GoKawiil
Tech News
Microsoft announced it coordinated an industry-wide disruption of EvilTokens, a subscription phishing service sold via Telegram since February that used an AI chatbot to help criminals analyze compromised inboxes and craft convincing fraud emails. The platform compromised 12,000 accounts across 10,000 organizations worldwide, mostly in the US, and Microsoft seized 50 websites and 150 domains as UK police arrested two suspects.
Apple's iOS 27 update includes a new feature called Impersonation Risk Detection, designed to catch users in the middle of a scam, such as being tricked by a fake bank fraud department into transferring money or resetting a password. Supported apps can query the iPhone during sensitive actions like payments or password changes, prompting the device to analyze interaction patterns, timing, context, and sensor data to assess whether the activity looks legitimate or suspicious.
Security researchers uncovered a North Korean state-linked hacking operation that impersonated job recruiters to trick victims into installing malware, ultimately compromising roughly 30,000 devices across multiple countries. The campaign used fake hiring processes and interview-related documents as delivery mechanisms for malicious software.
Meta's Threads platform has been flooded with posts using nearly identical wording, in which users claim they and their spouses work at major companies like PepsiCo, JPMorgan, Fidelity, or IBM before pivoting to promote investment advice or opportunities. The repetitive phrasing across accounts suggests coordinated or automated activity rather than genuine personal testimonials.
Google has rolled out its latest Pixel feature drop, giving Pixel 6 and newer users home screen widgets for quick calls or texts to VIP contacts, plus new scam detection warnings built into the Gboard keyboard for chat apps. The update also brings Harry Potter-themed customization packs and two free months of Audible, tied to the release of a new full-cast audiobook series, alongside gesture improvements for the Pixel Watch line.
Google is rolling out its Scam Detection feature to preview notifications on Pixel devices, extending the protection beyond just calls and messages to more countries. However, the most advanced version of the feature, which offers deeper analysis, remains limited to users in the United States.
Google rolled out its latest Pixel Feature Drop, adding expanded home-screen widgets and notification badges for quickly reaching VIP contacts on Pixel 6 and newer. The update also broadens Scam Detection across chat apps and Gboard in ten countries, brings a Wear OS 7 update with offline Gemini and improved GPS to Pixel Watch 5, and introduces Harry Potter-themed customization packs with free Audible access.
Revolut confirmed it handed over sensitive customer information after receiving fraudulent data requests sent from what appeared to be a legitimate government agency email domain. The exposed data reportedly included names, birth dates, addresses, phone numbers, ID documents, and possibly verification selfies and transaction histories. The company says only a limited number of customers were affected and that it has since blocked the fraudulent email address and alerted authorities.
A Morning Risk Report roundup describes efforts by Chinese AI firms to reproduce American AI models, alongside items on crypto scam victims battling the U.S. government to recover lost funds and ABC host Jimmy Kimmel criticizing the FCC. The compilation touches on cloning practices in AI, consumer financial recovery disputes, and regulatory friction in broadcasting.
A free application designed to identify and flag suspicious phone calls and messages is being highlighted as a defense against increasingly sophisticated scams. The tool works across both major mobile platforms, giving users a way to screen for fraud attempts before falling victim to them.
Security experts warn that travel scams have become more sophisticated than traditional pickpocketing, targeting vacationers through new digital and in-person deception methods. They are urging travelers to adopt updated precautions before and during trips to avoid falling victim to these schemes.
A scammer in Germany sold at least two 'hollow' GeForce RTX 5090 graphics cards, stripped of their GPU die and memory chips, to unsuspecting buyers who paid thousands of dollars for worthless hardware. One victim bought a used Palit RTX 5090 GameRock OC for about $2,090, even meeting the seller in person, but had no way to test the card before handing over cash. Hardware enthusiast Roman 'der8auer' Hartung publicized the cases after uncovering the scheme.