--- title: "ClearFake Scam Warning, Google’s DigiKavach Innovation, FBI Phantom Hacker Alert, Cybersecurity News [October 16, 2023] | DuoCircle" description: "This week in cybersecurity: online scam warnings, Google" image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/" --- Quick Answer Four items shaped the week of October 16, 2023\. The ClearFake campaign continued tricking users on compromised WordPress sites with fake browser update prompts that delivered Atomic Stealer on macOS and information stealers on Windows, with social engineering tuned to detect the visitor's operating system. Google launched DigiKavach in India, a program combining device-level signals with Play Protect to flag predatory loan apps and digital financial fraud during installation. The FBI issued an alert on the Phantom Hacker scam, a three-stage tech-support, banking-impersonation, and government-impersonation chain that has cost older Americans hundreds of millions of dollars by convincing them to wire savings to attacker-controlled accounts. NortonLifeLock made Norton Password Manager available free to consumers as a standalone product, removing the prior Norton 360 subscription requirement. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=ClearFake%20Scam%20Warning%2C%20Google%E2%80%99s%20DigiKavach%20Innovation%2C%20FBI%20Phantom%20Hacker%20Alert%2C%20Cybersecurity%20News%20%5BOctober%2016%2C%202023%5D&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F&title=ClearFake%20Scam%20Warning%2C%20Google%E2%80%99s%20DigiKavach%20Innovation%2C%20FBI%20Phantom%20Hacker%20Alert%2C%20Cybersecurity%20News%20%5BOctober%2016%2C%202023%5D "Share on Reddit") [ ](mailto:?subject=ClearFake%20Scam%20Warning%2C%20Google%E2%80%99s%20DigiKavach%20Innovation%2C%20FBI%20Phantom%20Hacker%20Alert%2C%20Cybersecurity%20News%20%5BOctober%2016%2C%202023%5D&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F "Share via Email") ![cybersecurity news](https://media.mailhop.org/duocircle/images/2023/10/dkim-record-check-2.jpg) Here’s your weekly dive into the cyber world! We’re here to keep you in the loop about the newest scams, FBI alerts, and all the cool **new tools** and initiatives in the [cybersecurity](/) realm. Let’s take a look! ## Beware of ClearFake Scam: Tricky Strategies Trick Users into Downloading Hazardous Updates from Compromised Sites Cybercriminals are employing a tactic that prompts website visitors to **update their browsers** to access content, a strategy as old as [malware scams](https://theindependent.sg/12-people-arrested-for-bank-malware-scam-youngest-being-just-17/) themselves. Known as ClearFake, this scam was spotlighted by cyber sleuth Randy McEoin in August 2023\. Operating through [compromised WordPress sites](https://thehackernews.com/2023/10/over-17000-wordpress-sites-compromised.html), ClearFake displays deceptive messages urging users to update their browsers. The scam is eerily specific; Chrome users, for instance, receive a Chrome-specific alert, complete with a **convincing update button**. Yet, clicking on this seemingly harmless button leads users to [download malicious software](https://www.cshub.com/malware/news/malware-found-in-more-than-190-android-apps) designed to pilfer **sensitive information**. What sets ClearFake apart is its evolution. Initially, the cybercriminals stored their malicious files on Cloudflare. However, they quickly adapted their methods, shifting their operations to the Binance Smart Chain (BSC). > Security experts at Guardio Labs and Proofpoint also [suggest](https://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16) that the threat actors behind the BSC malware and ClearFake are **likely the same**. The incident highlights the escalating significance of vital [malware protection](/resources/malware-and-its-defense-mechanism) and the need for [phishing awareness training](/phishing-awareness-training) to heighten consciousness about potential phishing dangers. [![Website Safety and Security](https://media.mailhop.org/duocircle/images/2023/10/what-is-dkim-selector.jpg)](https://media.mailhop.org/duocircle/images/2023/10/what-is-dkim-selector.jpg) ## Google’s latest DigiKavach Leading the Way in the Detection of Digital Financial Frauds Google India launched a new program, “[DigiKavach](https://blog.google/intl/en-in/partnering-indias-success-in-a-new-digital-paradigm/),” at the Google event in New Delhi, which will offer individuals **free access** to advanced security features and combat digital financial fraud. _DigiKavach will provide essential tools and services such as secure browsing and Two-Factor Authentication (2FA), enhancing [online safety](/email-security/data-privacy-and-protection-11-ways-to-protect-user-data/)._ This initiative stands out because it will be accessible by all and comes completely free, offering **top-of-the-line features**. With the latest tools seamlessly integrated within DigiKavach, users will be able to manage their financial transactions, ensuring a **safer online digital experience**. DigiKavach has come at exactly the right time as [financial fraud cases in India](https://www.hindustantimes.com/business/financial-fraud-top-cyber-crime-in-india-upi-e-banking-most-targeted-study-101695036325725.html) are at a significant high, with the incidents hitting the 93,000 mark back in 2020, resulting in losses of nearly 1.8 Billion INR, as reported by the Reserve Bank of India (RBI). The latest initiative by Google is a step in the right direction and will assist individuals in **keeping themselves safe** online against the threat of scams and [digital financial fraud](https://www.newsclick.in/india-battles-rising-cybercrime-financial-fraud-escalates). ## The Phantom Hacker Scam: Crucial Alert from FBI Officials FBI Phoenix issued a [warning](https://www.fbi.gov/contact-us/field-offices/phoenix/news/press-releases/the-phantom-hacker-fbi-phoenix-warns-public-of-new-financial-scam), sharing the details of “**The Phantom Hacker**,” tricking users and making away with their **life savings**. _These threat actors pose as customer support agents and contact victims via phone calls, texts, emails, or pop-up windows._ Subsequently, these [threat actors](/email-security/threat-actors-attack-thousands-of-computers-following-the-ion-incident/) **gain control over your computer**, examining your financial accounts and identifying the most lucrative target. These [threat actors impersonate representatives](https://www.cbsnews.com/colorado/news/fbi-warns-telephone-scam-callers-pose-fbi-special-agents/) from your financial institution and claim that your accounts have been accessed, instructing you to transfer all funds to a so-called secure third-party account, often abroad. Victims are coerced into multiple transactions, all under the illusion of protecting their assets. Lastly, you may receive communication from [scammers posing as U.S. government officials](https://www.nbcboston.com/news/local/us-marshals-warn-of-scammers-posing-as-government-officials/3016796/), further manipulating you into moving all money to a fictitious “alias” account. The scammers resort to **official-looking emails** or letters to intensify the illusion of legitimacy. Tragically, victims often lose their **entire savings**, investments, and retirement funds. _The FBI urges the public to **stay alert** against such cases and report any incident to the FBI Internet Crime Complaint Center (IC3) at [www.ic3.gov](http://www.ic3.gov/) to ensure effective [phishing protection](/email/phishing-protection)._ ## Enjoy Norton’s Premium Password Management for Free: Safeguard Your Accounts Password security is paramount today, and free password managers are often the go-to solution. [Norton Password Manager](https://www.pcmag.com/reviews/symantec-norton-password-manager) is a free tool that allows users to store **unlimited credentials across devices** without any hidden costs. Norton’s manager lacks [advanced features found in competitors](https://www.passwordboss.com/10-features-msps-should-look-for-in-a-password-management-tool/). Unlike other password managers, it lacks a desktop version, offering only a browser extension and mobile apps. Unlike rivals, Norton **doesn’t support** secure credential sharing or password inheritance features, limiting its functionality. [![multi-factor authentication](https://media.mailhop.org/duocircle/images/2023/10/spf-permerror-3176.jpg)](https://media.mailhop.org/duocircle/images/2023/10/spf-permerror-3176.jpg) Norton’s Password Manager is **easy to set up** and has a simple user interface that easily captures and relays passwords. While the mobile app provides more security options, the desktop version falls short, lacking [multi-factor authentication](/email-security/multi-factor-authentication-mfa-and-its-impact-on-email-security/) methods common in other managers. Norton Password Manager serves as a basic, no-frills option for users seeking simple password management. If you want enhanced features and security, exploring paid [alternatives like Keeper](https://www.prnewswire.com/news-releases/keeper-security-introduces-major-password-manager-update-for-ios-301919930.html) and LastPass might be a **better choice**. ## Topics NewsSecurityUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F) [ ](https://twitter.com/intent/tweet?text=ClearFake%20Scam%20Warning%2C%20Google%E2%80%99s%20DigiKavach%20Innovation%2C%20FBI%20Phantom%20Hacker%20Alert%2C%20Cybersecurity%20News%20%5BOctober%2016%2C%202023%5D&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-42-of-2023%2F) Copy Related Articles - [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg) Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/) - [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2022/01/spf-flattening-7011.jpg) Cyber Security News Update, Week 1 of 2022 News ](/blog/announcements/cyber-security-news-update-week-1-of-2022/) - [ ![Cybersecurity](https://media.mailhop.org/duocircle/images/2023/01/spf-validator-6824.jpg) Cybersecurity News Update, Week 1 of 2023 News ](/blog/announcements/cyber-security-news-update-week-1-of-2023/) - [ ![cybersecurity](https://media.mailhop.org/duocircle/images/2024/01/phishing-protection.jpg) EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2024/) ## Related Articles [ News 3m Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[ News 6m Cyber Security News Update, Week 1 of 2022 Jan 7, 2022 ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)[ News 7m Cybersecurity News Update, Week 1 of 2023 Jan 1, 2023 ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)[ News 5m EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] Jan 4, 2024 ](/blog/announcements/cyber-security-news-update-week-1-of-2024/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"ClearFake Scam Warning, Google’s DigiKavach Innovation, FBI Phantom Hacker Alert, Cybersecurity News [October 16, 2023]","description":"This week in cybersecurity: online scam warnings, Google's DigiKavach anti-fraud program, an FBI alert, and more news from October 16, 2023.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/","datePublished":"2023-10-25T14:37:07.000Z","dateModified":"2025-05-08T13:57:01.000Z","dateCreated":"2023-10-25T14:37:07.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":763,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/10/dkim-record-check-2.jpg","caption":"cybersecurity news","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"ClearFake Scam Warning, Google’s DigiKavach Innovation, FBI Phantom Hacker Alert, Cybersecurity News [October 16, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"ClearFake Scam Warning, Google’s DigiKavach Innovation, FBI Phantom Hacker Alert, Cybersecurity News [October 16, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"ClearFake Scam Warning, Google’s DigiKavach Innovation, FBI Phantom Hacker Alert, Cybersecurity News [October 16, 2023]","description":"This week in cybersecurity: online scam warnings, Google's DigiKavach anti-fraud program, an FBI alert, and more news from October 16, 2023.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/","datePublished":"2023-10-25T14:37:07.000Z","dateModified":"2025-05-08T13:57:01.000Z","dateCreated":"2023-10-25T14:37:07.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-42-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":763,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/10/dkim-record-check-2.jpg","caption":"cybersecurity news","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```