Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

[Heads-Up] First-Ever Russian Malicious Mac Macro Discovered

Appleinsider reported Feb 9, 2017: "Mac malware discovered in Microsoft Word document with auto-running macro", which was the second example of malware targeting macOS users this week. ...
Continue Reading

Scam Of The Week: Valentine’s Day Phishing Attacks

It is time to remind your users that heartless con artists use social engineering tactics to trick people looking for love. The FBI's Internet Crime Complaint Center warns every year that ...
Continue Reading

[ALERT] DynA-Crypt Ransomware Steals And Deletes Your Data

Our friend Larry Abrams at Bleepingcomputer alerted the world about a new strain of ransomware called DynA-Crypt that was put together using a malware creation kit by people that are not ...
Continue Reading

CRYSIS Ransomware Is Back And Uses RDP Brute Force To Attack U.S. Healthcare Orgs

Remember the CRYSIS ransomware? The attacks started up again, mostly targeting US healthcare orgs. using brute force attacks via Remote Desktop Protocol (RDP). The number of attacks has ...
Continue Reading

How Hacking Became Russia’s Weapon of Choice

A study by the World Bank stated that Russia boasts more than 1 million software specialists involved in research and development. Russian illegal cyber warriors are among the most ...
Continue Reading

KnowBe4 Introduces New “Social Engineering Indicators” Training Method

Today, we are introducing a new training method that IT managers can use to better manage the continually increasing social engineering threats. Social Engineering Indicators (SEI) turns ...
Continue Reading

Fake Netflix App Is Actually Ransomware

Kaspersky warned on their blog: "People are downloading a new app, looking to get free access to Netflix accounts. What they’re actually getting is a malware strain called Netix that ...
Continue Reading

Careless Licking Gets A Nasty Ransomware Phishing Infection: 1,000+ Machines Down

More than 1,000 government computer systems shut down. A county in Ohio, US, has had to shut down its entire IT infrastructure due to a ransomware infection. County Auditor Mike Smith ...
Continue Reading

Scam Of The Week Blends CEO Fraud And W-2 Phishing

I have talked about CEO fraud here many times — e-mail attacks spoofing the boss and social engineering a high-risk employee into wiring funds to a bank account controlled by the bad ...
Continue Reading

Cisco: "Spam makes major comeback. Users are your last line of defense".

Whoa Nellie. Just when you thought that spam was on its way out, Cisco’s 2017 Annual Cybersecurity Report shows the opposite. Spam is making a surprising comeback as a threat to your ...
Continue Reading

Campbell County Health Falls Victim To W-2 CEO Fraud

And another one. You have to watch it, the tax scam season is back in full swing. Full W-2 information including SSN# for more than 1,400 employees who worked over the past year at ...
Continue Reading

Sedgwick County Loses $566,000 Due To CEO Fraud

WICHITA, Kansas - A Georgia man has been arrested on federal charges he carried out an e-mail spoofing scheme that cost Sedgwick County $566,000. George S. James, 48, Brookhaven, Ga., is ...
Continue Reading

Why You Should Be Afraid of CEO Fraud [INFOGRAPHIC]

Continue Reading

Russia Arrests Kaspersky Exec and FSB Spook

Russian authorities have arrested Sergei Mikhailov, deputy chief at the FSB's Information Security Center (CDC), and Kaspersky exec Ruslan Stoyanov on charges of treason. Mikhailov has ...
Continue Reading

New York DFS Cybersecurity Regulation FAQ And Security Awareness Training

In New York, a new cybersecurity regulatory regime will go into effect March 1st 2017. The proposed cybersecurity regulation, known as 23 NYCRR 500, has grabbed the attention of companies ...
Continue Reading

Ransomware attacks quadrupled in 2016, expected to double again in 2017

The number of ransomware attacks quadrupled in 2016 and are expected to double again in 2017, according to findings in a report from large insurer Beazley. They suggested that ...
Continue Reading

Ransomware Infection Causes Loss of 8 Years Of Police Department Evidence

The Police Department in Cockrell Hill, Texas released in a press release that they lost 8 years worth of evidence after the department's server was infected with ransomware.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews