Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Got a text about an Amazon refund? It might be a scam

Amazon refund text scams are on the rise. Learn how to spot the scam and keep your info safe. You get a text saying you’re owed an Amazon refund. Sweet, right? Not so fast. If it’s the Amazon refund text scam, that sweet deal could cost you more than you think. Here’s how to protect your devices with Avast Free Antivirus. Amazon refund text scams have garnered quite a lot of attention recently.

Faked Out: How a Fraud IRS Website Fueled a Sophisticated Remote Access Campaign

The BlueVoyant Security Operations Team (SOC) and Threat Fusion Cell (TFC) researchers recently analyzed a sophisticated phishing incident where a user was lured into visiting a fake IRS website to verify a “tax refund”. The scheme was initiated via a phishing email, leading the user to the fraudulent site.

Making Money Online: Legitimate Ways Via Surveys & Side Hustles

Most people can now make money online, which gives people from all walks of life a lot of freedom and makes it easy to get started. There are many "rich fast" plans on the Internet, but there are also many legal and simple ways to create a stable income, such as taking online polls and doing different page jobs. Although these tips will not make you luck overnight, they are useful ways to make extra money, pay off loans, or save a specific goal, ranging from the comfort of home.

Spotting "Instant Loan" Phishing and Taking Campaigns Down

While instant loans promise quick cash for emergencies, they also come with risks of scams. Phishing campaigns, deceptive emails, and fake apps target users who need fast financial solutions, steal data, or demand fees. The latest FTC report shows $12.5 billion in fraud losses across all categories in 2024, with loan scams being a rising threat. By knowing red flags in loan-bait emails, you can stop phishing campaigns and protect your personal or business information and finances. Let's find out how to identify a fake loan app, loan offer, or phishing email.

INETCO recognized in the Gartner Hype Cycle for Fraud and Financial Crime Prevention, 2025 Report

INETCO has been recognized as a Sample Vendor in the Gartner Hype Cycle for Fraud and Financial Crime Prevention, 2025. We hold the view that this recognition confirms what our customers already know: INETCO is redefining how financial institutions and payment service providers outsmart fraudsters, stay compliant and keep their customers safe.

The MemcycoFM Show: Ep 17 - Scam-Proofing Loyalty at Scale: What ATO Protection Should Look Like

Scam-Proofing Loyalty at Scale: What ATO Protection in Retail Should Look Like in 2025 Retail fraud has gone public. It no longer happens quietly in the background. Today’s scams are faster, sharper, and designed to look exactly like your brand. A spoofed checkout flow can harvest thousands of credentials before your SOC team even sees a spike. But the real damage isn’t always technical. In 2025, one impersonation scam can trigger waves of fake complaints, social media outrage, and reputational backlash that cost far more than the fraud itself.

Scam-Proofing Loyalty at Scale: What ATO Protection in Retail Should Look Like in 2025

Retail fraud has gone public. It no longer happens quietly in the background. Today’s scams are faster, sharper, and designed to look exactly like your brand. A spoofed checkout flow can harvest thousands of credentials before your SOC team even sees a spike. But the real damage isn’t always technical. In 2025, one impersonation scam can trigger waves of fake complaints, social media outrage, and reputational backlash that cost far more than the fraud itself.

Tales from the fraud frontlines: How to detect and defend against man-in-the-middle attacks

Picture this: Your payment network appears to be running smoothly, yet subtle inconsistencies in transaction data start to emerge. Authorizations are delayed or altered, and some backend calls never trigger. This isn’t just another case of stolen credentials or card fraud — it’s a devastating man-in-the-middle (MITM) attack that has been going on for months.

Malicious MCP Server on npm postmark-mcp Harvests Emails

On September 25, 2025, the npm package postmark-mcp, an MCP (Model Context Protocol) server intended to let AI assistants send emails via Postmark, was reportedly modified to secretly exfiltrate email contents by adding a blind-copy (BCC) to an external domain. Current analysis suggests the behavior began around 1.0.16 and persisted in later versions.

Breaking into Cybersecurity with Motti Tal: From Code to Cyber Strategies

In this episode of Breaking Into Cybersecurity's latest episode, featuring Motti Tal, CSO at Memcyco. Motti shares his journey from studying computer science at Tel Aviv University to programming for the Israeli Navy and eventually moving into software and cybersecurity. He discusses the evolution of his career, how AI influences critical thinking, and the importance of innovative thinking in cybersecurity.

FraudGPT and the Future of Cyber crime: Proactive Strategies for Protection

Generative artificial intelligence (GenAI) has firmly embedded itself in the workplace. As of 2024, more than two-thirds of organizations in every global region have adopted GenAI. And, as always, cyber criminals are eager to capitalize on a new and potentially powerful piece of technology. Over the past few years, a GenAI tool called FraudGPT has made phishing, hacking, and identity theft as simple as entering an AI prompt. FraudGPT and similar tools are essentially democratizing cyber crime.

Military ID Deepfakes: How North Korean Hackers Target the South with AI

North Korean threat actor Kimsuky has escalated its social engineering tactics by leveraging military ID deepfakes to deceive South Korean targets. According to a recent analysis by South Korean cybersecurity firm Genians, the group is now using AI-generated images to impersonate military personnel, making phishing campaigns more convincing and harder to detect.

The MemcycoFM Show: Ep 15 - How CISOs Apply Zero Trust Thinking to Credential Harvesting Prevention

A customer opens their bank’s login page. At least, that’s what they think. The design is flawless, the fields are familiar. But it’s a cloned site built to harvest credentials. Within seconds, their details are replayed against the genuine portal. To the bank’s defenses, it looks like business as usual — same username, same password, same MFA prompt.

Best Practices for Students to Avoid Plagiarism and Online Scams

Students may find a lot of information with just one click in our digital era. This gives them a lot of chances to learn and study, but it also makes them more likely to fall for internet scams and copying. Both of these problems might have major effects, including failing school or even being threatened with harm. Students can avoid online fraud and copying by following these rules. As a consequence, their time at school will be safer and more moral.

Spotting Scams and Phishing in Under 60 Seconds: A Simple Checklist Anyone Can Use

Scams are getting slick, but your best defense is still fast, calm thinking. In one minute, you can scan any email, text, or DM and decide if it’s safe. Use the checklist below, then save the quick steps for what to do if you already clicked.

Corporate Investigations: Protecting Your Business from Fraud and Theft

Fraud and theft are among the most damaging problems facing businesses today. From small local companies to global corporations, the risk of losing money, stock, or sensitive information is a constant threat. What makes matters worse is that fraud often happens quietly, over long periods, and sometimes at the hands of trusted insiders. The financial losses can be devastating, but the damage to reputation and trust can be just as severe.

Tales from the fraud frontlines: The growing threat of DDoS attacks - and how to prevent them

Picture this: It’s a busy weekday afternoon and your online payment platform is humming with activity. Suddenly, everything slows down. Customers complain that transactions are failing, your website goes offline, and your team scrambles to figure out what’s happening. The culprit? A Distributed Denial of Service (DDoS) attack.

Social Media Scams and How to Avoid Them

While social media can be a great place to connect with people, friends, and families, it still has its dangers. Social media websites such as Facebook, LinkedIn, Twitter, etc, are an attractive platform for scammers to target people to steal their personal and financial information. As a result, this article will inform you of the most common social media scams, statistics, and offer advice and tools to avoid them and stay safe online.

From Scam Risk to Scam Liability: What Every Enterprise Must Do to Meet Global Scam Regulations

Regulators aren’t just cracking down on digital fraud – they’re rewriting the rules on who’s responsible when it happens. Across every major region, laws are shifting liability closer to the first point of compromise: the login session. If your digital environment can’t detect a spoofed page, stop a phishing attempt, or block credential theft in real time, you’re not just at risk – you may be out of compliance.

Deception Technology in Banking: A New Line of Defense Against Insider Threats and Fraud

Insider threats cost organizations an average of $17.4 million annually, with financial services facing costs up to $20.68 million per organization according to the Ponemon Institute 2025 Cost of Insider Risks Global Report. Traditional security measures fail when malicious behavior originates from authorized users who bypass most security controls without triggering alerts. Cyber criminals increasingly recruit bank employees to gain unauthorized access, steal customer data, and facilitate fraud rings.

Beware of Recruitment Scams: Protect Yourself from Job Fraud

Recruitment scams—also known as job fraud—are a rising form of cybercrime that targets jobseekers with fake employment opportunities designed to steal personal information or money. Scammers often impersonate legitimate employers or recruitment agents, tricking victims into sharing sensitive data, paying unnecessary fees, or completing unpaid tasks under the pretense of a real hiring process.

DoorDash scams are serving up trouble

DoorDash scams are serving up trouble. Learn how to avoid fraud, phishing, and shady schemes as a customer or Dasher. DoorDash has become a staple for more than 40 million U.S. users, whether they’re ordering takeout or delivering it. But as the app’s popularity grows, so does the attention from scammers. A wave of new schemes is targeting both customers and delivery drivers, a.k.a. Dashers.

FBI Issues Guidance for Avoiding Deepfake Scams

The FBI and the American Bankers Association (ABA) have issued a joint advisory warning of the growing threat posed by AI-generated deepfake scams. “Criminals may pose as loved ones, government officials, law enforcement personnel, or even celebrities, often using fear and urgency to convince victims to send money or share sensitive information,” the advisory says.

Smishing Campaign Targets California Taxpayers With Phony Refund Offers

The State of California’s Franchise Tax Board (FTB) has warned of an ongoing SMS phishing (smishing) campaign targeting residents, Malwarebytes reports. The FTB stated, “These text messages contain a link to a fraudulent version of certain FTB web pages, which are designed to steal personal and banking information.

Remote Access Scams: How to Stop Them (and Why Security Teams Miss the Risk)

Remote access scams are social engineering attacks where fraudsters convince users to install or open remote desktop tools like TeamViewer or AnyDesk. Once inside, they hijack login flows, harvest credentials, and often bypass MFA, opening a hidden path to account takeover (ATO). These scams are rising fast, exploiting customer trust and evading traditional fraud controls.

The MemcycoFM Show: Episode 15 - Remote Access Scams: The Hidden ATO Threat Security Teams Miss

Remote access scams are social engineering attacks where fraudsters convince users to install or open remote desktop tools like TeamViewer or AnyDesk. Once inside, they hijack login flows, harvest credentials, and often bypass MFA — opening a hidden path to account takeover (ATO). These scams are rising fast, exploiting customer trust and evading traditional fraud controls. In this guide, we’ll break down how these scams work, why they’re so effective, and how security teams can detect and disrupt them — in real time, before ATO occurs.

Tales from the fraud frontlines: The silent surge in rogue payment terminal fraud - and how to fight back

Picture this: Unusual card-present transactions, processed through a POS tap terminal that shouldn’t even exist on your network, suddenly light up your fraud-monitoring dashboard. Your heart sinks as you realize you’re dealing with something far more dangerous than a stolen card. It turns out that a rogue terminal has been siphoning funds — and evading detection — for days.

Missed jury duty? Scammers hope you think so

Jury duty scams are on the rise. Learn how to recognize the red flags, protect your personal data, and verify real court notices. “You missed jury duty and there’s a warrant out for your arrest.” If you've received a call like this, take a breath. Odds are, it's not the court—it’s a scam. These jury duty scams are making the rounds again, and they’re catching people off guard.

Is That Gmail Security Alert Real? How to Spot a Phishing Scam

In a world where our lives are increasingly managed through email, an unexpected security alert can be a jarring experience. Recently, misinformation spread about a supposed mass security alert from Google, creating widespread panic. While Google has confirmed these claims are false, the incident serves as a powerful reminder of a constant threat: phishing scams. These fraudulent emails mimic real security warnings to trick you into giving away your personal information.

How Device Intelligence Detects Fraud Without Using Personal Data

Fraud tactics now evolve on an hourly cycle. For banks, fintech, digital lenders, and payments players, the question isn't whether rules still help - it's whether they adapt fast enough. Recent numbers from Alloy's 2024 Financial Fraud Statistics underscore the shift: over 50% of surveyed institutions saw business fraud rise, two-thirds reported higher consumer fraud, and generative AI could drive $40B in bank losses by 2027. It's no surprise that more than half are raising third-party spend, with three in four prioritizing identity risk capabilities.

From Food to Friendship: How Scammers Prey on Our Most Basic Needs

Scammers are opportunists. Nasty ones. They prey on the most fundamental human needs: On the surface, a food-assistance scam and a fake-friend scam may seem worlds apart. One promises food, the other companionship. But underneath, they follow the same psychological playbook: build trust, create urgency, extract resources. In this blog, we’ll unpack two real-world scams – SNAP scams and friendship scams – how they work, why they work, and, most importantly, how to fight back against them.

The MemcycoFM Show: Episode 14 - How to File a DMCA Takedown (And Why You Don't Need To)

Many enterprises turn to the DMCA takedown process when they discover infringing or fraudulent content online. While DMCA takedown serves as a protective mechanism for copyrighted material, it was never designed to address the speed and scale of brand impersonation and phishing scams. This gap leaves businesses compromised, leveraging a reactive approach that can’t keep up with the sheer agility and scale of scammer operations. To confront it head-on, we’ll show how to file a DMCA takedown notice effectively, while highlighting tactics for resolving its shortfalls in aggressive brand impersonation, phishing and account takeover (ATO) scenarios.