Before you sign a digital document in your email, read this

Be careful: That SVG file you just downloaded may be harboring a dangerous secret.

Cybercriminals are sending out emails masquerading as DocuSign notifications. Click and they may be able to steal your data using this new spin on one of the most commonly spoofed types of messages.

If you’ve ever tried to open an SVG file, you already know they’re not exactly like PNGs or JPGs. Here’s why you should exercise caution if you receive an email with HTML attachments that include them.

What is the Blank Image attack?

The fraudulent emails in question purport that you’ve got a DocuSign document to sign. In this case, it’s the enigmatically-named “Scanned Remittance Advice.htm.” Scammers use SVG vector images embedded in HTML attachments to bypass the security measures most email inboxes have enabled automatically. Tricky.

While the body of the message itself appears to be relatively harmless, opening the HTML attachment unleashes its nefarious payload onto your device. Instead of the XML data an ordinary SVG would contain, this file holds the attack’s script.

It’s almost impossible for most people to predict whether or not this hidden script exists within any attachment capable of hiding malicious code. So, what can you do?

Your best bet is to delete any DocuSign email that you’re not expecting. Never open HTML attachments that appear to be suspicious or unexpected.

If you’re an avid DocuSign user, ensure that you’re positive that any new documents to sign are legitimate. The same habit should apply to any other brand, of course. If you know you’ve got nothing new to sign, you know something “phishy” may be happening.

How to avoid becoming a victim

DocuSign isn’t the only legitimate brand being used to attack customers. In fact, something similar just happened with Zoom. Follow these simple tips to keep trouble at bay and your data secure:

  • Never open attachments from strangers or spam emails.
  • Always verify that an “official” email is being sent from the real company. Misspelled email addresses and domains, weird styling in the body of the email and fishy-sounding offers are all suspect.
  •  Use antivirus software to protect you from snoops and crooks automatically. Kim’s pick is TotalAV.

Continue reading

Quick rename: On a Mac, click a file, then press Return to quickly change its name. On Windows, double-click on the filename. Boom!

Your old photos are worth money to AI

Open/download audio

Big tech will pay top dollar for your cringey Myspace pics. Plus, how to file a claim in Walmart’s $45 million lawsuit (you could get $500), phony AI image generators run wild on Facebook, and Disney+ stops password sharing. And all the weird stuff you can gamble on online!

🚨 Hospital nightmare: The Ascension hospital cyberattack in May 2024 shut down computers for weeks, and it all started with one employee who mistakenly downloaded a malicious file. Ascension handles roughly 3 million emergency room visits and performs nearly 600,000 surgeries per year.

🖨️ Printer secret: Most printers have a “draft mode” that uses lots less ink when you don’t need anything fancy. (Some call it “economy mode” or “fast mode.”) To try it, open a document or file, hit Print, then go to Properties or Preferences and look for Draft mode

🔍 Your new favorite Mac shortcut: ⌘ + spacebar. This opens a new Spotlight window. Use it to search for a program, file, contact or anything else.

Finders keepers: Looking for a file? Hit the Windows key and start typing its name. That’s it. On a Mac, hit Cmd + spacebar and start typin’. So simple and saves so much time.

Put it on the tab(s): Windows File Explorer can use tabs, just like your web browser. Click the + (plus) on the toolbar at the top to create a new tab. You can also right-click on folders and pick Open in new tab. Nice.

“How come no one told me?” That’s what you’re thinking if you didn’t know this tip. On your Mac, click a file and hit Return. Now, you can type in a new name. On a PC, click, wait a beat, then click again. Done!

What’s your function? On a PC, F2 lets you rename a selected file or folder, and F3 allows you to search within an open or active application. Alt + F4 closes your active window, and pressing F5 lets you refresh or reload a page or document window. Now you know.

If your business accepted Visa and Mastercard between Jan. 1, 2004, and Jan. 25, 2019, you might be eligible for part of a $5.5 billion settlement. It stems from excessive transaction fees, and businesses that have since closed or gone bankrupt can still qualify. File your claim here before May 31. I did.

Mac file shortcut: If you need to rename a bunch of files on macOS, you don’t need to do it one by one. Select them all in Finder, then hold down Cmd and click on one of them. Choose Rename to apply the same change(s) to them all.

3 ways to file your taxes for free

Open/download audio

Just a friendly nudge — don’t forget to do your taxes! Here’s how to do it online at no cost.