‼️ Hackers are using FAKE Meta job interviews to steal Facebook and Google accounts, even when 2FA is enabled. Malwarebytes uncovered a phishing campaign using fake Calendly pages to book 30-minute recruiter calls. Victims choose a slot, enter personal details and complete a fake CAPTCHA. Then comes the trap: fake Facebook and Google logins that steal passwords and 2FA codes in real time. Your phone's security codes can become the attacker's way in. 🧵

⚠️ Your crypto security plan needs an answer to: “Unlock your phone. Now.” An attacker who threatens you directly may never need to crack a password. That is the danger behind a “wrench attack” - using physical coercion to force someone to surrender access to their assets. Your phone can reveal wallet apps, exchange accounts, private conversations and clues about what you own. For high-value targets, that exposure deserves serious attention. In this clip, Efani’s Mark Kreitzman and Deniable founder Josh Thomas discuss the “decoy wallet” analogy: revealing a limited environment while keeping more sensitive information separate. Josh explains how that thinking informs Deniable’s approach to phone privacy. It cannot guarantee safety during an attack, but it raises a question every crypto holder should consider: How much would someone discover if they forced you to open your phone? At @efani, we see phone-number protection, account security and device privacy as connected parts of protecting your digital life. Watch the clip. Full interview and Deniable details in the next post. 👇

🚨 A 5-day-old domain was already copying Microsoft Teams’ login screen and interface. Researcher Steven Lim flagged teams-cloud[.]live on October 18, warning organizations to block it. For employees joining meetings on their phones, a familiar Teams screen can make an unexpected login request look legitimate. Entering work credentials there could put confidential conversations, company files and client information at risk if attackers gain access. Bookmark this thread for the warning signs and protective steps.

Your next attacker may already know enough about you to sound convincing. Your name. Your number. Your address. Details that make “Hi, I’m the account owner” a much more believable story. On DailyCyber with @BrandonKrieger, our GM Mark Kreitzman discusses how breaches, data brokers, public directories, and AI crawlers are changing personal privacy - and what that means for SIM swap threats. The danger is what happens when scattered details become a convincing impersonation attempt. For crypto holders, executives, and founders, protecting your phone number means looking closely at how your carrier verifies identity. Knowing facts about you should never be enough to take control of your service. Watch the clip. Full interview in the next post. 👇

🚨 90 seconds. One convincing phone call. Someone else controlling your mobile account. On DailyCyber with @BrandonKrieger, our GM Mark Kreitzman recounts a white-hat demonstration where a hacker used a believable story - and a crying baby playing in the background - to get a reporter’s mobile account details changed. The deeper warning: a SIM swap can begin before anyone asks to transfer your number. An email change. A password reset. Smaller changes that make the next request look legitimate. For crypto holders, founders, and executives, those account changes deserve attention. Your mobile account is part of your security perimeter. Watch Mark explain the sequence. Full interview in the next post. 👇

⚠️ Someone forces you to unlock your phone. How much of your life does that one PIN expose? Your messages, financial apps, private photos and business conversations could all become accessible without anyone needing to hack the device. In this clip, Josh Thomas, Founder and CEO of Deniable, joins Efani’s Mark Kreitzman to explain the problem of coerced unlocking - and how separate encrypted environments are designed to give users more control over what an unlocked phone reveals. For crypto holders, executives and anyone carrying sensitive information, this raises a critical question: have you planned for someone targeting you directly? At @efani, we believe mobile security must account for both remote account takeover and physical access to your device. Protecting your number and protecting the information on your phone address different parts of that risk. Watch the clip, then find the full interview and Deniable website in the next post. 👇

🚨 It's 2026. We have password generators, password managers, Face ID, and passkeys. Yet someone reportedly used "123456" to help expose 8.8 MILLION records in Denmark. 🤡 According to reports, THREE accounts at an IT contractor used this password. One was an ADMIN account. 8.8 million records. Protected by the password equivalent of leaving your front door wide open. You can't make this stuff up. 👇