News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by AJ007 on Tuesday September 16, 2025 @02:49PM (#45266240)
If you have to have use a phone, at minimum disable notifications and never answer it. First it removes all of the urgency. Second, the caller has to provide some way for you to contact them, which gives you a second point of contact to validate.

Never, ever, use a cloud password manager, that's just dumb. Combining these things together in some sort of master account -- be it Google, Apple, Microsoft -- is also terrible. It's like leaving all of your savings accounts, checking, and investments at a single bank.

All of this stuff is going to get way worse because of AI. You'll be talking to real people you know personally who are 100% not AI but were tricked in to asking you to do something by other AI enabled scammers. However aggressive I've suggested people be in the past probably isn't going to be enough for 5 years from now.

These things have always been possible, and have been done, but now they can be done at scale, with advanced testing to figure out what works on who, whereas before it was targeting the guy who kept posting pictures of expensive watches on his public Instagram.

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by pavel_lishin on Tuesday September 16, 2025 @02:49PM (#45266251)
> If you have to have use a phone, at minimum disable notifications and never answer it.

Great advice for someone who doesn't have children or family members with health conditions.

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by GoatInGrey on Tuesday September 16, 2025 @05:52PM (#45268640)
The charitable interpretation is that they meant to not answer a call from someone not already in your contacts.
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by drillsteps5 on Tuesday September 16, 2025 @04:32PM (#45267593)
> Never, ever, use a cloud password manager, that's just dumb. Combining these things together in some sort of master account -- be it Google, Apple, Microsoft -- is also terrible. It's like leaving all of your savings accounts, checking, and investments at a single bank.

Do people actually downvote this? Seriously???

[ Parent | on HN ]