Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

VEVO Data Breach Caused By LinkedIn Phishing Attack

A Vevo spokesperson told Gizmodo that the company “can confirm that Vevo experienced a data breach as a result of a phishing scam via Linkedin. We have addressed the issue and are ...
Continue Reading

"Large Enterprises Spend Nearly $300K Per Year On Security Awareness Training." Really?

Security company Bromium put out a press release asking publicly: "Large Enterprises Spend Nearly $300K Per Year On Security Education, So Why Are Endpoint Attacks More Successful Than ...
Continue Reading

U.S. Govt Orders Purge Of Kaspersky Products From Its Networks

WASHINGTON (Reuters) - The Trump administration on Wednesday told U.S. government agencies to remove Kaspersky Lab products from their networks, saying it was concerned the Moscow-based ...
Continue Reading

Ransomware Can Destroy Backups In Four Ways

I just found a very interesting blog post by Jerome Wendt, President & Lead Analyst of DCIG, Inc., an independent storage analyst and consulting firm.
Continue Reading

​Trend Micro: CEOs Are The Most Spoofed

Trend Micro researchers reported that cybercriminals spoofed the CEO email address the most, with CFOs and finance directors being the top attack targets. In their 2017 Midyear Security ...
Continue Reading

CyberheistNews Vol 7 #36 Scam of the Week: Equifax Phishing Attacks

CyberheistNews | KnowBe4
Continue Reading

Scam Of The Week: Equifax Phishing Attacks

You already know that a 143 million Equifax records were compromised. The difference with this one is that a big-three credit bureau like Equifax tracks so much personal and sometimes ...
Continue Reading

Equifax Reports Data Breach Possibly Impacting 143 Million U.S. Consumers

The Wall Street Journal just reported that Credit-reporting company Equifax Inc. disclosed Thursday that hackers gained access to some of its systems, compromising the personal ...
Continue Reading

Phishing Attack With PowerPoint Attachment Bypasses User Access Control

Fortinet researchers discovered a malicious PowerPoint file which currently is used to attack diplomats, United Nations- and government organizations worldwide. This will soon filter down ...
Continue Reading

These 4 Maps Will Make You Understand Russia's Aggressive Cyber Attacks

There are many kinds of maps, they can show roads or general geography, but sometimes they shed light on other dimensions like economic, political and/or military perspectives. First of ...
Continue Reading

A Phishing Attack in the Clouds May Rain On Your Parade

According to MeriTalk, an editorial and events organization that focuses on Federal IT and government computing technologies, governments are moving some, or all of their IT to the Cloud, ...
Continue Reading

MacEwan University Victim Of $11.8M CEO Fraud

CBC News reported that an Edmonton, Canada university was the victim of a $11.8 million CEO fraud attack after staff failed to call one of its vendors to verify whether emails requesting ...
Continue Reading

Vote For KnowBe4 At The 2017 Computing Security Awards!

KnowBe4 made it as Finalist in the 2017 Computing Security Awards, and we'd be eternally grateful if you could vote for us in the category "Education and Training Provider of the Year". ...
Continue Reading

Companies Slow to Adopt Insurance As Hedge Against Ransomware Wave

Research firm Ovum for Silicon Valley analytics firm FICO, conducted a May 2017, survey about cyber insurance. And here is the head-scratcher: “The survey further concluded that “a full ...
Continue Reading

Introducing Behavioral Information Security

Ben Tomhave posted a great article on his "The Falcon's View" blog. Loved the concept and I'm cross-posting the whole thing in it's entirety without any edits with grateful ...
Continue Reading

Nigerian Phishers Have Gone to School and Gotten Their CEO Fraud Diploma

The FBI calls CEO Fraud "Business Email Compromise" (BEC) and it has become a highly lucrative threat vector for attackers. According to IC3, the FBI's Internet Crime Complaint Center, ...
Continue Reading

[ALERT] The IRS Issued An Urgent Warning Against An IRS / FBI-Themed Ransomware Phishing Attack

WASHINGTON, August 28, 2017 — The Internal Revenue Service warned people to avoid a new phishing scheme that impersonates the IRS and the FBI as part of a ransomware scam to take computer ...
Continue Reading

CyberheistNews Vol 7 #34

Continue Reading

Scam Of The Week: Hurricane Harvey Charity Fraud

Hurricane Harvey hit hard and especially Houston, TX got badly flooded. The death toll is rising and you can also count on low-life cyber-scum exploiting this disaster.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews