Consumer News: It’s likely to cost more to stay cool this summer

Cybercriminals are using fake Microsoft login requests to bypass multi-factor security

By Mark Huffman of ConsumerAffairs

• The FBI warned on May 21 that cybercriminals are increasingly targeting Microsoft 365 users with sophisticated phishing .

• The scam uses a tool called Kali365 to steal account access tokens and bypass multi-factor authentication protections.

• Officials say the attacks rely on fake Microsoft login requests and social engineering tactics designed to trick users into handing over access.

The FBI is warning Microsoft users to be on alert after identifying a fast-growing phishing campaign that allows scammers to bypass common account security protections and gain access to sensitive information.

In a public service alert, the FBI said cybercriminals are using a phishing-as-a-service platform called Kali365 to target Microsoft 365 accounts. The tool enables attackers to steal OAuth access tokens, giving them persistent access to accounts without needing passwords or repeatedly triggering multi-factor authentication (MFA).

According to the FBI, the service first appeared in April and is being distributed through Telegram channels. The agency said the platform lowers the barrier for cybercrime by offering automated phishing templates, AI-generated scam emails, and dashboards that track victims in real time.

It starts with an email

The typically begin with an email that appears to come from a trusted cloud service or document-sharing platform. Victims are instructed to visit a legitimate Microsoft verification page and enter a device code supplied in the email. Once the code is entered, attackers can capture authentication tokens and gain access to services such as Outlook, Teams, and OneDrive.

Because the attacks exploit Microsofts legitimate authentication workflow, they can be difficult for users and security systems to detect. Cybersecurity experts say the method is especially dangerous because it bypasses MFA protections that many users rely on to secure their accounts.

The potential damage

The FBI warned that compromised accounts can expose sensitive business information, personal data, and financial records. Attackers may also use stolen access to launch additional phishing attacks from legitimate accounts, making future appear more credible.

Microsoft recently reported a separate sophisticated phishing campaign that targeted more than 35,000 users across 13,000 organizations in 26 countries, with most victims located in the United States. Researchers said attackers used polished corporate-style emails and fake internal communications to trick recipients into surrendering credentials and authentication tokens.

Federal authorities are urging users to avoid clicking links in unsolicited emails, verify login requests independently, and never enter device codes unless they initiated the request themselves. The FBI also recommends enabling phishing-resistant MFA methods, monitoring account activity, and reporting suspicious messages to the FBIs Internet Crime Complaint Center.

The warning reflects a broader trend toward increasingly sophisticated phishing operations that rely more on social engineering than traditional malware. Security researchers say these are becoming more convincing through the use of AI-generated messages, professional-looking templates, and legitimate cloud infrastructure.

SKS Copack reports that a supplier warned of a tainted ingredient

By Mark Huffman of ConsumerAffairs

• SKS Copack has recalled dozens of specialty beverage powders because they may be contaminated with Salmonella.

• The affected products were sold under brands including Angel Specialty Products, Royal Gold, Boba Time, Fanale, and Denda in 25 states.

• Consumers are urged not to consume the recalled products and may return them for a full refund.

SKS Copack, a California-based beverage manufacturer, is recalling a wide range of specialty beverage powders after a supplier warned that an ingredient may be contaminated with Salmonella, according to the Food and Drug Administration (FDA).

The Cerritos, Calif., company said the recall affects powdered beverage mixes sold under several brands, including Angel Specialty Products, Royal Gold, Boba Time, Fanale, and Denda. The products were distributed through cafes, restaurants, and direct online sales in 25 states, including California, Texas, Florida, Illinois, New York, and Virginia.

The recall was initiated after SKS Copack received notice from supplier California Dairies Inc. that a lot of low-heat nonfat dry milk powder tested positive for Salmonella during routine testing.

No illnesses had been reported as of the FDA announcement.

Salmonella can cause serious and sometimes fatal infections, particularly in young children, older adults, and people with weakened immune systems. Symptoms can include fever, diarrhea, nausea, vomiting, and abdominal pain. In rare cases, the infection can spread into the bloodstream and cause more severe complications.

What to do

Among the recalled products are matcha green tea powder, taro drink mix, horchata mix, milk tea powder, vanilla smoothie base, cappuccino mixes, yogurt powder, and ice cream mix. Affected lot codes and best-by dates are listed on the FDA recall notice.

Consumers are advised to stop using the recalled products immediately and return them to the place of purchase for a refund. SKS Copack said it has halted distribution of the affected products and is cooperating with the FDA during the investigation.

Consumers with questions can contact SKS Copack at (562) 404-8158 weekdays between 8 a.m. and 4 p.m. Pacific time.

Consumers worry about the rising cost of living

By Mark Huffman of ConsumerAffairs

• The University of Michigans consumer sentiment index fell to 44.8 in May, the lowest reading since the survey began in 1952.

• Rising gasoline prices and fears of persistent inflation were major drivers behind the sharp decline in confidence.

• Lower-income Americans and consumers without college degrees reported the steepest deterioration in sentiment.

Americans are feeling more pessimistic about the economy than at any point in more than seven decades, according to the University of Michigans latest Survey of Consumers.

The universitys closely watched Index of Consumer Sentiment dropped to 44.8 in May, down from 49.8 in April and below the preliminary May reading of 48.2. The latest figure marks the lowest level recorded since the survey began in 1952.

The survey found that concerns about the rising cost of living continue to dominate consumers outlook. According to the report, 57% of respondents spontaneously mentioned that high prices were hurting their personal finances, up from 50% a month earlier.

The cost of living continues to be a first-order concern, with 57% of consumers spontaneously mentioning that high prices were eroding their personal finances, up from 50% last month, said survey director Joanne Hsu in commentary accompanying the report.

Lower-income consumers and those without college degrees posted particularly strong sentiment declines; these groups are more sensitive to increases in the cost of gas and other essentials.

Pain at the pump

Higher gasoline prices appeared to be a key factor behind the worsening mood. The survey noted that many consumers cited rising fuel costs and fears that inflation could spread beyond energy prices into other parts of the economy.

The report also showed growing anxiety about inflation expectations. Consumers now expect inflation to run at 4.8% over the next year, up slightly from 4.7% in April. Long-run inflation expectations climbed to 3.9%, well above the range seen throughout 2024.

Lower-income households and consumers without college degrees experienced some of the sharpest declines in confidence, reflecting the disproportionate impact of rising costs for essentials such as gasoline and groceries.

Political and demographic differences

The survey also revealed widening political and demographic differences. Sentiment among independents and Republicans fell to the lowest levels of the current administration, while Democratic sentiment was largely unchanged from April.

Economists say the record-low reading highlights the growing disconnect between how consumers feel and how the economy is performing. While sentiment has deteriorated sharply, consumer spending and employment data have remained relatively resilient in recent months.

Heres the concern: Analysts warn that if consumers eventually pull back on spending, the overall economy could weaken. Consumer spending accounts for roughly two-thirds of U.S. economic activity.

From fake visas to bogus crypto coins, scammers are using AI and official-looking branding to target excited soccer fans

• Cybersecurity researchers warn that World Cup 2026 scammers are using AI-generated images, fake websites, and official-looking branding to make harder to detect than ever before.

• Fans are being targeted through fake World Cup visas, bogus LEGO and Panini collectible stores, and fraudulent crypto coins designed to steal money, personal data, and digital wallet access.

• Experts say consumers should avoid clicking links from ads or social media, double-check website URLs, and be wary of high-pressure sales tactics, countdown timers, and deals that seem too good to be true.

As excitement builds for the 2026 FIFA World Cup, cybersecurity experts are warning that scammers are already gearing up.

While fake ticket sales have long been a concern surrounding major sporting events, researchers at Malwarebytes say criminals are now using far more sophisticated tactics to target fans money, personal information, and even cryptocurrency wallets.

ConsumerAffairs spoke with Shahak Shalev, Global Head of Scam and AI Research at Malwarebytes, who explained that scammers are creating convincing fake websites, AI-generated images, and official-looking branding tied to the World Cup to trick consumers into letting their guard down.

The range from bogus travel visas and fake collectible stores to fraudulent crypto tokens and unregulated betting platforms all designed to capitalize on the hype surrounding one of the worlds biggest sporting events.

The are getting harder to spot

Shalev explained that the most current World Cup arent as easy for consumers to spot.

Previously, consumers would see more obvious red flags like typos, awkward phrasing or pixelated imagery, he said. AI has helped scammers step up their game.

Today, AI-generated images, text, and cloned websites are making , including these new examples from the World Cup, significantly harder to spot. Year-round, cybercriminals are leveraging AI tools to generate deepfakes, storefronts and advertisements that mimic legitimate companies flawlessly. Scammers leverage cultural moments and seasons to target consumers in new ways.

Some other signs to look out for:

• High-pressure tactics

• Fake inventory counters

• Unrealistic deals

• Malicious ads

• Complex site redirects that send users to a different domain than the one they clicked

Integrating with popular brands, big events

These can take many forms, and scammers have gotten creative at incorporating popular brands and working around major events, like the World Cup, to start their schemes.

Shalev broke down three of the most popular geared towards the World Cup right now the fake World Cup Visa scam, LEGO and Panini , and World Cup crypto .

World Cup Visa Scam

Heres how it works:

• Sites like "WC2026 Visa" are charging a fake $270 fee under the guise of an expedited tournament entry document.

• The reality is that there is no special tournament visa.

• The US government has confirmed that visitors must use standard B1/B2 visas or the Visa Waiver Program with an ESTA authorization.

Beyond the $270 financial loss, the long-term risks are serious, Shalev said. By filling out these forms, fans hand over personal data like their full name, passport numbers, date of birth, travel logistics, and payment information. This gives cybercriminals the information to use for their own gain or package and sell for additional identity fraud activities.

LEGO and Panini

LEGO announced a partnership with FIFA in late 2025, so that part of the scam is legitimate and what can confuse unassuming consumers.

However, where things get dicey is that scammers take advantage of consumers looking for collectible jerseys, trophies, and other World Cup memorabilia. Scammers exploit this by spinning up targeted storefronts that pretend to sell these niche products.

These sites often use quiz-funnel to secure contact info or hide subscription billing flows disguised as shipping fees. Fans click on sponsored ads or social links looking for a hard-to-find item, only to have their credit card harvested by a site that will vanish shortly after the tournament ends.

Similarly, Panini is the international distributor for stickers, trading cards, and other sports memorabilia. Scammers create websites that are lookalike versions of the legitimate Panini site, often with countdowns to inventory running out and other urgency tactics. If consumers order items from these sites, not only is there risk that they may never come, but their information is also stored for future .

Crypto

While FIFA has a real digital ecosystem (FIFA Collect, Right-to-Buy NFTs), it is strictly documented on FIFA-controlled domains, not third-party community token sites, Shalev said.

The first red flag is the claim itself. If a token claims to be an official community coin or product of FIFA, stop right there. Once a fan engages, they either receive nothing, receive something they cant sell, or sign a transaction that gives the operator access to their entire digital wallet.

Protect your identity and your money

Shalev shared his top tips to help consumers protect their identities and their money during the height of these World Cup :

• Go direct, and check URLs: Never click a link from an ad, text, or email. Look closely at the website address. Type FIFA.com or LEGO.com directly into your browser and avoid URLs like "official-worldcup-tickets.com.

• Ignore the clock: If a site has a countdown timer or says "only 100 left" to pressure you into buying, its likely a scam.

• Watch out for Facebook groups: Facebook groups have been a hotbed for scammers. There is no reason to buy from Facebook groups, as they are very hard to authenticate.

• Use a guard: Use free tools like Malwarebytes Scam Guard or Browser Guard to help you verify sites and offers in real time.

• If youve been scammed: If you realize youve been compromised, do not wait. If you shared financial details, alert your bank immediately. If you shared personal data, drop an immediate credit/fraud alert on your profile and report the incident straight to the authorities.