Space & Science

NEWYou can now listen to Fox News articles!
Hacking keeps evolving, just like any other profession. Cybercriminals are always upgrading their tools, especially malware, to find new ways to scam people and steal data or money. The old tricks no longer work as well. Basic phishing rarely fools anyone twice, so hackers constantly look for new ways to break in.They rely on whatever grabs your attention and doesn’t raise suspicion, things like social media ads, fake banking apps or updates that look completely normal. One of the fastest-growing threats in this space is Crocodilus. First detected in early 2025, this Android banking Trojan takes over your contact list to make its scams look more legitimate and harder to spot.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join. Android phone  (Kurt “CyberGuy” Knutsson)Crocodilus malware: What Android users must know nowThe Crocodilus malware was first documented by ThreatFabric cybersecurity researchers in late March 2025. They highlighted its extensive data theft and remote control capabilities.Crocodilus uses Facebook to infect devices. It appears in ads that look normal, but once clicked, the malware installs itself on your device. In some cases, it mimicked banking and e-commerce apps in Poland, promising users free points in exchange for downloading an app. The link led to a fake site that delivered the malware. Although the ad was only live for a few hours, it still reached thousands of users, most of whom were over 35, a group more likely to have money in the bank.Smaller but growing campaigns have also been reported in the United States, where Crocodilus disguised itself as crypto wallet tools, mining apps and financial services. These fake apps are often distributed through social media ads or phishing links, targeting Android users who are less likely to question a “legit-looking” financial app. While not yet widespread, the presence of Crocodilus in the U.S. underscores its global reach and rapidly evolving tactics.ANDROID SECURITY UPGRADES OUTSMART SCAMS AND PROTECT YOUR PRIVACYThe Trojan has also been spotted in Spain, where it disguised itself as a browser update, targeting nearly every major Spanish bank. In Turkey, it posed as an online casino app. And the threat doesn’t stop there.One of the biggest concerns with Crocodilus is its ability to add fake contacts to your phone, inserting entries like “Bank Support” into your contact list. So, if an attacker calls pretending to be from your bank, your phone may not flag it because it appears to be a trusted number, making social engineering scams much more convincing.The latest version also includes a more advanced seed phrase collector, especially dangerous for cryptocurrency users. Crocodilus monitors your screen and uses pattern matching to detect and extract sensitive data, such as private keys or recovery phrases, all before quietly sending it to the attacker. Illustration of a hacker at work  (Kurt “CyberGuy” Knutsson)MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINSHow Crocodilus signals the future of mobile malware threatsCrocodilus shows us what the next wave of mobile threats might look like. It uses real ads to get into your phone. It blends into your digital life in ways that feel familiar. It does not need flashy tricks to succeed. It just needs to appear trustworthy.This kind of malware is designed for scale. It targets large groups, works across different regions and updates fast. It can pretend to be a bank, a shopping app or even something harmless like a browser update. The scary part is how normal it all looks. People are not expecting something this malicious to hide inside something that looks like a gift.The creators of Crocodilus understand how people think and act online. They are using that knowledge to build tools that work quietly and effectively. And they are not working alone. This kind of operation likely involves a network of developers, advertisers and distributors all working together.WHAT IS ARTIFICIAL INTELLIGENCE (AI)? A woman working on her laptop with her phone nearby   (Kurt “CyberGuy” Knutsson)HR FIRM CONFIRMS 4M RECORDS EXPOSED IN MAJOR HACK7 expert tips to protect your Android from Crocodilus malware1. Avoid downloading apps from ads or unknown sources: Crocodilus often spreads through ads on social media platforms like Facebook. These ads promote apps that look like banking tools, e-commerce platforms or even crypto wallets. If you click and install one, you might be unknowingly downloading malware. Always search for apps directly on trusted platforms like the Google Play Store. Do not install anything from random links, especially those shared through ads, messages or unfamiliar websites.2. Avoid suspicious links and install strong antivirus protection: Crocodilus spreads through deceptive ads and fake app links. These can look like legitimate banking tools, crypto apps or browser updates. Clicking on them may quietly install malware that hijacks your contacts, monitors your screen or steals login credentials. To stay safe, avoid clicking on links from unknown sources, especially those that promise rewards or warn of urgent problems. Installing strong antivirus software on your Android device adds another layer of protection. It can scan downloads, block malicious behavior and warn you about phishing attempts before they become a bigger issue. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.3. Review app permissions carefully before and after installation: Before you install an app, take a moment to look at the permissions it asks for. If a shopping app wants access to your contacts, messages or screen, that is a red flag. After installing, go to your phone settings and double-check what permissions the app actually has. Malware like Crocodilus relies on overreaching permissions to steal data and gain control. If anything seems unnecessary, revoke the access or uninstall the app entirely.4. Keep your Android device updated at all times: Security patches are released regularly to block known vulnerabilities. Crocodilus is designed to take advantage of outdated systems and bypass newer Android restrictions. By updating your phone and apps regularly, you reduce the chances of malware slipping through. Set your device to install updates automatically when possible and check manually every so often if you are not sure.5. Consider using a data removal or monitoring service: While not a direct defense against malware, data removal services can help minimize the damage if your information has already been leaked or sold. These services monitor your personal data on the dark web and offer guidance if your credentials have been compromised. In a case like Crocodilus, where malware may harvest and transmit banking info or crypto keys, knowing your data exposure early can help you act before scammers do. Check out my top picks for data removal services here. Get a free scan to find out if your personal information is already out on the web6. Turn on Google Play Protect: Google Play Protect is a built-in security feature on Android phones that scans your apps for anything suspicious. To stay protected, make sure it’s turned on. You can check this by opening the Play Store, tapping your profile icon and selecting Play Protect. From there, you can see if it’s active and run a manual scan of all your installed apps. While it may not catch everything, especially threats from outside the Play Store, it’s still an important first layer of defense against harmful apps like Crocodilus.7. Be skeptical of unfamiliar contacts or urgent messages: One of the newer tricks Crocodilus uses is modifying your contact list. It can add fake entries that look like customer service numbers or bank helplines. So, if you receive a call from “Bank Support,” it might not be real. Always verify phone numbers through official websites or documents. The same applies to messages asking for personal details or urgent logins. When in doubt, do not respond or click any links. Contact your bank or service provider directly.DON’T CLICK THAT LINK! HOW TO SPOT AND PREVENT PHISHING ATTACKS IN YOUR INBOXKurt’s key takeawayCrocodilus is one of the most advanced Android banking Trojans seen so far. It spreads through social media ads, hides inside apps that look real and collects sensitive data like banking passwords and crypto seed phrases. It can also add fake contacts to your phone to trick you during scam calls. If you use Android, avoid downloading apps from links in ads or messages. Only install apps from trusted sources like the Google Play Store. Keep your phone updated, and be careful if something looks too good to be true because it probably is. CLICK HERE TO GET THE FOX NEWS APPWho should be held accountable when malware like Crocodilus spreads through platforms like Facebook? Let us know by writing to us at Cyberguy.com/Contact. For more of my tech tips anbd security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/NewsletterAsk Kurt a question or let us know what stories you’d like us to coverFollow Kurt on his social channelsAnswers to the most asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com.  All rights reserved.  

NEWYou can now listen to Fox News articles!
Hacking keeps evolving, just like any other profession. Cybercriminals are always upgrading their tools, especially malware, to find new ways to scam people and steal data or money. The old tricks no longer work as well. Basic phishing rarely fools anyone twice, so hackers constantly look for new ways to break in.They rely on whatever grabs your attention and doesn’t raise suspicion, things like social media ads, fake banking apps or updates that look completely normal. One of the fastest-growing threats in this space is Crocodilus. First detected in early 2025, this Android banking Trojan takes over your contact list to make its scams look more legitimate and harder to spot.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join. Android phone  (Kurt “CyberGuy” Knutsson)Crocodilus malware: What Android users must know nowThe Crocodilus malware was first documented by ThreatFabric cybersecurity researchers in late March 2025. They highlighted its extensive data theft and remote control capabilities.Crocodilus uses Facebook to infect devices. It appears in ads that look normal, but once clicked, the malware installs itself on your device. In some cases, it mimicked banking and e-commerce apps in Poland, promising users free points in exchange for downloading an app. The link led to a fake site that delivered the malware. Although the ad was only live for a few hours, it still reached thousands of users, most of whom were over 35, a group more likely to have money in the bank.Smaller but growing campaigns have also been reported in the United States, where Crocodilus disguised itself as crypto wallet tools, mining apps and financial services. These fake apps are often distributed through social media ads or phishing links, targeting Android users who are less likely to question a “legit-looking” financial app. While not yet widespread, the presence of Crocodilus in the U.S. underscores its global reach and rapidly evolving tactics.ANDROID SECURITY UPGRADES OUTSMART SCAMS AND PROTECT YOUR PRIVACYThe Trojan has also been spotted in Spain, where it disguised itself as a browser update, targeting nearly every major Spanish bank. In Turkey, it posed as an online casino app. And the threat doesn’t stop there.One of the biggest concerns with Crocodilus is its ability to add fake contacts to your phone, inserting entries like “Bank Support” into your contact list. So, if an attacker calls pretending to be from your bank, your phone may not flag it because it appears to be a trusted number, making social engineering scams much more convincing.The latest version also includes a more advanced seed phrase collector, especially dangerous for cryptocurrency users. Crocodilus monitors your screen and uses pattern matching to detect and extract sensitive data, such as private keys or recovery phrases, all before quietly sending it to the attacker. Illustration of a hacker at work  (Kurt “CyberGuy” Knutsson)MASSIVE DATA BREACH EXPOSES 184 MILLION PASSWORDS AND LOGINSHow Crocodilus signals the future of mobile malware threatsCrocodilus shows us what the next wave of mobile threats might look like. It uses real ads to get into your phone. It blends into your digital life in ways that feel familiar. It does not need flashy tricks to succeed. It just needs to appear trustworthy.This kind of malware is designed for scale. It targets large groups, works across different regions and updates fast. It can pretend to be a bank, a shopping app or even something harmless like a browser update. The scary part is how normal it all looks. People are not expecting something this malicious to hide inside something that looks like a gift.The creators of Crocodilus understand how people think and act online. They are using that knowledge to build tools that work quietly and effectively. And they are not working alone. This kind of operation likely involves a network of developers, advertisers and distributors all working together.WHAT IS ARTIFICIAL INTELLIGENCE (AI)? A woman working on her laptop with her phone nearby   (Kurt “CyberGuy” Knutsson)HR FIRM CONFIRMS 4M RECORDS EXPOSED IN MAJOR HACK7 expert tips to protect your Android from Crocodilus malware1. Avoid downloading apps from ads or unknown sources: Crocodilus often spreads through ads on social media platforms like Facebook. These ads promote apps that look like banking tools, e-commerce platforms or even crypto wallets. If you click and install one, you might be unknowingly downloading malware. Always search for apps directly on trusted platforms like the Google Play Store. Do not install anything from random links, especially those shared through ads, messages or unfamiliar websites.2. Avoid suspicious links and install strong antivirus protection: Crocodilus spreads through deceptive ads and fake app links. These can look like legitimate banking tools, crypto apps or browser updates. Clicking on them may quietly install malware that hijacks your contacts, monitors your screen or steals login credentials. To stay safe, avoid clicking on links from unknown sources, especially those that promise rewards or warn of urgent problems. Installing strong antivirus software on your Android device adds another layer of protection. It can scan downloads, block malicious behavior and warn you about phishing attempts before they become a bigger issue. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.3. Review app permissions carefully before and after installation: Before you install an app, take a moment to look at the permissions it asks for. If a shopping app wants access to your contacts, messages or screen, that is a red flag. After installing, go to your phone settings and double-check what permissions the app actually has. Malware like Crocodilus relies on overreaching permissions to steal data and gain control. If anything seems unnecessary, revoke the access or uninstall the app entirely.4. Keep your Android device updated at all times: Security patches are released regularly to block known vulnerabilities. Crocodilus is designed to take advantage of outdated systems and bypass newer Android restrictions. By updating your phone and apps regularly, you reduce the chances of malware slipping through. Set your device to install updates automatically when possible and check manually every so often if you are not sure.5. Consider using a data removal or monitoring service: While not a direct defense against malware, data removal services can help minimize the damage if your information has already been leaked or sold. These services monitor your personal data on the dark web and offer guidance if your credentials have been compromised. In a case like Crocodilus, where malware may harvest and transmit banking info or crypto keys, knowing your data exposure early can help you act before scammers do. Check out my top picks for data removal services here. Get a free scan to find out if your personal information is already out on the web6. Turn on Google Play Protect: Google Play Protect is a built-in security feature on Android phones that scans your apps for anything suspicious. To stay protected, make sure it’s turned on. You can check this by opening the Play Store, tapping your profile icon and selecting Play Protect. From there, you can see if it’s active and run a manual scan of all your installed apps. While it may not catch everything, especially threats from outside the Play Store, it’s still an important first layer of defense against harmful apps like Crocodilus.7. Be skeptical of unfamiliar contacts or urgent messages: One of the newer tricks Crocodilus uses is modifying your contact list. It can add fake entries that look like customer service numbers or bank helplines. So, if you receive a call from “Bank Support,” it might not be real. Always verify phone numbers through official websites or documents. The same applies to messages asking for personal details or urgent logins. When in doubt, do not respond or click any links. Contact your bank or service provider directly.DON’T CLICK THAT LINK! HOW TO SPOT AND PREVENT PHISHING ATTACKS IN YOUR INBOXKurt’s key takeawayCrocodilus is one of the most advanced Android banking Trojans seen so far. It spreads through social media ads, hides inside apps that look real and collects sensitive data like banking passwords and crypto seed phrases. It can also add fake contacts to your phone to trick you during scam calls. If you use Android, avoid downloading apps from links in ads or messages. Only install apps from trusted sources like the Google Play Store. Keep your phone updated, and be careful if something looks too good to be true because it probably is. CLICK HERE TO GET THE FOX NEWS APPWho should be held accountable when malware like Crocodilus spreads through platforms like Facebook? Let us know by writing to us at Cyberguy.com/Contact. For more of my tech tips anbd security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/NewsletterAsk Kurt a question or let us know what stories you’d like us to coverFollow Kurt on his social channelsAnswers to the most asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com.  All rights reserved.  

Students from New York and Utah will hear from NASA astronauts aboard the International Space Station as they answer prerecorded questions in two separate events.
At 11:30 a.m. EDT on Monday, June 23, NASA astronauts Nichole Ayers and Anne McClain will answer questions submitted by students from P.S. 71 Forest Elementary School in Ridgewood, New York. Media interested in covering the event must RSVP by 5 p.m. Friday, June 20, to Regina Beshay at: rbeshay2@school.nyc.gov or 347-740-6165.
At 11:05 a.m. on Friday, June 27, Ayers and McClain will answer questions submitted by students from Douglas Space and Science Foundation, Inc., in Layton, Utah. Media interested in covering the event must RSVP by 5 p.m. Wednesday, June 25, to Sarah Merrill at: sarahmonique@gmail.com or 805-743-3341.
Watch the 20-minute Earth-to-space calls on NASA STEM YouTube Channel.
P.S. 71 Forest Elementary School will host kindergarten through fifth grade students. Douglas Space and Science Foundation will host participants from the Science, Technology, Achievement Research camp. Both events aim to inspire students to imagine a future in science, technology, engineering, and mathematics careers through ongoing collaborations, mentorship, and hands-on learning experiences.
For nearly 25 years, astronauts have continuously lived and worked aboard the space station, testing technologies, performing science, and developing skills needed to explore farther from Earth. Astronauts aboard the orbiting laboratory communicate with NASA’s Mission Control Center in Houston 24 hours a day through SCaN’s (Space Communications and Navigation) Near Space Network.
Important research and technology investigations taking place aboard the space station benefit people on Earth and lays the groundwork for other agency missions. As part of NASA’s Artemis campaign, the agency will send astronauts to the Moon to prepare for future human exploration of Mars; inspiring explorers and ensuring the United States continues to lead in space exploration and discovery.
See videos of astronauts aboard the space station at:
https://www.nasa.gov/stemonstation
-end-
Gerelle DodsonHeadquarters, Washington202-358-1600gerelle.q.dodson@nasa.gov
Sandra JonesJohnson Space Center, Houston281-483-5111sandra.p.jones@nasa.gov

NEWYou can now listen to Fox News articles!
Your personal data is probably being sold right now. Scam calls, junk emails, and weird login alerts aren’t random. They’re warning signs that your information is being circulated through data brokers, often without your knowledge or consent. Major breaches, like the recent Adidas hack, have exposed millions of names, emails, phone numbers, and home addresses. Once this data is leaked, it’s fed into a vast marketplace of data brokers who package, sell, and resell your information to advertisers, spammers, scammers and even cybercriminals. Think it hasn’t happened to you? Here are 10 red flags that your data is already out there and the steps you can take to stop it from spreading further.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join. Illustration of a woman’s personal data being exposed (Kurt “CyberGuy” Knutsson)Be proactive about your privacyIf your personal information appears on people-finder sites or in sketchy online databases, it stays there until you remove it. This means your full name, home address, email, and phone number are available to anyone, including scammers and stalkers. You can manually opt out of each site, but that takes time and patience. Instead, consider an automated privacy service that scans data broker sites and sends removal requests on your behalf. The less data floating around, the less likely it is to be misused.11 EASY WAYS TO PROTECT YOUR ONLINE PRIVACY IN 2025 Illustration of personal data available online (Kurt “CyberGuy” Knutsson)OVER 8M PATIENT RECORDS LEAKED IN HEALTHCARE DATA BREACH10 signs your data is being bought and soldIf any of these are happening to you, your data is likely already floating around the broker and scammer economy. Here’s what to watch for: 1. You’re suddenly flooded with spam emailsIf your inbox is overflowing with shady product offers, sketchy promotions, or strange marketing emails you never signed up for, it’s a good bet your email address has been sold. This kind of spam typically results from your address being added to mass marketing lists purchased in bulk.2. You’re getting nonstop scam callsMore calls than usual from unknown numbers? Telemarketers, fake IRS agents, and car warranty scammers often use brokered phone lists. If you’re getting several calls a day, it likely means your number is being recycled by different call centers and fraud operations.3. You receive password-reset emails you didn’t requestUnfamiliar password-reset prompts are a sign someone is attempting to access your account. They may have found your email address and other leaked credentials and are now probing for weak points. It’s a key signal that your digital footprint is being exploited.4. You notice strange charges on your bank accountTiny charges can be a test by cybercriminals to see if stolen card info works. If even one unrecognized charge shows up, it’s critical to act fast. These small transactions often lead to bigger, more damaging fraud if ignored.5. You’re locked out of your own accountsLosing access to your email, bank, or social media accounts may mean hackers have already reset your passwords. With enough personal data, criminals can bypass security questions and fully take over your identity online.WHAT IS ARTIFICIAL INTELLIGENCE (AI)?6. Friends say they got weird messages from youIf your contacts report strange DMs, fake money requests, or odd links coming from your accounts, that’s a strong sign someone else has gained access. Cybercriminals use this tactic to trick your friends into clicking dangerous links or handing over money.7. Sketchy social media accounts start following youA wave of fake profiles suddenly following or messaging you is more than annoying; it could be a coordinated attempt to gather more information about you or impersonate you later. These accounts may also be bots programmed to phish for details or direct you to scam pages.8. Personal info is already filled in on new websitesIf your name, email, or phone number shows up on a form before you even touch the keyboard, that website may have purchased your information. Some sites share consumer data with partners, and this pre-fill behavior can indicate that your data is being sold and shared.9. You find your profile on people-search websitesSites like Spokeo or Whitepages can display your full name, home address, phone number, family members, and more often scraped from public records or sold by data brokers. This makes you a target for identity theft, scams, and unwanted contact. 10. You’re denied credit or insurance for unclear reasonsRejections for loans, insurance, or rental applications can stem from inaccurate or outdated data in broker databases. If your reputation or credit score is being shaped by information you didn’t even know existed, that’s a clear signal that your data is out of your hands. A woman working on her laptop (Kurt “CyberGuy” Knutsson)CUSTOM DATA REMOVAL: WHY IT MATTERS FOR PERSONAL INFO ONLINEHow to stay safe: Steps to protect your data nowNoticing just a few of these signs means it’s time to take action. The more proactive you are, the better you can limit future damage and prevent your data from spreading further.1. Invest in a personal data removal service: Personal data removal services can request that your information be taken down from hundreds of data broker sites. It’s an effective way to remove your name from public listings and stop new profiles from popping up. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you. Check out my top picks for data removal services here.Get a free scan to find out if your personal information is already out on the web.2. Strengthen your passwords: Use long, unique passwords that are different for every account. Consider using a password manager to generate and store complex passwords. Get more details about my best expert-reviewed password managers of 2025 here.3. Turn on two-factor authentication: Adding a second step to your login process, like a text code or app confirmation, can stop hackers even if they know your password. Turn this on for email, banking, and any service that stores your sensitive info.4. Monitor your financial accounts regularly: Check your bank and credit card statements every few days. Set up alerts for any activity, and if you’re not actively applying for credit, consider freezing your credit reports with all three bureaus.5. Use alias email addresses: Create separate email addresses for things like online shopping, sign-ups, and banking. This helps keep your primary inbox private and makes it easier to trace which services may be leaking or selling your information. If one alias starts receiving junk mail or suspicious messages, you can simply delete it without affecting your main account. It’s one of the simplest ways to reduce spam and protect your digital identity. See my review of the best secure and private email services here.6. Don’t click suspicious links or attachments, and use strong antivirus software: Phishing attempts often look convincing, especially if scammers already know your name or other details. If something feels off, delete the message and go directly to the website instead of clicking the link. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.7. Be cautious about what you post publicly: Avoid sharing your birthday, hometown, full name, or photos of your home or license plates. Social media platforms are heavily scraped by bots and bad actors looking to compile detailed profiles.8. Block robocalls and filter scam numbers: A surge in robocalls is a strong sign your phone number is being sold or shared by data brokers. These calls often come from spoofed or international numbers and may include fake IRS agents, tech support scams, or phony insurance offers. To fight back, enable your phone carrier’s spam call protection (AT&T ActiveArmor, Verizon Call Filter, or T-Mobile Scam Shield). You can also use third-party apps like RoboKiller, Hiya, or Truecaller to screen calls, block known scam numbers, and report suspicious callers. Be sure to avoid answering unknown calls, even pressing a button to “opt out” can confirm your number is active and lead to more spam. Check out how to get rid of robocalls with apps and data removal services.WHAT HACKERS CAN LEARN ABOUT YOU FROM A DATA BROKER FILEKurt’s key takeaways Your personal data is valuable, and once it’s out there, it’s difficult, sometimes impossible, to claw it back. But you’re not powerless. The more proactive you are, the safer you’ll be. Start by cleaning up your digital footprint and removing your information from people finder and data broker sites. Whether you go manual or use a trusted service, acting now can help you avoid bigger problems later. Protect your privacy, defend your accounts, and stay one step ahead of the scammers.CLICK HERE TO GET THE FOX NEWS APPShould data brokers be required to get your permission before collecting and selling your personal information? Let us know by writing to us at Cyberguy.com/Contact. For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you’d like us to cover.Follow Kurt on his social channels:Answers to the most-asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com. All rights reserved.

NEWYou can now listen to Fox News articles!
With the increasing sophistication of digital threats, safeguarding your phone and personal data has never been more crucial. Android is responding with a suite of new security features designed to protect you from scams, fraud, and device theft. These enhancements are primarily rolling out to devices running Android 16. Some protections, such as enhanced theft protection and AI-powered scam detection, are also becoming available on select devices running Android 10 and later via Google Play Services updates. The most advanced features, including Identity Check and device-level Advanced Protection, are initially launching on Google Pixel and Samsung devices with One UI 7, with plans to expand to other manufacturers as they update to Android 16. Let’s take a look at how these innovations are making Android security smarter and more comprehensive.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join. Android phone (Kurt “CyberGuy” Knutsson)1. Smarter protections against phone call scamsPhone scammers are becoming increasingly creative, often attempting to trick people into changing device security settings or granting risky permissions during calls. Android’s new in-call protections add a layer of defense by blocking certain actions during calls with non-contacts. For example, you won’t be able to disable Google Play Protect, sideload an app for the first time, or grant accessibility permissions while on a call with someone not in your contacts. If you’re screen-sharing during a call, Android will prompt you to stop sharing when the call ends.ANDROID SCAM LETS HACKERS USE YOUR CREDIT CARD REMOTELY In-call protections (Google)BEST ANTIVIRUS FOR ANDROIDS – CYBERGUY PICKS 20252. Smarter scam detection in Google MessagesAndroid’s AI-powered Scam Detection in Google Messages and Phone by Google is now even more intelligent. It can identify suspicious conversation patterns in real-time and warn you before you fall victim to a scam. This protection covers a wide range of scams, including toll road and billing fee scams, cryptocurrency scams, financial impersonation scams, gift card and prize scams, tech support scams, and more. All message analysis happens on your device, so your conversations stay private.Availability can vary depending on your device, region, and carrier. If you don’t see these features yet, make sure your app is updated and keep an eye out as Google continues to expand support to more users worldwide. Scam Detection (Google)3. Fighting fraud and impersonation with Key VerifierTo help protect you from scammers who try to impersonate someone you know, Android is rolling out Key Verifier in Google Messages. This feature lets you and your contact verify each other’s identity using public encryption keys, either by scanning a QR code or comparing numbers. If a contact’s verification status changes, like after a SIM swap, you’ll see a warning, giving you extra confidence that you’re talking to the right person. Key Verifier (Google)4. Find Hub: Locating what matters most, from luggage to loved onesIf you’ve ever used Android’s Find My Device to track down a lost phone or set of keys, you know how helpful it can be. Now, Find My Device is evolving into Find Hub, making it easier to keep track of your devices, family, and friends all in one place, with more partner brands joining the network.Find Hub is also becoming more personalized. Whether you want built-in luggage tracking from July and Mokobara, ski protection with Peak integration, or Disney-themed Bluetooth tags from Pixbee, there are options to suit different needs. Soon, tags that are enabled with ultra-wideband, starting with moto tag, will provide improved nearby location tracking.Later this year, Find Hub will include satellite connectivity, allowing you to stay connected with friends and family even when cellular service is unavailable. For travelers, new partnerships with airlines such as Aer Lingus, British Airways, Cathay Pacific, Iberia, and Singapore Airlines will let you share your Bluetooth tag’s location directly with these airlines. This should make recovering lost luggage easier and less stressful. Find Hub (Google)7 NEW GOOGLE AI TOOLS FROM I/O 2025 YOU SHOULD KNOW ABOUT5. Comprehensive mobile theft protection and advanced securityAndroid continues to strengthen its theft protection features. The new Identity Check adds an extra layer of security if your PIN or password is compromised, and it’s rolling out to more devices with Android 16. Factory Reset Protection is getting tougher, restricting all functionalities on devices reset without the owner’s authorization. Remote Lock now includes a security challenge question to prevent unauthorized use, and one-time passwords will be hidden on the lock screen in higher-risk scenarios. Identity check, factory reset protection and remote lock (Google)GOOGLE’S NEW AI TECH MAY KNOW WHEN YOUR HOUSE WILL BURN DOWN6. Advanced Protection: Google’s strongest mobile security made simpleFor those who want even stronger security, Advanced Protection is now available as a device-level setting in Android 16. This combines Google’s most robust security tools, like intrusion logging and scam call detection, into one setting that can’t be turned off without unenrolling.Whether you’re a journalist, a public figure, or just want extra peace of mind, Android 16 makes it easy to activate Advanced Protection. This suite of features brings together Google’s top security tools, like Intrusion Logging, USB protection, and scam detection for calls, into one powerful setting. Once enabled, these protections can’t be turned off, shielding you against even the most sophisticated attacks. And new features are on the way, including tighter controls over app permissions and network connections.To turn on Google’s Advanced Protection, follow these steps:Settings may vary depending on your Android phone’s manufacturer. Open SettingsScroll down and tap on Security or Privacy & Security, depending on your device model.Look for the Advanced Protection section. This may be listed under More Security Settings or a similar submenu.Tap Advanced Protection and select Get Started or Enroll.The setup process will guide you through enabling features like Intrusion Logging, USB protection, and scam call detection.You may be prompted to verify your identity (such as entering your password or using biometric authentication). Once you’ve completed the steps, you’ll see a confirmation that Advanced Protection is active.Note: After activation, these protections cannot be turned off without unenrolling from Advanced Protection. Advanced Protection (Google)Optional: Review additional settingsYou can review and adjust related security settings within the Advanced Protection menu, such as app permissions and network controls, as new features become available. If you don’t see the option, make sure your device is updated to Android 16 and check for any additional requirements, such as a Google account or specific device compatibility. Some features may require additional verification steps, like using a security key or two-factor authentication, especially if you’re enrolling for the first time or on a new device.DON’T BE SO QUICK TO CLICK THAT GOOGLE CALENDAR INVITE. IT COULD BE A HACKER’S TRAPAdditional steps to keep your Android and data safeWhile Android is doing a lot to protect you, there are a few extra steps you can take to boost your security:Install strong antivirus software: This adds another layer of defense against malware and suspicious apps. Google Play Protect, which is built-in malware protection for Android devices, automatically removes known malware. However, it is important to note that Google Play Protect may not be enough. Historically, it isn’t 100% foolproof at removing all known malware from Android devices. So, you may want to choose a strong antivirus app and keep it updated for maximum protection. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.Keep your device updated: Always install the latest Android updates to patch any security vulnerabilities. Updates often include important security fixes that protect against new threats. To do this, go to Settings, tap System or About phone, select Software update or System update, then tap Download and Install if an update is available.Use strong, unique passwords: Avoid reusing passwords across different accounts to reduce the risk if one is compromised. Consider a password manager to generate and store complex passwords. Get more details about my best expert-reviewed password managers of 2025 here.Be cautious with app permissions: Only grant apps the permissions they truly need. Review permissions regularly and revoke any that seem unnecessary or intrusive.WHAT IS ARTIFICIAL INTELLIGENCE (AI)?Enable two-factor authentication: This adds an extra step to your logins, making it more difficult for others to access your accounts. Most major apps and services offer this feature in their security settings.Download apps only from the Google Play Store: Avoid third-party stores, which are more likely to host unsafe apps. The Play Store has security checks that help reduce the risk of downloading malicious software.Regularly review your privacy settings: Make sure you’re comfortable with what you’re sharing. Adjust settings to limit data sharing and enhance your privacy whenever possible.Consider a personal data removal service: Scammers often start by gathering information about you from public records and data broker sites. Using a personal data removal service can help scrub your personal details from these sites, making it much harder for scammers to target you. If you’re concerned about your privacy or just want to take your security to the next level, this is a smart step to consider.While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you. Check out my top picks for data removal services here.Get a free scan to find out if your personal information is already out on the web.Kurt’s key takeaways Keeping your phone and personal data secure is more important than ever, but Android is making it easier to stay protected with smarter scam detection, new ways to keep track of your devices and loved ones, and the strongest security features yet. By taking a few extra steps, like using strong passwords, keeping your device updated, and considering a personal data removal service, you’re adding even more layers of protection against evolving threats. Security is always changing, but with these tools and habits, you can use your Android device with greater confidence and peace of mind.CLICK HERE TO GET THE FOX NEWS APPWho do you think should bear the greatest responsibility for keeping your data safe: tech companies, the government, or you as an individual? Let us know by writing us at Cyberguy.com/Contact.For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you’d like us to cover.Follow Kurt on his social channels:Answers to the most-asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com. All rights reserved.

NEWYou can now listen to Fox News articles!
Apps like Venmo, Zelle, Cash App, and PayPal have changed how we move money. They are fast and convenient, but with that ease comes exposure. If you send funds to the wrong person, they are likely gone for good. There is often no real path to recovery, especially when the recipient disappears behind a fake username and an unresponsive support system.This vulnerability becomes even more dangerous in moments of crisis. During natural disasters, high-profile social movements, or health emergencies, people are moved to give. Scammers know this and exploit the impulse. One such scam involved a fake Venmo account pretending to collect donations for a Minnesota nonprofit after the death of George Floyd. The account looked legitimate, but the funds never reached the organization.A similar scam is targeting Miles Perret Cancer Services, a nonprofit based in Louisiana. Scammers have created a fraudulent Venmo account that closely mimics the legitimate Venmo handle of the cancer nonprofit organization. They are using this fake account to trick well-meaning donors into sending money, believing they are supporting the real charity.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join. Zelle and Venmo apps (Kurt “CyberGuy” Knutsson)Fake Venmo account mimics real charity: How 1 character can fool youMiles Perret Cancer Services (MPCS) provides support to families facing cancer diagnoses. They recently discovered that a fraudulent Venmo account is impersonating their official one. Their real handle is @milesperretcs. The scammer’s account uses @milesperretcs_, a nearly indistinguishable copy.To the average person, the difference is invisible. That is precisely what makes it dangerous.”We reported this account through the app more than 24 hours ago,” Timothy Rinaldi, executive director of MPCS, told Cyberguy. “There has been no follow-up from Venmo. We tried the live chat option, but it was abruptly closed with no resolution.”Instead of helping, Venmo routed Rinaldi through generic FAQs and legal disclaimers. Even after he was connected with a live support agent, the responses were standard scripts. He was told that the issue had been escalated, but no one could provide a timeline beyond a vague window of three to five business days. Real and fake Venmo accounts (Kurt “CyberGuy” Knutsson)FBI WARNS OF SCAM TARGETING VICTIMS WITH FAKE HOSPITALS AND POLICECharity scams on Venmo: How scammers trick donors using fake accountsFake Venmo accounts have been used in recent years to exploit donation drives for hurricane relief, animal shelters, medical funds, and other causes. The formula is simple. Take a known nonprofit, tweak the username slightly, and ride the momentum of goodwill. By the time anyone catches on, the money is gone and the damage is done.The incident involving MPCS is not an isolated case. In December 2024, Final Victory Animal Rescue, a nonprofit based in South Carolina, discovered a Venmo account impersonating the organization and collecting donations intended for the real charity. The group’s general manager, Michael Sniezek, confirmed the account had been receiving funds from unsuspecting donors before the issue was flagged. In another case, Alone No More Dog Rescue, a Phoenix-based nonprofit, posted on Facebook that fraudulent Venmo accounts had been targeting its past donors, sending them payment requests and soliciting additional funds under false pretenses.MPCS has filed a report with the Federal Trade Commission, but there is no guarantee of quick resolution. The fraudulent account remains active as of press time. It is unclear how much has already been lost or whether Venmo will recover and return any of it. A hacker at work (Kurt “CyberGuy” Knutsson)THIS IS WHAT YOU ARE DOING WRONG WHEN SCAMMERS CALLVenmo confirms fake accounts were removed and shares how to stay safeVenmo confirmed that the imposter accounts were removed promptly after being reported. They recommend reporting suspicious activity directly within the Venmo app and contacting customer support for further assistance.To help users avoid future scams, Venmo encourages everyone to review its official security tips on how to recognize impersonation attempts and learn how to spot and avoid charity-related scams.They also shared the following tips to help users verify real Venmo profiles and stay safe when sending money:Double-check the Venmo username (handle): Look closely for misspellings, extra characters or attempts at impersonation. Use Venmo QR codes: Scan QR codes directly from the Venmo app to ensure you’re sending money to the right person. Donate only to verified Venmo charity accounts: These are vetted and marked with verification badges. You can find them here.Heed Venmo’s automatic warnings: If Venmo flags a payment as suspicious, pause and verify before sending money. These alerts are designed to protect you from scams.How to avoid Venmo scams: 11 expert tips to protect your moneyScammers aren’t just targeting charities. They’re after anyone and everyone. Here are a few ways to protect yourself and keep your hard-earned money safe.1) Always access the payment app from the official app or website, and not from any third-party platforms or services.2) Look at the security settings that the payment app offers and make sure they’re all set to the highest and most protective settings.3) Consider using a personal data removal service to protect your privacy and reduce your risk of scams. Scammers who target payment apps like Venmo, Zelle, Cash App, and PayPal often rely on information found on data broker and people-search sites to craft convincing impersonations or phishing attempts. These sites can list your name, address, phone number, and even connections to organizations you support, making it easier for fraudsters to trick you or others into sending money to fake accounts.Personal data removal services work by automatically removing your information from hundreds of data broker sites, making it much harder for scammers to find and misuse your details. By scrubbing your data from these sources, you lower your risk of being targeted in payment app scams and reduce the likelihood that someone could impersonate you or a nonprofit you care about. Check out my top picks for data removal services here.Get a free scan to find out if your personal information is already out on the web 4) Create a strong, unique and complex password for each of your mobile payment apps and change it often. Consider using a password manager to generate and store complex passwords. Get more details about my best expert-reviewed password managers of 2025 here.5) Enable two-factor authentication, which means that you need to enter a code or use your fingerprint or face to unlock your account to prevent unauthorized access. This way, even if someone knows your password, they can’t log in without your device or confirmation.6) Lock your device and log out of your apps. You should always lock your phone with a password, PIN, pattern, fingerprint, or face. Never share your password, PIN, or security code with anyone. You should also log out of your mobile payment apps after each use and turn off the auto-login feature. This way, even if someone takes or borrows your device, they can’t access your mobile payment apps without your approval.7) Verify the identity and legitimacy of the sender or receiver. You should always check the name, photo, username, and contact information of the person or organization you are sending money to or receiving money from before accepting or sending any payment requests. You should also confirm the reason and amount of the transaction before you agree to it. If you are not sure or have any doubts, you should contact the person or organization directly through another way, such as a phone call, text message, or email, but only if you know for sure that those forms of communication are legitimate. You should never send money or give your account details to anyone you don’t know or trust, or anyone who asks you to do so out of the blue.8) Link your Venmo to a credit card as opposed to a debit card, so you can dispute a charge from scammers more easily. However, keep in mind, linking a credit card to your payment app can provide additional protection in the event of fraud, but this can come with extra costs in terms of transaction fees.9) Try not to keep a balance in your money-transferring apps. You have a much better chance of being helped by your bank or credit card company when it comes to fraud than you do from a money-transferring app.10) Use strong antivirus software and never click on links from unknown sources, especially when an email or text appears to have come from the payment App. Protect yourself from accidentally clicking on malicious links by running antivirus software on your device.The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.11) Monitor your account activity and report any suspicious or unauthorized transactions. You should set up notifications from your payment app and your bank via text or email, and check your account activity regularly. Look for any signs of fraud, such as payments you didn’t make or receive, or changes to your account settings or information.Kurt’s key takeawayUnlike traditional banks, which are bound by federal consumer protection laws and fraud resolution timelines, peer-to-peer payment apps operate in a much looser regulatory environment. Services like Venmo often state in their user agreements that they are not responsible for mistaken or unauthorized payments unless there is clear evidence of account compromise or technical malfunction. Venmo’s only suggestion here was to respond to a support ticket and wait. There was no emergency fraud hotline, no dedicated contact for nonprofits, and no indication that urgent action would be taken. Payment apps that allow donations to flow as quickly as a text message must also bear the responsibility of keeping those transactions safe. When a nonprofit has to beg for support just to protect its own identity, something is broken.Should payment platforms be held responsible for losses caused by impersonation scams? Let us know by writing to us at Cyberguy.com/Contact.For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.Ask Kurt a question or let us know what stories you’d like us to cover.Follow Kurt on his social channels:Answers to the most-asked CyberGuy questions:New from Kurt:Copyright 2025 CyberGuy.com. All rights reserved.