Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Despite Warnings, CEO Fraud Scams Still Successful And Growing

In the last few months, law enforcement has warned repeatedly about a new scam that is rapidly expanding. The FBI calls it "Business Email Compromise" (BEC), but it is better known as " ...
Continue Reading

CyberheistNews Vol #5 #52 Scam Of The Week: Apple ID Suspension Phish With A Twist

OK, this scam is widespread enough to alert your users about it. The email claims to be from Apple Support and says your Apple ID and iCloud are both going to be suspended because you did ...
Continue Reading

Scam Of The Week: Apple ID Suspension Phish With A Twist

OK, this scam is widespread enough to alert your users about. The email claims to be from Apple Support and both your Apple ID and iCloud are going to be suspended because you did not ...
Continue Reading

The Top 5 Reasons To Invest In Cyber Security

Here's a quick condensed overview, which you can use as bullet points in your 2016 budget discussion. Today, successful data breaches happen on a daily basis. The frequency of the attacks ...
Continue Reading

CyberheistNews Vol #5 #51 Hated Cryptowall 4.0 Now Infects Workstations with Powerful Exploit Kit

Earlier than expected - but similar to Cryptowall 3.0 - a few weeks after its release, the hated Cryptowall 4.0 ransomware is now being delivered via the Nuclear Exploit Kit (NEK), ...
Continue Reading

Cryptowall 4.0 Delivered via Nuclear Exploit Kit

Earlier than expected - but similar to Cryptowall 3.0 - a few weeks after its release, Cryptowall 4.0 ransomware is now delivered via the Nuclear Exploit Kit, (NEK) according to the ...
Continue Reading

CyberheistNews Vol #5 #50 When Your Corporate Culture Frowns On Mock Phishing Attacks

Now and then, when I talk to the IT people in larger organizations, they tell me they experience political headwinds in trying to get an awareness program rolled out that includes ...
Continue Reading

2016 Will Show Increase In Shareholder Cybersecurity Lawsuits

NYSE Governance Services and Infosec company Veracode recently published results of a survey over of 276 board members titled "Cybersecurity and Corporate Liability". A massive 60 percent ...
Continue Reading

When Your Corporate Culture Frowns On Mock Phishing Attacks

Now and then, when I talk to the IT people in larger organizations, they tell me they experience political headwinds in trying to get an awareness program rolled out that includes ...
Continue Reading

[INFOGRAPHIC] The Top 5 Holiday Scams To Warn Your Users About

There are certain holiday scams we tend to see year after year. This infographic is great to share with your users to help them make smarter security decisions!
Continue Reading

Ransomware News Roundup November 2015

DecryptorMax 24-hour deadline Ransomware strains use different ways to pressure victims into paying, varying from 7 days after which the ransom doubles, to threatening to publish files on ...
Continue Reading

CyberheistNews Vol #5 #49 The Top 5 Holiday Scams To Warn Your Users About

This holiday season could be the most wonderful time of year for cyber criminals, according to digital identity company ThreatMetrix. In a new report, the firm reveals that it has ...
Continue Reading

ISIS "Celebrates" Paris With Video - Inoculate Users Against Phishing Attacks

OK, bad news first. The world is shocked and angry about the attacks in Paris. That often causes emotional reactions, which the bad guys on the Internet are exploiting. ISIS has released ...
Continue Reading

KnowBe4 and Kevin Mitnick Featured in USA Today Cybersecurity Supplement

We recently participated in USA Today's “Cyber Security” campaign that aims to encourage readers to recognize the importance of cyber security in their personal, financial and business ...
Continue Reading

How to Phish Your Own Users And Why

Over the last few years, thousands of organizations in the U.S have started to phish their own users. IT pros have realized that doing this is urgently needed as an additional security ...
Continue Reading

Bitdefender Releases Cryptowall 4.0 Ransomware Vaccine

Right after a new, badder version 4.0 of CryptoWall came out, Romanian security company Bitdefender has released a vaccine they claim will block ransomware infections. Andra Zaharia of ...
Continue Reading

CyberheistNews Vol #5 #48 New Triple Threat Chimera: Ransomware, Extortion And Data Breach

OK, Heads Up! This has not hit U.S. shores yet, but it's just a matter of time. This nasty bit of crimeware is being beta-tested in Germany at the moment, and that is where the reports ...
Continue Reading

FFIEC warns of increased ransomware attacks

Ransomware continues to be a source of worry and now U.S. regulatory agencies are getting in the fray. The Federal Financial Institutions Examination Council (FFIEC) published a statement ...
Continue Reading

New Triple Threat Chimera: Ransomware, Extortion And Data Breach

OK, Heads Up! This has not hit U.S. shores yet, but it's just a matter of time. This nasty bit of crimeware is being beta-tested in Germany at the moment, and that is where the reports ...
Continue Reading

CryptoWall v4.0 released: Now encrypts the file names as well

Lawrence Abrams from the famous bleepingcomputer site wrote at Spiceworks: "CryptoWall 4.0 has been released that displays a redesigned ransom note, new filenames, and now encrypts a ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews