With the shopping season underway, cybercriminals are making efforts to capitalize from key holidays and users' craze for Black Friday and Cyber Monday discounts. Scams and malicious email campaigns are in full swing, and so are web-skimming operations that steal payment card information from vulnerable online stores.  The US-CERT released a warning this week about the growing number of emails with malicious links or attachments, malvertising campaigns, and donation requests from fake charitable outfits. The alert is backed by findings from cloud security company Zscaler that say they've "seen a steady rise in phishing attacks leading up to Black Friday and Cyber Monday". Between mid-October and mid-November, the company observed 723,942 targeted phishing campaigns and almost half a million generic spam attacks. In total, the company recorded almost 1.3 million events of this type. The research reveals that with some targeted attacks the purpose is to compromise Amazon accounts and steal payment card data. Two examples of fake pages for logging into Amazon and for billing verification show that cybercriminals have become adept social engineers, leaving few tells for the scam. To an unsuspecting user, the fake login page is indistinguishable from the original, but a look at the URL in the address bar gives away the fraud attempt since the domain name is not from Amazon. The absence of a secure http connection is another tale of mischievous activity, which browsers like Chrome will mark with a 'Not Secure' indicator. "The best defense is to always be conscious of the address bar. A store like Amazon is never going to ask you for sensitive information away from the Amazon site," advises Chris Mannon, a senior security researcher at Zscaler. There's more detailed information posted on OUR FORUM.

Last week, a bunch of new patents for Microsoft’s foldable or dual-screen mobile devices were published on USPTO. The patents have revealed the ideas that Microsoft inventors have imagined for the company’s dual-screen device but as it is the case with all patent applications, there is no guarantee that this patented device will ever make it into a consumer product. There are two new patents that went unnoticed and both were published by USPTO on November 15. The first patent details a dual-screen device with the ability to adjust the volume and the second patent appears to detail another dual-screen device that can display data on first or second display simultaneously. The patent titled “VOLUME ADJUSTMENT ON HINGED MULTI-SCREEN DEVICE” was published on November 15 and it appears to detail a device featuring two displays, a front-facing camera on the first display and another front facing camera on second display. It also features a speaker. In the background section of the patent application, Microsoft explains the audio volume problems that many customers may have experience when using mobile computing devices. “Users interact with multi-screen mobile devices throughout a variety of positions, including holding the device vertically, holding the device with a primary screen facing toward the user, holding the screen with a second screen facing toward the user, and other positions and orientations. When viewing content on the screens in these varying positions, users may encounter challenges adjusting the audio volumes of different applications executed on each of the screens, or different audio-enabled graphical user elements displayed on each of the screens,” Microsoft writes. Want to know more visit OUR FORUM.