Phishing, Scams and Spoofs Archives

WooCommerce plugin version check (Your domain) SCAM

by Charles Oropallo | Oct 23, 2024 | Phishing, Scams and Spoofs, WooCommerce, WordPress

A new phishing scam is targeting website administrators by impersonating WordPress, tricking them into visiting update-plugins.org, a fake site made to look like WordPress.org. This scam, active since October 22, 2024, aims to steal credentials by urging users to log in and “secure” their WooCommerce plugin. CharlesWorks and WordPress will never send such emails requesting credentials. To protect yourself, always verify email links, enable image blocking in your email client, and use multi-factor authentication. Learn more about identifying phishing attempts. Stay vigilant to keep your online assets secure.

Beware of BOI Filing Scams Targeting Small Businesses

by Charles Oropallo | Oct 14, 2024 | Phishing, Scams and Spoofs

Small businesses, including mine, are being targeted by scammers claiming you need to file Beneficial Ownership Information (BOI) reports for a fee. I recently received a suspicious text message directing me to a fraudulent website that mimicked the legitimate FinCEN process. It’s crucial to know that the real BOI filing is free and only done through https://fincen.gov, not through any .com or .ai sites.

Solitary Facebook Admin for Your Business or Organization Danger

by Charles Oropallo | Sep 13, 2024 | Phishing, Scams and Spoofs, Technical Help

When managing a Facebook page for your business or organization, having only one administrator can lead to significant risks. If the sole admin is locked out, loses access, or their account is hacked, the entire page can be compromised. This makes it difficult to recover control, update information, or remove harmful content. To avoid these pitfalls, it’s crucial to add multiple admins who can step in if issues arise. Being proactive about page security ensures your business’s social media presence remains secure and functional, minimizing downtime and protecting your brand from potential harm.

CleanTalk: The Best Security and AntiSpam Plugin Used by CharlesWorks

by Charles Oropallo | May 30, 2024 | Phishing, Scams and Spoofs, Spam, Technical Help, WordPress

CleanTalk is an indispensable security and anti-spam plugin for CharlesWorks. It offers ease of use, effective spam protection, and comprehensive security features. The exceptional support from CleanTalk’s team ensures our sites remain secure. As trusted partners, we proudly promote CleanTalk through our affiliate program, benefiting both our clients and our business. Discover why CleanTalk is a trusted tool in our web development arsenal.

Caution: The “Pig Butchering” Phishing Expedition

by Charles Oropallo | Feb 26, 2024 | Phishing, Scams and Spoofs, Spam

In the article “Caution: The ‘Pig Butchering’ Phishing Expedition,” I delve into a sophisticated scam I recently discovered through John Oliver’s HBO show. “Pig Butchering” is a phishing scam that merges romance and investment fraud, often involving cryptocurrency. Scammers meticulously build trust over time, aiming to exploit it for financial gain. I emphasize the importance of watching John Oliver’s segment on this topic, as it provides crucial insights into the scam’s workings and its widespread impact. The article outlines practical steps to avoid falling victim to “Pig Butchering,” including skepticism towards unsolicited messages, the importance of research, and never sharing personal or financial information online. Awareness and caution are highlighted as the best defenses against such scams.

Avoiding New Phishing Pitfalls: A Personal Encounter

by Charles Oropallo | Dec 2, 2023 | Phishing, Scams and Spoofs

In my recent article, I delve into an encounter with a new phishing pitfall, involving a cunning WordPress-related email scam. I highlight the email’s deceptive elements, such as its urgent tone and seemingly legitimate links. Through my experience, I emphasize the importance of vigilance and knowledge in identifying and avoiding such scams. The article provides practical tips for spotting red flags in suspicious emails and reinforces the need to verify information before taking any action. This cautionary tale serves as a reminder of the evolving nature of online threats and the continuous need for cybersecurity awareness.

Don’t Take the Bait: The Rising Tide of Phishing Scams

by Charles Oropallo | Oct 15, 2023 | Phishing, Scams and Spoofs

This article discusses the rising threat of phishing scams, particularly through text messages. It provides a detailed guide on how to report phishing texts to Google and your mobile carrier. The article also offers additional tips for avoiding phishing scams, such as being skeptical of unsolicited messages and using a password manager. The key takeaway is to be cautious and not open messages unless you are certain of the sender’s identity.

Don’t Fall for the ‘One Ring’ Telephone Scam!

by Charles Oropallo | Jul 18, 2023 | Phishing, Scams and Spoofs

Delve into the ‘One Ring’ phone scam, a deceptive scheme that can lead to unexpected charges. This article provides insights into the scam’s modus operandi, offers preventive measures, and guides you on how to report such incidents. Stay informed and protect yourself from this pervasive issue.

Understanding WordPress’s xmlrpc.php File and Navigating Potential Misuse

by Charles Oropallo | Jul 7, 2023 | Phishing, Scams and Spoofs, Technical Help, WordPress

This article dives into the potential misuse of WordPress’s xmlrpc.php file, a feature that allows for remote procedure calls. While it can be handy for various tasks, it can also be exploited for malicious purposes. The piece further discusses how to protect your site, including the option to disable the feature if not in use, and how to respond to possible “bug bounty” phishing requests related to this feature.

Another Lying Spammer’s BS

by Charles Oropallo | Jan 19, 2023 | Phishing, Scams and Spoofs, Search Engine Optimization (SEO), Spam

Forgive me if I appear annoyed. Unfortunately, messages like these are quite common. As website developers, we see them far too often. They waste our time. They are based on outright lies. What bothers me the most is that these messages frighten our web clients into...