Current Events in September 2019

Owe your friend $50 dollars because you lost a bet? It may be harder to find an excuse not to pay.

MoneyGram and Visa have announced a partnership that will allow consumers to send money through MoneyGram to an eligible Visa debit card linked to a bank account. In announcing the new service, MoneyGram said consumers will be able to send cash to over a billion accounts around the world.

MoneyGram has historically been a way for people to send cash to others. Over the last two decades, however, it became a favorite way for scammers to receive money from their victims. New safeguards are in place now to make that less likely.

The New person-to-person (P2P) money transfer service may be harder for scammers to exploit since very few criminals use traceable bank accounts and the person receiving money under the new service must have a bank account.

Another way to send money

With fewer consumers using cash to make purchases MoneyGram sees the Visa partnership as a way to make it easy for consumers to send and receive money.

"We strive to create the best possible experience for sending and receiving money, and this new product offering empowers our customers by giving them yet another way to send money to friends and family," said Alex Holmes, MoneyGram chairman and CEO. "And in partnering with Visa, the world's leader in digital payments, we're providing our customers with a dependable option that they know and trust."

Visa also sees it as a partnership that makes sense. Bill Sheley, a Visa senior vice president, predicts consumers will like both the convenience and peace of mind it offers. The fee for making a money transaction will be $1.99.

Visa and MoneyGram are joining a party that’s been going on for quite some time with an ever-increasing number of players. PayPal is among the first to set up P2P payments and is still going strong today.

Millennials tend to be the biggest users of Venmo, a more recent P2P offering that is often used to split bar tabs and pizza bills. The days of writing a check or peeling a $50 bill from your wallet to settle a bet may be numbered.

Ford Motor Company is recalling 13,564 model year 2012-13 Ford Fiesta vehicles in the Canadian provinces of New Brunswick, Newfoundland, Labrador, Nova Scotia, Ontario, Prince Edward Island and Quebec.

Battery junction-box relay or fuse corrosion can lead to a loss of low-beam headlamps and daytime running lamps while the vehicle is being driven.

What to do

Owners will be notified and dealers will clean the battery junction box, install foam sealing to the cover and replace any corroded fuses, terminals or relays at no charge to the customer.

Owners may contact Ford customer service at (866) 436-7332.

Ford's reference number for this recall is 19S28.

On the heels of three more deaths believed to be associated with electronic cigarettes, federal health officials have issued a warning urging consumers to avoid using the products while they conduct an investigation into the matter. 

The Centers for Disease Control and Prevention (CDC) said on Friday that over 450 users of these devices have now reported symptoms of severe pulmonary disease.  

"CDC, US Food and Drug Administration (FDA), state and local health departments, and other clinical and public health partners are investigating a multistate outbreak of severe pulmonary disease associated with e-cigarette product (devices, liquids, refill pods, and/or cartridges) use,” the CDC said. 

“This investigation is ongoing and has not identified a cause, but all reported cases have a history of using e-cigarette products," the agency noted.

The illnesses have been reported from 33 states. With the addition of the three recent deaths, the number of deaths potentially linked with vaping has now risen to five. 

Chemical link suspected

Towards the end of August, the CDC announced that it was launching an investigation in response to “a cluster of pulmonary illnesses” in multiple states. Patients who had confirmed that they used e-cigarettes reported symptoms such as chest pain, fatigue, shortness of breath, and vomiting. 

The agency said there is no evidence that an infectious disease is causing the illnesses, which has led officials to believe the illnesses may be associated with chemical exposure. On Friday, health officials suggested that the lung illnesses were linked to a chemical derived from vitamin E that is present in many different types of marijuana liquid vaping products. 

All of the patients who have gotten sick have reported using e-cigarettes, but no specific substance or product was found to be linked to all the cases. However, many patients reported using e-cigarette products with liquids that contain cannabinoid products (such as THC), the CDC said. 

“These investigations are ongoing,” the agency wrote. “CDC will provide updates when more information is available.” 

In the meantime, health officials have recommended that young adults, pregnant women, and non-smokers avoid using e-cigarettes and vaping products. Those who use e-cigarette products are urged not to buy them off the street, modify them, or add any substances to the products that are not intended by the manufacturer. 

British Airways (BA), which is facing a strike by its pilots, has taken the unusual step of canceling nearly all of its flights today and Tuesday.

In an update to its customers, the airline said the union had not provided any details about which pilots would strike and therefore it had no way of knowing which flights would be grounded. Without that knowledge, it said it had to assume all would be grounded.

“Our customer teams – supported by additional colleagues - have been working tirelessly to help as many of you as possible and to provide options, including a full refund or re-booking to a different date of travel or alternative airline,” the airline said. “We are offering all affected customers full refunds or the option to re-book to another date of travel or alternative airline.”

BA-owned airlines BA CityFlyer, SUN-AIR and Comair are not affected by the pilots’ walkout. The airline is advising that its customers "not go to the airport."

The union has been in prolonged negotiations with the airline and has planned a 48-hour walkout to leverage its position. The union is seeking an increase in pay and benefits for its members.

Limited strike

The British Airline Pilots Association (BALPA) has given notice that its members will walk out on Sept, 9, 10, and 27 -- a limited and not ongoing strike. 

“Over several days of talks BALPA put forward a number of packages that we believe would have resolved this dispute without a strike, and which we could have recommended to our members for acceptance prior to strike action,” the union said in a statement.

The union says the airline did not accept any of its proposals, and it believes that ongoing talks would not achieve progress. The organization also points out that this is the first time that its pilots have voted to go on strike in the 100 years of British Airways’ operation.

On Monday, the Food and Drug Administration (FDA) charged vaping industry leader Juul with illegally marketing its nicotine pods as “safe.” In a letter to the company’s CEO Kevin Burns, the FDA demanded that Juul change its marketing practices or risk being hit with a hefty fine or having its products seized. 

The letter was sent two days after the FDA reviewed testimony from a congressional hearing on Juul, which took place in July. The FDA said it found that Juul illegally sold or distributed its products as “modified risk tobacco products without an FDA order in effect that permits such sale or distribution.”

The agency stressed that regulatory approval is required before a company can market a specific product as being safer than traditional cigarettes. 

Federal regulators said Juul shirked that law by touting its products as carrying "a lower risk of tobacco-related disease” and being “less harmful than one or more other commercially marketed tobacco products.” Juul has never submitted its vaping devices for FDA review. 

“The law is clear that, before marketing tobacco products for reduced risk, companies must demonstrate with scientific evidence that their specific product does in fact pose less risk or is less harmful," acting FDA Commissioner Ned Sharpless said in a statement. "JUUL has ignored the law, and very concerningly, has made some of these statements in school to our nation's youth."

Health concerns raised

The FDA has given Juul 15 days to respond to the letter with a plan for maintaining compliance with the U.S. Federal Food, Drug, and Cosmetic Act. 

Alternatively, Juul may provide “reasoning and provide any and all scientific evidence and data, if any, that support that your statements and representations do not explicitly or implicitly convey that JUUL products pose less risk, are less harmful, present reduced exposure, or are safer than other tobacco products.”

A spokesperson for Juul said the company intends to “fully cooperate” with regulators.

Juul’s legal troubles come amid growing concern over the health risks of vaping products. On Friday, the Centers for Disease Protection and Control and Prevention (CDC) announced that it’s investigating hundreds of lung illness cases and five deaths that could be linked to chemical exposure while vaping.

While the investigation is ongoing, health officials have recommended that young adults, pregnant women, and non-smokers avoid using e-cigarettes and vaping products. Those who use e-cigarette products are urged not to buy them off the street, modify them, or add any substances to the products that are not intended by the manufacturer. 

In a report titled “Lesson Learned,” the North American Electric Reliability Corporation (NERC) revealed that a cybersecurity incident impacting U.S. power grids was caused by hackers rebooting firewalls for hours on end. 

The incident, which occurred back in March, caused communication outages lasting up to five minutes at a time at multiple "low-impact" generation sites. NERC now says it has determined that the outages were caused by reboots, which were “initiated by an external entity exploiting a known firewall vulnerability.” 

The industry group said failure to patch firewalls was the cause of the incident. After the operator of the control center applied the firewall security updates, the reboots stopped. 

Security vulnerabilities 

Two years ago, a report from cybersecurity firm Symantec raised alarm over the potential ability of a sophisticated group of hackers to take control of electric power grids. Symantec said the group, known as “Dragonfly,” was successful in taking down a power grid in Ukraine, resulting in widespread and prolonged power outages.

At the time, Symantec said its power company clients were protected against the attacks, but it noted that some grids lacking sophisticated protection could be vulnerable. In its report, NERC stressed the importance of deploying firmware updates on time in order to prevent security vulnerabilities from leading to another cyber incident. 

“Even in cases involving low-Impact BES assets, an entity should strive for good cyber security policies and procedures,” the group said. 

For those in the industry, NERC recommends closely monitoring vendor firmware releases and deploying them in a timely manner. The group recommends that power companies also heed the following advice: 

• Reduce and control your attack surface by having as few internet facing devices as possible.

• Use virtual private networks.

• Use access control lists (ACLs) to filter inbound traffic prior to handling by the firewall; minimize the traffic through a denial by default configuration with whitelisting for the allowed and expected IP addresses. Limit outbound traffic similarly for information security purposes.

This year, the job Santa may be wearing brown for many U.S. temporary work seekers.

On Monday, the United Parcel Service (UPS) unveiled its intention to hire close to 100,000 seasonal workers to support its projections of nearly 40 million daily holiday deliveries for retailers that hope for a busy holiday season. We say “hope” because U.S. President Trump has to make good on his word that he’s holding off on tariffs against China until December 15, “just in case some of the tariffs would have an impact on U.S. customers.”

Seasonal hiring rates continue to inch up across the board, including UPS’s extra 100,000 holiday workers, a 5.1 percent bump from 2017.

Available jobs

The seasonal positions run the gamut from part-time to full-time and from package-handlers to drivers. There’s also the added potential that one of the temporary gigs might turn into something more permanent. In the past, an average 35 percent of UPS seasonal workers have been asked to stay on after the holidays.

UPS feels that 35 percent mark has great value for today’s workforce. “That’s important to many,” the company said in a news release. 

“Nearly 70 percent want their seasonal job to turn into a full-time position, according to a recent survey of Americans who hold, have held or would consider taking a seasonal job. And nearly all (90 percent) agreed that seasonal and temporary jobs are a good way to move into a permanent, full-time career.”

What wearing brown will get you

The hourly wages for these seasonal jobs are reported to be between $14 and $30 compared to the average U.S.’ hourly wage of $28.11. 

Many of the positions come with a bonus for students, who can earn up to $1,300 extra toward college expenses when they qualify for UPS’ Earn and Learn program. 

While it’s not an absolute, when one compares the potential employment health of delivery services, UPS seems to be in a more secure third-party position than FedEx, which cut ties with Amazon just last month.

High blood pressure is something all consumers need to keep an eye on, but a new study shows that pregnant women can be especially susceptible to the condition. 

Researchers from the American Heart Association (AHA) found that cases of high blood pressure among pregnant women have been steadily increasing over the last 40 years. Those findings are dangerous because high blood pressure can be harmful to both mothers and their newborns. 

“Women who already have high blood pressure and are planning to become pregnant should work closely with their healthcare provider to closely monitor and manage their blood pressure, especially during pregnancy, to reduce the serious health risks to both themselves and their unborn child,” said researcher Cande V. Ananth, PhD. 

Monitoring potential health risks

The researchers utilized data from the Centers for Disease Control and Prevention’s National Hospital Discharge Survey (NHDS) to determine blood pressure trends among pregnant women between 1970 and 2010. 

In that time, over 151 million were hospitalized due to changes in blood pressure, all of whom were between the ages of 15 and 49. For the purpose of the study, the researchers were focused on women who either had high blood pressure before getting pregnant or were diagnosed with the condition up to 20 weeks into pregnancy. 

The researchers discovered that while just over 0.10 percent of pregnant women had chronic high blood pressure at the start of the study in 1970, that figure jumped exponentially by 2010, with over 1.5 percent of pregnant women experiencing chronic high blood pressure by that date. 

The study revealed that women who waited until later in life to become pregnant were at a greater risk of developing chronic high blood pressure during pregnancy, as were African American women, though the researchers were unsure as to why this particular trend emerged. 

“We found that mothers who were older when they became pregnant were likely to have chronic hypertension,” said Dr. Ananth. “Since more women are electing to postpone their first pregnancies, and advanced maternal age is strongly associated with chronic high blood pressure, women should be aware of the risks associated with having high blood pressure during pregnancy.” 

Millennials are normally the ones stressing out over their lack of retirement savings, but a new survey suggests baby boomers may have an even bigger reason to worry.

The 2018 Retirement Confidence Survey by Greenwald & Associates found that only six in ten American workers feel confident in their ability to live comfortably in retirement. Baby boomers, it seems, are feeling a lot of pressure.

A new independent survey by Clever.com found that most baby boomers think they’ll be able to retire by age 68, but they may not fully understand their financial needs. Personal finance experts generally suggest socking away about eight times your annual salary by age 60. Based on an annual income of $57,000 a year that would be about $456,000.

But when asked to reveal how much they had actually saved for retirement the average was around $136,779, well short of the recommended amount.

Other financial problems

Unfortunately, the survey found that boomers face other financial problems as well. A large portion of those responding to the survey admitted they are having trouble creating an emergency savings account and even paying off debt, making it even harder to save for retirement.

This isn’t the first survey to raise an alarm over the lack of retirement savings for a generation now entering retirement age. A 2015 report from the General Accountability Office showed a disturbing number of Americans were approaching their retirement years with no savings and few, if any, assets.

The report, requested by Sen. Bernie Sanders (I-VT), found that 52 percent of U.S. households age 55 and older have no retirement savings, such as in a 401(k) plan or an IRA. Worse still, the agency found many older households without retirement savings have few other resources, such as a defined benefit pension, non-retirement savings or other assets.

Too reliant on Social Security

A 2017 study by Bankers Life Center for a Secure Retirement (CSR) found boomers were overly reliant on Social Security to get them through retirement. Thirty-eight percent said their monthly check from the government would likely be their primary source of retirement income.

That's up more than 25 percent from before the financial crisis of 2008, a year which seems to have changed the financial landscape on a number of fronts.

Before 2008, Boomers were younger and a lot more optimistic about retirement. Then, about 43 percent said they expected personal savings or earnings from a job to be their primary source of income during their golden years.

The Clever.com survey paints an increasingly bleak picture for aging boomers, showing that 31 percent have no emergency savings and 40 percent are still paying off credit card debt.

Researchers from Harvard University conducted a study that tested different learning styles on college students to determine what produced the best learning outcomes. 

While the students believed that a traditional lecture style was the best for them to perform optimally on future exams, the study revealed that adopting a more active learning approach in the classroom was better for their test scores. 

“Often, students seemed genuinely to prefer smooth-as-silk traditional lectures,” said researcher Louis Deslauriers. “We wanted to take them at their word. Perhaps they actually felt like they learned more from lectures than they did from active learning.” 

“The effort involved in active learning can be misinterpreted as a poor sign of learning,” he added. “On the other hand, a superstar lecturer can explain things in such a way as to make students feel like they are learning more than they actually are.” 

Discovering successful learning methods

To determine which style of learning led to better learning outcomes among college students, the researchers experimented with introductory physics students. Participants experienced the first 11 weeks of the semester in a traditional lecture style format before seeing a change in the final four weeks.

At the 11-week mark, the researchers split the class up, having half of the students remain in the lecture room while the other half of the students were exposed to active learning. After two weeks of this set-up, the students switched so that all students were engaging with active learning for two of the last four weeks of the semester. 

Students were tested on what they learned in the class so the researchers could measure which teaching style was better for students’ retention. They were also surveyed on their attitudes around the different learning styles. 

Though students felt they were taking more away from the lecture-style classes, the tests revealed that when they switched to active learning, test scores were higher. The researchers explained that the students weren’t opposed to active learning, and more educators should feel encouraged to switch things up in the classroom, as doing so could help boost students’ learning outcomes. 

“When I first switched to teaching using active learning, some students resisted that change,” said Christopher Stubbs, Dean of Science at Harvard. “This research confirms that faculty should persist and encourage active learning. Active engagement in every classroom, led by our incredible science faculty, should be the hallmark of residential undergraduate education at Harvard.” 

It’s still a pretty good time to be looking for a job, according to the latest employment data from government and private sources.

The Labor Department reports nonfarm payrolls increased by 130,000 in August, fewer than the month before. However, ADP reported that private payrolls increased by 195,000 during the month, suggesting that employers are still trying to find workers, especially in the private sector.

Jobs appear to be most plentiful in the health care industry, which added 24,000 jobs in August and has added 392,000 new positions in the last 12 months.

Not expecting a recession

Federal Reserve Board Chairman Jerome Powell says the pace of hiring bodes well for the economy in the months ahead and may put an end -- at least for a while -- to worries about a recession.

“We’re not expecting or forecasting a recession,” Powell said at a news conference in Switzerland on Friday. “Incoming data for the United States suggest the most likely outlook for the United States economy is still moderate growth, a strong labor market, and inflation continuing to move back up.”

But Holden Lewis, the home expert at NerdWallet, says the pace of hiring may not be strong enough to boost home sales.

“Mortgage rates are at three-year lows, but rock-bottom rates aren't enough to support home sales,” Lewis said in an email to ConsumerAffairs. “People need to feel secure about their jobs, too — and with the pace of hiring slowing down, there's a risk that job insecurity will sneak in.”

Three areas where hiring is strong

Economists at The Conference Board agree that the pace of hiring is beginning to slow down. They note that the strongest growth in jobs is coming in just three areas -- health care, professional and business services, and government.

The organization also notes that labor force participation -- the number of people in the workforce -- continued to improve in August, with the rate rising by 0.2 percentage points to 63.2. The unemployment rate remains near a record low of 3.7 percent.

If the labor market continues to tighten in 2020, that could mean employers will have to offer workers higher wages to hire and retain them. While that could squeeze corporate profits, it could be very good news for consumers.

The consensus among economists seems to suggest the most recent jobs data will not alter a likely Federal Reserve interest rate cut later this month, which again will benefit consumers by lowering the interest paid on credit card balances.

The Beaufort Bonnet Company of Lexington, Ky., is recalling about 4,500 handmade knit dolls.

A sewing needle was discovered in the stuffing of one of the dolls, posing a puncture injury hazard.

The firm has received one report of a sewing needle found in the stuffing of a doll. No injuries have been reported.

This recall includes stuffed knit doll toys styled and named according to animal themes.

Knit dolls sold under the following style names have been recalled:

The dolls, manufactured in Peru, were sold at specialty stores nationwide and online at www.thebeaufortbonnetcompany.com from September 2016, through August 2019, for about $40 to $65.

What to do

Consumers should immediately stop using the knit dolls and contact The Beaufort Bonnet Company to receive a full refund in the form of a gift card.

Consumers may contact The Beaufort Bonnet Company toll-free at (833) 964-1456 between 8:30 a.m. and 5 p.m. (ET) Monday through Friday; by email at info@beaufortbonnetco.com; or online at www.thebeaufortbonnetcompany.com and click on “Voluntary Product Safety Recall” at the bottom of the page for more information.

Volkswagen Group of America is recalling six model year 2019 Atlas vehicles.

The suction jet in the fuel tank may have been welded in the incorrect position allowing fuel to leak. Additionally, the vehicle may stall due to uneven fuel distribution.

A fuel leak in the presence of an ignition source increases the risk of a fire. An engine stall can increase the risk of a crash.

What to do

Volkswagen will notify owners, and dealers will replace the fuel tank free of charge.

The recall is expected to begin October 11, 2019.

Owners may contact Volkswagen customer service at (800) 893-5298. Volkswagen's number for this recall is 20BU.

American Beef Packers of Chino, Calif., is recalling approximately 24,428 pounds of raw beef

The products are deemed unfit for human consumption.

FSIS inspection personnel retained the carcass and collected a sample for further analysis. Prior to test results being received, the carcass was erroneously released and further processed into raw intact and non-intact beef products, which were distributed in commerce.

There are no confirmed reports of adverse reactions due to consumption of these products.

The following items, produced and packaged on August 21, 2019, are being recalled:

• Bulk pack combo bins containing “AMERICAN BEEF PACKERS 85 BONELESS BEEF CHUCKS” with LOT NO.110 and BIN No. 85 and BIN No. 86.
• Bulk pack combo bins containing “AMERICAN BEEF PACKERS 90 BONELESS BEEF” with LOT NO. 110 and BIN No. 81, BIN No. 82 and BIN No. 83.
• Bulk pack combo bins containing “AMERICAN BEEF PACKERS 85 BONELESS BEEF” with LOT NO. 25-110 and BIN No. 84 and LOT NO 110 and BIN No. 88.
• Cases containing “AMERICAN BEEF PACKERS RIBEYE 8/10 #1” with codes BT190821-1178, BT190821-1185, BT190821-1188, BT190821-1190, and BT190821-1194.
• 66.2-lb. case containing “AMERICAN BEEF PACKERS RIBEYE 10 UP #1” with code BT190821-1186.
• Bulk pack combo bin containing “AMERICAN BEEF PACKERS 90 BONELESS BEEF SIRLOINS” with LOT NO. 24-110 and BIN No. 80.
• Cases containing “AMERICAN BEEF PACKERS TERDERLOIN 4 UP” with codes BT190821-1160, BT190821-1161, BT190821-1162, BT190821-1163, BT190821-1167, BT190821-1168, BT190821-1169, and BT190821-1170.
• Cases containing “AMERICAN BEEF PACKERS RIBEYE 10 UP” with codes BT190821-1187 and BT190821-1192.
• Cases containing “AMERICAN BEEF PACKERS TENDERLOIN 3/4” with codes BT190821-1155, BT190821-1157, BT190821-1171, BT190821-1200, BT190821-1201, BT190821-1202, BT190821-1203, BT190821-1204, and BT190821-1205.
• 50-lb. cases containing “AMERICAN BEEF PACKERS DESC: BEEF FOR FURTHER PROCESSING 75/25” with lot code 08347412719.

The recalled products, bearing establishment number “EST. 34741” inside the USDA mark of inspection, were shipped to federal establishments in California and Oregon.

What to do

Customers who purchased the recalled products should not consume them, but discard or return them to the place of purchase.

Consumers with questions about the recall may contact Kari Godbey Houchens at (909) 628-4888 ext. 123.

Ford Motor Company is recalling 2,624 model year 2019 Ford Fiestas, only 50 of which have been delivered to customers.

The brake calipers could develop a leak after being exposed to incorrectly labeled assembly fluid in production.

A leaking brake caliper could eventually result in reduced braking function or drag, which could lead to the overheating of the brake pads, increasing the risk of a crash.

What to do

Ford will notify owners, and dealers will flush the brake fluid and replace the front brake calipers and brake lines free of charge.

Owners may contact Ford customer service at (866) 436-7332.

Ford's reference number for this recall is 19S27.

In the wake of a string of deadly shootings, Walgreens and CVS are following the lead of other major retailers in the U.S. by asking shoppers not to openly carry guns in their stores.

CVS said Thursday on its corporate Twitter account that it’s joining “a growing chorus of businesses in requesting that our customers, other than authorized law enforcement personnel, do not bring firearms into our stores.”

Walgreens echoed the request of its competitor in a statement of its own, asking that customers “no longer openly carry firearms into our stores other than authorized law enforcement officials.”

The policy change at both of the drugstore chains applies even in states where “open carry” is allowed.

Earlier this week, Walmart CEO Doug McMillion sent out a memo informing employees that the chain would be limiting gun and ammunition sales and ending sales of handguns altogether. The decision was spurred by “two horrific events in one week,” he said, referring to a mass shooting inside a Walmart store in El Paso, Texas and an incident at another location in Southaven, Mississippi.

Changing policies at grocery stores

Wegmans and Kroger also said this week that they will no longer allow customers to openly carry firearms at their stores. 

"Kroger is respectfully asking that customers no longer openly carry firearms into our stores, other than authorized law enforcement officers," Jessica Adelman, group vice president of corporate affairs, said in a statement.

Wegmans added that its policy change is also intended to help shoppers and employees feel more comfortable. 

"The sight of someone with a gun can be alarming, and we don't want anyone to feel that way at Wegmans," the company said Thursday. 

In total, five major retailers -- Walmart, Kroger, CVS, Walgreens, and Wegmans -- announced this week that they would be changing their policies on guns in response to shootings that have occurred in the U.S. in recent months. 

In announcing its decision to move away from gun sales, Walmart also urged Congress to develop “common sense” gun safety measures. 

"We encourage our nation's leaders to move forward and strengthen background checks and to remove weapons from those who have been determined to pose an imminent danger," McMillon said. "Congress and the administration should act. Given our decades of experience selling firearms, we are also offering to serve as a resource in the national debate on responsible gun sales."

Android users are being warned about the discovery of two dozen malicious apps with spyware capabilities on Google’s official app marketplace. 

Aleksejs Kuprins, a security researcher at cybersecurity threat intelligence specialists CSIS Security Group, said “Joker” spyware -- which derives its name from one of the command-and-control servers found by CSIS researchers -- has been detected in 24 apps that have collectively been installed over 472,000 times. 

After infecting a device, Joker could steal SMS messages, contact information, and other sensitive data. The spyware also signed users up for premium subscriptions without their consent. 

‘Stealthy tactics’

Joker "delivers a second-stage component, which silently simulates the interaction with advertisement websites, steals the victim’s SMS messages, the contact list and device info," Kuprins explained.

"The described trojan employs notably stealthy tactics to perform quite malicious activities on Google Play, while hiding within the advertisement frameworks and not exposing too much of its malicious code out in the open," he said.

Kuprins said the malware “stands out as a small and a silent one” because of the fact that it uses “as little Java code as possible and thus generates as little footprint as possible.”

Google said it pulled all 24 of the apps containing spyware from its Play Store after being notified of their presence by Kuprins and his team. Although the problematic apps have been removed, Kuprins still urges those who download apps from the Google Play store to be wary of the permissions requested by any app.

“We recommend paying close attention to the permission list in the apps that you install on your Android device,” he said. “Obviously, there usually isn’t a clear description of why a certain app needs a particular permission, which means that whenever you are downloading any app — you are still relying on your gut feeling to some extent.”

New York City is suing T-Mobile, accusing the wireless carrier of violating consumer protection laws a total of 2,200 times in various parts of the city, Reuters reports.

In its complaint, New York City's Department of Consumer and Worker Protection (DCWP) claims that T-Mobile engaged in “pervasive” illegal sales tactics at 56 of its Metro by T-Mobile stores. 

The city says it has evidence that the carrier sold used or reconditioned phones as new and tacked on taxes that were excessive or appeared to be “made up.” The complaint also accuses T-Mobile of getting customers to e-sign leasing contracts without informing them of the charges or requesting their consent. 

In one case, a customer thought she had purchased a phone advertised at $599 but later learned that she had unwittingly signed up for a 12-month lease costing $2,191.30. 

“With this scheme in place, Defendants have deceived NYC consumers about things as basic as the actual price of the phone to things as complicated as the terms of financing,” the complaint states.

In a statement, T-Mobile said it’s looking into the allegations as they appear to be “at odds with the integrity of our team.” 

Separately, New York is fighting to prevent T-Mobile’s $26.5 billion merger with Sprint. The state’s attorney general, Letitia James, is leading a group of states in suing to block the deal, which she argues is “bad for consumers, bad for workers, and bad for innovation.”

You know all those hacker ransomware stories ConsumerAffairs writes about? Well, the City of New Bedford, Massachusetts (95,072 population) decided to stand up to a group of hackers and refused to pay the $5.3 million worth of Bitcoin they wanted to unlock the data. 

The result? The ransom-holders threw in the towel and left with not even a single red cent.

The backstory of the attack begins on July 5 in the dead of night. When 158 city workers -- about 4 percent of the local government’s workforce -- got to their desks, they were greeted with computers infected by Ryuk ransomware. 

Fortunately, the City’s management Information Systems (MIS) staff' jumped in quickly and was adroit enough to keep the ransomware from branching out to other workstations. 

Et tu, Ryuk

The death knell potential of Ryuk is pretty potent. Ransomware recovery company Coveware says it has a “low data recovery-success rate” and is challenging to remove.

“Ryuk ransomware payments are typically much higher than the ransomware marketplace average,” said Coveware’s team. “This is due to highly-targeted nature of the attacks. Ryuk  affects mid-large sized organizations that have higher ability to pay relative to small businesses and individuals.”

In this case, the city weighed out the potential value of the loss and offered only $400,000, which New Bedford’s mayor said was in line with payments other municipalities have paid in similar situations.

The hackers turned down the offer and, after supposedly doing their homework on what it would take to reclaim the data by itself, city officials decided it would buckle up and take that route.

“Administrators of this sort of malware are making big money and have partnered up with other cybercriminals for distribution to victims,” wrote information security observer, Ionut Ilascu. “One of the most recent ransomware families is Sodinokibi. Although its activity started in April, the average payment for decrypting a network of computers is $150k. Its handlers have already found affiliates to spread it and take a portion of the ransom.”

Improving security 

In the end, New Bedford was able to rebuild its system and implement additional security enhancements. The total cost of that endeavor was considerably less than the millions the bandits wanted, a cost the city’s mayor expects its million-dollar AIG policy will cover.

It’s possible that the cyber-thieves who tried to pull off this job learned something too. Emnisoft’s Brett Callow told SouthCoastToday that he’d rather see cities like New Bedford pay for necessary security enhancements instead of making ransom payments.

“Paying a ransom simply perpetuates the cycle of cybercrime,” he said.