Links for 5 September 2025: more news from the low-trust society
Previously: Links for 4 Jan 2025: news from the low-trust society
UK
households warned over ‘closing down sale’ scam sweeping social
media (It’s not just sweeping social media
and it’s not just
the result of understaffing at the ad review department. Meta’s ad system is
optimized for deceptive advertising and working as designed.)
Affiliates
Flock to ‘Soulless’ Scam Gambling Machine The scam begins with
deceptive ads posted on social media that claim the wagering sites are
working in partnership with popular athletes or social media
personalities.
(Another key design choice for Meta ads. Notice how
they can recognize the faces of normal people in photos, but somehow
miss out on celebrity photos in scam ads? All part of how their system
works.)
This
Android Malware Is Spreading Through Facebook Ads According to
researchers at Bitdefender, cybercriminals are running ads that promise
free access to TradingView Premium, a market tracking and investment
app, for Android mobile users. Clicking on the fraudulent ads, which use
TradingView’s branding and, in some cases, images of Labubus, leads to
users downloading and installing malware on their devices.
(A direct
consequence of how Meta’s Ad Library is designed to conceal trademark
infringement.)
How
college towns are grappling with a new gambling boom by Sophie
Atkinson. As the fascination with online gambling and sports betting
continues to increase, with the market exploding, some areas are
starting to introduce greater restrictions to protect younger
people….The regulatory board has brought in the new rules, with
gambling-related advertisements now not able to be placed in locations
where they are likely to be seen by underage or vulnerable people.
(I’m sure the dedicated compliance team at Meta will get right on
that…)
From
Libraries to Schools: Why Organizations Should Install Privacy
Badger Targeted ads aren’t just a privacy nightmare. They can
also be a vehicle for malware and phishing attacks. Cybercriminals have
tricked legitimate ad networks into distributing malware, a tactic known
as malvertising.
(Unfortunately your biggest risk is the Google
search ads, which Privacy Badger doesn’t affect: fix Google
Search)
Yes,
there is a 9-1-1 for scam victims. Get to know the guardian angels of
the Internet — AARP’s Fraud Watch Network by Bob Sullivan. It’s
staffed Monday-Friday, from 9 a.m. to 9 p.m., mainly by trained
volunteers. They reach out to every caller within 24 hours or so. It’s
staffed mainly by volunteers who are ready to help victims within a day
or so, and offer both empathetic listening and practical advice. They’ve
stopped millions of dollars in criminal transactions by giving people a
place to turn when they’re in crisis.
LegalPwn:
Tricking LLMs by burying badness in lawyerly fine print
Adversarial instructions are hidden inside legal documents, carefully
phrased to blend in with the legalese around them so as not to stand out
should a human reader give it a skim. When given a prompt that requires
ingestion of these legal documents, the hidden instructions come along
for the ride…
US
(finally) issues warning about crypto ATMs by Bob Sullivan. When
a criminal has a victim confused and manipulated, the fastest way to
steal their money is to persuade them to drive to the nearest crypto ATM
and feed the machines with $100 bills. I’ve talked to countless victims
who’ve told me harrowing, tragic tales of crouching in the dark corner
of a gas station, shoving money into one of these machines, terrified
they are being watched. In fact, they aren’t. Employees are told not to
get involved. So victims drive away, their money stolen in the fastest
way possible.
Maybe we’re getting to the end of this nonsense? I still think the right state privacy laws—set up to work in a cooperative way with journalists, researchers, and attorneys in private practice—could make a difference. More: inquiring minds (have a right to) know