Stu Sjouwerman

Think Tanks Targeted by APT Actors

Dec 3, 2020 8:28:48 AM By Stu Sjouwerman

The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued a joint advisory warning that nation-state advanced persistent threat (APT) actors are targeting US ...

How Are Credential-Theft Phishing Websites Avoiding Detection? They Just Invert the Website Background

Dec 3, 2020 8:21:40 AM By Stu Sjouwerman

Sometimes the easiest solution is the best solution. And in the case of phishing attacks intent of stealing credentials using a fake logon page, it appears that background inversion does ...

Number of Phishing Websites Double and Unique Phishing Campaigns Triple in Q3

Dec 3, 2020 8:19:09 AM By Stu Sjouwerman

New data shows the bad guys have been working diligently to step up their game on both the front and back end of phishing attacks, despite still being mid-pandemic.

Maze Ransomware Group Retires (Retires!), Leaving a Gap in the Ransomware Marketplace

Dec 3, 2020 8:16:06 AM By Stu Sjouwerman

The news last month of the “retirement” of Maze should be a warning to organizations wondering what ransomware will come next and how much worse will it be.

When the Bad Guys Hide in Plain Sight: Hacking Platforms You Know and Trust

Dec 3, 2020 8:15:00 AM By Stu Sjouwerman

Today’s hackers are concealing their attacks in places you wouldn’t expect… utilizing tools your users know and trust to deliver their malicious payloads. Secure email services with ...

KnowBe4 Fresh Content Updates from November: Including A New Holiday Training Resource Kit

Dec 3, 2020 8:00:00 AM By Stu Sjouwerman

Here are important fresh content updates and new features to share with you for the month of November.

Average Ransomware Payment Significantly Increases Risk

Dec 2, 2020 11:05:57 AM By Stu Sjouwerman

The average ransomware payout has increased by 178% over the past year, according to researchers at Atlas VPN. In Q4 2019, the payments averaged $84,000. By Q3 2020, the average payment ...

[HEADS UP] FBI Warns US Companies of BEC Scammers

Dec 1, 2020 1:49:29 PM By Stu Sjouwerman

The Federal Bureau Investigation is issuing warnings to US companies that are taking advantage of email auto-forwarding. If successful, this would fall right into the trap of a business ...

South African Post Office Issues Warning on Postal Phishing Attack

Dec 1, 2020 11:51:55 AM By Stu Sjouwerman

The South African Post Office recently issued a warning about a phishing attack. The post office advised everyone to delete the email immediately.

CyberheistNews Vol 10 #49 [Eye Opener] How Many Phishing Sites? A Whopping 2 Million in 2020 So Far

Dec 1, 2020 9:34:39 AM By Stu Sjouwerman

Zoom Impersonation a New Variant of Familiar Phishbait

Dec 1, 2020 8:23:31 AM By Stu Sjouwerman

Zoom-themed phishing attacks have spiked since the start of the pandemic, the Better Business Bureau (BBB) warns. Attackers adapted quickly earlier this year when a large portion of ...

Giving Tuesday Means an Influx of Charity Scams

Dec 1, 2020 8:00:00 AM By Stu Sjouwerman

Giving Tuesday is a great idea for organizations and people to give back to people in need, especially during the COVID-19 pandemic. However, this causes concern for an increase in ...

Fake Zoom Invite Leads to one Australian Company's Downfall

Nov 30, 2020 1:19:51 PM By Stu Sjouwerman

We've previously written blog posts to be cautious of suspicious Zoom meeting links, and we even reported a huge increase in phishing attacks using Zoom of August this year. The heads-up ...

Is the Secret to Stopping Cyberattacks Making Users "Phishing Aware"?

Nov 30, 2020 10:02:08 AM By Stu Sjouwerman

The sheer volume of successful phishing attacks indicates that security solutions – at very least – aren’t stopping all attacks. So how does security awareness training help top attacks ...

Phishing Attacks in the U.K. Rise by 73% During Pandemic Months as Vishing and Smishing Attacks Also Increase

Nov 30, 2020 9:58:43 AM By Stu Sjouwerman

Cybercriminals have taken full advantage of COVID-19 by launching themed phishing attacks in previously unseen numbers targeting both individuals and businesses.

Egregor Ransomware Finds a New Way to Inform You That You’re a Victim of Cyberattack: Printers

Nov 30, 2020 9:54:14 AM By Stu Sjouwerman

Unlike the traditional methods of notifying victim organizations by simply taking over a computer or providing a “readme” text file, this new method has some devilish benefits.

See Ridiculously Easy Security Awareness Training and Phishing

Nov 30, 2020 9:15:00 AM By Stu Sjouwerman

Join us for a live demo on Security Awareness Training and phishing in action!

Journalists Need Phishing Awareness, Too

Nov 30, 2020 8:25:33 AM By Stu Sjouwerman

All types of journalists need to be wary of phishing and other social engineering attacks, according to Jacob Granger, writing at Journalism.co.uk. Granger quotes digital security expert ...

[Heads-Up] A Hacker Is Selling Access To The Email Accounts Of Hundreds Of C-Level Executives

Nov 27, 2020 11:52:05 AM By Stu Sjouwerman

ZDNet's Zero Day column just reported one of the best reasons why you should step your users through new-school security awareness training yet:

The Risk of the “To” Line

Nov 25, 2020 2:26:34 PM By Stu Sjouwerman

Micropayments company Coil accidentally exposed at least a thousand of its customers’ email addresses by including their addresses in the “To” field of an email, BleepingComputer reports. ...

Security Awareness Training Blog

View Topics

Stu Sjouwerman

Recent Posts

Think Tanks Targeted by APT Actors

How Are Credential-Theft Phishing Websites Avoiding Detection? They Just Invert the Website Background

Number of Phishing Websites Double and Unique Phishing Campaigns Triple in Q3

Maze Ransomware Group Retires (Retires!), Leaving a Gap in the Ransomware Marketplace

When the Bad Guys Hide in Plain Sight: Hacking Platforms You Know and Trust

KnowBe4 Fresh Content Updates from November: Including A New Holiday Training Resource Kit

Average Ransomware Payment Significantly Increases Risk

[HEADS UP] FBI Warns US Companies of BEC Scammers

South African Post Office Issues Warning on Postal Phishing Attack

CyberheistNews Vol 10 #49 [Eye Opener] How Many Phishing Sites? A Whopping 2 Million in 2020 So Far

Zoom Impersonation a New Variant of Familiar Phishbait

Giving Tuesday Means an Influx of Charity Scams

Fake Zoom Invite Leads to one Australian Company's Downfall

Is the Secret to Stopping Cyberattacks Making Users "Phishing Aware"?

Phishing Attacks in the U.K. Rise by 73% During Pandemic Months as Vishing and Smishing Attacks Also Increase

Egregor Ransomware Finds a New Way to Inform You That You’re a Victim of Cyberattack: Printers

See Ridiculously Easy Security Awareness Training and Phishing

Journalists Need Phishing Awareness, Too

[Heads-Up] A Hacker Is Selling Access To The Email Accounts Of Hundreds Of C-Level Executives

The Risk of the “To” Line

Search Our Blog

Subscribe To Our Blog

Posts By Topic

Get the latest about social engineering

Subscribe to CyberheistNews

Get the latest about social engineering

Subscribe to CyberheistNews

Products & Services

About Us

Free Tools

Contact Us

Contact Support

Search