Microsoft: SolarWinds attack took more than 1,000 engineers to create

Feb 16, 2021 10:25:55 AM By Stu Sjouwerman

You may have missed this extremely interesting bit of data that ZDNet just published. "Microsoft reckons that the huge attack on security vendors and more took the combined power of at ...

CyberheistNews Vol 11 #07 [HEADS UP] New Phishing Attack Uses Morse Code to Avoid Detection By Your Email Scanners

Feb 16, 2021 9:47:41 AM By Stu Sjouwerman

Phishing and Impersonated Brands

Feb 16, 2021 8:24:13 AM By Stu Sjouwerman

Microsoft is still the most impersonated brand for phishing campaigns, according to researchers at Vade Secure. The security firm spotted 30,621 unique Microsoft-related phishing URLs in ...

Caught by a CAPTCHA?

Feb 15, 2021 3:15:42 PM By Roger Grimes

Be aware of being involved in malicious CAPTCHA solving.

A Ransomware Victim Refuses to Pay

Feb 15, 2021 8:23:05 AM By Stu Sjouwerman

Video game studio CD Projekt Red, makers of The Witcher series and Cyberpunk 2077, have disclosed a ransomware attack, WIRED reports. The attackers claimed to have stolen source code for ...

New Novel Campaign Targeting Security Researchers Uses Really Creative Social Engineering to Fool Victims

Feb 12, 2021 4:32:29 PM By Stu Sjouwerman

Pretending to be security researchers themselves, this group of cybercriminals went to great lengths to make sure legitimate security researchers would fall for the attack.

New Phishing Scam Uses Fake PPP Loans to Trick Victims into Giving Up Personal Information

Feb 12, 2021 4:32:25 PM By Stu Sjouwerman

Taking advantage of people’s need for financial assistance, these scammers pose as a bank offering “forgivable business loans to individuals impacted by the pandemic.”

Dutch Intelligence Agencies Warn About Chinese and Russian Cyber Espionage

Feb 12, 2021 1:39:00 PM By Stu Sjouwerman

Chinese and Russian state hackers threaten the Dutch economy. Three Dutch intelligence agencies jointly sound the alarm about digital espionage in financial newspaper Het Financieele ...

[Heads Up] Growing Collaboration Among Criminal Groups Heightens Ransomware Triple Threat

Feb 12, 2021 10:44:35 AM By Stu Sjouwerman

Increased communication and collaboration among cybercrime groups is heightening the ransomware threat for the healthcare sector, according to the Cyber Threat Intelligence League (CTI ...

[Scary?] AI Can Now Learn To Manipulate Human Behavior

Feb 12, 2021 10:28:21 AM By Stu Sjouwerman

The Conversation just published something I have been worried about for a while now. Scary? Could be getting that way sometime soon. They said: "Artificial intelligence (AI) is learning ...

Phishing for Love

Feb 12, 2021 10:02:15 AM By Stu Sjouwerman

Valentine’s Day-themed phishing campaigns are spiking, researchers at Check Point warn. There was a 29% increase in Valentine’s Day-related phishing domains last month, compared to a 6% ...

[New E-Book] Comprehensive Anti-Phishing Guide

Feb 12, 2021 8:45:42 AM By Stu Sjouwerman

Spear phishing emails remain a top attack vector for the bad guys, yet most companies still don’t have an effective strategy to stop them.

It’s Not Only About the URL

Feb 11, 2021 3:01:41 PM By Roger Grimes

You have to look at the totality of an email to determine whether it is a phishing attack or not.

[HEADS UP] NHS Issues Warning as UK COVID-19 Vaccine Scams Are Still Running Rampant

Feb 11, 2021 11:08:05 AM By Stu Sjouwerman

The National Health Service (NHS) in the UK recently sent a warning that cybercriminals are using social engineering tactics to target people wanting a COVID-19 vaccine email that is ...

US Gmail Users Are Preferred Phishing Targets

Feb 11, 2021 8:26:01 AM By Stu Sjouwerman

Google has found that most phishing attacks (42%) target Gmail users in the US. Users in the UK were the second most targeted, with 10% of attacks. Japan came in third with 5% of phishing ...

New Phishing Attack Uses Morse Code to Avoid Detection by Email Scanners

Feb 10, 2021 2:46:52 PM By Stu Sjouwerman

Yes – you read that right: Cybercriminals have found a way to use 1830’s technology to trick 2020s security solutions into not identifying phishing attachments as malicious.

New Phishing Attack Uses Google Firebase to Trick Microsoft and Achieve a Spam Confidence Level of Just 1

Feb 10, 2021 2:46:41 PM By Stu Sjouwerman

This new phishing scam takes advantage of inherent trust in credible domains to get past the scrutiny of even Microsoft to trick Office 365 users into giving up their online credentials.

Cannabis Company Loses Millions in BEC Scam

Feb 10, 2021 8:32:27 AM By Stu Sjouwerman

Australian medicinal cannabis company Cann Group has lost $3.6 million in a business email compromise (BEC) attack, Stockhead reports. The company had thought it was paying an unnamed ...

CyberheistNews Vol 11 #06 [Heads Up] Email Phishing Is Now the Top Ransomware Attack Vector

Feb 9, 2021 9:37:35 AM By Stu Sjouwerman

[World Premiere] KnowBe4’s New Season 3 of Netflix-Style Security Awareness Video Series - ‘The Inside Man’

Feb 9, 2021 8:52:30 AM By Stu Sjouwerman

We’re excited to announce Season 3 of the award-winning KnowBe4 Original Series - ‘The Inside Man’. This network-quality video training series delivers an entertaining learning experience ...

Security Awareness Training Blog

View Topics