Kaspersky: scammers ride the iPhone 18 hype with fake deals and stores

Example of a fake website offering to purchase iPhone 18 Pro with Bitcoins

At the start of the two sales waves for the new iPhone 18 models, the buzz has extended far beyond customers and Apple enthusiasts, scammers are also attempting to capitalize on the hype. Kaspersky experts have identified fake websites promoting nonexistent offers designed to deceive users for the new devices. These scam sites have been discovered in multiple languages, including English, Arabic, Portuguese and others.

One of the identified websites offers users the opportunity to “purchase” new devices, complete with technical specifications and a 25% discount. Among the available payment methods, customers are also encouraged to pay in Bitcoin. Its deceptively credible interface is designed to lower the guard of users, prompt them to enter personal information and transfer funds - but in reality, the only thing buyers might receive is financial loss.

GCash rolls out ‘DoubleSafe’ to arrest account takeovers

Intensifies information campaign vs scams through GSafeTayo

GCash, the Philippines’ number one financial app, rolls out ‘DoubleSafe’, a game-changing security feature to safeguard its users from account takeovers.

DoubleSafe strengthens the security of GCash’s 76 million users as it prevents unauthorized account access. Before DoubleSafe, GCash already required two levels of authentication or 2-Factor Authentication. The first level of security is the OTP (One-time PIN), a unique number combination sent only to the user’s mobile number. The second level of authentication is the MPIN (Mobile PIN) which is a 4-digit passcode that only the customer or GCash owner should know.  

To reinforce the security of customers’ accounts, starting March 2023, GCash will now require all users to activate DoubleSafe in order to add an additional layer of security to their account. This feature will be activated for every first login to a new mobile phone to ensure the continued protection of its users. The feature uses facial recognition, which means that even if a user inadvertently shares their MPIN and OTP to fraudsters, their account cannot be accessed from another device without scanning the owner's face – ultimately preventing account takeovers.