing apps that spy and monitor your activity – check and remove every app that seems suspicious or unfamiliar.

• Lagging Performance 
  Malware creeped onto your phone by hackers could very well slow down your processor – ensuring dropped calls, undelivered texts, crashing and freezing. 

• Consistent Intrusive Pop-Ups
  An unusual amount of pop-up ads, home screen updates or bookmarks to unknown websites could be a sign of an adware infection. Steer clear! 

• Weak Battery Performance
  Unwanted apps installed on your phone can hijack your phone’s resources and drain your battery quickly.

To be proactive about your security and protection, download the https://protection.lookout.com/ app for all of your devices.

By Hank Schless, Senior Manager of Security Solutions at Lookout

With digital scams on the rise, it’s growing increasingly difficult to discern if an email, text message, phone call or website is legitimate or not. More people are reporting losing time and money due to online scams, and in particular, elderly individuals report falling victim. In 2021, over 92,000 victims over the age of 60 reported losses of $1.7 billion to the FBI’s Internet Crime Complaint Center (IC3). This is a whopping 74 percent increase over losses reported in 2020. The number one area of attacks were in tech support fraud, including identity theft and personal data breaches. 

Luckily, by taking a few key steps, people of all ages can reduce the risk of scams, and online fraud. In recognition of National Parents Day on Sunday, July 24, Lookout has provided the below tips that family members can take to best protect parents and elderly family members from digital risks.  

• Check the “sent from” email address
  Real companies will send from their own domain. One easy way to check for authenticity is to make sure a company email isn’t coming from an address ending in “@gmail.com” or  “@yahoo.com”.

• Go directly to the source
  If you receive an email requiring action from you, usually involving private information like social security, birthday, bank information, or more, immediately call the company this message is reportedly from. 

• Beware of urgency 
  Be wary of urgent demand or emails that require immediate action and divulgence of personal information. “Emergencies” can sometimes cause people to act without fully understanding the request or the implications of them, which make them a common tool for cybercriminals.

• Watch for obvious misspellings and grammatical errors 
  Professional newsletters, notifications, and other email messages go through several rounds of approvals before distribution, so emails that include spelling errors and odd punctuation can be a sign of a scam.

• Set Stronger Passwords 
  Use Two-Factor Authentication. This makes it harder for hackers to access your account, and will alert you to any potential hacking attempts.  
  • Password Changes: Regularly change the password to your most important accounts. This will help prevent hackers from getting access. Make sure you use a combination of letters and numbers for the best protection. If your information has been compromised in a data breach, act immediately.

• Install Security Software On Your Devices
  Security protection, like Lookout, will automatically monitor and identify scam URLs in email, text messages, and on the web and block you from threats that can do harm.

March Madness is in full swing! For many college basketball fans, a large part of the fun comes in creating a bracket, competing against other fans for bragging rights and of course, winning a little money. Unfortunately, scammers take all the fun out of the tournament by creating false betting websites and pocketing your hard earned cash. 

Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, wants fans to stay safe from potential scams and has listed a few tips that make an impact. 

Lookout suggest all be wary when placing bets by doing the following:

Place a bet through a well established and approved services
Do research and ensure the website selected for betting is verified before adding financial information. Confirm with the local gaming commission or the ESPN website about a service that you are unfamiliar with. 

Don’t fall for ads
A fan may receive spam text messages and emails claiming to be a legitimate betting service. Don’t fall for the false advertising.

Avoid providing additional personal information when prompted
If a website asks for additional personal information when placing a bet or cashing out do not provide it. Most betting sites will not need your social security number. 

Pay attention to the fine print
Read the fine print when finding a service. Any language that presents urgency, limited spots, risk-free betting, or a 100% guarantee is a red flag. 

Lookout helps protect your digital information at every level – from the device you hold, to the apps and online services you use and the networks you connect to. Lookout also continuously monitors the internet to ensure what matters to you the most – such as social security and credit card numbers – aren’t exposed. And if anything happens, Lookout’s team of experts and a $1 million identity theft insurance policy are here to back you up.

By Hank Schless, Senior Manager of Security Solutions at Lookout

Tax season is officially here and, similar to last year, there are so many unique situations to consider while filing. Receiving unemployment, the stimulus check, any donations you’ve made, and contract work should all be taken into consideration. Serving as your own accountant can be extremely taxing – especially for those who have never done so before. 

While making sure you have all the right forms is difficult enough, consumers now have to be wary of an array of phishing scams. In fact, Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, has discovered that on average, 50% of people will encounter a phishing link in a 3 month period – including scams associated with tax season . Luckily, Lookout has identified key scams consumers should be on guard against this year. 

Text Message Scams
Many of us receive text messages from scammers impersonating a variety of companies including the IRS. While this may seem legit, the IRS does not use text messages for personal tax issues nor do they send taxpayers messages on social media especially in regards to bills or refunds. 

Unemployment Fraud 
Be wary of unemployment or other benefit payments that were never applied for. There has been an increase in fraudulent unemployment claims using stolen identities to fraudulently collect benefits. If something inaccurate or fraudulent is received, immediately request a corrected form or report to state agencies.

Email Phishing Scams 
In the 2022 tax season, taxpayers may receive unsolicited emails that appear to be from the IRS or affiliated organizations. The IRS does not contact taxpayers by email to request personal or financial information. Contact by the IRS is typically in the form of regular mail delivered by the United States Postal Service. 

Phone Scams 
No matter how real they sound, the IRS does not leave pre-recorded, threatening or urgent messages. The messages may include threats of arrest, deportation, law enforcement intervention and more. Criminals can make caller ID numbers appear to be anywhere in the country including from an IRS office. 

Lookout helps protect your digital information at every level – from the device you hold, to the apps and online services you use and the networks you connect to. Lookout also continuously monitors the internet to ensure what matters to you the most – such as social security and credit card numbers – aren’t exposed. And if anything happens, Lookout’s team of experts and a $1 million identity theft insurance policy are here to back you up.

By Hank Schless, Senior Manager of Security Solutions at Lookout

During times of turmoil the best of humanity comes out as people show their support through donations. In fact, 56% of Americans donated to charity in 2021. Oftentimes, the easiest way to donate is online through organizations. Unfortunately, scammers take advantage of others’ kindness and create fake websites claiming to be accepting donations. 

It is often difficult for people to distinguish between a legitimate site and a fake one. Security experts from Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, identified the below scams regarding donations for the crisis in the Ukraine.  

Scam 1: The below is a phishing example where scammers have created a fake copy of the official Ukrainian Government website. The scammer added a “Donate Fund” button with Bitcoin, Ethereum and U.S. Dollar payment options. 

Scam 2: The below is a fake website that was created for “Ukraine Appeal” that targets people to try and trick them into believing it is a legitimate donation site.

Lookout helps protect your digital information at every level – from the device you hold, to the apps and online services you use and the networks you connect to. Lookout also continuously monitors the internet to ensure what matters to you the most – such as social security and credit card numbers – aren’t exposed. And if anything happens, Lookout’s team of experts and a $1 million identity theft insurance policy are here to back you up.

This week is Consumer Protection Week. Annually observed during the first week of March, the Week was created with the intention of educating consumers of their rights and how to protect themselves from scams in the digital age. In 2020 alone, Americans lost a record-breaking 4.2 billion dollars in online scams. Despite consumers growing increasingly familiar with these scams, millions still give in to bad actors and put their information at risk.

If you are covering Consumer Protection Week, a Lookout expert is happy to comment on how to recognize consumer scams and share tips on how to protect themselves from hackers. Lookout is a cybersecurity company delivering integrated Security, Privacy, and Identity Theft Protection solutions. 

Lookout Suggests These Basic Tips For Common Scams:

Text Scam
If you receive a phishy text message that creates a highly urgent situation, find a way to validate the communication before tapping any links or downloading any apps.

WiFi Connections
Exercise caution when using public WiFi as there may be others snooping on network traffic. In particular, avoid making purchases and banking transactions—any communication that conveys a password, account number or credit card number—unless you are certain that you are on a secure connection.

Password Hacks
Use multi-factor authentication when signing into any account that offers it. This makes it harder for bad actors to get in, even if they compromise your username and password.

Verify The Source
If you are unsure whether an email request is legitimate, try to verify it by contacting the company directly. You can contact the company using information provided on an account statement or by visiting their website directly online, not information provided in an email. 

Install security software on your devices
Security protection, like Lookout, will automatically monitor and identify scam URLs in email, text messages, and on the web and block you from threats that can do harm.

By: Hank Schless, Senior Manager of Security Solutions at Lookout

During the holiday’s smartphones and tablets are a top present for children. While the devices are a welcome addition to a child’s life, a lack of supervision can make them vulnerable to risks. 

One new game growing increasingly popular is Roblox whose main audience is children between the ages of nine and 12. While the game is designed to enable users to create and play games together, it’s popularity has also attracted scammers looking to trick players out of their money or the content they created, via phishing attacks. 

Over three in five children have access to the internet, and they spend over 45 hours per week online on games like Roblox, making it difficult for parents to monitor them.  Since it is difficult to constantly observe kids while they play online, it is important to educate them on how to stay safe. Lookout, the leader in delivering integrated Security, Privacy, and Identity Theft Protection solutions, has shared tips on how to keep your children safe.

Tips For Online Child Safety: 

Educate your children about online privacy and safety best practices 

• Talk to your children about the risks of revealing personal information, such as address, phone number, school name, location and photos online and encourage them to never share passwords to any of their accounts.
• Let your children know to notify you with reports of any concerning content or interactions online. Most platforms have ways to block or report inappropriate content or behavior.

Consider implementing parental controls

• You can set Parental Controls to help manage what sites and information your children have access to on the Internet. Many operating systems have child-safety tools built into major operating systems such as Apple and Google. 
• You can also set up permissions and controls via your internet provider, to help you control the type of content that is delivered via your home WiFi network. 

Protect your children’s online experience & device with security protection 

• Across social media, text messages, emails, and apps – phishing scams are on the rise. On average, 50% of people will encounter an unsafe link on their device in a three month period. 
• It’s important to educate your children about online scams & run security protection – like Lookout Security – that will scan every link your child clicks online to ensure it is safe, and block risky websites or scams before they can do harm.