Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Patch Flash NOW Or Get Infected With CryptoWall

It is now urgent to patch any Adobe Flash Player machines in your network. Why? There is an exploit kit called Magnitude that now uses a recently patched Flash zero-day vulnerability. An ...
Continue Reading

FBI Alert: Latest CryptoWall Ransomware Damage More Than $18 Million

The latest version 3.0 of CryptoWall, descendant of the infamous CryptoLocker, is the most advanced and most damaging ransomware in the wild at the moment, specifically targeting U.S. ...
Continue Reading

World's Most Famous Hacker Kevin Mitnick: IoT Is Exploitable

Clad in a blue suit and conservative necktie, KnowBe4's Chief Hacking Officer Kevin Mitnick no longer looks the part of the precocious teen who started hacking into computer systems while ...
Continue Reading

CyberheistNews Vol 5 #25 Scam Of The Week: Spoofed CEO Money Transfer Request

CyberheistNews Vol #5 #25 June 23, 2015 Scam Of The Week: Spoofed CEO Money Transfer Request Heads-up, there is a real wave of this scam going on at the moment. I would copy and paste ...
Continue Reading

Magazine publisher loses $1.5M in phishing scam

Cyber-criminals have social engineered magazine publisher Bonnier Group out of at least $1.5m after hacking the CEO’s email. The total damage could be as much as $3.0 million. Bonnier ...
Continue Reading

Ransomware Resume Phishing Security Test Gets Monster Open Rate

Now here is a real IT Horror Story. A brand new KnowBe4 customer which had not yet trained their employees decided to test their staff with one of the new templates we had just released.
Continue Reading

The Seven Deadly Social Engineering Vices Updated

You may not be aware that there is a scale of seven deadly vices connected to social engineering (SE). The deadliest SE attacks are the ones that have the highest success rates, often ...
Continue Reading

Ransomware Gives Cyber Criminals Almost 1,500% Return On Their Money

A new report by Trustwave shows some stunning numbers. You would almost come to the conclusion you are in the wrong business. They looked at how much of an investment a cybercriminal ...
Continue Reading

LastPass Hacked. Be Alert For Phishing Attacks

LastPass, the popular online password management service has been hacked and data was stolen, including the password hints, which is why you need to be alert for scams trying to exploit ...
Continue Reading

CyberheistNews Vol 5 #24 Scam Of The Week: Resume Ransomware & The Truth About The OPMgate Hack

CyberheistNews Vol 5 #24 June 16, 2015 Scam Of The Week: Resume Ransomware The SANS InfoSec Forums noted that since Monday May 25th new CryptoWall 3.0 ransomware attacks started, using ...
Continue Reading

Gone phishing: How I taught my users to stop clicking everything

Familiar with SpiceWorks? It's the world's largest IT Admin community. One user wrote the 392nd entry in their Spotlight on IT. This is the story. There is a link at the end to the ...
Continue Reading

The Truth About The Massive OPMgate Hacking Scandal

The recent U.S. Government Office of Personnel Management hack is getting worse by the day. In Saturday's Wall Street Journal they revealed that apart from more than 4 million personal ...
Continue Reading

Annoying New Ransomware Attack Uses Girl Resumes

The SANS InfoSec Forums noted that since Monday May 25th a new version of CryptoWall 3.0 ransomware started, using both malicious spam and the Angler exploit kit (EK). The attack wave has ...
Continue Reading

CyberheistNews Vol 5 #23 How The NSA Killed Internet Security in 1978 & Scam Of The Week

CyberheistNews Vol 5 #23 June 9, 2015 How The NSA Killed Internet Security in 1978 & Scam Of The Week Need to get ammo for your IT security budget, but the people holding the purse ...
Continue Reading

Ransomware Victim Gets Discount From Cybercriminal

Researchers at Check Point discovered a new Russian ransomware strain that allows the victim to communicate with the cybercriminals who are open to providing discounts to decrypt the ...
Continue Reading

How The NSA Killed Internet Security in 1978

Here is a very short summary of Internet security which explains why the current version of the Internet is not secure. It was not built securely from day one because the NSA objected to ...
Continue Reading

Scam Of The Week: "Your Data Was Hacked, How To Protect Yourself"

It is all over the news, The 4-million Federal Employee OPM database was hacked and lots of employee information leaked to probably the Chinese. This weekend on CNN they said that the ...
Continue Reading

CyberheistNews Vol 5 #22 ALERT: Is Your Network Infected With A Sleeper Ransomware Strain?

CyberheistNews Vol 5 #22 June 2, 2015 ALERT: Is Your Network Infected With A Sleeper Ransomware Strain? There is a concerning new "sleeper" ransomware twist. It's called Locker and has ...
Continue Reading

Are there free ransomware decryption tools?

JP Buntix wrote: "Two types of ransomware making headlines all across the world in recent months are called CryptoLocker and CoinVault. Both types of ransomware operate in the same way, ...
Continue Reading

Some Interesting Security Awareness Computer-Based Training Numbers

You may know Gartner, the 800-pound gorilla in the IT Analyst space. When a market is mature enough they create their so-called Magic Quadrant (MQ) with the leading vendors in that ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews