Discover the latest online threats and cyber security updates impacting US businesses and consumers, informed by F-Secure threat intelligence experts.
Overview:
In this month’s F‑Alert, we explore the rise of scammer ‘flex’ culture on social media and examine how AI tools are making it easier than ever to geolocate users from a single photo—posing serious stalking risks.
We also unpack a sophisticated phishing campaign that mimics Google to steal credentials, a study revealing that 94% of leaked passwords aren’t unique—and what that says about user behavior online—and fresh insights into how profitable and organized investment scams have become.
We close with a landmark legal case, as WhatsApp secures a major victory against spyware maker NSO Group—setting a key precedent for the future of cyber law.
Inside the Scammer ‘Flex’ Culture on Social Media
A criminal network operating across Asia has been linked to fake delivery scams targeting consumers around the world. These scammers don’t lurk in the shadows of the internet as you might expect—instead, they flaunt their stolen wealth openly on social media, showing off designer outfits and luxury cars. Laura Kankaala, Head of Threat Intelligence at F‑Secure, explores what drives online flex culture—and why scammers are so eager to show off.
AI Makes Online Stalking Easier Than Ever—Here's How
Thanks to AI, just about anyone can now act like a professional ‘geoguessr’ with zero skill—using location clues in photos to identify where an image was taken. All it takes is a single photo containing basic outdoor details, and AI can infer remarkably accurate location data. In the hands of a bad actor, this makes online stalking easier—and more precise—than ever before. F‑Secure Threat Advisor Joel Latto breaks down the risks and what you need to know.
Investment Scams Are Lucrative—And Growing Fast
Two scam centers behind investment fraud campaigns have been uncovered by security researchers. Nicknamed ‘Reckless Rabbit’ and ‘Ruthless Rabbit’, the groups use spoofed celebrity endorsements to promote the scams on social media and hide their operations behind traffic distribution systems. Timo Salmi, Senior Solution Marketing Manager at F‑Secure, examines how these scam centers operate—and why they’re so successful.
WhatsApp Spyware Case Sets Cyber Law Precedent
Messaging platform WhatsApp has won a pivotal lawsuit against Israel-based spyware maker NSO Group, following its detection and interception of a spyware attack six years ago. The verdict—and its $168 million damages award—sends a strong message to the cyber crime ecosystem: violating cyber security laws carries serious consequences. Dr Megan Squire, Threat Intelligence Researcher at F‑Secure, explores the implications of this landmark case.