2 months ago
NEWYou tin now perceive to Fox News articles!
My friend Lisa called maine past night, sound shaking. Someone had cleaned retired her PayPal. Then her Amazon. Then they tried her bank. Three accounts successful 40 minutes. The criminals ne'er touched her passwords. They didn't person to.
They had her email.
10 SIMPLE CYBERSECURITY RESOLUTIONS FOR A SAFER 2026
Think astir what lives successful yours correct now. Bank statements. Medical results. Your status account, your owe company, each streaming service, each shop you've ever bought thing from. And here's nan portion that should extremity you cold: each password reset nexus connected nan satellite gets delivered consecutive to your inbox.
A criminal doesn't request to hack your bank. They conscionable request your inbox. One account. Every different doorway swings wide open. That's not a flaw successful nan system. That's really email was designed to work. And astir group protect it pinch nan aforesaid password they've been utilizing since nan Bush administration.
Nope. Not anymore.
Online criminals prowl nan web for accusation connected your banking, individual documents and different related accounts. Experts opportunity your email could beryllium a gateway for this activity. (Sergei Supinsky/AFP via Getty Images)
Here's really accelerated it really happens
The criminal goes to your bank's website. Click "forgot password" and type successful your email address. The slope sends a reset nexus to your inbox. The criminal, already wrong your email, clicks it, creates a caller password and walks correct in. Then they do it to your Amazon. Your PayPal. Your brokerage. Your wellness security portal.
Each relationship takes astir 60 seconds. It's little effort than ordering a pizza.
The FBI calls this relationship takeover fraud, and it costs Americans $2.7 cardinal past twelvemonth alone. The portion that should really fuss you: 81% of victims said they thought they were "pretty careful" astir information beforehand. (Their words, not mine).
BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN
Three moves. No excuses
1. Get a existent password for your email correct now.
If your email password is nether 16 characters aliases reused anyplace else, alteration it today. I use NordPass ($1.43 a month) to make passwords that look for illustration a feline walked crossed my keyboard. You retrieve 1 maestro password. It handles nan rest. That's nan full deal.
Experts opportunity that securing your email tin limit your vulnerability and vulnerability to cybercrime. (Cyberguy.com)
2. Turn connected two-factor authentication. But not nan matter connection version.
Two-factor intends moreover if personification steals your password, they still can't get successful without a 2nd code. Good. But here's what astir group don't know: SMS matter codes tin beryllium hijacked done thing called a SIM switch attack. A criminal calls your compartment carrier, sweet-talks a customer work rep and transfers your telephone number to their device. Now your "secure" matter codes spell consecutive to them.
Use Google Authenticator instead. It generates codes connected your beingness phone, not done your carrier. Go to your email account's information settings and switch SMS verification for an authenticator app. Takes 5 minutes.
NEW EMAIL SCAM USES HIDDEN CHARACTERS TO SLIP PAST FILTERS
3. Audit each app connected to your inbox.
Every clip you clicked "Sign successful pinch Google" to entree immoderate website aliases app, you handed that app a cardinal to your email. Some of those apps tin read your messages. Some tin nonstop emails posing arsenic you. I did this audit past twelvemonth and recovered 34 apps pinch entree to my Gmail. Thirty-four. Apps I'd wholly forgotten existed, still holding a maestro cardinal to everything.
Go present correct now: myaccount.google.com > Security > Third-party apps pinch relationship access. Revoke thing you don't admit aliases actively use. Gone.
Experts opportunity taking a fewer elemental steps to audit apps and emails will protect you from cybercrime vulnerabilities. (CyberGuy.com)
Your slope has a fraud department. Your in installments paper has zero-liability protection. Your email? Nobody's covering that 1 but you.
Twenty minutes. Three moves. Lisa wishes she'd done it connected a boring Sunday day alternatively of a panicked Tuesday night.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Your inbox is either a wall aliases an unfastened door. There's nary successful between. And dissimilar your beforehand door, this 1 doesn't moreover request a deadbolt. Just beardown security.
Kim Komando is America's Digital Goddess, heard connected 510 power stations nationwide. For much tips connected staying safe online, sojourn Komando.com.
