{"success":true,"data":{"id":"fake-smart-home-device-breach-lure","label":"Fake Ring / Nest / SimpliSafe / Arlo / Wyze / Eufy / ADT / Vivint smart-home device breach lure — \"your camera / doorbell / alarm was accessed by an unauthorized device, verify within 24 hours or home security suspended\" targeting 10M+ Ring, 10M+ Nest, 4M+ SimpliSafe, 2M+ Arlo consumer households; post-compromise attacker watches live camera feed, disarms alarm, manipulates geofencing to know when home is unoccupied for physical-world burglary handoff (Krebs + Ars Technica 2024-2025 documented smart-home breach → physical burglary chain)","description":"Fake \"your Ring / Nest / SimpliSafe / Arlo / Wyze / Eufy / ADT / Vivint smart-home camera / doorbell / alarm has been accessed by an unauthorized device — verify your account within 24 hours or your home security will be suspended\" email targeting consumer smart-home owners. Ring 10M+ users; Nest 10M+; SimpliSafe 4M+; Arlo 2M+. Distinct from `fake-apple-family-sharing-invite-lure` (iter 923, iCloud family) and `fake-mychart-patient-portal-breach-lure` (iter 934, medical portal). The lure converts because: (1) smart-home devices ARE genuinely breached in public incidents — Ring 2019-2020 credential-stuffing breaches; Wyze 2023 camera-feed exposure; SimpliSafe 2022 credential-stuffing. Users recognize the real-breach-notification template. (2) Threat framing \"home security suspended / alarm disarmed / camera compromised\" triggers deeply-rooted physical-safety anxiety — especially for households with small children or elderly parents. Post-compromise: attacker WATCHES the live camera feed, MUTES or DISARMS the alarm system, and manipulates geofencing to know precisely when the home is unoccupied for a physical-world burglary handoff. Smart-home-breach-to-physical-burglary has been documented by Krebs + Ars Technica in 2024-2025. Fires when body references Ring / Nest / SimpliSafe / Arlo / Wyze / Eufy / Vivint / ADT / smart-home / home security / doorbell camera / security camera / alarm system AND contains unauthorized-device / home-security-suspended / verify-account / disarm / 24-hour urgency. Excludes ring.com, nest.com, google.com, simplisafe.com, arlo.com, wyze.com, eufy.com, eufylife.com, adt.com, vivint.com, nestlabs.com, amazon.com. Auto-classified as danger via the `-lure` suffix.","tier":"danger","category":"scam","isThin":false}}