[Heads-up] The Evil Ryuk Ransomware Strain Now Uses Wake-on-Lan To Encrypt Your Offline Devices

Jan 17, 2020 6:32:05 AM By Stu Sjouwerman

You must have heard of RYUK before. It's one of the most nasty, evil ransomware strains attributed to the North Korean state sponsored cyber criminals. They are an APT—Advanced Persistent ...

Hackers Request Aging Reports to Identify Their Next CEO Fraud Victims for Them

Jan 16, 2020 11:57:48 AM By Stu Sjouwerman

Rather than attempt to hack user credentials and gain access to Accounts Payable applications, hackers are now impersonating the CFO and obtaining all the detail they need to launch a ...

Nemty Ransomware Creators Plan to Post Stolen Data of Non-Payors to Blog

Jan 16, 2020 11:55:12 AM By Stu Sjouwerman

In a twist to the newest ransomware tactic where data is stolen and then encrypted, the folks behind Nemty are going to use a blog to publish victims data if they don’t pay.

Kiwi Drivers Phished with Bogus License Renewals

Jan 16, 2020 8:36:17 AM By Stu Sjouwerman

The New Zealand Transport Agency (NZTA) has warned of an ongoing email phishing campaign using fake vehicle license renewal reminders, 1 News reports. The emails appear legitimate and ...

TrickBot Hackers Have Created the Ultimate “On the Fly” Update Backdoor

Jan 15, 2020 3:06:26 PM By Stu Sjouwerman

The newly-created “PowerTrick” backdoor leaves malware ready to accept new commands and victim organizations perpetually in danger of the next thing the malware’s creators can think of.

You Should Be Scared of the Latest Strains of Phobos Ransomware

Jan 15, 2020 2:59:51 PM By Stu Sjouwerman

In an unusual twist, it’s not actually the ransomware itself that makes the newer forms of Phobos so frightening; it’s the people behind the attacks that will have you worried.

Travelex Warns Customers: Watch Out For Phishing Or Telephone Scams In Aftermath of Ransomware Attack

Jan 15, 2020 2:50:46 PM By Stu Sjouwerman

A little more than two weeks ago on New Year’s Eve, Foreign Currency services supplier Travelex was hit by a Sodinokibi (REvil) Ransomware attack. It has yet to recover and its web sites ...

Happy Hotel With a Sad Ending

Jan 15, 2020 8:42:17 AM By Javvad Malik

Tokyo, Japan-based Almex which operates the Japanese Happy Hotels announced it has been hacked and that customer data including email address, birth date, gender, phone number, log in, ...

Nobel Laureates Get Scammed, Too

Jan 15, 2020 8:21:53 AM By Stu Sjouwerman

Nobel Prize-winning economist and New York Times Opinion columnist Paul Krugman appears to have been taken in by a phishing scam, Business Insider reports. In a tweet that’s since been ...

Security-Related and Giveaway Phishing Email Subject Lines Get the Most Clicks

Jan 14, 2020 12:06:00 PM By Stu Sjouwerman

KnowBe4 revealed the results of its Q4 2019 top-clicked phishing report. The results found that simulated phishing tests with an urgent message to check a password immediately were most ...

New SNAKE Ransomware is an Attack Mix of Obfuscation, Encryption, and Corporate Disruption

Jan 14, 2020 11:58:23 AM By Stu Sjouwerman

Beware! This new targeted attack variant of ransomware is smart, sophisticated, and does a lot more than just encrypt files.

Hackers Target the Special Olympics of New York and Use them to Launch Phishing Attacks

Jan 14, 2020 11:53:50 AM By Stu Sjouwerman

This latest attack demonstrates how cybercriminals can leverage one organization as merely a part of a larger phishing campaign to scam countless individuals out of credentials or money.

CyberheistNews Vol 10 #3 [Heads-Up] New Office 365 Phishing Attack Targets OAuth Apps Instead of Credentials

Jan 14, 2020 9:35:37 AM By Stu Sjouwerman

Fast Work By Cops Recovers $710,000 After CEO Fraud Attack Hits Long Island County Government

Jan 14, 2020 6:33:48 AM By Stu Sjouwerman

Finally some good news. Newsday reports that in record time, Nassau County, New York, recovered $710,000 that was transferred to scammers who were impersonating an existing county vendor.

New Languages Added to KMSAT Learner Experience

Jan 13, 2020 5:26:47 PM By Stu Sjouwerman

Late Friday, the product team added 6 new languages to the KMSAT Learner Experience bringing the total number to 21 languages supported. The new languages include:

[New Ransomware Threat] Now Cyber Criminals Demand Ransom From The PATIENTS After A Plastic Surgery Clinic Data Breach

Jan 13, 2020 5:10:02 PM By Stu Sjouwerman

Just when you thought it could not get any worse... it did. Criminal hackers are now demanding that all the patients of Florida provider Richard Davis, MD pay a ransom to prevent the ...

Texas School District Loses $2.3 Million In BEC Scam

Jan 13, 2020 12:58:38 PM By Stu Sjouwerman

Texas’s Manor Independent School District was the victim of a costly 2.3 million dollar Business Email Compromise (BEC) scam in November of 2019.

Auto Dealership Becomes Latest Victim of Ransomware Attack Costing Up to $500,000

Jan 13, 2020 9:57:23 AM By Stu Sjouwerman

The opening of a seemingly benign email from a coworker by an unsuspecting employee set in motion an attack that brought operations to a halt and resulted in some costly remediation. The ...

Microsoft Sues Hacker Group for Data Theft of Highly Sensitive Information

Jan 13, 2020 9:48:18 AM By Stu Sjouwerman

A new recently unsealed lawsuit against a North Korean hacker group shows how even the largest companies can be successfully attacked by phishing.

An Overview of Phishing from the Accounting Sector

Jan 13, 2020 8:23:18 AM By Stu Sjouwerman

Employee training is an essential long-term defense against phishing attacks, according to David Barton and Kimberly Anderson at UHY Advisors. In an article for Accounting Today, Barton ...

Security Awareness Training Blog

View Topics