Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

[Heads-up] Cybercriminals Are Moving To Mobile Phishing for Gift Cards Scams

Scammers are shifting to SMS to carry out business email compromise (BEC) attacks, since text messaging offers less visibility to the victim and more flexibility to the attacker, says ...
Continue Reading

Another Major Hack Of Singapore Government By Russian Cyber Criminals

SINGAPORE Straits Times reported that e-mail log-in information of employees in several government agencies and educational institutions, as well as details of more than 19,000 ...
Continue Reading

Phishing campaign targets Instagram users with fake copyright notices

A new phishing campaign targeting Instagram users is using fake copyright infringement notices to steal user credentials.
Continue Reading

CISOs: Users and Collaborative Security Efforts are the Key to Protecting the Organization from Attack

Cisco’s CISO Benchmark Report 2019 focuses on the need for security collaboration between internal teams and the inclusion of users as part of an effective cybersecurity program.
Continue Reading

Blackmail and Sextortion Attacks Use Panic and Threats to Lure Their Victims

Preying on a victim’s fear of having “private” browsing details leaked sits at the center of these well-crafted attacks that leverage stolen or harvested passwords to establish ...
Continue Reading

Global spending on security hardware, software and services will top $103 billion in 2019, up 9.4 percent from 2018

Global spending on security hardware, software and services will top $103 billion in 2019, up 9.4 percent from 2018, with large enterprises spending the most, according to IDC data.
Continue Reading

BEC Scammers Stole $170,000 From Two Defense Contractors and a University

Two defense contractors and a university lost approximately $170,000 from business email compromise (BEC) scams last year, according to an FBI advisory obtained by CyberScoop. The ...
Continue Reading

Very Few Professionals are Confident in Their Phishing Defense Assessments

New research from ISACA and Terranova Security found that just 12% of security, assurance, risk and governance professionals are confident in their ability to assess the effectiveness of ...
Continue Reading

One in Seven Healthcare Employees Will Fall for Phishing Emails

A study recently published in the Journal of the American Medical Association highlights how vulnerable the healthcare sector is to phishing attacks, according to Jessica Davis at Health ...
Continue Reading

The Phishing Bait is Bitcoin; the Hook is a Clipboard Hijacker

A new phishing campaign is spreading malware through emails that claim to have Bitcoin investment updates, according to My Online Security. The emails direct the victim to download an ...
Continue Reading

Big Norwegian Aluminum Producer Norsk Hydro Suffers Major Ransomware Attack

Norsk Hydro ASA, one of the world’s biggest aluminum producers, suffered production outages after a ransomware attack affected operations across Europe and the U.S.
Continue Reading

[World Premiere] KnowBe4's New 12-Episode Security Awareness Video Series - The Inside Man

We’re excited to announce the world premiere of an innovative new security awareness video series for our customers called ‘The Inside Man’. In KnowBe4’s new 12-episode video series, a ...
Continue Reading

Online Retail Experienced 28 Billion Credential Stuffing Attacks Occurred in the Second Half of 2018

Mass automated attacks using stolen credentials are on the rise, according to Akamai’s 2019 State of the Internet / Retail Attacks and API Traffic report, putting consumers and retailers ...
Continue Reading

[SCAM OF THE WEEK] Phishing Attack Warns About Boeing 737 Max Crashes And Infects Workstations

Large airline crashes tend to uniquely focus almost everyone's attention. Lowlife internet criminals are exploiting the fear connected to these incidents, and leverage it in phishing ...
Continue Reading

"Hacking Humans" Is The 2019 No. 1 Podcast Covering Social Engineering!

Each week the CyberWire’s Hacking Humans podcast looks behind the social engineering scams, phishing schemes, and criminal exploits that make headlines and take a heavy toll on ...
Continue Reading

[SCAM OF THE WEEK] New "Final Warning" Sextortion Emails State Adult Sites Infected You

Bleepingcomputer reported this week: "A new sextortion email campaign is underway that states a hacker infected the recipient's computer while they were visiting an adult web site. The ...
Continue Reading

Three Romanian Men Commit Vishing And Smishing Crimes Worth $21 Million

Three Romanian citizens have pleaded guilty to carrying out a scheme that used recorded messages and cellphone texts to trick thousands of people into revealing their social security ...
Continue Reading

Phishing Attack Use of Encryption Increases 400% for Malware Delivery, Communications, and Data Exfiltration

Encryption has become the norm for many cybercriminals looking to obfuscate all parts of an attack, according to Zscaler’s 2019 Cloud Security Insights Threat Report. One of the goals of ...
Continue Reading

Software Supply Chains and Phishing Top Microsoft’s List of Greatest Cyberthreats

Microsoft’s latest Security Intelligence Report highlights the trends seen in 2018 with phishing as the preferred attack method and supply chains as a primary attack target.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews