It’s a terrific tech Tuesday, friend! Fun fact: Vinyl records made up more than 40% of all album sales last year. That’s 50 million records. Taylor Swift’s records alone accounted for 7% of all 2023 sales. Wowsie! If you’re stumped on a gift for the Gen Zer in your life, vinyl might hit the right note. 🎵

Remembering passwords can feel impossible. Jotting them down on sticky notes or saving them in your browser is risky business. Instead, keep your passwords safe and accessible the smart way with the password manager I trust and recommend. — Kim

You’re pulling your hair out, trying to fix something on your computer. You Google it and find what looks like a helpful website or a tutorial with easy step-by-step instructions.

Phew, you’re finally solving your problem, but hold up! You’ve just walked into a “scam-yourself” attack. Cybercreeps use this clever strategy to trick you into compromising your tech so they don’t have to do the dirty work.

How bad is it?

Bad. Really bad. “Scam-yourself” attacks shot up 614% in the third quarter of this year alone. Lumma Stealer, the top data-stealing malware type that grabs banking info and browser extensions, spiked by 1,154%.

When something’s broken, our instinct is to rush and fix it as quickly as possible. Now, add to this the fact you’re going through the steps yourself so it feels like you’re in control. That’s exactly what makes these tricks so dangerous.

How they snag you

🤖 Fake CAPTCHA: You verify (“I’m not a robot”), then you’re asked to download a README file for instructions. Those instructions install malware.

▶️ YouTube tutorials: You click a download link in the description of a YouTube video that promises to fix your tech issue. You guessed it! It’s malware in disguise.

🌐 ClickFix scams: You copy and paste commands into your computer while following a step-by-step guide. Oops … You’ve commanded it to obey its new hacker overlords.

🛑 Phony updates: Quick! A pop-up says you need to install a security update right now! It’s malware pretending to be your app, operating system or browser.

How to protect yourself

These scammers are savvy, but you can outsmart them.

• Think twice before downloading: If a tutorial tells you to turn off antivirus software or download a random link, bail. Rely on big names (like Google, Apple and Microsoft) that publish steps for help online (or, you know, me!).
• Check URLs and sources: Cybercriminals mimic legitimate sites. Always double-check the web address, especially when you’re looking at updates or troubleshooting guides. If the URL feels off, trust your gut and close it.
• Be careful what you copy and paste: Never copy commands from unknown sources into your computer’s terminal or command prompt. That’s a classic malware delivery tactic.
• Update the right way: Don’t click random pop-ups to update your software. Always go through your device settings or the app store.

I know, the scams never stop. But don’t worry — I’ve got your back. Now, be a hero and help protect others by sharing this important info using the share buttons below. Together, we can stay one step ahead!

The most-used password in the world (“123456”) has been leaked more than 3 million times. And almost half of those were corporate passwords. That means if hackers get into one of your personal accounts, they can stroll right into your work systems, too.

That’s why you need a password manager. With NordPass, you can:

🔒 Check passwords’ strength: Find out if your passwords are weak, reused or outdated in seconds.

🔒 Generate healthy passwords: They create unique, uncrackable passwords every time.

🔒 Sync across all devices: Keeps everything in sync and logs you into your favorite sites automatically.

🧑‍🎄 Secret Santa scam trending on social: It goes like this. Send one anonymous gift and you’ll get dozens in return. Invite your friends, too! Spoiler: Your gift goes straight to a scammer, who won’t even send you coal in return. This pyramid scheme goes by names like “Secret Sister” or “Secret Santa Dog.” Pass!

Never comes with a lifetime guarantee: The FTC found only 11% of smart devices say how long they’ll get software updates. It’s required by law for anything with a written warranty over $15. Check endoflife.date to see if any of your gadgets are ready for retirement.

🤠 A Texa-llent idea: Remember the winter storm that left millions of Texans without power? The state is now requiring all crypto miners, big or small, to register. Any unregistered mining outfit that consumes over 75 megawatts (that would be like charging 1,500 Teslas at once) is looking at fines ranging up to $25,000 per day. That’s one big mine!

A new YouTube trend: I thought this was interesting. Searching for “IMG_0001” on YouTube lets you watch videos uploaded from early iPhones between 2009 and 2012. The clips show life before social media took over. There’s no editing, no descriptions and no flash … because the iPhone 3G didn’t have one.

Be the smartest one at work: Download NetSuite’s free knowledge drop, “The CFO’s Guide to AI and Machine Learning.”* No matter what your role is, you should know more about using AI for your business.

🤑 The tax man cometh … later: The $600 reporting rule for apps like PayPal and Venmo is delayed yet again. This rule says apps owe you a tax form for annual incomes over $600. For another year, personal payments and small sales won’t result in a new tax form. Don’t smile yet; anything over $5,000 (like a car you sell online or your side hustle income), and you’ll receive a Form 1099‑K.

🫶 It’s a small world after all: A journalist in Georgia uncovered her own adoption story while exposing a baby-trafficking scandal. A DNA test coupled with a Facebook post led her to her biological dad, who, shockingly, had been her Facebook friend for years. Isn’t that strange?

Winging it: Forget those small prop planes carrying advertising banners over beaches. Drones are replacing planes in places like Miami Beach. They’re quieter and — get this — they track ad views in real time and fly about 400 feet lower than planes. There’s no avoiding ‘em.

🚖 Cybercab’s dirty secret: Elon Musk says Tesla’s robotaxi service is coming by 2026. The catch? It won’t be “fully autonomous” as promised. A recent job listing shows Tesla is hiring a team to remotely control its vehicles when they get stuck. FYI: They’re not the first to do this, it’s an industry standard. Waymo and others just keep it under wraps.

🎄 Holiday party season is here! I gathered up gifts perfect for Secret Santa, White Elephant or any other swap.

• This mini mushroom grow kit is under $20 and grows oyster mushrooms in less than 10 days. Bonus: Snap a pic and the company will donate a free kit to a classroom in need.
• Disposable cameras are in vogue again. This one is 30% off!
• A Flexi Hose. No kidding, I brought one to our office White Elephant party one year, and everyone tried stealing it.
• These mini Bob Ross painting kits are under $10 so everyone at the party can paint some happy little clouds.
• Make sure whoever gets this mini inflatable tube guy (34% off) isn’t the same person who sits next to you at work.

💸 See what you’re spending: Apps and subscriptions add up. On an iPhone, go to Settings, tap your name, then Media & Purchases > View Account > Purchase History. You can pick a date range at the top. Team Android, open Google Play, tap your profile icon, then go to Payments and subscriptions > Budget & history.

Your forbidden book section: Keep your steamy romance novels on lock by creating a passkey for your Kindle. Tap the three dots (upper right) and go to Settings > Device Options > Device Passcode. Your passcode can be up to 12 digits long. That’s hot!

The verdict is in: Serve as a virtual juror through eJury. You review cases and answer questions that help lawyers prepare for trial. How much does online jury duty pay? Based on the complexity and length of the case, anything from $5 to $60. Lawyers never lose their appeal.

🤖 Learn to speak AI: Type in “–no [excluded words or phrases]” for anything you want the chatbot to ignore. The double hyphen and “no” tell the bot to leave out those words or phrases. Say you’re hosting a dinner party and need appetizer ideas. Use “–no shrimp” if someone’s allergic.

Just say no to free VPNs: They’re all over the app stores, but using one isn’t worth the risk. Usually, they’re based out of Communist China and capture every single keystroke. Right now, get an extra four months of my VPN pick free on a one-year plan at ExpressVPN.com/kim.*

Jaguar’s new EV concept car comes in a Barbie pink. Yup, the cat’s out of the bag, but this one feels more like a stray. There’ll be no Barbie queue for this!

Before I go … Did you start remembering all those records sitting in boxes? Good, because some of them might be worth a ton. Run to eBay if you have:

• Led Zeppelin’s first self-titled release. It’s worth up to $10,000 in near-mint condition!
• An original mispress of “The Freewheelin’ Bob Dylan.” This misprint’s worth thousands.
• Original pressings of Pink Floyd’s “The Dark Side of the Moon” are also worth thousands.

Even if you don’t have any of these, many rock, blues and jazz records from the ‘60s and ‘70s are selling right now. That sure is groovy. (Ahem, get it?)

🎶 On that note, I’m outta here. Hit this page for 58% off my password manager pick so you can stop hitting that “Forgot login?” button. You deserve it! See you tomorrow at the same place, same time, with the best tech newsletter in the USA! — Kim