📝 Show notes
CyberAware Daily — 2026-09-03
- Case file: active dark web leak site spotted by DarkWatch, high risk for UK data
- FBI probes service selling 153 million+ driving licences
- Fake installers disable Windows Update and Defender — stick to official sources
- Action: set up a password manager today and use two-factor authentication
- Report suspected fraud to Action Fraud at actionfraud.police.uk
More at https://cyberawareuk.co.uk
📄 Full transcript
Right then, Thursday. Case file day. You know the drill, Alex, we pick one real scam,
rip it open, and figure out how to keep you and your safe.
And today's case file is a nasty one, isn't it? We've got a ransomware gang that set up shop on
the dark web, and they're leaking stolen UK data. That's right. Darkwatch, our early warning system,
spotted an active dark web leak site this morning. It's flagged as high risk,
they've already got UK victims in their crosshairs. So, what actually happens on one of these leak
sites? I mean, I've heard the term, but what are we talking about? Simple. These criminals break into
a company's systems, lock up their files, and demand a ransom. If the company doesn't pay up,
they publish the stolen data online for anyone to see, and that includes your personal details.
And once your details are out there, they are gone for good, right?
Absolutely. They get sold on, used for phishing, or even to open bank accounts in your name.
That's why we always say, the best time to protect yourself is before the breach, not after.
But how can the average person protect themselves if it's the company that gets hacked?
Good question. First, make sure you're using a different password for every single account.
If one gets leaked, the crooks can't just waltz into your email, your banking, your socials.
Okay, that makes sense. But I bet a lot of our listeners still use the same password for
everything, don't they? They do. And that's exactly what these gangs bank on.
So, step one, get a password manager. It does the heavy lifting for you.
And what about two-factor authentication? Is that still worth it?
Worth its weight in gold. It's like a second lock on your door.
Even if the crooks have your password, they can't get in without that code on your phone.
And I suppose we should mention that other big story,
the FBI probing a service selling over 153 million driver's licenses.
Yeah, that's a stark reminder. Your driving license is a goldmine for identity thieves.
That's why you should never send a photo of it to anyone you don't fully trust,
no landlord, no or employer, no thegov.uk email that's actually a phishing scam.
And speaking of scams, we've got those fake software installers doing the rounds.
They disable Windows Update and weaken Microsoft Defender. That's a sneaky one.
It is. So, rule of thumb, only download software from the official app store or the developer's
own website. No random pop-ups, no freebie downloads from dodgy sites.
So, to wrap it up, what's the one thing you want our listeners to do today?
Here it is. Take 15 minutes this evening and set up a password manager on your phone and computer.
Generate a unique, strong password for every important account, email, banking, shopping,
social media. Then turn on two-factor authentication wherever it's offered.
That single step blocks the vast majority of these attacks.
And if you've been hit. If you think your details might be on that leak site.
Don't panic. Change your passwords first, tell your bank, and report it to Action Fraud.
There's no shame in it, these gangs are professionals. We're here to help, not judge.
Thanks, bully. And that's your lot for today's CyberAware.
Stay safe, stay savvy, and we'll be back tomorrow.
Cheers, everyone.
Same time tomorrow, we'll look at how to check if your personal info's already floating around
the darker corners of the internet.
Until then, take care.