You’d think official-looking emails would be the safest to click.

But these days, scammers are counting on that.

A new campaign disguised as a Social Security update is fooling even cautious users — and the consequences are serious.

One click could be all it takes for criminals to take over your entire computer.



According to security experts at Malwarebytes Labs, hackers are now impersonating the Social Security Administration in an especially sneaky phishing scam.

The attack begins with an email that says your Social Security statement is ready to download.

But instead of a document, victims are tricked into installing a program that gives scammers full remote access.

Once inside your device, they can steal files, log keystrokes, and drain your bank accounts.


The software used is called ScreenConnect — a real tool used by IT professionals for remote support.

But in the wrong hands, it becomes a weapon that grants complete control of your device without you ever knowing.

Cybercriminals can watch your screen, transfer your files, and even log into your banking apps.

Worse still, they can install additional spyware to track you long after the initial breach.



The group behind this wave of scams has been identified as “Molatori,” a well-known phishing syndicate.

They’re not just sending emails from shady accounts — they’re hijacking legitimate websites to bypass spam filters.

Some of the emails arrive as images rather than text, making them even harder for scanners to catch.

Their goal? Access to your financial life — and they’re willing to play the long game to get it.



Also read: Hackers could be tracking you RIGHT NOW through your phone—protect yourself with these essential steps!

If your computer is compromised, the fallout can be massive.

Hackers can install ransomware, steal your personal photos, and even open lines of credit in your name.

And since the email looks like it’s from a trusted government source, many victims don't realize the danger until it's too late.

Remember: the SSA will never email you attachments out of the blue.



Always go directly to the official Social Security website (ssa.gov) to access your account.

Never download attachments from emails claiming to be from the SSA — or any government agency.

If an email feels off, copy a few lines of text and search online to see if it's part of a known scam.

And be sure your security software is updated and running on all your devices.



This isn’t the first time scammers have targeted older Americans using the SSA as cover.

Just last month, officials warned about fake websites collecting Social Security numbers and login credentials.

In this version, it’s a tool that opens a digital backdoor to everything on your computer.

And if you’re in or near retirement, this kind of scam can wreck your finances in one click.

Read next: iPhone users beware: Hackers can steal your data with this bug—learn how to defend your phone now!
Have you received suspicious emails claiming to be from the Social Security Administration? Do you have strategies for spotting scams before it’s too late? Drop your stories, tips, and questions in the comments — your advice could help someone else stay safe.