This malware is spread mostly by posing as a Chrome browser or Google Play Store update. When a user clicks on the “update,” it installs the malware designed to automate the process of accessing your online accounts and extracting and transferring funds.

Besides being alert to this scam (and you should let your spouse, partners, and family know as well), you should be aware of a few ways to protect yourself:

• Avoid links and attachments in any unsolicited e-mail. Simply previewing a document could infect your device, so never open or click on anything suspicious.
• To update your browser, close it and reopen it. You don’t have to download an application to correct it. Furthermore, the Google Play Store app will not ask you for an update, so don’t fall for any website alert or text stating you need to download an update.

But remember, bank fraud can manifest itself in several forms, including:

1. Phishing Scams: Cybercriminals send deceptive e-mails or messages, often impersonating trusted entities like banks or government agencies, to trick you or your employees into revealing sensitive information like login credentials. Sometimes, these are facilitated by phone calls, so ensure your team is fully aware. The latest MGM hack happened when a hacker called the company’s IT department requesting a password reset.
2. Check Fraud: Criminals may forge or alter your business’s checks to siphon funds from your account, making it essential to secure your checkbook and be careful about sharing or e-mailing your account information. You might consider going checkless to reduce the chances of hacking your account.
3. Unauthorized Wire Transfers: Hackers may compromise your online banking credentials to initiate unauthorized transfers, diverting funds to their accounts.
   
4. Account Takeover: Criminals may gain control of your business’s online banking accounts by exploiting weak passwords, reused passwords, or security gaps, such as e-mailing your passwords to others or storing your bank password in your browser, allowing them to make unauthorized transactions.
   
5. Employee Fraud: Employees may sometimes engage in fraudulent activities, such as embezzlement or manipulating financial records.

To protect yourself, use strong, unique passwords for your online banking accounts and never store them in your browser. Also, update your passwords monthly with significant changes, using uppercase and lowercase symbols and numbers of at least 14 to 16 characters.

Second, always turn on multifactor authentication (MFA), so you’re notified if anyone tries to log into your accounts without your knowledge.

Third, set up alerts for large withdrawals. You can ask your bank to require a physical signature for wire transfers to protect you from someone taking money from your account without your signature.

Fourth, get fraud insurance that explicitly covers employee and online theft, so you are protected if a cybercriminal steals money from your account.

And, as always, make sure you have solid cyber protection in place for ANY device that logs into a bank account or critical application. Far too many businesses think that if their data is “in the cloud,” they are safe. Remember, your bank account is “in the cloud,” the bank likely has a secure portal, but that doesn’t mean YOU can’t be hacked.

If you want to ensure your organization is genuinely secure, click here to request a free Cyber Security Risk Assessment to see how protected your organization is against known predators. You're due if you haven’t had an independent third party conduct this audit in the last six months.

It’s completely free and confidential, without obligation. Voice scams are just the latest in a tsunami of threats aimed at small business owners, with the most susceptible being the ones who never “check the locks” to ensure their current IT company is doing what it should. Claim your complimentary Risk Assessment today.