CyberGuard Tips

Almost every scam starts the same way: you click something, and your device looks up a domain name. Before a single byte of the fake login page loads, your device asks a DNS resolver, "what is the IP address for this domain?" If that resolver simply refuses to answer for known phishing and malware domains, the attack ends there — no antivirus scan, no warning banner, nothing to click through. That is what encrypted, filtered DNS gives you. It is one of the highest-impact security changes an ordinary household can make, it is free, and it takes about ten minutes to set up across every device in the home. What DNS Actually Does DNS, the Domain Name System, is the phone book of the internet. Humans use names like example.com; the network routes on numbers like 93.184.216.34. Every app on every device performs dozens of these lookups per minute. By default, those lookups go to whatever resolver your internet provider assigned when your router connected. That has two conse...

Your phone rings. The caller ID shows a number from your own area code, maybe even one digit off from your own. You answer, and a calm recorded voice tells you your Social Security number has been suspended, or that your bank has flagged a suspicious charge, or that you have won a prize you never entered for. That call was almost certainly a scam, and the number on your screen was almost certainly fake. Americans received roughly 50 billion robocalls in a single year, and phone-based fraud costs consumers billions annually. The technology that makes it possible costs criminals almost nothing. Here is how caller ID spoofing actually works, why the usual advice fails, and the settings that genuinely cut the volume down. Why Caller ID Cannot Be Trusted Caller ID was designed in an era when only telephone companies could place calls onto the network. The number displayed on your screen is simply a piece of data that the calling party supplies. Nothing in the original system verified ...

You open Instagram and your password does not work. Or a friend messages asking why you are promoting a crypto giveaway. Or you get an email saying your Facebook email address was changed — to something you have never seen. A hijacked social account is not just an inconvenience. For a lot of people it holds years of photos, business enquiries, a customer base, and the phone numbers of everyone they know. Attackers know this, which is why recovery is deliberately made harder for them and, unfortunately, harder for you too. The first hour matters more than the next week. Here is what to do, in order. How Accounts Get Taken in the First Place Almost none of these involve breaking encryption. The realistic routes are: Phishing login pages. A DM from a friend saying "is this you in this video?" leads to a perfect replica of the Instagram login screen. You type your password and your 2FA code into the attacker's page, and they use both in real time. Password reuse....

There is a smart speaker in roughly a third of homes in the US and UK, and a voice assistant on essentially every smartphone. The recurring worry — "is it listening to everything I say?" — has a more interesting answer than either the marketing or the conspiracy theories suggest. The honest version: these devices are always listening in a narrow technical sense, but they are not always recording . The gap between those two things is where the real privacy questions live, and it is a smaller gap than most people assume. How Wake Word Detection Actually Works A smart speaker runs a small model locally that does one job: listen for a specific acoustic pattern — "Alexa," "Hey Google," "Siri." Audio streams continuously through a short buffer on the device and is discarded moment by moment. Nothing leaves the device until that pattern matches. When it matches, the light ring or screen indicator activates and the device opens a connection to t...

Doxxing is the deliberate publication of someone's private information — home address, phone number, workplace, family members, photographs — with the intent to expose, intimidate, or invite harassment. It has moved a long way from its origins in hacker feuds. Today it is used against journalists, moderators, small business owners, people on the wrong side of a viral post, and ordinary people who argued with a stranger online. The frightening part is how little skill it requires. Almost nothing in a typical doxx is hacked. It is assembled from public records, data broker listings, old social media posts, and metadata that the target published themselves years ago without thinking about it. How a Doxx Gets Assembled Understanding the method matters, because it tells you which doors to close. Data brokers Companies like Whitepages, Spokeo and BeenVerified, and dozens of regional equivalents, compile addresses, phone numbers, relatives and property records into searchable pro...

You signed up for a seven-day free trial, forgot about it, and eleven months later you notice a $14.99 charge on your statement that you cannot place. Or you bought one bottle of a supplement and now a new one arrives — and is billed — every month. Or you tried to cancel and the "Cancel" button was hidden behind four screens, two "Are you sure?" prompts, and a retention offer you had to decline twice. None of that is an accident. It is a designed system called a negative option — you are billed unless you actively opt out — reinforced by interface tricks known as dark patterns . Regulators in the US, UK and EU have all moved against the practice in recent years, but enforcement is slow and the operators move faster. The money involved is enormous, and most of it is never disputed because individual charges are small enough to ignore. Why This Business Model Exists A company that sells you something once has to find a new customer tomorrow. A company that enro...

You visited a website once, clicked "Allow" on a popup you barely read, and now your desktop shows alerts like "Your PC is infected — click to clean" or "You have 3 new messages" even when your browser is closed. Those are not system warnings. They are web push notifications, and they have quietly become one of the most effective delivery routes for scams, fake antivirus, and malware. The tactic works because it borrows trust. A notification that appears in the corner of your screen looks like it came from your operating system, not from a random site you visited three months ago. Security vendors have tracked millions of these abusive notification domains, and the pattern is consistent: the permission is harvested through deception, then sold or reused to push whatever pays best that week. How the Permission Gets Stolen in the First Place Browser notifications are a legitimate feature. Gmail uses them. Your calendar uses them. The abuse comes from...