A Review of the Best News of the Week on Identity Management & Web Fraud

The war against the virus also fueling a war against fraud (Help Net, Mar 26 2021)
TransUnion’s latest analysis of global online fraud trends found that since the COVID-19 pandemic began, fraudsters are increasing their rate of digital schemes against businesses. In addition, a recent study found that more than one in three global consumers have recently been targeted by digital fraud related to COVID-19. Billions of transactions illustrate a war against digital fraud…

Android sends 20x more data to Google than iOS sends to Apple, study says (Ars Technica, Mar 30 2021)
Google contests the estimate, saying it’s based on flawed methodology.

U.S. Special Operations Command Paid $500,000 to Secretive Location Data Firm (VICE, Mar 30 2021)
Anomaly 6 is run by ex-military and location industry veterans.

Filter Out the Noise
Since I started this curated security news in June 2017, I’ve clipped ~19,000 articles and narrowed them down into the best 20 per day & best 15 per week. This is my favorite way to cut through all the security marketing and hype. If you’re enjoying it, tell a friend. If you hate it, tell an enemy.
Thanks! – Lucas Samaras

Share today’s post on Twitter Facebook LinkedIn

With more than 400,000 crypto scams created in 2020, increase of 75% predicted for 2021 (Help Net Security, Mar 26 2021)
The findings of a Bolster report, along with real life examples, clearly correlate the rise in crypto scams to the value and popularity of cryptocurrencies as well as the increase in individuals seeking financial assistance during the COVID-19 pandemic.

Activist Denies Facebook Fraud (Infosecurity Magazine, Mar 25 2021)
Sir Maejor Page denies posing as Black Lives Matter leader on Facebook to pocket donations

Chrome will default to HTTPS, as Google looks to improve privacy and loading speeds (SC Media, Mar 25 2021)
Chrome will start using the more secure protocol by default for all URLs typed in the address bar starting April 13.

Google wants to standardize digital car key and ID support on Android (Ars Technica, Mar 26 2021)
Google will certify Secure Element chips and software as “Android Ready SE.”

Vaccine Phishing Threatens Your Privacy and More (eWEEK, Mar 29 2021)
The chaos surrounding vaccines during COVID-19 is doing more than just making it hard to get a shot that could save your life. It’s also opening up an opportunity for cybercriminals to take advantage of the uncertainty surrounding vaccines to steal your personal information.

The importance of a zero trust-based approach to identity security (Help Net Security, Mar 29 2021)
97 percent of senior security executives say attackers are increasingly trying to steal one or more types of credentials, a CyberArk survey reveals. As organizations move assets to the cloud, increase third-party access to corporate resources, and enable sustained remote work models, attackers are targeting non-traditional user populations that may not be adequately protected.

US Imprisons BEC Scammer (Infosecurity Magazine, Mar 29 2021)
Texas resident scammed schools, senior citizens, and charity supporting families of the terminally ill

Google Faces Class Action for Allegedly “Selling Users’ Data” (VICE, Mar 29 2021)
The lawsuit centers around how companies obtain sensitive information about users during the real-time bidding process.

3 steps to meeting data privacy regulation compliance through identity programs (Help Net Security, Mar 31 2021)
Cybersecurity is undeniably a business-critical function. That’s only been reinforced over the past few months by the SolarWinds and Exchange attacks. Consequently, a recent PWC report found that 55% of enterprise executives plan to increase their cybersecurity budgets in 2021, and 51% plan to add full-time staff dedicated to cybersecurity within the year. Meeting data privacy regulation compliance

Hybrid IAM: Addressing the security and experience issues caused by hybrid IT (Help Net Security, Mar 30 2021)
More than 80% of global IT decision-makers have already adopted, or plan to adopt or expand, cloud-based identity and access management (IAM) initiatives over the next two years, a Forrester Consulting study reveals. The study also found that the industry has significant opportunities to improve the IAM experience for the majority of hybrid cloud adopters.

Reality Show Members Charged with Telemarketing Scam (Infosecurity Magazine, Mar 31 2021)
Real Housewives of Salt Lake City stars face money laundering and wire fraud charges

Free AI and machine learning training for fraud detection, chatbots, and more (Google Cloud Blog, Mar 31 2021)
Google Cloud is offering no-cost training opportunities to help you gain the latest AI and machine learning skills. You’ll have a chance to learn more about the new Document AI along with Explainable AI, Looker, BigQuery ML, and Dialogflow CX.