Ford has agreed to pay a fine that could go up to $165 million after the National Highway Traffic Safety Administration found the automaker took too long to recall vehicles with faulty rearview cameras and failed to “provide accurate and complete recall information.”. This penalty is the second largest, only behind the $200 million Takata was ordered to pay.

Originally issued in 2020, the recall impacts more than 600,000 vehicles from 2019 onward, including the Ford F-150, Mustang, Escape, Ranger, and Expedition, along with the Lincoln Nautilus and Lincoln Corsair. Affected vehicles have a rearview camera that sometimes shows a “blank or distorted image.” Ford says no accidents or injuries were reported due to the defect.

Under the agreement, Ford is required to pay $65 million upfront, followed by a $55 million deferred payment and an additional $45 million to invest in the development of a safety data infrastructure and a testing lab for rearview camera components.

“We appreciate the opportunity to resolve this matter with NHTSA and remain committed to continuously improving safety and compliance at Ford,” Ford spokesperson Maria Buczkowski said in an emailed statement to The Verge. “Wide-ranging enhancements are already underway with more to come, including advanced data analytics, a new in-house testing facility, among other capabilities.”

Additionally, the NHTSA will require Ford to review all of the recalls it issued within the past three years “to ensure they have been properly scoped.” It will also have an independent third party oversee its compliance with the NHTSA’s agreement.

A new scam called ClickFix is targeting users and is on the rise in the U.S. As the name suggests, it prompts you to click on a link, claiming to fix an issue, but in reality it infects your computer with malware.

I reported on this earlier, detailing how threat actors used messages impersonating errors from Google Chrome, Microsoft Word and OneDrive to infect users’ computers. 

Now, a similar type of attack is affecting Google Meet users, regardless of whether they’re using a Windows PC or a Mac. I explain how this cyberattack works and what you can do to protect yourself.

I’M GIVING AWAY A $500 GIFT CARD FOR THE HOLIDAYS

How the Google Meet trap works

According to French cybersecurity company Sekoia, it all starts with an email containing a link to a Google Meet. The email can come from any address and may be socially engineered to look like it’s related to your organization. It could link to a Google Meet invite for a meeting, webinar, online collaboration or something similar. When you click on the link, you’ll be directed to a fake Google Meet page, which will soon display a warning claiming there’s an issue with your PC. It might say your microphone or camera isn’t working or there’s a problem with your headset.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

You can expect to see the following URLs in these fake meeting emails:

meet[.]google[.]us-join[.]com

meet[.]google[.]web-join[.]com

meet[.]googie[.]com-join[.]us

meet[.]google[.]cdm-join[.]us

This fake page will also display a pop-up offering to fix the issue, showing phrases like “Press the key combination” or “CTRL+V.” When you follow these instructions, malicious code is pasted into the Windows prompt, infecting your computer with malware. Once the code is on your computer, hackers can gain access to your cryptocurrencies, sensitive files and personal information.

Sekoia has uncovered several other malware distribution clusters beyond Google Meet. These include platforms like Zoom, PDF readers, fake video games (such as Lunacy, Calipso, Battleforge and Ragon), web3 browsers and projects like NGT Studio and messenger apps such as Nortex.

Fake Google Meet page (Sekoia)

DON’T LET SNOOPS NEARBY LISTEN TO YOUR VOICEMAIL WITH THIS QUICK TIP

The bigger picture

Back in July, McAfee noticed that ClickFix campaigns were ramping up, especially in the U.S. and Japan (via Bleeping Computer). Lately, two groups – Slavic Nation Empire and Scamquerteo – have been behind some of these attacks. Both are said to be offshoots of larger crypto scam gangs Marko Polo and CryptoLove.

Earlier this year, Proofpoint found that malware was spreading by pretending to be fake error messages for Google Chrome, Word and OneDrive, tricking people into downloading malicious code. They also pointed out a method called “email lure,” where hackers send fake emails pretending to be from MS Word to infect computers.

Fake page requests (Sekoia)

BEST ANTIVIRUS FOR PCS, MACS, IPHONES AND ANDROIDS – CYBERGUY PICKS

4 ways to protect yourself from harmful software

The fake Google Meet page creates a sense of urgency, making users click on the links and unknowingly compromise their devices. There are several steps you can take to protect yourself from such cyberattacks.

1. Have strong antivirus software: The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.

2. Monitor your accounts: Regularly review your bank statements, credit card statements and other financial accounts for any unauthorized activity. If you notice any suspicious transactions, report them immediately to your bank or credit card company.

3. Place a fraud alert: Contact one of the three major credit reporting agencies (Equifax, Experian or TransUnion) and request a fraud alert to be placed on your credit file. This will make it more difficult for identity thieves to open new accounts in your name without verification.

4. Enable two-factor authentication: Enable two-factor authentication whenever possible. This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone, in addition to your password.

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET

Kurt’s key takeaways

Hackers have come up with sneaky ways to trick you into installing malware. They use social engineering to make emails and website prompts look legit, hoping you’ll click on a link and follow their instructions. The best way to protect yourself is by avoiding unknown links and always checking the URL of the page you’re on before taking any action.

Have you ever received an email or prompt that looked suspicious but seemed legitimate at first glance? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com. All rights reserved.

PayPal is introducing a new money-pooling feature that aims to make it easier to collect and pay for things as a group. The feature is free and allows PayPal users to create a pool online or via the platform’s app, invite friends and family to contribute, track contributed funds, and transfer that cash to their own PayPal balance.

Provided you trust the pool organizer who will hold the power to spend or withdraw those funds, the pooling feature should provide a simple way to gather cash for things like gifts and group traveling collectively. Pool organizers can share pool joining links via “text, email, WhatsApp, and more” to people regardless of whether they have a PayPal account or not. Contributions can be made using a PayPal balance or bank account, and organizers can also set a pool name, description, target date, and funding goal amount.

The money pooling feature is rolling out today across the US, UK, Germany, Italy, and Spain. Users in those regions can access it by selecting “Pool Money” from either the PayPal app menu, or in the “More Options” menu within the “Send/Request” tab. 

Other apps like Settle Up are already available that directly focus on tracking and pooling group expenses. Venmo also introduced a similar feature last year called “Groups” with a notable distinction — the responsibility is entirely shared, which may be a better solution if you don’t want a single individual in charge of the group.