Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Top 9 IT Security Trends You Need to Watch Out For in 2020

Cyber security and security awareness training landscapes are constantly changing. IT Professionals, like you, always need to know what is coming next in order to build (and maintain) ...
Continue Reading

Royal Mail Scam: Sorry, You Haven't in Fact Won that iPhone 11 Pro

An SMS phishing scam is targeting people in the UK with fake notifications that appear to come from the Royal Mail postal service, The Sun reports. The messages are personalized, and they ...
Continue Reading

Dancing with Hackers

Dancing with the Stars pro Witney Carson announced on Twitter that her Facebook account had been hacked. Unknown miscreants gained control of Carson’s Facebook through a unique phishing ...
Continue Reading

1000+ Schools Hit In October Alone By Still Active Ransomware Attack Wave

October was the first month we got some visibility on how the bad guys are now targeting school districts and students across the USA in a wave of new ransomware attacks. This attack is ...
Continue Reading

Best Practices for Creating Order from Phish Reporting Chaos

When Greg Kras, KnowBe4’s Chief Product Officer, first rolled out our Phish Alert Button (your users can use it to report suspicious emails), he thought it would be a great way for you to ...
Continue Reading

Financial Advisor Fined After Falling for BEC Scam

The Financial Industry Regulatory Authority (FINRA) fined and temporarily suspended a financial advisor working for UBS after he was tricked into transferring $511,870 from a client’s ...
Continue Reading

[NEW RISK] The MAZE Ransomware Gang Outs Their Victims On A Public Web Site

In a continuing escalation of its extortion tactics, independent security researcher, Brian Krebs reported on Krebsonsecurity.com that the criminals behind the MAZE Ransomware gang just ...
Continue Reading

Money Mules and Evil Corp.

Last week we reported that the U.S. Justice and Treasury Departments filed charges against and placed sanctions on the members of “Evil Corp.,” the criminal group behind the Dridex ...
Continue Reading

Spear Phishing in the Royal Canadian Mint

The Royal Canadian Mint, which produces Canada’s coins, nearly sent an employee’s paycheck to an attacker following a spear phishing attack, CBC News reports. The attacker sent an email ...
Continue Reading

Mysterious Global Phishing Campaign Uncovered

A mysterious phishing campaign was spotted by threat researchers from Anomali. The global credential gathering phishing campaign was directed primarily at government procurement ...
Continue Reading

ReVil Ransomware Threatens to Squeeze Their Victims with Public Exposure of Data

The REvil Ransomware crew are getting ready to put more pressure on their ransomware victims to pay up by threatening to release data if the ransom isn't paid.
Continue Reading

Insurance Company On The Hook for 1.7 Million Dollars After Denying BEC Scam Claim

An article in the insurance Journal reports that the 11th Circuit Court in Atlanta agreed with a district court ruling that insurance company "Ironshore" is still on the hook for paying a ...
Continue Reading

What's in it for the Social Engineers?

A necessary skill for any successful hacker is an understanding of how the human mind works, according to a post in IT Pro. Knowing how to manipulate technology is a major part of the ...
Continue Reading

67% of UK Employees Flout Internal IT Security Rules

Businesses are leaving themselves unnecessarily exposed to significant security risks, it’s claimed by a cloud and IT business continuity services company, According to Databarracks’ data ...
Continue Reading

Microsoft Sees Phishing on the Rise

According to Microsoft security research, the percentage of inbound emails associated with phishing on average increased in the past year. For some, this may feel like obvious news, but ...
Continue Reading

MimeCast Warns of New Phishing Attacks in South Africa

With two new alerts regarding elevated risks of phishing attacks against consumers – one from DStv, and another from the New Development Bank – South Africans are warned to take care when ...
Continue Reading

New Ransomware Attack Reboots Systems into Safe Mode to Bypass Antivirus!

The latest strain of Snatch ransomware performs a devious task to ensure tools designed to protect against ransomware are nowhere to be found during encryption.
Continue Reading

Social Engineering via Elder Scrolls

Scammers are going after Elder Scrolls Online accounts by posing as the game’s developers and informing players that their accounts will be banned unless they hand over their credentials, ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews