Introduction

In Early November, Apple released ‘NameDrop’ as part of the iOS 17.1 operating system update. NameDrop allows users to share saved contacts between other newer iPhones or Apple Watches within an inch of each other. While the prompt must be accepted to share contact information, several law enforcement agencies recommend parents to change this feature for children.  

Summary Of the Incident

The ‘NameDrop’ feature is similar to Apple’s AirDrop functionality. When NameDrop is enabled, two iPhone users can activate the feature by holding the top ends of their iPhones together. After that, the users can tap ‘Share’ or ‘Receive Only’. The NameDrop feature is automatically enabled once a user updates to iOS 17.1.  

While the feature itself is not a threat, law enforcement agencies are concerned that the feature puts children at a bigger risk with connecting to strangers. Children may not be completely aware when accepting a new ‘Share’ or ‘Receive Only’ prompt. Police recommend turning the feature off for children once they upgrade to iOS 17.1.  

Recommendations

  1. Turn the ‘NameDrop’ Feature Off for Children – It is good practice to upgrade your iPhone devices to the latest operating system update. The latest operating system update will include ‘NameDrop’ and automatically enable the feature. To turn off the NameDrop feature, complete the following:
    Navigate to iPhone Settings > General > Airdrop > Bringing Devices Together > Off.

How Richter Guardian can help you

Richter Guardian can help you determine what settings and policies you should set on your children’s device to keep them safe.  

  • Richter Guardian’s mobile and endpoint platform can help your children navigate the Internet safely.  
  • Call us or send us an email at: +1 844-908-3950 or support@richterguardian.com if you are unsure about a situation and need assistance with disabling certain features on your devices.  
Security advisories
Subscribe to newsletter

Subscribe to receive our latest news and insights in your inbox each week.

By subscribing you agree to with our Privacy Policy.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Protect your digital life by detecting risks before they escalate

Richter Guardian gives you enterprise-level cybersecurity tailored for individuals, families, and executives.

24/7 monitoring & threat intelligence
Identity theft & impersonation detection
Fast incident recovery & expert guidance
Have questions after reading?
Blog

Related posts

Person reading in a chair

Protecting What You Can't Replace: A Data Backup Guide

Important family, financial, and legal information is increasingly stored across devices and online accounts, making a reliable backup plan an important part of protecting it. For many families, important files now exist across different devices and services, so it helps to know where those files are stored, how they can be recovered, and what their risks are.

Introduction

Important family, financial, and legal information is increasingly stored across devices and online accounts, making a reliable backup plan an important part of protecting it. For many families, important files now exist across different devices and services, so it helps to know where those files are stored, how they can be recovered, and what their risks are.  

For high-net-worth individuals, families, and executives, backups are especially important because the information they rely on is often highly valuable, private, and difficult to replace. A lost device, ransomware attack, cloud account issue, or hardware failure can quickly disrupt personal, financial, or business matters. Having a reliable backup plan helps ensure important files remain accessible, protected, and recoverable when something goes wrong.  

Common risks to your data

Data can be lost in several ways, including lost or stolen devices, ransomware, or everyday backup failures such as cloud service outages, file corruption, or hardware failure.

Lost/Stolen Devices

If a device is lost, stolen, or destroyed, any files stored only on that device may be permanently lost. The best protection is to keep a backup in another place, such as a cloud account or an external hard drive.

Ransomware

Ransomware is another serious risk. This type of attack locks your files and demands payment to restore access. An offline backup, such as an external hard drive, protects your files since attackers cannot access it.

Everyday Backup Failures

Backups can also fail for everyday reasons. Automatic backup settings may be turned off, an important folder missed, files become corrupted, or a cloud service may be temporarily unavailable. A helpful rule of thumb is to keep three copies of important data: one on your device, one in the cloud, and one on an external hard drive.

Cloud backup as a first layer of protection

Cloud storage saves your data online through a service such as Google Drive, Apple iCloud, or Microsoft OneDrive. You can access files from any device with an internet connection, and many cloud services can back up your files automatically.  

Cloud services you may already use

Apple iCloud

  • Included on all Apple products (iPhone, iPad, Mac)
  • Can be set to automatically back up photos, videos, contacts, documents and text messages

Google Drive

  • Built into many Android devices and Chromebooks through a Google account  
  • Windows and Mac users need to install Google Drive for desktop and choose which folders to sync

Microsoft OneDrive

  • Built into Windows 10/11 and included with Microsoft 365 subscriptions
  • Can be set to automatically back up your Desktop, Documents, and Pictures folders

Using cloud backup securely

  • Start by confirming that cloud backup is turned on for each device and the right files and folders are included.
  • Check that recent files are being backed up and that you have enough storage for the information you want to protect.

Since cloud backups can sync unwanted changes, including ransomware-encrypted files, cloud backup should be paired with an offline backup that is disconnected when not in use.

Using a hard drive as an offline backup

An external hard drive provides an extra layer of protection if something goes wrong with your device or cloud account.

To use an external hard drive, connect it to your computer, copy your important files, and disconnect it once the backup is complete.

For added safety, store the drive in a secure location away from your main devices. A safety deposit box or personal safe is the most secure option.

A good place to start

  1. Identify the files that would be hardest to replace, such as legal documents, financial records, tax documents, insurance information, and family photos.
  1. Confirm cloud backup is turned on and includes those files.
  1. Protect cloud accounts with strong passwords and multi-factor authentication.
  1. Copy important files to an external hard drive and disconnect when finished.
  1. Store the hard drive somewhere safe, and separately from your main devices.
  1. Test your backups periodically to make sure the files can be recovered.

How Richter Guardian can help you

If you’re a client and have questions about securing your backup accounts, multi-factor authentication, protecting your devices from ransomware, or improving your overall device backup strategy, please contact our team.

Email support@richterguardian.com, call +1 844-908-3950, or book an appointment.

Not yet a client but interested in Richter Guardian?

Request a private consultation to find out whether Richter Guardian is a good fit for you.

Article image: Understanding what Mythos AI means for your digital security

Understanding Mythos AI: What It Means for Your Digital Security

For high-net-worth individuals, families, and executives managing significant assets, Mythos AI increases the risk of targeted fraud, account takeovers, and financial loss, making strong cybersecurity practices more important than ever.

Introduction

Anthropic's Claude Mythos is an advanced AI model currently available only to a select group of vetted technology companies, not the general public. While it holds significant promise as a defensive tool, capable of uncovering security flaws before criminals can exploit them, the same capabilities could be misused to lower the effort needed to exploit weaknesses in email, banking, and personal accounts.  

For high-net-worth individuals, families, and executives managing significant assets, this increases the risk of targeted fraud, account takeovers, and financial loss, making strong cybersecurity practices more important than ever.

What's Mythos AI?

Claude Mythos is an advanced artificial intelligence model developed by Anthropic, the company behind the widely used Claude AI assistant. It can be thought of as a much more powerful version of AI tools that many people already use for daily tasks. Mythos goes far beyond earlier models, especially in areas such as complex reasoning, software analysis, and, most importantly, the ability to identify weaknesses in computer systems.

At this time, Mythos is not available to the general public. It is still going through testing and review and has only been released in a highly controlled way to a small number of trusted organizations. These include major technology and security companies such as Microsoft, Apple, Amazon, Cisco, and CrowdStrike. This limited release is intentional. Anthropic has stated that Mythos is powerful enough to cause serious harm if misused, so they have chosen to share it cautiously and with careful oversight.

Why's everyone talking about it?

There are two main reasons Mythos is receiving so much attention. The first is concern within the cybersecurity community. Mythos represents a major step forward in what AI can do when applied to computer systems. Security professionals worry that existing defense tools and practices have not yet caught up. There is also concern that criminals could use tools like Mythos to make cybercrime faster, cheaper, and easier to carry out.

The second reason is business momentum. Every major AI announcement attracts investors and increases public interest. This often raises the perceived value of companies such as Anthropic, OpenAI, and Google. As a result, Mythos has become not only a security issue, but also a financial and market-driven story.

It is important to understand that Mythos is not an isolated development. Other companies, including OpenAI and Google, have already released AI models with similar cybersecurity-related capabilities, though generally at a lower level. What makes Mythos different is how quickly and efficiently it operates, as well as Anthropic’s openness in discussing both its potential benefits and its risks.

How does this affect you?

Mythos does not create entirely new types of cyber threats. Instead, it significantly lowers the level of skill, knowledge, and time needed for attackers to exploit existing weaknesses. These weaknesses exist in the everyday technology we all rely on, including phones, laptops, email systems, and banking or investment applications.

Cyberattacks that once required a team of highly skilled hackers may soon be possible for a single individual using AI tools. For individuals and families with significant financial assets, sensitive personal communications, or access to influential networks, this increases risk. The most common and serious threats remain personal email compromise, fraudulent wire transfers, and targeted account takeovers.

How you can keep safe

Regularly review your digital access points

Make sure all important accounts, such as banking, email, and investment platforms, use strong, unique passwords, and enable multi-factor authentication wherever it is available. In addition, use credit monitoring services to help detect fraud, unauthorized accounts, or identity misuse as early as possible.

Be cautious with unexpected messages

AI can now generate very realistic phishing emails, texts, and phone messages. If something seems unusual or urgent, verify it through a separate and trusted method before taking action.

Confirm your advisors are prepared

Organizations that manage your assets should be reviewing and strengthening their cybersecurity controls, including how sensitive data is protected and how fraud risks are managed.

Richter Family Office supports high‑net‑worth families and executives by integrating cybersecurity and risk considerations into wealth management, governance, and operational oversight.

Contact us with any concerns

Richter Guardian is actively monitoring developments related to Mythos AI and other emerging cyber risks. We will continue to share updated guidance as the situation evolves.

Please contact us immediately if you notice unusual account activity, suspicious communications, or unexpected requests involving sensitive or financial information.

Email support@richterguardian.com, phone +1 844-908-3950 or book an appointment.

Article illustration: BMO Scam Highlighting Vulnerabilities in Two-Factor Authentication

BMO Scam Highlighting Vulnerabilities in Two-Factor Authentication

A BMO scam exploited two-factor authentication flaws to target customers. We break down the incident, implications for 2FA trust, and recommendations—including stronger options like hardware keys.

Introduction

A recent article published by CBC news highlighted a concerning scam that involved the Bank of Montreal (BMO). The scam managed to exploit vulnerabilities associated with the two-factor authentication (2FA) system of the bank. This advisory aims to provide an overview of the issue, its implications, and recommendations.

Summary of the Incident

The scam primarily targeted customers with lines of credit. Perpetrators pose as bank employees and use a combination of phishing techniques and flaws in the 2FA process to gain unauthorized access to customers’ accounts, subsequently making unauthorized transactions.

Implications

  1. The trustworthiness of 2FA is at stake. Customers generally perceive 2FA as a robust security measure, but this incident underscores potential vulnerabilities.
  2. The scam demonstrates that even with the second layer of authentication, user accounts can be compromised if the process isn’t foolproof.
  3. Potential loss of customer trust in banking institutions due to such vulnerabilities.

Recommendations

  1. Stay Informed: Regularly update oneself about the latest scams and phishing techniques. Always be skeptical of unsolicited calls or emails asking for personal or banking information.
  2. Use Advanced Security Features: Wherever possible, use advanced security features like biometric authentication or hardware-based security keys.
  3. Monitor Accounts: Regularly check bank accounts for unauthorized transactions and report any discrepancies immediately.
  4. Stay Educated: Participate in security awareness sessions provided by your Richter Guardian team, the bank or other trusted organizations.

How Richter Guardian can help you

While 2FA is an essential security feature, it is not infallible. Richter Guardian clients should be proactive in understanding its limitations and continuously seek ways to enhance their security posture.

  • Call us anytime you are unsure. If you receive a call from someone purporting to be your bank and you are unsure, call us to help you determine the legitimacy of their communication.  
  • Schedule a call with our analyst to review the two-factor authentication security measures that may be available to you through your bank.  

Table 1 – Levels of two-factor authentication that may be available to protect your bank account.  

Type of 2FA Method Description Level of Strength of Security
SMS-Based 2FA Sends a one-time code to the user’s registered mobile number, which they then input to authenticate. Moderate – Vulnerable to SIM swapping attacks and interception.
Push Notification
(e.g., through an app)
Sends a notification to the user’s registered device, prompting them to approve or deny the login request. High – More secure than SMS-based, but can still be vulnerable if the device is compromised.
Token-based Authenticator
(e.g., Google Authenticator, Authy)
Uses a time-based one-time password (TOTP) generated by an app. The user enters the code displayed on the app. High – Not vulnerable to SIM swapping; however, a device compromise could pose risks.
Hardware Tokens
(e.g., YubiKey, RSA SecurID)
Physical device that generates or holds digital authentication data. Some require a button press to display a code, while others transmit the code when plugged into a device. Very High – Not susceptible to most common cyber-attacks. Loss or theft of the device is the primary concern.
Biometric 2FA Uses the user’s unique physical or behavioral characteristics, such as fingerprint, face recognition, or voice pattern. High – Difficult to replicate but isn’t immune to all attacks (e.g., high-quality replicas or recordings). Also, concerns about data privacy persist.
Email-Based 2FA Sends a one-time code or link to the user’s registered email address, which they then use to authenticate. Moderate – Security depends on the strength and security of the user’s email account. Vulnerable to email hacking.