The pop-up scam just got raided
Police seized the servers behind it. Plus encrypted texts between iPhone and Android, and a five-minute phone setup worth doing before the long weekend.
The machines had a rough week, and most of it landed on the people running them, not on you. Three healthcare networks got breached in seven days, the pop-up scam that has been hijacking browsers all spring got its servers seized by police, and texting between an iPhone and an Android finally got real encryption after years of green-bubble jokes. Then, because it is almost the Fourth, I wrote up how to take a firework photo that actually looks like fireworks. The takedown is the one bit of good news in the pile. For once the scam is the one having a bad day.
Police take down major pop-up scams
The fake "your computer is infected" pop-ups, and the fake update screens behind a lot of them, ran on a network police just dismantled in a coordinated takedown. The scam works by getting you to run the dangerous part yourself, so the defense stays simple: close the tab, do not call the number, do not paste or install whatever it tells you to. Satisfying to watch one of these actually get caught.
News
Three breaches in one week, and your medical records are the target
Three healthcare organizations disclosed breaches in seven days, and the data in play is the kind you cannot reset later: diagnoses, insurance details, the contents of your chart. There is no password to change here, so the move is to stay alert for medical-billing scams and bogus "verify your coverage" calls in the months after. I walk through why your records are worth more to a criminal than your credit card.
News
iPhone to Android texting finally encrypted
Texts between iPhones and Androids used to drop back to old unencrypted SMS, which is why those were the easy ones to snoop on. The latest update closes that gap with end-to-end encryption over RCS, the modern texting standard, so a normal thread between the two camps is now actually private. You mostly get this by keeping both phones updated.
News
Are those smart glasses recording you? How to tell
Camera glasses are common enough now that it is a fair thing to wonder about at a dinner table or a kid's recital. There is usually a small recording light and a couple of other tells, and I lay out what to look for on the popular models. Mostly it is a reminder that the etiquette has not caught up to the hardware yet.
Learn
How to take a great firework photo with your phone
Your phone can take a genuinely good firework shot if you stop letting it guess. Lock the focus, steady it on something, and use the timer or night mode instead of jabbing the button at the wrong moment. Quick read before Friday.
Learn
If you only read one: the three healthcare breaches. The takedown was the satisfying one, but this is the story with your name in it, and medical records are the kind of data you cannot change after they leak.
5-Minute Tech Tip
Set up your phone to share your medical info in an emergency. If you are ever unconscious or hurt, a locked phone can still show your name, allergies, medications, and an emergency contact to whoever finds it, without anyone unlocking it. It takes about five minutes on an iPhone or an Android, and a long weekend with travel and fireworks is a good excuse to finally do it. Steps for both phones are here: Set up your phone to share your medical info in an emergency.
Scary Headline of the Week
"LastPass got hacked again."
This one stings. Last week LastPass confirmed customer data was stolen, and given the company's history, that headline writes itself. What happened: the thieves didn't get into LastPass itself or anyone's vault. They broke into a sales-and-marketing tool LastPass uses (Klue) and pulled the customer list out of LastPass's Salesforce. Names, emails, phone numbers, addresses, support notes. The kind of information already on a business card.
The real risk: a confirmed list of LastPass customers is raw material for a fake-LastPass email or "your account needs attention" call. So slow down and go to the site yourself instead of clicking. If your info turns up in a leak, here's what to do.
Verdict: real breach, wrong drawer.
Fresh From Cache grows when readers pass it along. If you enjoyed this issue, forward it to someone who might too.
Did the medical-ID setup work on your phone? Hit reply and let me know.
Joel
