Sunday, 30 November 2025

πŸŽ„The Magic is Back! Track Santa's Sleigh in Welling and Support Greenwich & Bexley Hospice! πŸŽ…πŸ€Ά

Bexley residents, get ready! The most festive sight of the year is returning to Welling, bringing joy, music, and the chance to support a fantastic local cause.

Santa's Sleigh, organized and powered by incredible volunteers (with a helping hand from Greenwich & Bexley Hospice), is back on the streets for its annual rounds, spreading Christmas cheer and collecting donations for the hospice.

When Can You See Santa?

Mark your calendars! Santa and his helpers will be touring the Welling area every evening from December 3rd to December 19th, between 6:00 PM and 8:00 PM.

This is a wonderful opportunity to experience the magic of the season, give a wave to Santa, and drop a donation to support the vital work of Greenwich & Bexley Hospice.


Check Tonight's Route and Track the Sleigh!

Want to make sure you don't miss Santa as he passes your street? You can check the full schedule and route details using the calendar link below:

πŸŽ… View the Full Schedule: rotary-ribi.org/clubs/calendar.php?ClubID=697&DistrictNo=1120

GPS Sleigh Tracker:

You can also track Santa's progress in real-time on any given evening! As featured in this short video:

  • Tonight's Tracking: Text the Google Map code (e.g., G123456#) to the tracker number: (07726) 677863


This tradition is a cornerstone of the Welling community's festive season. Every wave, every smile, and every generous donation helps ensure that Greenwich & Bexley Hospice can continue providing specialist care and support to people facing life-limiting illnesses.

Let's make this year the most successful one yet!

Happy Holidays, Bexley!


Tracking information source: https://youtube.com/shorts/r0VtrP-KTFo





 


Saturday, 29 November 2025

πŸ“’ Toyota & Lexus Theft Warning: How to Defeat Keyless Car Thieves and the CAN Bus Vulnerability

URGENT WARNING: Is Your Toyota C-HR, RAV4, or Lexus NX/RX Truly Safe?

We have seen a distressing surge in the theft of keyless vehicles across the UK, and high-value models from Toyota (especially the C-HR and RAV4) and Lexus (particularly the NX and RX series) have become prime targets.

Thieves are exploiting a critical digital vulnerability using a technique known as the CAN Bus Attack (or CAN Injection). If you own one of these popular keyless vehicles, your factory security is likely inadequate against this sophisticated method. Action is required now to protect your investment.


🚨 The Threat: How The CAN Bus Attack Steals Your Car

Your vehicle’s sophisticated electronics rely on the Controller Area Network (CAN), which is essentially the car's digital nervous system. The theft method works by digitally overriding the factory immobiliser system:

  1. Access Point: Thieves gain quick, often non-destructive, access to the CAN bus wires. On many vulnerable models, this access is achieved through the wheel arch liner or behind the headlight unit in just seconds.

  2. Injection: They connect a small, inexpensive hacking tool directly to the exposed wiring.

  3. Digital Override: The device "injects" fake, highly authentic-looking messages onto the network. These false commands trick the vehicle's computers into thinking the correct, authorised key is present, telling the immobiliser to disarm, and the doors to unlock.

  4. Drive Away: The thief can then start the engine and drive away in under a minute, without ever needing your physical key fob.


πŸ›‘️ Your Three-Step Defence Strategy

Fighting this digital threat requires a multi-layered approach that combines professional digital security with visible physical deterrents.

1. Install a CAN Bus Immobiliser (The Digital Shield)

This is the most effective defence against CAN Injection. A high-security CAN Bus immobiliser, such as the Autowatch Ghost or Scorpion X-Series, integrates silently into your vehicle's electronics.

  • Zero Fobs: It requires you to enter a unique, personalised PIN code sequence using existing buttons in your car (e.g., steering wheel, window, or dashboard switches) before the engine can start.

  • Invisible Security: It is completely invisible to thieves and their diagnostic hacking tools. Even if the thief successfully injects the CAN signal, the engine will not start without your secret, button-press PIN sequence.

2. Employ Visible Physical Deterrents

Physical deterrents are crucial because they add time and risk for the thief, encouraging them to move on to an easier target.

  • Steering Wheel Locks: A substantial, brightly coloured steering wheel lock is a classic and effective visible deterrent. It signals to the thief that your car is not a quick grab.

  • OBD Port Lock/Relocation: Consider securing or moving the OBD (On-Board Diagnostics) port. This port can sometimes be used by thieves to reprogram blank keys or tamper with the security system.

3. Review Parking, Manufacturer Updates, and Key Security

  • Secure Parking: Always park your vehicle in a well-lit area, or, ideally, a locked garage or secure driveway.

  • Physical Protection: Ask your local dealer about manufacturer updates, such as the Vehicle Protection Plate (VPP) or similar physical shields designed to cover vulnerable wiring looms near the headlights.

  • Physical CAN Bus Shields: Investigate specialist security suppliers for physical CAN Bus Anti-Theft Shields—metal plates designed to physically block access to the vulnerable wiring access point.

By combining an invisible, digital PIN-based immobiliser with high-visibility physical security, you can drastically reduce the risk of your Toyota or Lexus becoming the next target.


PSA: NO Toyota is safe...hundreds of NEW Toyotas stolen with this tool provides a visual explanation of how thieves are exploiting this vulnerability to steal various Toyota models and what owners must do: PSA: NO Toyota is safe...hundreds of NEW Toyotas stolen with this tool (πŸ‘ˆyoutube video link). (PSA = Public Service Announcement),

The following installers are highly rated and located in key areas of the borough (Welling, Sidcup):

Certified Immobiliser Installers in/Near Bexley Borough, London

Installer NameLocation in BoroughAddressRatingPhone
Sounds AlarmingWelling146-148 Upper Wickham Ln, Welling DA16 3DX4.7 stars+44 20 8309 8999
Glow CustomzWellingAlleyway, 178 Park View Rd, Welling DA16 1ST5.0 stars+44 7842 508180
AWTuningSidcup180 Halfway St, Sidcup DA15 8DJ4.8 stars+44 20 8300 2450

Important Next Steps

Before booking, make sure to confirm the installer is authorized to fit the specific CAN Bus immobiliser you prefer (e.g., Autowatch Ghost) and ask for proof of Thatcham approval for the product and installation, as this is crucial for the highest level of security and may be required by your insurance company.

Further information:

Local Priorities Theft Of Motor Vehicles Message

*Beware Toyota CH-R* - These vehicles are typically broken into through a CAN Bus attack. To prevent a CAN Bus attack you can get a CAN Bus shield and get a steering wheel lock.

https://www.metengage.co.uk/Alerts/A/357977/Local-Priorities-Theft-Of-Motor-Vehicles-Message (outside area but affects such models if you own them in the borough of Bexley).


https://www.metengage.co.uk/Alerts/A/360727/Local-Priorities-Theft-Of-Motor-Vehicles-Message

Thursday, 27 November 2025

Fake customer service accounts on social media

If you're having problems with an online order, complaining on social media is an effective way to get a company's attention, especially if it's not responding to you on other channels.


However, we found scammers posing as customer service agents for retailers and couriers, attempting to trick customers into sharing their personal data. We expose their tactics and explain how to complain safely on social media.


Source: Which? (25 Nov 2025)

The biggest scams of 2025

Fraud incidents rose sharply from 3.2m (2023-24) to 4.2m (2024-25). It's realistic to expect that you'll encounter a scam at some point, but knowing what you're most likely to face can help you avoid falling victim.

Our scams expert, Tali Ramsey, examines the most widespread scams of 2025, including the rise in AI hoaxes and account hacking, so you can know how to spot these scams and what to watch out for in 2026.


Source: Which? (24 Nov 2025)

'A hacker scammed my friends with fake Oasis tickets'

Jonny, an Instagram user, told Which? of his panic after being locked out of his account by hackers while they conducted a ticketing scam targeting his friends and followers.

Sadly, this story isn't unique. We look at Jonny's experience of recovering a hacked account and explain how to secure your social media account against scammers.


Source: Which? (27 Nov 2025)

Steer clear of fake Facebook competitions

Facebook users are being lured into expensive monthly subscriptions by scammers peddling 'mystery boxes' and cheap goods from retailers such as Boots, Decathlon and Screwfix.

These fake giveaways can result in repeated charges for subscriptions to random, unwanted websites. We expose the telltale signs to look out for and explain how to get your money back if you get caught by one.


Source: Which? (26 Nov 2025)

Tuesday, 25 November 2025

🚨 The UK's Christmas Scam Warning: Don't Let Cyber Grinches Steal Your Festive Cheer! 🎁

As the tinsel goes up and the carols start playing, the UK's festive season unfortunately ushers in another tradition: the surge of scams. This Christmas, cyber criminals are sharpening their tactics, and staying one step ahead is your best gift to yourself and your loved ones.

Based on current trends, here’s a critical breakdown of the threats you need to watch out for this holiday season, and the simple steps to keep your cash and data safe.


πŸ›️ The Scams to Look Out For

The core threats remain the same, but the methods are getting sneakier. Be on high alert for:

  • Fake Online Sales & Suspicious Websites: That "too good to be true" discount on social media or a random website? It almost certainly is. Fraudsters create convincing fake online shops to steal your money and payment details.

    • Stay Safe: Always check for the padlock symbol and 'https://' in the website address. If you've never heard of the retailer, do a quick search for independent reviews first.

  • Deceptive Delivery Scams: With the massive postal rush, texts or emails pretending to be from Royal Mail, Hermes, or DPD claiming a missed delivery or requiring a small payment to re-schedule are rife.

    • Stay Safe: Never click the link in an unsolicited delivery message. Track your parcel directly through the courier’s official app or website. Forward suspicious texts to 7726 and emails to report@phishing.gov.uk.

  • Phishing Emails and Texts (Smishing): Whether it’s a refund offer from a fake HMRC or an urgent bank activity notification, these messages pressure you to hand over details.

    • Stay Safe: Official organisations like HMRC or your bank will never contact you out of the blue asking for personal details or to transfer money. Stop, challenge, and verify any request by calling them back on a number you know to be genuine (e.g., from their official website or the back of your bank card).

πŸ’³ The Rise of the Gift Card Scams

This is a favourite for fraudsters because once the card is redeemed, the money is practically untraceable.

  • Payment Demands: The biggest red flag is a demand for payment via a gift card. No legitimate company, bank, or government body (like HMRC) will ever ask you to settle a bill, fine, or unlock an investment by purchasing an Apple, Amazon, or any other gift card. It is always a scam.

  • Counterfeit and Drained Cards: Be wary of fake or tampered-with physical gift cards sold by unauthorised third-party websites or even in stores where criminals have stolen the card's details and PIN, waiting to drain the balance as soon as you load it.

    • Stay Safe: Only buy gift cards directly from a trusted retailer or their official website. Inspect the packaging for any signs of tampering before purchase.


πŸ‘€ Why Cyber Criminals Do It

It helps to understand the motives behind the attacks. It's rarely personal; it's almost always about profit.

  • πŸ’° Money, Money, Money: Whether it's the large payout from a ransomware attack, selling stolen data (like card details and passwords) on the dark web, or directly draining your bank account through a phishing link, financial gain accounts for the vast majority of cybercrime.

  • πŸ›‘️ Competition & Espionage: Corporate sabotage is also a major driver, with rivals or third parties trying to steal trade secrets or disrupt business operations—especially in tech or manufacturing.

  • 😈 FIG (Fun, Ideology, and Grudges): While less common, some attacks are driven by a simple desire for attention, a political/ideological message, or personal vendettas.

They are driven by profit, which is why your vigilance is their main obstacle. Tools like robust email security (Proofpoint, OnDMARC, etc.) and anti-malware software are essential first lines of defence for businesses, but for individuals, your own cautious mindset is the most powerful tool.


πŸ“ž What to Do if You are Targeted

  1. Stop! Think! Check! If a message or call tries to rush or pressure you, it's a scam.

  2. Contact Your Bank Immediately: If you’ve lost money or provided financial details, call your bank straight away.

  3. Report the Scam:

    • Phishing Emails: Forward to report@phishing.gov.uk

    • Suspicious Texts (Smishing): Forward to 7726

    • Lost Money/Hacked (England/Wales): Report to Action Fraud online or call 0300 123 2040. (In Scotland, contact Police Scotland on 101).

By being alert and taking a moment to verify, you can ensure your Christmas remains merry, bright, and, most importantly, secure.

Summary

5 must-know tips to stay safe online:

  1. NEVER pay with gift cards. (Scam!)

  2. Don't click links in unexpected delivery texts.

  3. If a deal is too good, it's fake.

  4. Verify urgent requests by calling the company back on a trusted number.

  5. Always look for the πŸ”’ https:// on shopping sites.

Stay vigilant & have a safe Christmas! #UKScams #CyberSafety #Christmas2025

Monday, 24 November 2025

πŸ›‘️ Cifas: Your UK Fraud Prevention Service

Cifas (formerly the Credit Industry Fraud Avoidance System) is the UK’s leading not-for-profit fraud prevention membership organisation. It operates a number of databases that its nearly 800 member organisations—including banks, insurers, telecommunications companies, and public sector bodies—use to share fraud risk data and intelligence.

How Cifas Protects UK Consumers

Cifas works by creating a unified front against financial crime. It does this by:

  • Sharing Fraud Data: When a member organisation identifies or suspects a fraudulent activity (like an identity theft attempt or misuse of a facility), they record a fraud marker on the Cifas National Fraud Database.

  • Preventing Further Fraud: Other member organisations check this database when processing new applications for products (like a bank account, loan, or phone contract). If they see a fraud marker, they are prompted to carry out extra checks before approving the application or service, helping to stop the crime before it happens.

🚨 Protective Registration: A Key Consumer Service

For individuals who are at a heightened risk of identity fraud, Cifas offers a service called Protective Registration.

  • What it is: This service places a warning flag against your name on the National Fraud Database. It acts as an early alert to Cifas members.

  • When to use it: It's recommended if your personal documents have been lost or stolen, or if you have been affected by a large-scale data breach.

  • How it helps: The flag tells member organisations to be highly vigilant and carry out extra identity verification checks on any applications made in your name. This is crucial for stopping fraudsters from opening accounts or taking out credit using your details.

Note: Protective Registration may mean that genuine applications you make take slightly longer to process while the extra checks are completed.


πŸ’· How to Apply and Cost Involved

FeatureDetails
EligibilityIndividuals who believe their personal details are at a heightened risk of being misused for identity fraud.
Cost£30 for a two-year registration.
ApplicationYou must apply directly via the Cifas website using their online application form. They do not accept applications over the phone.
DurationThe registration lasts for 24 months (two years). You must reapply if you wish to renew it.

πŸ”— Useful Links

 

⚠️ Current UK Cyber Threat Landscape: Phishing Trends to Watch 2025 πŸ‡¬πŸ‡§

While the classic "mailbox full" scam is still used, cybercriminals in the UK are using much more sophisticated tactics right now....