Topic
phishing
2 stories about phishing—and the choices behind the technology we make.
← Back to all storiesGot a text about an unpaid toll? Someone was watching you open it
Microsoft, Japan's National Police Agency and Health-ISAC have taken down YAM Store, CoGUI and Iron Man, the services behind more than a billion toll, parcel and bank lure messages this year. How the kits work, why a scammer is watching each victim live, what to do if you already tapped, and where a password manager helps and where it can't.
That Google sign-in window says accounts.
Unnamed scammers are passing off fake AI ad tools as ChatGPT, Gemini, Claude and Meta Muse products. Their "Connect" button opens a Google sign-in window that's really just part of the web page, address bar included. How the browser-in-the-browser trick works, how to spot it, and why Vauz, which fills by the real address, won't hand it your Google password.