Amazon Prime Phishbait: Lessons Learned

Feb 27, 2020 8:24:56 AM By Stu Sjouwerman

An Amazon phishing campaign is accidentally sending out links that lead straight to the attacker’s remote access console, according to Paul Ducklin at Naked Security. Ducklin explains ...

[BREAKING NEWS] 'Shark' Gets Hooked for $380K in Email Phishing Scam

Feb 26, 2020 4:19:02 PM By Stu Sjouwerman

"Shark Tank" star Barbara Corcoran is missing nearly $400,000 Wednesday morning after her office was victimized by email scammers who used a tiny typo to gain the upper hand.

Verizon: More Than Half of Users Click on Multiple Phishing Links. Social Engineering, Innovation are Responsible

Feb 26, 2020 10:08:50 AM By Stu Sjouwerman

The latest data from Verizon’s 2020 Mobile Security Index report shows that both consumer and business users make it all too easy for cyberattackers to fool them into becoming a victim.

An Influence or Wire Fraud?

Feb 26, 2020 8:26:37 AM By Stu Sjouwerman

A 22-year-old Instagram and YouTube influencer named Kayla Massa has been arrested after allegedly convincing her followers to assist her in a fraud scheme, Quartz reports. Prosecutors ...

39 Percent of Organizations Were Victims of a Mobile Attack Despite Improved Security

Feb 26, 2020 8:19:25 AM By Stu Sjouwerman

Brand new data from Verizon shows businesses sacrificed when it comes to mobile security; a decision that caused compromises with impacts well-beyond just a simple breach.

KnowBe4 Named a Leader in The Forrester Wave for Security Awareness and Training Solutions

Feb 25, 2020 2:54:27 PM By Stu Sjouwerman

We have some great news to share with our customers and global security professionals alike. KnowBe4 has been named a Leader in The Forrester Wave™ : Security Awareness and Training ...

Why Minimizing Human Error is the Only Viable Defense Against Spear Phishing

Feb 25, 2020 11:21:58 AM By Stu Sjouwerman

Phishing attacks have become one of the business world's top cybersecurity concerns. These social engineering attacks have been rising over the years, with the most recent report from the ...

CyberheistNews Vol 10 #9 A U.S. Natural Gas Operator Shuts Down for 2 Days After a Phishing Attack Infects it With Ransomware

Feb 25, 2020 9:19:39 AM By Stu Sjouwerman

Spamming Tools are a Commodity in the Criminal Underworld

Feb 25, 2020 8:21:25 AM By Stu Sjouwerman

Cheap and easy-to-use phishing kits and other social engineering tools are readily available for purchase on the black market, according to researchers at Digital Shadows. Criminals ...

Spear Phishing Tops the Canadian Anti-Fraud Center’s List of Attacks

Feb 24, 2020 5:13:16 PM By Stu Sjouwerman

The latest data out of the Canadian Government points out how targeted spear phishing fraud attacks via email are the most lucrative method of attack for cybercriminals in 2019.

WSJ: "Losing $450,000 in Three Days: Hackers Trick Victims Into Big Wire Transfers"

Feb 24, 2020 12:32:09 PM By Stu Sjouwerman

Rachel Louise Ensign wrote a great story for the WSJ about CEO Fraud, also known by the FBI as Business Email Compromise. I'm quoting an extract and I strongly recommend sending a link to ...

A Single BEC Gang is Launching Thousands of Attacks Per Year

Feb 24, 2020 8:22:44 AM By Stu Sjouwerman

A unique cybercriminal group launched business email compromise (BEC) attacks against more than 2,100 companies in the US between April and August 2019, according to researchers at Agari. ...

[EYE-OPENER] Dutch Minister Of Justice And Security: "Fighting Phishing Starts With Awareness"

Feb 24, 2020 8:00:01 AM By Stu Sjouwerman

"The fight against phishing starts with raising the awareness of internet users, stated Justice and Security Minister Grapperhaus. He responded to figures from Dutch banks showing that ...

[Heads-up] Ransomware Criminals Hack An Accounting Company And Cause A Data Breach For Their Customers

Feb 24, 2020 7:00:00 AM By Stu Sjouwerman

Last December, a ransomware infection of Albany, New York-based accounting firm BST & Co. CPAs LLC exposed the confidential data of their customers, causing a data breach for one of ...

Massive 13,467% Growth in WhatsApp Phishing URLs Seen as Top Impersonated Domains Are on the Decline

Feb 21, 2020 6:44:06 PM By Stu Sjouwerman

The latest data from email security vendor Vade Secure shows drastic shifts in domain impersonation trends cybercriminals are using to carry out phishing attacks.

Ransomware Attack Leaves 43,000 Employees Without Email

Feb 21, 2020 6:41:31 PM By Stu Sjouwerman

The recent attack on facilities management company ISS has created a significant disruption in their operations, communication, and services worldwide.

The Real-life Email You Never Want To Get From Your CEO Because The Feds Called...

Feb 21, 2020 12:56:19 PM By Stu Sjouwerman

From The Desk Of Mark *********, CEO, ********* Corporation

Here Is A Real-life Bank Phone Scam Blocked By A Security Awareness Trained Employee

Feb 21, 2020 12:01:58 PM By Stu Sjouwerman

Brad Mathis at our partner Keller Schroeder sent me the following real-life story from Matt, a KnowBe4 Security Awareness Training client...

Emotet Malware Shows Up in SMiShing Attacks Disguised as Bank Notifications

Feb 21, 2020 8:27:20 AM By Stu Sjouwerman

A newly discovered attack looks to try to make a victim of mobile device holders using a two-pronged attack that uses Emotet and, perhaps, Trickbot.

Most Organizations Stick to Legacy Password Security Practices Despite Experiencing Cyberattacks

Feb 21, 2020 8:24:51 AM By Stu Sjouwerman

In a surprising twist, new data sheds light on the lack of proper security around passwords and authentication by IT at a time when cyberattacks are all but an absolute given.

Security Awareness Training Blog

View Topics