Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Even Law Firms Suffer from Social Engineering

They may not fall for an advance fee scam from an emailer claiming to be the widow of a Nigerian prince, but law firms have their issues with social engineering, too.
Continue Reading

What Is Angler Phishing And How Do I Avoid Becoming A Victim?

Experian in an ongoing campaign to clean up their massive hack came out with a useful post: What is Angler Phishing? Angler phishing is the practice of masquerading as a customer service ...
Continue Reading

Cyber Security Insurance: Underwriting Is Changing Because Of Billions Of Potential Exposure

Cybersecurity insurers, faced with growing demand, are looking for new ways to better measure their risks, says Aleksandr Yampolskiy, CEO of SecurityScorecard. So some are moving toward ...
Continue Reading

Can Russian hackers be stopped? Here's why it might take 20 years (cover story PDF)

Here's some excellent ammo from TechRepublic for a long-term IT security budget proposal. For this TechRepublic cover story, their Editor in Chief EMEA Steve Ranger explains why deterring ...
Continue Reading

Phishing Attacks Make Mortgage Wire Fraud Easier

The stress of obtaining a mortgage has just gotten worse, thanks to cybercriminals trying to con you out of your money. In new attacks targeting companies involved in the mortgage lending ...
Continue Reading

Vacation Dream Home Phishing Nightmare (but with a Happy Ending)

Mike Malone and his wife found the vacation condo of their dreams in Florida. They were in touch with a real estate agent who was handling the deal when suddenly their condo purchase ...
Continue Reading

How Mature is Your Security Awareness?

Here at KnowBe4, we believe the greatest defense against security threats is an organization with a strong security culture – one that elevates an employee’s awareness around threats, ...
Continue Reading

[Heads-up] Massive Downtime Caused By Bad Guys Killing Bank's 9,500+ Systems To Hide Stealing 10 Million Dollars Via SWIFT

A cyberattack against Banco De Chile (BDC)—that country's largest financial institution—bricked a hair-raising 9,000 workstations and 500 servers. However, killing these machines was ...
Continue Reading

More than 70% of users prefer MFA over old style password / username

More than 70 percent of computer users will choose password-less multi-factor authentication (MFA) over traditional usernames and passwords, according to new behavior research. The ...
Continue Reading

Finally, The Criminals Pay in CEO Fraud Scam

Some good news finally. It seems that the bad guys do get caught sometimes. In this case, 70 cybercriminals in the U.S. and Nigeria.
Continue Reading

Looking for a Job? Beware of Recruitment Sites!

There’s yet another reason to not let your employees go looking for a new job on company time: cybercriminals are now leveraging recruitment sites.
Continue Reading

New Global Research Underscores Continued Increase in Phishing Threats and Impact on Staff & Productivity

Barracuda today announced key findings from a new global research report. Here are the highlights:
Continue Reading

New Study: 25% of employees use the same password for every account. AUGH!

Employees may be a company's greatest asset, but they also remain the greatest cyber security risk, according to a Monday report from OpenVPN.
Continue Reading

Scam of The Week: Celebrity Deaths Kate Spade and Anthony Bourdain

Two celebrities committed suicide this week, and unfortunately that's going to be exploited by lowlife internet criminals in a variety of ways.
Continue Reading

New Phishing Campaign Uses IQY Attachments to Bypass Antivirus And Installs RATs

A malicious spam campaign, distributed by the Necurs botnet, is using a new attachment type that is doing a good job in bypassing your antivirus and mail filters.
Continue Reading

We Received A CEO Fraud Phishing Attack From Our Own Personal Accountants

This is an up-close and personal account of how my wife Rebecca and I (we hope) dodged a cybercrime bullet. You probably do not know that I am an elected official of the City of ...
Continue Reading

Kate Spade Suicide Phishing Templates

This is another celebrity death which will spawn a raft of phishing and social media attacks. We recommend to inoculate your users before they make it through the filters.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews