Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

[ALERT] USB Sticks Could Infect Your Network With New Spora Ransomware Worm

The new Spora ransomware strain has now been dissected by more malware researchers and the team from G Data discovered that Spora uses an "innovative" way to spread itself via USB sticks. ...
Continue Reading

Bad News: Your Antivirus Detection Rates Have Dramatically Declined In 12 Months

We all had the nagging suspicion that antivirus is not cutting it anymore, but the following numbers confirm your intuition. I have not seen more powerful ammo for IT security budget to ...
Continue Reading

Scam Of The Week: IRS Issues Warning On New Tax Phishing Attack

It's unbelievable, but the new tax season is around the corner and the bad guys are already at it. This is a two-phase phishing scam of the week you need to watch out for: PHASE 1: ...
Continue Reading

Sophisticated "Spora" Ransomware Demands Future Protection Money

Emsisoft researchers dissected a new ransomware strain that demands users not only pay to recover their encrypted files, but also for immunity from future attacks. The threat is called ...
Continue Reading

CyberheistNews Vol 7 #2 Heads-Up! Massive New Locky Ransomware Attack Is Coming

CyberheistNews | KnowBe4
Continue Reading

300+ New Ways to Stop Your Users from Clicking on Everything!

You now really have 300+ new ways to make sure your users Think Before They Click!
Continue Reading

I Don't Need No Friggen Backup Plan For Ransomware

Did I get your attention? The picture here raised my eyebrows, because of its patent nonsense. Elizabeth Holmes stated this in an interview about being an entrepreneur. It's a bit like ...
Continue Reading

The Who Behind The Why Of Relentless Phishing And Ransomware Attacks

Why are organizations in the West subjected to relentless phishing and ransomware attacks? We need to go back in history for a bit to understand what caused this, and determine how we can ...
Continue Reading

Criminal India Call Center Uses Social Engineering To Scam 15,000 Americans

I got alerted by a Slashdot story about we have been covering here several times. An FBI agent based in India says the country has now become a major hub for call-center fraud, blaming "a ...
Continue Reading

Heads-Up! Massive New Locky Ransomware Attack Is Coming

Jan Sirmer at the Avast blog wrote: "Based on analysis of past Locky ransomware attacks, experts in the Avast Threat Labs predict that another attack is imminent. Locky has taken a ...
Continue Reading

Scam Of The Week: Locked PDF Phishing Attack

Wednesday Jan 4th, the SANS Internet Storm Center warned about an active phishing campaign that has malicious PDF attachments in a new scam to steal email credentials. The SANS bulletin ...
Continue Reading

Adobe's New VoCo Is PhotoShop For Audio - The Potential For Voice Phishing Is Horrendous

Our friends at www.Social-Engineer.org sent me some interesting news in their January newsletter: "Adobe recently announced Project VoCo at the November Adobe Max conference.
Continue Reading

CyberheistNews Vol 07 #01 The New Scary Thing Warning for 2017: Ransomworms

CyberheistNews | KnowBe4
Continue Reading

Healthcare Records Unavailable For Months After Ransomware Infection

Healthcare records of an Arizona clinic have not been available for months after a ransomware infection. The Desert Care clinic got infected in August, and they were not able to recover ...
Continue Reading

Expect Malicious Machine Learning In 2017, making social engineering more effective

Intel Security's McAfee Threat Predictions for 2017 (PDF) observes that advances in technology are essentially neutral and that developments like machine learning should be welcomed, but ...
Continue Reading

KnowBe4 Has Had Another Blow-Out Fourth Quarter

Happy New Year! I'd like to thank all our customers for your support. 2016 has been fantastic. Our year-over-year sales increase was 298% for Q4 2016, with a record number of over 750 new ...
Continue Reading

Russian Breach US Grid? Nah, Someone Fell For Social Engineering And Enabled Macros

Breathlessly, the Washington Post reports that the Russian Grizzly Steppe malware was found within the system of a Vermont power utility. Nah, they just dodged a bullet. This time someone ...
Continue Reading

Russia Hacking America Started With Phishing Attacks

As one of his last actions in office, President Obama expelled 35 Russian diplomats spies in retaliation for Russia interfering with the U.S. election process, after intelligence agencies ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews