CyberheistNews Vol 3, 16
Editor's Corner
NEW: How To Keep Your Family Safe Online
We have some very exciting news for you. When you receive an email from a friend or relative saying they are in trouble and desperate for your help, most likely you would open the email. This is just one clever 'social engineering' tactic that cybercriminals use to hack into your personal home computer. KnowBe4 this week launched the brand new "Kevin Mitnick Home Internet Security Course," which will help to keep your family safe online, or the family of your employees. Today, cybercriminals are not just hacking into companies’ computers to steal millions of dollars and private information; they are also targeting your home computer—and succeeding, simply if you click just -once- on a malicious link. When we asked the employees that did our business security awareness training what they thought after completing the training, about 80% came back with: "Wow, I did not know it was that scary out there, I learned a lot", immediately followed by: "How can I share this with my family?" So that's why we created a family-friendly security awareness course especially designed for non-technical consumers which features: - A browser-based interactive course created in 2013—updated to reflect recent scams; - 8 sections using real-life case studies that show how someone got in trouble using the Internet, and what you need to do to stay safe; - Each section has a live Kevin Mitnick video with security do’s and don’ts, and each section has a fun "security check" quiz at the end. The 8 topics the course covers are: Passwords, Giving out Personal Information, Online Banking, Protecting Children Online, Protecting your Identity, Securing your Computer and Home Network, Spam viruses and more, and Opening email and attachments—with the latest information on cybercrime in each section. The first 500 people who click the BUY button will GET IT FOR FREE. But we -are- going to ask you to write a review for us once you have done the training! This course allows all members of your family to do the course, plus send five invites to friends who can also do the full course. Check out the brand new Kevin Mitnick Home Internet Security Course site here. Those 500 free licenses are going to be gone soon! http://home.knowbe4.com/
Quotes of the Week
"In light of recent world events, bear this lesson in mind: "I have decided to stick with love. Hate is too great a burden to bear." - Martin Luther King, Jr. Please tell your friends about CyberheistNews! They can subscribe here: http://www.knowbe4.com/cyberheist-news/
|
This Is How Attackers Break Into Your Network
91% of data breaches begin with a “spear-phishing” email, research from security software firm Trend Micro shows. Are -you- vulnerable? Find out now if your email server is configured correctly, many are not!
KnowBe4 offers you a free 'Domain Spoof Test', which shows if we can send you an email coming from someone in your own domain. It's quick, easy and often a shocking discovery. The single thing we do is just send one email from the outside to you.
Can hackers spoof an email address from your own domain, which is the first step of an incredibly expensive data breach? Find out now: http://info.knowbe4.com/phishing-security-test
Missouri Court Rules Against $440,000 Cyberheist Victim
A Missouri court last week handed a legal defeat to a local escrow firm that sued its financial institution to recover $440,000 stolen in a 2009 cyberheist. The court ruled that the company assumed greater responsibility for the incident because it declined to use a basic security precaution recommended by the bank: requiring two employees to sign off on all transfers.
Springfield, Mo. based Choice Escrow and Land Title LLC sued Tupelo, Miss. based BancorpSouth Inc., after hackers who had stolen the firm’s online banking ID and password used the information to make a single unauthorized wire transfer of $440,000 to a corporate bank account in Cyprus. More: http://krebsonsecurity.com/2013/03/missouri-court-rules-against-440000-cyberheist-victim/
And while we are talking about lawsuits over cyberheists:
Brian Krebs also reported that an Oregon agricultural products company is suing its bank to recover nearly a quarter-million dollars stolen in a 2010 cyberheist. The lawsuit is the latest in a series of legal challenges seeking to hold financial institutions more accountable for costly corporate account takeovers tied to cybercrime: http://krebsonsecurity.com/2013/04/hay-maker-seeks-cyberheist-bale-out/
Spear Phishing Goes Mobile
Kaspersky Lab has identified a new spear-phishing attack involving a Trojan designed to target Android devices. Researcher Kurt Baumgartner says organizations need to be prepared for more mobile malware attacks.
The discovery is part of an emerging trend: spear phishing attacks using Trojans that can compromise not just mobile devices, but also the PCs or Macs to which these devices connect, he says.
Baumgartner, a researcher who monitors malware, says mobile device users should add additional security packages to their devices to protect them from malicious downloads. "There is a layer of security they can add to their phones," he explains. You can listen to the full interview at BankInfoSecurity: http://www.bankinfosecurity.com/interviews/spear-phishing-goes-mobile-i-1877?
Dead OS Walking: Win XP Has 12 Months Of Support Left
The Windows XP launch was held in New York City less than two months after 9/11, and within a few weeks Redmond discovered a big security vulnerability in the 'universal plug and play' (UPnP) code that shipped in XP. This scare led to their 'Trustworthy Computing' initiative, and eventually they released XP Service Pack 2 more or less as a redo of the initial release.
Fast forward 10 years. WinXP is still the second largest PC OS, behind Win7, and that is after three major OS releases since XP launched. It is still being used on tons of business desktops: a whopping 300 million.
Now, on April 8, 2014 Redmond will cut off support for XP and for good reason, the OS leaks like a sieve and is very easy to hack. No more support means no more security updates or tech support. Meaning any 0-day vulnerability will stay open and no patch will come forth from Redmond. There could be a 3-rd party market for XP patches coming up, but who wants to rely on those for a business environment?
The upshot is that now's the time to start planning your migration to at least Win7. You have one year left, and at that time XP becomes a major security liability. Time to get going!
Cyberheist 'FAVE' LINKS:
* This Week's Links We Like. Tips, Hints And Fun Stuff.
Got a 50-minute lunch or dinner break and want to see something really cool? This documentary called the 'Secret History of HACKING' with Captain Crunch, Kevin Mitnick and Steve Wozniak is worth your time: http://www.youtube.com/watch?v=aEo3PfH2ffk
Top Gear's Jeremy Clarkson test drives the Pagani Zonda C12S supercar. Classic: http://www.flixxy.com/pagani-zonda-supercar-top-gear.htm
F-18 display pilot Mike Bryan demonstrates the impressive maneuverability of the Boeing 787 Dreamliner at the Farnborough International Airshow: http://www.flixxy.com/what-a-boeing-787-dreamliner-can-do-in-the-hands-of-an-f-18-fighter-pilot.htm
Although they are graduates of the renowned Vienna College of Music, "Mnozil Brass" show that playing music is not just serious business: http://www.flixxy.com/four-lazy-brass-players-and-one-amazing-multi-tasker.htm
Two dogs play "Dueling Banjos," the classic bluegrass song. They are obviously very talented musicians: http://www.flixxy.com/dogs-playing-banjos.htm
Footage of first F-35B nighttime take off and landing tests looks like something straight out of a sci-fi movie:" http://www.flixxy.com/f-35b-vertical-landing-at-night.htm
Creative Home Engineering can build Hollywood-style secret passages for your home or office: http://www.flixxy.com/hidden-secret-passages-for-your-home.htm
Hyperlapse - a technique combining time-lapse and sweeping camera movements - created by using Google Street View photos: http://www.flixxy.com/google-street-view-hyperlapse.htm
Pentagon’s Humanoid Disaster-Rescue Robot Is Dressed to Impress: http://www.wired.com/dangerroom/2013/04/petman-dressed/?cid=co6981744
|