Ever heard of wrapping your key fob in aluminum foil? It sounds a little crazy, but it’s a smart move. Your key fob’s signal is surprisingly easy for criminals to intercept using cheap scanners sold online. Thieves can open your car without setting off any alarms. If you have a true keyless car model, they might just drive away. Wrapping your fob in foil blocks the signals.
Scammers have even more tricks for targeting car owners and car buyers. Here are the newest ones spreading like wildfire.
A Boston woman paid around $40,000 for an SUV on Facebook Marketplace. The Carfax report looked legit, and Maril Bauter received a clean title from the licensing agency. It was smooth sailing for almost three years … until the police seized her vehicle.
As it turns out, when Bauter bought the 2019 Toyota 4Runner, it was stolen. She was the victim of a VIN-cloning scam.
It all starts with a stolen car or one totaled by an insurance company. The scammer finds the same make, model and year of that car and takes its VIN. It’s as easy as snapping a picture through the windshield.
The scammer then changes the VIN plate on the stolen or totaled vehicle to match the one on the clean vehicle. Now, the scammer can create fake documents and complete the sale.
Unfortunately, it’s hard to spot these scams. If you’re in the market and buying from a private seller:
Bauter’s story had a happy ending: Her insurance company paid out her claim on the stolen vehicle. That said, not every victim is this lucky, so be sure to do your due diligence if you’re in the market for a new vehicle.
An 18-year-old was arrested in Fort Lauderdale for posting his neighbors’ cars for rent on Facebook Marketplace. The scammer collected deposits and then sent renters to the car owners’ real addresses.
The ability to block people on social media is there for good reason: To keep away creeps and harassers. But your “Block” button’s also good for exes, oversharers and nosy family members.
Ever want to see who you’ve blocked over time? I pulled together steps to do just that on every major social platform. Check your list of people you’ve blocked. Maybe it was a mistake or misunderstanding.
Do this before your next shindig: You can easily find your lost phone if you set this up ahead of time. Hey, why not do it now?
Tech to catch political sign thieves: Campaign staffers are putting Apple AirTags in their political posters to track stolen property and find the crooks. At $29 per AirTag, it’s cheaper than hiring a PI and more effective than watching security footage.
“Dear Kim,
“My brother-in-law has our family cottage wired with a Ring security system. He is not to be trusted as he has been unfaithful to his wife and she has filed for divorce. My family is very suspicious that we are being watched or listened to all the time.
Your Amazon, Google or Apple smart speaker has a lifesaving feature I bet you don’t know about: It can tell you if there’s smoke or carbon monoxide (CO) in your home.
The speaker can’t actually detect smoke or CO, but it can “listen” for devices that do. So, if your smoke or CO alarm goes off and you’re away from home, your smart speaker can ping your phone, saving your property, belongings and precious pets inside.
No more free web browsers: Most lack the essential security businesses need, and app integration generally stinks. Enter the new genre of enterprise browsers (paywall link), built to be secure and productive. You’ll have to pay to play, of course. If you have a biz, it’s something to consider. It might even reduce your cyber-insurance costs.
���� Mac alert: Hackers are rigging search results with fake ads for the hot, new Arc browser. Clicking leads you to a copycat site that hosts a malicious DMG file. (Do not go there, folks.) It sneaks past macOS security to steal your passwords and files. The legit Arc browser URL is arc.net. Stay aware!
🚨 To be continued: Google says Samsung and other Android devices are now vulnerable to the same security risk behind June’s Pixel zero-day warning. It’s so bad that they aren’t even saying what the exploit is (code for “We don’t want bad guys to find out”). I’ll let you know when they release a patch to fix it.
Bad ads: Fake Google ads for browser company Arc are routing people to a landing page that looks nearly identical to the real one. When you install the software, malware sends your data to a shady IP address. Tip: If a download tells you to right-click to open instead of just double-clicking, it’s a scam. That’s a trick they use to bypass macOS security.
Web safety alert: Over 100,000 websites, including Hulu, are victims of a security breach. They all use a compromised JavaScript library that could redirect users to scam sites, install malware, and even swipe usernames, passwords and credit card info. Watch out for rogue pop‑ups.
Burglars, life is short – don’t make it shorter: Keep an eye out for hidden cameras in your front yard, folks. South American gangs are placing them in bushes, disguising them in leaf-covered camouflage, to see your comings and goings. Trim your foliage and get a security system. My pick is SimpliSafe.
The only constant is change: Change Healthcare says hackers stole medical records from a “substantial proportion of people in America.” That means you, me and everyone you know. The info includes names, addresses, birth dates, phone numbers, email addresses, Social Security numbers, driver’s license and passport numbers, medical records, test results and diagnoses, medications and imaging, treatment plans, insurance and policy details, billing and claims information, and banking info. Expect a notice by mail starting at the end of July.
Kaspersky’s kaput: The U.S. has officially banned Kaspersky antivirus software over its shady ties to Russia. Officials say it poses a national security risk due to the Russian government’s influence. If you don’t have an antivirus solution (or you need a new one), TotalAV is my pick.
🚨 Update Windows now: A new Wi-Fi vulnerability could let hackers take over your Windows device remotely — yep, without you ever lifting a finger. Every Windows device is at risk. Go to Start > Settings > Update & Security > Windows Update to update and get the patch.
Pixel zero-day: Google rolled out a big security update for Pixel users … and hackers have already exploited one of the patched vulnerabilities. This is a “high-severity” bug, so don’t sleep on it. Go to Settings > Security & privacy > System & updates > Security update, tap Install and Restart your device.
🚨 Security breach: A hacker infiltrated tracking company Tile, stealing customers’ names, physical addresses, emails and phone numbers. The bad guys even got into tools that process location data for law enforcement agencies. Instead of paying the hacker off, Tile disabled the login credentials.
If your late-night Zillow scrolling has gotten more desperate lately, you’re not alone. Home prices are going bonkers. In the past decade, home values shot up 47.1%, beating out the 2010s and 1990s. U.S. home prices are expected to rise another 1.6% over the next year alone. And I found a few markets that are growing nearly five times faster than that.
Like Uber but with guns: BlackWolf’s rideshare drivers must have at least four years of police, military or private security experience. Why? For high-profile folks seeking extra protection. The service was shut down in Phoenix for operating without the necessary permits. You can still snag a BlackWolf ride for the price of an Uber Black in Atlanta, Miami and Fort Lauderdale.
✈️ Get through the airport faster: Over 3 million people a day are expected to pass through the TSA’s security screenigs this summer. If you’re traveling internationally, download the free Mobile Passport Control app. It’ll let you submit your travel docs, photo and customs declaration info ahead of time. Get it for iPhone or Android. You’ll thank me so many times for this tip!
