Stu Sjouwerman

New Phishing Campaign is Impersonating Zoom to Steal Credentials

Feb 1, 2022 2:40:04 PM By Stu Sjouwerman

A phishing campaign is impersonating Zoom in order to steal users’ Microsoft credentials, according to Lauryn Cash at Armorblox. The emails landed in about 10,000 inboxes, and targeted “a ...

CyberheistNews Vol 12 #05 [Heads Up] DHS Sounds Alarm on New Russian Destructive Disk Wiper Attack Potential

Feb 1, 2022 9:37:29 AM By Stu Sjouwerman

CyberheistNews Vol 12 #05 | Feb. 1st., 2022 [Heads Up] DHS Sounds Alarm on New Russian Destructive Disk Wiper Attack Potential CNN just reported on a Jan 23 Intelligence Bulletin ...

Increased “Shipping Delays” Now Served as Phishbait

Jan 31, 2022 9:16:14 AM By Stu Sjouwerman

Attackers are exploiting pandemic-related supply-chain disruptions to launch phishing campaigns, according to Troy Gill, senior manager of threat intelligence at Zix. In an article for ...

KnowBe4 Continues to be One of Okta's Most Popular Apps in the 2021 Businesses at Work Report

Jan 28, 2022 10:11:32 AM By Stu Sjouwerman

We're pleased to announce that we have been featured in Okta's eighth edition of the "Business at Work" report. This report is an in-depth look into how organizations and people work ...

[On-Demand Webinar] A Data-Driven Approach for Your Third-Party Risk Management Processes

Jan 27, 2022 2:31:27 PM By Stu Sjouwerman

As organizations have increased their scope of vendors and partners, they have also increased their digital risk surface and are facing new challenges regarding vendor risk management. By ...

Microsoft Warns of Latest “Consent Phishing” Attack Intent on Reading Your Email

Jan 27, 2022 9:13:57 AM By Stu Sjouwerman

Rather than steal your user’s credentials, this latest attack takes the OAuth route to gain access to the victim’s mailbox. This gives cybercriminals continual access, regardless of ...

Dark Web Service Sells Access to Compromised Accounts and Browser Sessions

Jan 27, 2022 9:13:53 AM By Stu Sjouwerman

When we hear about compromised credentials, there’s always the question of “How are they used post-compromise?” In one case, they are fully on display for sale to the highest bidder.

Malicious Office Documents Jump to 37% of All Malware Downloads at the End of 2021

Jan 27, 2022 9:13:49 AM By Stu Sjouwerman

With the ubiquitous use of Microsoft Office today, it should come as no surprise that malicious macro-laden documents continue to reign, with PPT files delivering AgentTesla taking the ...

[Heads Up!] DHS Sounds Alarm on New Russian Destructive Disk Wiper Attack Potential

Jan 27, 2022 8:01:08 AM By Stu Sjouwerman

CNN just reported on a Jan 23 Intelligence Bulletin from the US Department of Homeland Security (DHS) that warned state and local governments and critical infrastructure operators about ...

Ransomware Operators Try to Recruit Insiders

Jan 26, 2022 8:37:30 AM By Stu Sjouwerman

Sixty-five percent of organizations report that their employees have been contacted by ransomware attackers in an attempt to recruit insider threats, according to researchers at Pulse and ...

Irish Teaching Council Fined €60,000 for Phishing-Induced Breach

Jan 25, 2022 10:30:43 AM By Stu Sjouwerman

Ireland’s Teaching Council has been fined €60,000 by the country’s Data Protection Commission (DPC) over a breach of nearly ten thousand teachers’ data, the Irish Examiner reports. An ...

CyberheistNews Vol 12 #04 [FBI HEADS UP] US Defense Industry Targeted with New USB-Based Ransomware Attacks

Jan 25, 2022 9:17:54 AM By Stu Sjouwerman

[New Benchmarking Feature] Compare Your Organization’s Security Culture with Other Organizations in Your Industry

Jan 25, 2022 8:00:00 AM By Stu Sjouwerman

We are excited to announce that the KnowBe4 Industry Benchmarking feature has been expanded to now include industry benchmark comparison data for KnowBe4’s Security Culture Survey (SCS).

A Generational Divide Among Social Engineering Victims

Jan 24, 2022 9:11:49 AM By Stu Sjouwerman

Younger and older people differ in their susceptibility to different types of social engineering attacks, according to researchers at Avast. Younger people tend to fall for scams ...

FBI: US Defense Industry Organizations Targeted with USB-Based Ransomware Attacks

Jan 21, 2022 8:24:40 AM By Stu Sjouwerman

Using mailed out “BadUSB” drives as the initial attack vector, cybercriminals are attempting to infiltrate sensitive networks and infect them with BlackMatter or REvil ransomware strains.

New U.K. Vishing Scam Offers Significant Phone Plan Discounts in Exchange for your Phone Provider's One-Time Security Code

Jan 21, 2022 8:24:37 AM By Stu Sjouwerman

Scammers targeting customers of mobile carrier O2 are enticing victim engagement by offering discounts on their mobile plan as much as 40%.

Security Awareness Training Blog

View Topics

Stu Sjouwerman

Recent Posts

New Phishing Campaign is Impersonating Zoom to Steal Credentials

CyberheistNews Vol 12 #05 [Heads Up] DHS Sounds Alarm on New Russian Destructive Disk Wiper Attack Potential

Increased “Shipping Delays” Now Served as Phishbait

KnowBe4 Continues to be One of Okta's Most Popular Apps in the 2021 Businesses at Work Report

[On-Demand Webinar] A Data-Driven Approach for Your Third-Party Risk Management Processes

Microsoft Warns of Latest “Consent Phishing” Attack Intent on Reading Your Email

Dark Web Service Sells Access to Compromised Accounts and Browser Sessions

Malicious Office Documents Jump to 37% of All Malware Downloads at the End of 2021

[Heads Up!] DHS Sounds Alarm on New Russian Destructive Disk Wiper Attack Potential

Ransomware Operators Try to Recruit Insiders

Irish Teaching Council Fined €60,000 for Phishing-Induced Breach

CyberheistNews Vol 12 #04 [FBI HEADS UP] US Defense Industry Targeted with New USB-Based Ransomware Attacks

[New Benchmarking Feature] Compare Your Organization’s Security Culture with Other Organizations in Your Industry

A Generational Divide Among Social Engineering Victims

FBI: US Defense Industry Organizations Targeted with USB-Based Ransomware Attacks

New U.K. Vishing Scam Offers Significant Phone Plan Discounts in Exchange for your Phone Provider's One-Time Security Code

DHL is Now the Most Spoofed Brand in Phishing

Ransomware Attacks are Growing in Number, But Not in Sophistication

Google Docs Comment Feature is the Key to a New Wave of Phishing Campaigns

Half of All Organizations Hit by Ransomware Experience Productivity Loss

Search Our Blog

Subscribe To Our Blog

Posts By Topic

Get the latest about social engineering

Subscribe to CyberheistNews

Get the latest about social engineering

Subscribe to CyberheistNews

Products & Services

About Us

Free Tools

Contact Us

Contact Support

Search