We apply Zero Trust to web links so people don't have to "stay vigilant”. Every person should be able to open links inside any app without relying on luck.
San Francisco
Joined July 2011
- Tweets3.2K
- Following20
- Followers2.5K
- Likes1.1K
Pinned Tweet
It’s time for a new way to spot & avoid online impersonators inside any mobile app or service: Messages including SMS and iMessage, Mail, Gmail, Discord, WhatsApp, Telegram, LinkedIn, Twitter/X, QR Codes…
All without opening a link
Zero Trust for URLs
apps.apple.com/us/app/metace…
2
461
A reminder that scams don’t take holidays.
WhatsApp New Year greeting messages carrying phishing links and malicious APKs. One tap installs malware. Data is stolen. Banking fraud follows.
No exploit. No zero-day. Just a trusted link.
timesofindia.indiatimes.com/…
New Year event and delivery scams in India used phishing links and cloned sites to harvest card details, UPI pins, and OTPs at scale.
Same pattern every year. Same failure every year. Phishing.
Trusting links by default is the real vulnerability.
timesofindia.indiatimes.com/…
New EU PSD3 regulation raises fraud liability for banks and payment providers
Most digital fraud begins with phishing
Today’s security can’t protect people from unreported phishing threats
Zero Trust for links delivers upstream protection
developer.metacert.com/banks…
Someone replied to a LinkedIn post with a tool they believe can stop phishing by rewriting links and scanning them at click time. It can’t. New links have no history or signals for detection to analyse. That’s why people are still told to stay vigilant.
developer.metacert.com/when-…
✍🏻 New blog post: a look at how phishing began in the mid-1990s, how trust on the web was built, lost, and is now being rebuilt.
developer.metacert.com/the-e…
Palo Alto’s new report calls a global smishing campaign “sophisticated.” It’s not. It’s the same phishing problem that’s existed for decades - fake links leading to fake websites.
developer.metacert.com/the-i…
Protect your crypto on mobile with our new service - it authenticates only legit crypto websites — check out our demo where only the official Binance site is authenticated. Say goodbye to phishing scams with URL Authenticator.
apps.apple.com/us/app/metace…
1
5
248
Phishing by SMS didn't really occur much before 2019.
“Pakistan has become the latest target of a threat actor called the Smishing Triad, marking the first expansion of its footprint beyond the E.U., Saudi Arabia, the U.A.E., and the U.S.”
thehackernews.com/2024/06/gr…
“While appearing on Sheridan Media’s Public Pulse, Sheridan County Undersheriff Lieutenant Devereaux Johnson spoke on the texting scam – known as smishing – after getting the message on his personal phone.”
#Smishing #ZeroTrustSMS
sheridanmedia.com/news/14981…
“GitHub Security Lab researcher Kevin Backhouse discovered that Libcue is affected by a vulnerability — tracked as CVE-2023-43641 — that can be exploited for remote code execution by getting the targeted user to click on a malicious link.”
securityweek.com/one-click-g…
221
“Ms Bligh says Australia's major banks combined have more people working in their financial fraud teams than the entire Australian Federal Police across the nation.”
abc.net.au/news/2023-09-18/b…
“attack began with a deceptive SMS phishing campaign directed at Retool’s employees. The malicious individuals pretended to be IT team members and urged recipients to click on a seemingly legitimate link to address a payroll-related problem.
cryptopotato.com/retool-attr…
137
SMS Phishing could easily surpass email as the number 1 threat vector inside 2 years judging by the ongoing trend for this nasty threat. This is a missed opportunity for the cybersecurity industry.
#ZeroTrustSMS #Smishing
thehackernews.com/2023/09/re…
1
131
Well-executed phishing campaigns and targeted attacks typically look like this.
The phishing threats you should be most concerned about don't contain spelling mistakes. 😉
nitter.gq/tim_cook/status/170166…
Meet iPhone 15 Pro & Pro Max! Powered by A17 Pro, which ushers in a new era of Apple Silicon, these products unlock new performance capabilities, amazing photography, next-level gaming, and more. And with an all-new titanium design, they're our lightest weight Pro models yet!
121
“Cybercriminals set up a fake website for the TradingView financial market tracking app and advertised the site on Google…”
It almost always starts with phishing.
securityweek.com/atomic-maco…
94
“The leaked data may also be used in phishing attacks.” Yes, it will.
“What the organization has not revealed, however, was how the attackers gained access to its systems”
Probably phishing.
securityweek.com/7-million-u…
77